This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft File: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json) Hash identifier: 0cqAY2gIQc3jG9XGOND9ZDHbDYXMP8lYq8RFYmvmm50= Subject key identifier: D2:6D:9C:43:85:BA:E8:D3:52:E2:DC:FD:56:AE:9F:6C:BF:23:F8:A5 Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Certificate serial: 019B5D526155CF07D5267D37A7833E0166C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 01:00:38 +0000 Manifest this update: Sat 27 Dec 2025 01:00:38 +0000 Manifest next update: Sun 28 Dec 2025 01:00:38 +0000 Files and hashes: 1: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (hash: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=) 2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: YFlmTo9nVu5M1R9/g/OU03h/azLB8fyrdP9q6Pi8mWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:61:55:cf:07:d5:26:7d:37:a7:83:3e:01:66:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Validity Not Before: Dec 27 01:00:38 2025 GMT Not After : Dec 28 01:00:38 2025 GMT Subject: CN=d26d9c4385bae8d352e2dcfd56ae9f6cbf23f8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:6c:e2:96:f8:98:9c:c5:fd:96:0a:6b:2a: f5:ad:dd:c8:30:af:4b:e1:30:7d:53:c6:55:a1:fd: 1a:27:9d:a4:ba:6f:39:6f:9d:e9:bd:1a:8d:7a:e6: b1:c1:b4:93:c8:1d:32:ef:8a:3c:37:db:cf:43:7a: cd:97:d8:79:ca:27:9d:de:50:d9:9f:cf:0f:23:1a: ac:06:5f:0f:d7:77:e1:b8:7c:da:1a:45:69:b4:9e: 58:a1:62:1c:f2:a6:c7:7b:3e:e7:db:e4:0f:d7:a8: 57:06:d9:d2:fe:6e:21:dd:20:78:a4:06:59:dc:fa: d5:31:8f:72:60:90:cd:d7:cb:3c:0b:d4:1f:e6:c3: 7b:f8:63:7c:2f:81:28:79:ba:a3:63:07:6d:7a:57: f8:97:f3:3d:b6:44:11:49:70:f6:aa:00:a7:79:29: 84:79:67:a3:db:3b:82:a4:ad:62:ec:30:07:f2:6a: df:c9:43:61:28:3b:9c:21:53:c4:f9:8a:62:44:6d: 9e:0c:c4:0e:b9:ec:5c:f2:2d:c7:12:94:a2:9d:bb: a9:df:8e:5e:08:2b:e7:9c:f9:1a:81:63:0f:43:f7: f2:00:d1:33:a1:de:ea:28:44:a6:a1:73:6b:37:39: 87:95:ff:01:d6:2c:77:db:35:e5:4a:46:67:e6:e5: 61:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:6D:9C:43:85:BA:E8:D3:52:E2:DC:FD:56:AE:9F:6C:BF:23:F8:A5 X509v3 Authority Key Identifier: keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ef:61:6c:98:57:3f:64:49:6f:71:14:e7:95:2a:74:f4:92: 1b:bb:1f:bc:cf:06:bd:c0:27:ab:42:07:92:5f:b5:e7:7f:59: a8:19:e2:2e:2f:49:10:83:d7:cd:99:76:1a:18:f5:3a:8d:5a: 1e:5c:97:a2:1a:a4:e4:10:d9:77:06:19:32:7a:81:05:e2:d4: 20:13:db:f2:a3:a7:76:11:59:83:8e:57:14:0e:4d:63:5f:dc: 45:2c:90:e1:09:b5:06:28:11:e2:e3:e6:f7:be:06:3f:3d:36: c4:e1:e2:53:56:9c:e5:24:b6:98:2e:91:53:67:45:11:b4:94: 45:43:4e:7f:47:ea:d3:dd:68:16:28:98:02:2e:3a:c0:69:57: f5:a5:3f:80:b7:a9:3e:1e:90:17:8e:3b:76:88:3c:c1:81:22: 71:94:c0:73:d4:99:21:a9:0b:8e:1c:7a:e5:81:91:71:5f:58: 27:48:f1:12:ce:c2:4f:00:1d:e4:76:0e:60:4e:76:b2:0d:ac: 43:2c:3c:82:d3:ff:69:9b:0f:e6:8c:14:e4:d8:37:96:27:80: 00:46:4c:63:d6:dd:e7:a9:dc:b3:c3:91:ac:01:9b:77:e9:b0: 96:78:09:97:3b:22:cf:6f:83:ac:6c:12:51:ea:ce:93:1d:3d: da:ea:8b:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUmFVzwfVJn03p4M+AWbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGU1MmRhYjA2ZGE0MTc1YjQ1Yzc3Nzk2MWY0ZWEzOWI5 MzA3YjcwHhcNMjUxMjI3MDEwMDM4WhcNMjUxMjI4MDEwMDM4WjAzMTEwLwYDVQQD EyhkMjZkOWM0Mzg1YmFlOGQzNTJlMmRjZmQ1NmFlOWY2Y2JmMjNmOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTds4pb4mJzF/ZYKayr1rd3IMK9L 4TB9U8ZVof0aJ52kum85b53pvRqNeuaxwbSTyB0y74o8N9vPQ3rNl9h5yied3lDZ n88PIxqsBl8P13fhuHzaGkVptJ5YoWIc8qbHez7n2+QP16hXBtnS/m4h3SB4pAZZ 3PrVMY9yYJDN18s8C9Qf5sN7+GN8L4EoebqjYwdtelf4l/M9tkQRSXD2qgCneSmE eWej2zuCpK1i7DAH8mrfyUNhKDucIVPE+YpiRG2eDMQOuexc8i3HEpSinbup345e CCvnnPkagWMPQ/fyANEzod7qKESmoXNrNzmHlf8B1ix32zXlSkZn5uVhSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJtnEOFuujTUuLc/Vaun2y/I/ilMB8GA1UdIwQY MBaAFMIOUtqwbaQXW0XHd5YfTqObkwe3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUt ZTRjNzE4MDczMGNiLzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUtZTRjNzE4MDczMGNi LzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAte9hbJhX P2RJb3EU55UqdPSSG7sfvM8GvcAnq0IHkl+1539ZqBniLi9JEIPXzZl2Ghj1Oo1a HlyXohqk5BDZdwYZMnqBBeLUIBPb8qOndhFZg45XFA5NY1/cRSyQ4Qm1BigR4uPm 974GPz02xOHiU1ac5SS2mC6RU2dFEbSURUNOf0fq091oFiiYAi46wGlX9aU/gLep Ph6QF447dog8wYEicZTAc9SZIakLjhx65YGRcV9YJ0jxEs7CTwAd5HYOYE52sg2s Qyw8gtP/aZsP5owU5Ng3lieAAEZMY9bd56ncs8ORrAGbd+mwlngJlzsiz2+DrGwS UerOkx092uqLVQ== -----END CERTIFICATE-----Generated at Sat Dec 27 02:16:59 2025 by rpki-client