This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json) Hash identifier: NeBqKM9Yn6KMVT1cJ+fegWjMMiO5R1yK+/VXiBZ98Fk= Subject key identifier: 6F:A8:27:31:BC:ED:E1:F0:64:64:AC:58:27:06:C4:43:AD:36:4E:DC Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0 Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0 Certificate serial: 019B6279A14C14A3E0FDE98F0AA9C34F2FEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft Manifest number: 0ED0 Signing time: Sun 28 Dec 2025 01:01:36 +0000 Manifest this update: Sun 28 Dec 2025 01:01:36 +0000 Manifest next update: Mon 29 Dec 2025 01:01:36 +0000 Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: BBPxPp99KHRBB1WNiEZURPPfc/aZ7Q8BYspuTljzHr8=) 2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:79:a1:4c:14:a3:e0:fd:e9:8f:0a:a9:c3:4f:2f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0 Validity Not Before: Dec 28 01:01:36 2025 GMT Not After : Dec 29 01:01:36 2025 GMT Subject: CN=6fa82731bcede1f06464ac582706c443ad364edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:c5:0f:92:49:33:d1:c0:69:24:c2:1c:ac: 57:90:78:c3:88:0f:46:f9:29:ac:b9:d4:c4:b5:71: 50:36:68:28:ad:96:a7:a5:13:d0:75:3e:64:5e:ed: 9e:f2:d9:86:77:4b:48:07:90:5f:44:f1:2e:f7:ad: 7e:16:38:67:83:da:9f:a5:4c:f9:56:e2:f1:33:6b: 09:7a:33:12:ef:6e:e2:cc:7c:09:fe:a3:02:40:0c: 2f:1e:00:46:b8:55:25:75:de:fb:30:30:11:56:9e: df:79:cf:c8:de:83:7a:dd:47:82:8b:8b:32:29:e4: 76:e4:07:8c:84:6d:4f:bc:a8:71:f8:83:16:4c:8c: 95:da:f0:8a:3a:aa:23:5b:87:e0:f9:90:08:f8:8f: 76:ad:c2:95:4b:92:17:d2:49:fd:97:75:40:c4:14: c3:c7:3b:d8:3c:7e:6e:6b:8f:c4:02:44:00:b6:85: 9a:5b:bd:31:da:31:c7:b7:e5:2a:aa:d7:46:89:82: bf:7f:5c:d4:66:b3:ad:a7:35:35:8d:8d:a4:83:54: 81:6c:cd:c1:5d:8a:4f:40:28:57:8c:f6:d1:f9:58: ec:32:e9:25:79:54:10:71:a1:cb:f1:44:b8:51:82: 4e:61:58:4f:2d:a5:fb:b0:7b:2f:88:1d:c2:d6:13: 34:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A8:27:31:BC:ED:E1:F0:64:64:AC:58:27:06:C4:43:AD:36:4E:DC X509v3 Authority Key Identifier: keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:80:b2:ef:26:eb:34:00:88:9a:87:a2:e8:81:c1:80:16:27: 3e:aa:fb:1e:0c:8f:be:32:06:ff:64:0c:08:f2:48:30:a5:69: d3:52:d7:28:67:39:d1:69:b7:86:fe:32:70:9e:be:2a:b0:02: 68:f0:14:ed:7d:1e:71:e4:7c:a6:0e:3b:4c:08:b6:88:80:c5: 19:88:50:ac:70:39:5d:15:eb:92:29:79:93:71:31:35:17:24: 91:15:ca:b0:89:df:85:d3:3d:c0:16:d2:7a:a4:42:b0:50:a1: 24:22:ad:56:d8:87:c8:8e:e0:25:a4:d9:04:41:15:cf:26:dc: 12:61:d1:34:6a:19:46:16:37:d6:1f:1a:b9:72:cd:d1:94:fc: d0:1b:ae:b6:13:f7:74:92:69:e5:11:0c:83:71:79:f6:87:e9: b0:a1:81:33:61:3b:fa:68:0e:68:5d:d7:02:ae:89:fc:06:97: 14:69:3b:f0:82:29:d2:9d:8d:31:4c:b3:73:78:5e:18:d5:22: 27:36:2c:f7:45:2d:1e:2b:ce:39:9c:b3:4b:c0:52:c6:2a:91: 47:ee:7c:a9:d8:66:fc:68:d6:74:72:9b:e9:87:a4:f9:90:a9: 46:d1:be:65:07:64:43:0c:7d:e8:ed:16:ce:20:ba:40:2d:d4: 27:35:f4:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtieaFMFKPg/emPCqnDTy/vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMGM5NTAyM2ZhMGQzM2IyMjZlZWYyZjIyYzhlY2EzOTA1 MjZiZjAwHhcNMjUxMjI4MDEwMTM2WhcNMjUxMjI5MDEwMTM2WjAzMTEwLwYDVQQD Eyg2ZmE4MjczMWJjZWRlMWYwNjQ2NGFjNTgyNzA2YzQ0M2FkMzY0ZWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPXFD5JJM9HAaSTCHKxXkHjDiA9G +SmsudTEtXFQNmgorZanpRPQdT5kXu2e8tmGd0tIB5BfRPEu961+Fjhng9qfpUz5 VuLxM2sJejMS727izHwJ/qMCQAwvHgBGuFUldd77MDARVp7fec/I3oN63UeCi4sy KeR25AeMhG1PvKhx+IMWTIyV2vCKOqojW4fg+ZAI+I92rcKVS5IX0kn9l3VAxBTD xzvYPH5ua4/EAkQAtoWaW70x2jHHt+UqqtdGiYK/f1zUZrOtpzU1jY2kg1SBbM3B XYpPQChXjPbR+VjsMukleVQQcaHL8US4UYJOYVhPLaX7sHsviB3C1hM0owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+oJzG87eHwZGSsWCcGxEOtNk7cMB8GA1UdIwQY MBaAFFsMlQI/oNM7Im7vLyLI7KOQUmvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEt ZTBlOTBlMDg0NTA4LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEtZTBlOTBlMDg0NTA4 LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo4Cy7ybr NACImoei6IHBgBYnPqr7HgyPvjIG/2QMCPJIMKVp01LXKGc50Wm3hv4ycJ6+KrAC aPAU7X0eceR8pg47TAi2iIDFGYhQrHA5XRXrkil5k3ExNRckkRXKsInfhdM9wBbS eqRCsFChJCKtVtiHyI7gJaTZBEEVzybcEmHRNGoZRhY31h8auXLN0ZT80BuuthP3 dJJp5REMg3F59ofpsKGBM2E7+mgOaF3XAq6J/AaXFGk78IIp0p2NMUyzc3heGNUi JzYs90UtHivOOZyzS8BSxiqRR+58qdhm/GjWdHKb6Yek+ZCpRtG+ZQdkQwx96O0W ziC6QC3UJzX0Eg== -----END CERTIFICATE-----Generated at Sun Dec 28 08:01:54 2025 by rpki-client