This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft File: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json) Hash identifier: +JeVg6RU9DBlUjjsqga44GzxtxsYd/4pDPCgGzKtsRM= Subject key identifier: 68:8C:78:DC:74:83:EA:67:B4:A5:00:8B:B2:C3:E6:D7:92:EB:94:96 Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Certificate serial: 019B6CC652A22214F750BB7A1E576ECC761F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 01:01:35 +0000 Manifest this update: Tue 30 Dec 2025 01:01:35 +0000 Manifest next update: Wed 31 Dec 2025 01:01:35 +0000 Files and hashes: 1: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (hash: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=) 2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: yv8vKf5BLgq4gmMTWBHvn7yyBw+/stdkxuHswkVwrJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:52:a2:22:14:f7:50:bb:7a:1e:57:6e:cc:76:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Validity Not Before: Dec 30 01:01:35 2025 GMT Not After : Dec 31 01:01:35 2025 GMT Subject: CN=688c78dc7483ea67b4a5008bb2c3e6d792eb9496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:34:f8:d3:5f:09:8f:3b:40:55:34:a5:b1: ba:bd:c8:bf:ef:4c:bc:e9:34:fa:54:a2:db:f2:d3: b6:08:06:64:8d:73:7f:ac:c3:79:a3:a5:ba:63:ef: a6:42:9f:1b:1e:fd:87:38:2f:02:19:08:a4:6c:90: 9f:87:58:b3:c4:48:3f:62:d3:99:3c:3a:c4:36:11: 39:de:b4:9f:c9:40:0b:2f:6c:b0:2f:bf:0b:0c:d6: c7:6a:38:56:58:f3:38:a8:80:6d:4d:e1:30:c9:b7: 86:c4:f5:b8:19:1e:9c:68:2e:c2:bf:ab:86:1d:49: 13:ed:ee:e4:b6:14:b5:65:0f:8e:a6:23:92:e1:90: 98:c3:53:6b:04:11:5c:69:4b:97:7a:b9:fc:9a:b6: 35:47:57:2c:74:7f:51:5b:ef:15:0a:9d:bf:19:df: 3b:26:a7:5f:bc:9e:b1:8d:cf:87:74:1f:b4:84:2d: 8d:d2:17:8a:af:0a:fa:0b:67:ad:9d:17:10:09:c2: 62:be:2a:d1:e9:c0:89:c1:3c:9b:3a:90:62:b7:c1: d8:6f:c5:eb:b4:af:2a:91:95:5d:41:79:aa:96:81: f6:49:11:cd:2f:d7:f9:25:89:3d:40:0c:5f:eb:79: a9:80:39:7e:5d:43:7e:08:6e:2e:76:90:45:12:6f: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8C:78:DC:74:83:EA:67:B4:A5:00:8B:B2:C3:E6:D7:92:EB:94:96 X509v3 Authority Key Identifier: keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5b:22:b7:ba:28:6d:62:09:02:9f:7c:0c:fe:04:bd:ad:da: e6:dc:08:de:14:0d:f2:c7:b1:01:5f:97:e0:75:8f:e7:fb:71: 03:25:5c:fe:b2:c7:8b:33:49:c0:a2:e0:7a:e7:de:8e:3f:2a: ed:6d:49:c9:77:60:cd:d4:45:87:cd:82:bc:19:23:93:17:55: 46:19:66:13:43:9f:96:68:71:27:25:9f:c6:8d:85:7f:c0:bd: a9:66:cd:8c:76:25:af:42:29:92:67:1f:36:7a:8d:80:66:2d: 0a:a0:3e:17:b4:8e:47:05:82:f4:d9:63:b3:72:74:17:a4:26: b2:b8:e6:39:42:62:71:84:10:aa:9e:99:2e:e5:17:5d:70:05: 97:29:17:05:d4:1f:8b:26:45:46:8a:c0:34:17:5f:e5:a2:a9: 37:1a:06:eb:06:9d:20:a8:dc:e9:10:ae:6a:2b:bb:aa:3d:a4: e4:26:18:98:8b:b5:12:50:75:36:0d:c9:ce:03:c0:cd:ec:ba: bf:9d:94:65:ff:41:18:dd:ae:e5:3a:29:6a:10:86:2a:b6:74: dd:8e:c8:00:87:62:88:4a:ba:f0:ad:54:22:a1:bc:fe:1e:02: 1c:7f:6b:5e:9c:63:d0:a1:46:25:d0:99:e7:98:c1:ca:71:98: 0e:f4:de:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxlKiIhT3ULt6HlduzHYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGU1MmRhYjA2ZGE0MTc1YjQ1Yzc3Nzk2MWY0ZWEzOWI5 MzA3YjcwHhcNMjUxMjMwMDEwMTM1WhcNMjUxMjMxMDEwMTM1WjAzMTEwLwYDVQQD Eyg2ODhjNzhkYzc0ODNlYTY3YjRhNTAwOGJiMmMzZTZkNzkyZWI5NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi980+NNfCY87QFU0pbG6vci/70y8 6TT6VKLb8tO2CAZkjXN/rMN5o6W6Y++mQp8bHv2HOC8CGQikbJCfh1izxEg/YtOZ PDrENhE53rSfyUALL2ywL78LDNbHajhWWPM4qIBtTeEwybeGxPW4GR6caC7Cv6uG HUkT7e7kthS1ZQ+OpiOS4ZCYw1NrBBFcaUuXern8mrY1R1csdH9RW+8VCp2/Gd87 JqdfvJ6xjc+HdB+0hC2N0heKrwr6C2etnRcQCcJivirR6cCJwTybOpBit8HYb8Xr tK8qkZVdQXmqloH2SRHNL9f5JYk9QAxf63mpgDl+XUN+CG4udpBFEm//HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiMeNx0g+pntKUAi7LD5teS65SWMB8GA1UdIwQY MBaAFMIOUtqwbaQXW0XHd5YfTqObkwe3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUt ZTRjNzE4MDczMGNiLzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUtZTRjNzE4MDczMGNi LzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlsit7oo bWIJAp98DP4Eva3a5twI3hQN8sexAV+X4HWP5/txAyVc/rLHizNJwKLgeufejj8q 7W1JyXdgzdRFh82CvBkjkxdVRhlmE0OflmhxJyWfxo2Ff8C9qWbNjHYlr0Ipkmcf NnqNgGYtCqA+F7SORwWC9Nljs3J0F6QmsrjmOUJicYQQqp6ZLuUXXXAFlykXBdQf iyZFRorANBdf5aKpNxoG6wadIKjc6RCuaiu7qj2k5CYYmIu1ElB1Ng3JzgPAzey6 v52UZf9BGN2u5TopahCGKrZ03Y7IAIdiiEq68K1UIqG8/h4CHH9rXpxj0KFGJdCZ 55jBynGYDvTeTw== -----END CERTIFICATE-----Generated at Tue Dec 30 07:14:15 2025 by rpki-client