This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft File: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json) Hash identifier: iCf6F3bxmp/SGeO3l2VL2WsFtTJ5TvzEnp3F2upboXY= Subject key identifier: C7:33:D6:1A:D0:0C:41:E5:B5:BF:DF:B6:81:9E:96:A6:48:CF:4E:02 Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87 Certificate issuer: /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887 Certificate serial: 019B522ADF480223C949B84EC585B3B13E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft Manifest number: 1200 Signing time: Wed 24 Dec 2025 21:01:39 +0000 Manifest this update: Wed 24 Dec 2025 21:01:39 +0000 Manifest next update: Thu 25 Dec 2025 21:01:39 +0000 Files and hashes: 1: ORzdYgpKmwSJL1fVNUo6LmyhjSk.roa (hash: LmFlM+n+lX0yoflgNqGYgZ3G5C5DbphEooeee/wY1iM=) 2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: XQNqKDAPabrIKq0TjRoWO8tDYexQcQZfiJah69s4aew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:df:48:02:23:c9:49:b8:4e:c5:85:b3:b1:3e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887 Validity Not Before: Dec 24 21:01:39 2025 GMT Not After : Dec 25 21:01:39 2025 GMT Subject: CN=c733d61ad00c41e5b5bfdfb6819e96a648cf4e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:f3:bc:03:6d:8a:e0:69:39:08:fe:4d:f6: ce:88:3d:67:22:68:ce:32:db:ee:22:8c:fa:ac:b4: 6b:49:82:82:90:a3:ba:ec:6f:e9:50:0d:ae:47:0c: 11:b4:85:18:7b:74:41:ff:11:15:2b:0f:e4:a8:17: 65:65:81:ee:82:aa:9b:7f:47:ed:0d:3c:be:2a:cb: 4b:a3:db:10:78:fe:ac:0f:36:b0:82:17:75:2c:e2: d1:af:bd:67:d4:93:e6:a2:db:93:09:a1:d0:94:ce: 65:5b:85:5e:f7:4d:fc:2b:a2:37:40:a7:94:e8:bd: 0d:ef:b8:bb:54:91:09:82:cc:63:4b:63:50:66:be: e0:b2:45:8f:df:58:0a:ac:a3:d5:41:c9:96:d6:0d: 21:04:38:74:8b:27:fe:4d:d2:15:0b:64:13:0c:c3: 60:65:21:8f:a7:84:25:15:c6:85:33:2a:4b:fc:c3: 45:fc:7c:3b:36:77:c4:a3:27:aa:fe:7f:04:fd:60: 70:1d:71:9d:a4:8f:44:be:2d:31:2f:86:09:94:d5: 4a:f8:2b:ac:72:7e:ad:f7:f9:30:27:3c:e3:c2:de: ed:ea:da:0c:46:21:2c:fa:18:7e:bb:3f:55:d9:80: 72:a9:d6:3c:d7:04:00:ce:e9:71:52:e4:5d:49:03: 92:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:33:D6:1A:D0:0C:41:E5:B5:BF:DF:B6:81:9E:96:A6:48:CF:4E:02 X509v3 Authority Key Identifier: keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:13:da:a5:ba:ab:9e:d6:2c:a6:12:5d:f7:59:e5:df:5f:11: 8e:6a:9a:aa:0c:ce:45:13:a5:25:f3:35:f7:df:56:63:df:66: 40:69:5c:60:cd:50:0b:a3:1f:60:b8:93:73:e6:a1:6f:41:0d: b7:b4:55:e0:35:de:ca:83:72:7e:64:3e:e1:02:26:b2:e4:35: 11:08:a9:0d:34:93:ee:a9:12:f9:17:2a:89:06:a5:42:dd:c3: 2a:f5:54:d6:8c:7b:ee:d5:54:f5:c3:48:31:31:50:d6:40:68: 14:de:87:9f:1b:61:da:9f:ae:16:a0:96:aa:48:34:33:80:32: 5c:58:c4:ac:34:79:98:a7:4c:6d:14:b4:13:ee:ee:5d:1d:82: 6a:ca:86:91:9d:0f:a2:b3:18:01:ba:f8:81:d3:cd:c8:89:1a: 7e:7e:87:3c:62:75:e3:d4:de:65:9c:a0:f2:29:f8:32:8f:03: b8:dc:fb:89:60:a9:5a:a8:c0:95:0b:25:ba:38:fe:40:3e:3d: 34:81:b2:45:7e:7c:41:4a:3d:b3:3a:03:3c:41:ed:84:6f:cb: 17:01:ff:5f:23:05:d3:67:09:ab:19:75:d9:cd:34:d6:ad:8b: cf:f2:c1:04:5c:42:3f:a8:4c:b5:b3:a6:28:f8:d5:4c:f0:f8: c2:84:c6:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKt9IAiPJSbhOxYWzsT41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZmRiZjk4ODNjMThjNGNlMTY1ZDhiODUwM2M2MjAxNzQ1 ZDY4ODcwHhcNMjUxMjI0MjEwMTM5WhcNMjUxMjI1MjEwMTM5WjAzMTEwLwYDVQQD EyhjNzMzZDYxYWQwMGM0MWU1YjViZmRmYjY4MTllOTZhNjQ4Y2Y0ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtrzvANtiuBpOQj+TfbOiD1nImjO MtvuIoz6rLRrSYKCkKO67G/pUA2uRwwRtIUYe3RB/xEVKw/kqBdlZYHugqqbf0ft DTy+KstLo9sQeP6sDzawghd1LOLRr71n1JPmotuTCaHQlM5lW4Ve9038K6I3QKeU 6L0N77i7VJEJgsxjS2NQZr7gskWP31gKrKPVQcmW1g0hBDh0iyf+TdIVC2QTDMNg ZSGPp4QlFcaFMypL/MNF/Hw7NnfEoyeq/n8E/WBwHXGdpI9Evi0xL4YJlNVK+Cus cn6t9/kwJzzjwt7t6toMRiEs+hh+uz9V2YByqdY81wQAzulxUuRdSQOSIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcz1hrQDEHltb/ftoGelqZIz04CMB8GA1UdIwQY MBaAFFr9v5iDwYxM4WXYuFA8YgF0XWiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3YyX21JUEJqRXpoWmRpNFVEeGlBWFJkYUljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yOTQ0MGItYzU5YS00NjA4LWJjNjMt YTRjYTMzNjNkNzAxLzEvV3YyX21JUEJqRXpoWmRpNFVEeGlBWFJkYUljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yOTQ0MGItYzU5YS00NjA4LWJjNjMtYTRjYTMzNjNkNzAx LzEvV3YyX21JUEJqRXpoWmRpNFVEeGlBWFJkYUljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehPapbqr ntYsphJd91nl318RjmqaqgzORROlJfM1999WY99mQGlcYM1QC6MfYLiTc+ahb0EN t7RV4DXeyoNyfmQ+4QImsuQ1EQipDTST7qkS+RcqiQalQt3DKvVU1ox77tVU9cNI MTFQ1kBoFN6Hnxth2p+uFqCWqkg0M4AyXFjErDR5mKdMbRS0E+7uXR2CasqGkZ0P orMYAbr4gdPNyIkafn6HPGJ149TeZZyg8in4Mo8DuNz7iWCpWqjAlQslujj+QD49 NIGyRX58QUo9szoDPEHthG/LFwH/XyMF02cJqxl12c001q2Lz/LBBFxCP6hMtbOm KPjVTPD4woTGJg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:22 2025 by rpki-client