This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft File: wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json) Hash identifier: wIgNj0dbbkS4x9AATwZ7Kwvn81AEQkX9gRSSQ+YH72w= Subject key identifier: 84:99:A8:1D:CA:E8:C6:4A:CB:3A:69:44:09:DC:63:FF:C1:3D:94:AC Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49 Certificate issuer: /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549 Certificate serial: 019B4F606E8298F76354F7DB7DB3C016AEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft Manifest number: 066F Signing time: Wed 24 Dec 2025 08:01:18 +0000 Manifest this update: Wed 24 Dec 2025 08:01:18 +0000 Manifest next update: Thu 25 Dec 2025 08:01:18 +0000 Files and hashes: 1: j9CtwOJGnVKS-HP6AHjaP4QX-mE.roa (hash: IQH0ZG03X6EDOf/JP581Nh+0AIMYOTDDiB4SyvCG/2A=) 2: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: 8gcbK9TvoSx0vuvGnIZJbWxJa0DWQK1cgqje36LqY0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:60:6e:82:98:f7:63:54:f7:db:7d:b3:c0:16:ae:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549 Validity Not Before: Dec 24 08:01:18 2025 GMT Not After : Dec 25 08:01:18 2025 GMT Subject: CN=8499a81dcae8c64acb3a694409dc63ffc13d94ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:c4:8c:c8:16:d9:05:56:0e:d9:c6:09:62: fb:dc:01:26:89:a4:86:c8:38:ef:eb:6c:ea:3b:70: 29:f6:50:01:34:ce:fc:c7:2a:59:0c:6a:e9:8d:bb: fe:99:31:3b:28:3b:ae:cb:2b:80:58:2b:eb:5e:d4: f2:7d:c6:f5:09:ec:e9:5a:b4:83:88:a8:7b:99:9a: e6:4a:0d:1a:c3:27:b5:f6:cb:63:dd:29:09:6b:0d: 73:05:3a:fe:9d:1a:ce:7f:2c:4f:81:ae:ac:23:a4: 5f:b3:10:3f:b5:70:ba:61:22:e0:06:c2:9d:ea:98: 50:3c:aa:5b:65:1b:cd:4b:57:de:5b:15:ba:ab:3a: 07:b1:82:a0:d3:2e:7e:21:d8:18:c9:fb:ab:05:19: 98:75:f8:a5:dd:45:2c:fd:27:c3:5b:01:6b:f3:d9: b4:b5:95:b6:88:36:a2:13:9f:12:b0:9b:21:a8:d3: 16:0e:ee:2d:d5:5d:2e:16:19:90:f7:ab:ac:57:2e: 0a:ef:96:a9:ee:47:98:d6:05:81:bc:a9:5c:53:48: 84:f1:d1:6d:12:49:d1:4e:aa:bd:87:37:d9:95:e6: 16:0a:90:65:9e:ac:a7:44:94:b8:9a:be:b5:f8:ad: ed:47:84:97:e8:68:35:40:69:6c:8a:14:ba:d3:de: 5a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:99:A8:1D:CA:E8:C6:4A:CB:3A:69:44:09:DC:63:FF:C1:3D:94:AC X509v3 Authority Key Identifier: keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fd:ae:ff:3c:83:31:bf:d2:d5:a9:1f:7f:41:ea:76:3a:e6: 30:ae:85:df:3e:77:d5:4c:70:c2:58:87:05:ca:ca:35:f4:79: 9d:68:20:0e:90:01:9a:e6:da:08:6e:02:98:78:08:ac:3d:64: 19:21:87:05:02:5b:40:18:0d:42:25:01:80:df:60:51:5b:66: f9:b9:b0:2f:c6:eb:e1:89:60:2a:be:60:f9:53:1e:02:67:0b: 75:0c:d1:bf:6c:b9:7a:d8:ed:99:98:f8:3a:f9:51:2c:8b:2b: e6:25:31:c6:2d:e4:3e:99:2d:42:e8:c3:7c:57:5a:58:92:7a: bb:e7:0a:76:19:99:90:4f:0f:2a:2e:5f:85:6f:f0:b4:9e:70: 82:03:61:af:88:c3:66:ec:d9:7f:46:18:ec:93:70:bc:bb:62: c3:da:ef:eb:b7:52:72:dc:6e:f8:14:f8:55:99:6e:18:d3:2d: bc:7c:59:cc:92:50:ef:26:ff:9a:e9:e1:f6:c9:ae:83:25:11: 09:13:d9:39:8f:7f:a6:9f:a2:42:05:3d:df:e0:9c:51:35:d9: a8:eb:82:a3:b3:87:84:96:0f:32:a5:67:65:81:b2:d5:19:63: 21:2e:1b:b7:89:9c:15:f4:d7:4b:9b:df:61:13:36:ba:64:bc: 8d:49:c1:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPYG6CmPdjVPfbfbPAFq6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNmNmYjlhNjg0OWM0MWU1ZjExNzA1YjhmZDcxNjA4NWQ1 Yzg1NDkwHhcNMjUxMjI0MDgwMTE4WhcNMjUxMjI1MDgwMTE4WjAzMTEwLwYDVQQD Eyg4NDk5YTgxZGNhZThjNjRhY2IzYTY5NDQwOWRjNjNmZmMxM2Q5NGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnXEjMgW2QVWDtnGCWL73AEmiaSG yDjv62zqO3Ap9lABNM78xypZDGrpjbv+mTE7KDuuyyuAWCvrXtTyfcb1CezpWrSD iKh7mZrmSg0awye19stj3SkJaw1zBTr+nRrOfyxPga6sI6RfsxA/tXC6YSLgBsKd 6phQPKpbZRvNS1feWxW6qzoHsYKg0y5+IdgYyfurBRmYdfil3UUs/SfDWwFr89m0 tZW2iDaiE58SsJshqNMWDu4t1V0uFhmQ96usVy4K75ap7keY1gWBvKlcU0iE8dFt EknRTqq9hzfZleYWCpBlnqynRJS4mr61+K3tR4SX6Gg1QGlsihS6095awQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISZqB3K6MZKyzppRAncY//BPZSsMB8GA1UdIwQY MBaAFMFs+5poScQeXxFwW4/XFghdXIVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mMzU0MjQtOTQ0Zi00MDY0LWFmYzAt MTEyM2NjOWRkY2NjLzEvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mMzU0MjQtOTQ0Zi00MDY0LWFmYzAtMTEyM2NjOWRkY2Nj LzEvd1d6N21taEp4QjVmRVhCYmo5Y1dDRjFjaFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiv2u/zyD Mb/S1akff0HqdjrmMK6F3z531UxwwliHBcrKNfR5nWggDpABmubaCG4CmHgIrD1k GSGHBQJbQBgNQiUBgN9gUVtm+bmwL8br4YlgKr5g+VMeAmcLdQzRv2y5etjtmZj4 OvlRLIsr5iUxxi3kPpktQujDfFdaWJJ6u+cKdhmZkE8PKi5fhW/wtJ5wggNhr4jD ZuzZf0YY7JNwvLtiw9rv67dSctxu+BT4VZluGNMtvHxZzJJQ7yb/munh9smugyUR CRPZOY9/pp+iQgU93+CcUTXZqOuCo7OHhJYPMqVnZYGy1RljIS4bt4mcFfTXS5vf YRM2umS8jUnB7A== -----END CERTIFICATE-----Generated at Wed Dec 24 18:09:58 2025 by rpki-client