This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft File: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft (raw, json) Hash identifier: 0uKftekOJPu4PZb3LV61T/XfYduG2vS6VLvu8kKkPG8= Subject key identifier: 11:8C:87:1E:09:71:60:98:EC:83:52:C8:87:33:0F:7B:4F:18:C2:99 Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b Certificate serial: 019B3CB4C596A243F60FBA93027E1F95928D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft Manifest number: 14D5 Signing time: Sat 20 Dec 2025 17:00:38 +0000 Manifest this update: Sat 20 Dec 2025 17:00:38 +0000 Manifest next update: Sun 21 Dec 2025 17:00:38 +0000 Files and hashes: 1: E_Z6pTC5X0AHh4r89mkRGifhbg8.roa (hash: vPaU5vXqStk4BcS9NIKCO/NC9GyNhnZmtfECSf7T7YM=) 2: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl (hash: qvLVz/ZbOXBW0nrm9FrYVcSOFJ51KxKhH93EmvWLXpQ=) 3: actWQyOp_AKAxdS2oWJvuioGhQ8.roa (hash: ppBBSVDWkt25cpNi4X/ntehor4mrI7RnuiIE/uYYa8A=) 4: mJ9cTjl4hK_z22sCJCPKYGmNWpo.roa (hash: 32O0+tV1Zxq+Xc5IaWObygGAy/okE3wBYMmO6cewcmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:c5:96:a2:43:f6:0f:ba:93:02:7e:1f:95:92:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b Validity Not Before: Dec 20 17:00:38 2025 GMT Not After : Dec 21 17:00:38 2025 GMT Subject: CN=118c871e09716098ec8352c887330f7b4f18c299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:34:e8:ad:5d:12:71:8e:46:ad:05:e1:e2: 54:29:97:4a:b3:5a:ff:13:2f:92:54:a3:8d:1c:17: 14:24:95:a7:69:ec:3d:1a:cd:2a:14:f2:b8:5c:81: 88:ae:73:be:f7:fc:34:7c:aa:2e:ad:db:b8:07:9f: db:53:9a:92:24:9c:c6:71:c0:e9:d0:41:42:60:fb: 9e:ce:d3:e0:37:90:6d:4e:8a:f1:55:81:64:51:69: bb:32:e4:30:6c:6a:7f:1f:e0:47:cd:cf:ac:92:fa: a1:5b:9a:c9:c1:6b:10:6d:c2:5c:00:3c:5e:b3:87: 80:bd:f5:80:e6:38:13:44:04:f7:21:81:d7:1c:1e: 03:68:a9:95:c0:62:15:86:0e:8b:c1:c5:74:50:ae: 0a:37:ce:88:62:88:ad:d8:ae:f6:71:f3:86:5d:9a: 78:b4:16:ad:55:9e:e3:7c:ce:d1:ca:6b:4c:01:90: 61:00:75:d4:5d:b7:ef:a5:c1:f8:e0:c1:22:d2:1c: 2c:35:4f:b0:47:be:e1:7e:3d:7f:95:f8:2d:42:55: b4:10:f0:4f:83:75:6e:d4:32:2d:76:ec:0d:8a:b0: 6f:77:4d:74:b0:2b:dc:ac:1d:56:db:3f:f7:ab:a9: 93:33:6d:9c:f9:3a:33:0f:2a:4d:d1:ff:b5:9f:9a: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8C:87:1E:09:71:60:98:EC:83:52:C8:87:33:0F:7B:4F:18:C2:99 X509v3 Authority Key Identifier: keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:41:42:56:a0:8d:68:39:23:70:0e:86:b1:58:41:92:6a:1a: df:b3:42:ba:d4:24:83:dc:9c:b7:86:78:10:9e:f2:2d:2f:72: 6f:8c:c9:62:68:6a:7a:c7:ee:c0:ef:39:93:30:b1:4a:b3:50: 4d:bb:05:19:3a:41:2c:cb:6b:a8:61:c0:ac:d5:ac:ce:11:c9: ec:9b:71:cb:a1:35:fd:a4:ed:2d:74:49:1f:f4:31:50:73:f2: 1c:8b:cc:93:86:50:41:ac:00:70:0c:7a:b5:dd:b1:37:45:b0: 85:e3:5a:d5:82:83:fe:43:8d:8c:39:0e:0a:8c:e6:40:dc:fa: 7b:a3:2b:68:6d:f1:b3:f8:db:b9:b3:28:a6:c3:ef:c6:48:80: 15:57:95:6b:1b:31:ce:48:e4:9e:37:02:cc:bb:51:94:f8:eb: 7a:53:1f:78:51:d1:c6:3d:5a:4a:07:30:07:b5:be:4b:e5:0a: f3:62:48:17:7a:25:9d:5d:30:e9:00:4c:1c:bb:95:cf:da:fc: 3b:f1:09:56:2e:d3:c9:ee:35:07:b3:7c:aa:e2:a9:82:bc:99: b1:ea:7c:7a:11:b8:49:28:4b:ad:47:61:c5:e4:c2:e5:35:a9: 5c:33:9f:27:d7:1d:1b:9a:f5:b9:0e:eb:44:73:e2:b4:db:59: f3:4b:66:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tMWWokP2D7qTAn4flZKNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYjE5OTY1MTU4ODQ0MzRiODc4ODJiNWI5NzJhNmU1Mjlm ZmIwMGIwHhcNMjUxMjIwMTcwMDM4WhcNMjUxMjIxMTcwMDM4WjAzMTEwLwYDVQQD EygxMThjODcxZTA5NzE2MDk4ZWM4MzUyYzg4NzMzMGY3YjRmMThjMjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM006K1dEnGORq0F4eJUKZdKs1r/ Ey+SVKONHBcUJJWnaew9Gs0qFPK4XIGIrnO+9/w0fKourdu4B5/bU5qSJJzGccDp 0EFCYPueztPgN5BtTorxVYFkUWm7MuQwbGp/H+BHzc+skvqhW5rJwWsQbcJcADxe s4eAvfWA5jgTRAT3IYHXHB4DaKmVwGIVhg6LwcV0UK4KN86IYoit2K72cfOGXZp4 tBatVZ7jfM7RymtMAZBhAHXUXbfvpcH44MEi0hwsNU+wR77hfj1/lfgtQlW0EPBP g3Vu1DItduwNirBvd010sCvcrB1W2z/3q6mTM22c+TozDypN0f+1n5p6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGMhx4JcWCY7INSyIczD3tPGMKZMB8GA1UdIwQY MBaAFFqxmWUViEQ0uHiCtblypuUp/7ALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTIt ZWQ1YjAxZDI1MjhjLzEvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTItZWQ1YjAxZDI1Mjhj LzEvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqkFCVqCN aDkjcA6GsVhBkmoa37NCutQkg9yct4Z4EJ7yLS9yb4zJYmhqesfuwO85kzCxSrNQ TbsFGTpBLMtrqGHArNWszhHJ7Jtxy6E1/aTtLXRJH/QxUHPyHIvMk4ZQQawAcAx6 td2xN0WwheNa1YKD/kONjDkOCozmQNz6e6MraG3xs/jbubMopsPvxkiAFVeVaxsx zkjknjcCzLtRlPjrelMfeFHRxj1aSgcwB7W+S+UK82JIF3olnV0w6QBMHLuVz9r8 O/EJVi7Tye41B7N8quKpgryZsep8ehG4SShLrUdhxeTC5TWpXDOfJ9cdG5r1uQ7r RHPitNtZ80tmQQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:29:08 2025 by rpki-client