This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json) Hash identifier: 9+mgqbKnKFnGin8rNQrydZ/62NU/JioYfs1G1Xdn9vs= Subject key identifier: C0:1E:C6:47:31:CD:3A:BE:6E:E6:18:47:DE:06:61:0B:B9:1B:99:85 Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8 Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8 Certificate serial: 019B687AF5B4CE3A8178E33B9E50A9D7370B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft Manifest number: 10EB Signing time: Mon 29 Dec 2025 05:00:47 +0000 Manifest this update: Mon 29 Dec 2025 05:00:47 +0000 Manifest next update: Tue 30 Dec 2025 05:00:47 +0000 Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: ve9QpCYMcyQ0muBZcCnvBPGONl4MyxFvYp4vuB1WCRo=) 2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:7a:f5:b4:ce:3a:81:78:e3:3b:9e:50:a9:d7:37:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8 Validity Not Before: Dec 29 05:00:47 2025 GMT Not After : Dec 30 05:00:47 2025 GMT Subject: CN=c01ec64731cd3abe6ee61847de06610bb91b9985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e2:8c:58:64:f0:39:70:da:30:fc:9a:2e:6c: 1c:76:d2:e7:5a:23:6b:f7:64:f9:5e:09:35:3b:eb: 46:95:c9:12:49:04:1e:f4:1b:ec:24:a4:7e:69:90: 7d:cc:8b:b8:2d:7d:5c:a4:f5:52:aa:77:16:c6:68: c0:ae:c5:ea:52:67:87:82:f8:45:d5:c9:61:c2:20: 90:4e:83:04:9d:f4:27:74:4d:46:75:8c:bb:b8:c7: db:b1:44:f2:70:3b:7d:b9:4d:4e:01:57:48:d1:7c: b3:bc:f2:6b:b6:b7:1b:84:1a:e9:f1:29:95:44:53: 51:a6:90:7d:28:e5:ca:5d:12:4a:97:23:6a:45:74: c3:a6:09:a6:1d:72:17:3c:9b:69:61:a1:1f:b9:09: 35:2b:16:8a:03:69:a9:51:2e:38:13:c0:bc:26:e4: db:ca:8d:67:63:f1:ef:93:47:de:4c:10:49:43:f1: e7:ea:55:2e:67:05:76:d1:12:be:6a:fc:e3:85:9d: a4:d1:e3:dc:f4:82:72:e9:ac:64:27:40:98:69:a1: 9e:bb:38:de:1b:5f:e0:0f:40:0c:c5:9a:a2:44:6f: e3:9d:53:74:af:c9:28:ff:a3:78:75:b0:cc:5c:19: fd:1b:62:3a:7f:41:ea:c4:cd:f8:8d:d7:27:b5:1f: 77:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1E:C6:47:31:CD:3A:BE:6E:E6:18:47:DE:06:61:0B:B9:1B:99:85 X509v3 Authority Key Identifier: keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:3f:ef:fa:e7:22:d6:86:a4:40:3b:6f:4b:2b:9e:69:c5:dd: 92:27:12:6f:c9:df:3c:69:57:98:11:34:e7:bc:94:dd:d1:0c: 5b:31:2d:df:55:fe:a6:1a:b5:35:2f:90:3a:d2:42:cf:6e:fa: 4a:9e:f8:ba:59:95:4e:ff:97:de:ac:dd:cc:d9:fb:f6:fd:d1: 0a:ea:c1:b0:c0:3f:4c:62:dc:9b:5f:01:60:31:56:9d:58:7a: 07:0f:8e:eb:dc:8e:aa:d3:43:db:63:7e:e8:d0:c4:2c:5c:f5: 58:b4:98:ec:b4:87:ab:3d:6f:f8:37:36:9c:e5:f8:6a:f4:3d: 75:d8:b3:9c:ba:16:4a:cf:a2:da:e1:1b:45:b1:01:87:8f:5f: ca:72:7b:62:51:86:7c:77:9f:cb:57:0c:87:e4:ef:01:9d:ec: c9:2d:b8:3d:a6:29:c8:94:a7:41:36:3c:54:26:8c:c1:67:2a: 70:6e:43:77:d5:08:7f:b0:cd:26:73:1f:e6:90:92:10:bd:41: 87:3c:c2:59:06:92:ce:4a:50:b6:22:8c:5a:43:f3:09:cf:62: 17:44:cf:85:f9:a7:51:96:89:98:e3:1d:ae:06:6b:94:b3:32: 91:70:48:34:57:42:c8:04:42:80:d0:12:66:57:50:b4:ea:6f: 48:88:63:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoevW0zjqBeOM7nlCp1zcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZGExMTU1NjM5OWUyOGZjNTVkYWIzYmEwNzg2OGZmNDkx YzZmYjgwHhcNMjUxMjI5MDUwMDQ3WhcNMjUxMjMwMDUwMDQ3WjAzMTEwLwYDVQQD EyhjMDFlYzY0NzMxY2QzYWJlNmVlNjE4NDdkZTA2NjEwYmI5MWI5OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuKMWGTwOXDaMPyaLmwcdtLnWiNr 92T5Xgk1O+tGlckSSQQe9BvsJKR+aZB9zIu4LX1cpPVSqncWxmjArsXqUmeHgvhF 1clhwiCQToMEnfQndE1GdYy7uMfbsUTycDt9uU1OAVdI0XyzvPJrtrcbhBrp8SmV RFNRppB9KOXKXRJKlyNqRXTDpgmmHXIXPJtpYaEfuQk1KxaKA2mpUS44E8C8JuTb yo1nY/Hvk0feTBBJQ/Hn6lUuZwV20RK+avzjhZ2k0ePc9IJy6axkJ0CYaaGeuzje G1/gD0AMxZqiRG/jnVN0r8ko/6N4dbDMXBn9G2I6f0HqxM34jdcntR93UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAexkcxzTq+buYYR94GYQu5G5mFMB8GA1UdIwQY MBaAFFraEVVjmeKPxV2rO6B4aP9JHG+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQt ODRhZmVhYWJiMzczLzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQtODRhZmVhYWJiMzcz LzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAT/v+uci 1oakQDtvSyueacXdkicSb8nfPGlXmBE057yU3dEMWzEt31X+phq1NS+QOtJCz276 Sp74ulmVTv+X3qzdzNn79v3RCurBsMA/TGLcm18BYDFWnVh6Bw+O69yOqtND22N+ 6NDELFz1WLSY7LSHqz1v+Dc2nOX4avQ9ddiznLoWSs+i2uEbRbEBh49fynJ7YlGG fHefy1cMh+TvAZ3syS24PaYpyJSnQTY8VCaMwWcqcG5Dd9UIf7DNJnMf5pCSEL1B hzzCWQaSzkpQtiKMWkPzCc9iF0TPhfmnUZaJmOMdrgZrlLMykXBINFdCyARCgNAS ZldQtOpvSIhjJw== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:51 2025 by rpki-client