This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft File: WRoP7x77ru2z0o1Dnz1cz639iHM.mft (raw, json) Hash identifier: ahu1RXmBPPwy0iVpEiTP0iI5QwqBX2XKE9Q24TBvw44= Subject key identifier: 5A:F2:48:4B:89:9D:8C:03:5B:C1:58:22:B7:98:26:71:03:C7:8E:11 Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73 Certificate issuer: /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873 Certificate serial: 019B70A1F9651F95B803796BB5FDB8E33CF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft Manifest number: 17A4 Signing time: Tue 30 Dec 2025 19:00:21 +0000 Manifest this update: Tue 30 Dec 2025 19:00:21 +0000 Manifest next update: Wed 31 Dec 2025 19:00:21 +0000 Files and hashes: 1: LUyjz5khkwF0up_SKtv4Oh6tO7Q.roa (hash: rBnLOroG+8zcnjSq90aHGH7YJtrPhERWyt49grALMsE=) 2: WRoP7x77ru2z0o1Dnz1cz639iHM.crl (hash: C5Ckluyq8oFBieC+VOTq4ZpCDaNHzxIY4VWQpLQIlXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a1:f9:65:1f:95:b8:03:79:6b:b5:fd:b8:e3:3c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873 Validity Not Before: Dec 30 19:00:21 2025 GMT Not After : Dec 31 19:00:21 2025 GMT Subject: CN=5af2484b899d8c035bc15822b798267103c78e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6f:44:aa:33:28:5a:5c:3b:e6:fa:85:f6:5c: 13:76:81:f0:02:0e:60:42:b6:a0:87:52:71:bb:e7: d9:68:fd:12:10:88:5a:f3:38:fe:49:9f:25:b1:d0: c2:93:73:2b:ba:f3:37:63:db:30:1f:01:db:0e:9d: df:f9:9d:06:f4:04:9e:18:aa:25:2c:c3:02:4a:75: 41:08:cb:ff:c3:df:64:d2:ff:f5:60:5a:b2:ca:c8: 5a:8b:16:f4:7f:07:e5:a5:63:fe:af:c6:07:be:82: 52:d7:0f:1c:bd:10:f5:a5:21:61:0d:43:bf:aa:59: bb:82:5f:0f:f9:ed:f7:01:e5:e8:ef:98:7a:56:72: fc:c3:5b:59:95:89:2c:aa:63:cf:0b:e3:d0:d1:2d: e1:ad:5b:ed:51:6a:bd:ba:0f:36:8c:ea:a9:af:00: 3d:32:30:3e:9a:04:a9:c0:3b:99:f0:99:6b:17:da: 97:e5:7b:78:15:c9:27:58:fe:c5:72:40:18:c6:6f: bd:69:e9:c6:a9:75:7e:7b:70:f9:e7:29:83:15:d0: 11:be:46:a1:9d:cd:ef:01:fd:7a:75:81:59:c6:11: 7a:d4:90:2d:38:f5:a8:2b:f8:64:0a:ae:12:ae:08: 91:90:df:47:00:cb:cf:e1:40:6b:5a:0e:1e:1f:a8: 70:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F2:48:4B:89:9D:8C:03:5B:C1:58:22:B7:98:26:71:03:C7:8E:11 X509v3 Authority Key Identifier: keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:65:b1:cb:5e:01:e5:d2:fb:e4:1e:37:44:07:b9:32:3a:fe: 5c:5e:6a:0d:68:fd:a9:66:ff:d7:08:8f:65:ca:87:09:81:4a: 83:d4:2d:4b:63:f0:ce:ea:d1:66:99:af:8e:76:98:f5:a0:40: 8d:17:49:a8:d6:54:d0:a6:a9:f4:15:41:a2:fe:0c:c3:47:17: 17:77:0c:df:4d:2e:90:2f:b5:8f:d5:ae:8a:95:84:25:0c:1b: df:c8:20:54:38:c5:53:3c:13:33:01:23:72:f1:af:d6:17:04: 36:e9:e0:a1:3e:bd:ef:11:d0:b5:93:44:a8:b2:ee:64:52:e0: 85:23:fc:02:31:b6:b7:55:e7:41:6d:21:5f:ec:8b:d5:02:d3: bf:44:22:b4:00:06:4a:67:bc:6d:71:4a:89:b1:78:35:38:0d: 98:9f:5b:04:be:c1:48:4d:f3:18:bc:1e:5b:09:0c:d5:e0:99: 17:ec:9e:b3:04:31:1a:a8:94:d6:b2:02:0b:f2:3a:bf:b0:78: 85:63:dc:d2:a4:09:1c:d0:a9:23:2d:e4:c6:02:17:34:1b:07: 91:d5:75:54:bd:8f:30:64:12:95:ca:95:70:eb:a1:31:64:b8: a7:31:d6:5c:e0:f8:b5:93:48:a8:e8:4d:fb:e3:0a:9f:3f:4a: 84:7b:20:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwofllH5W4A3lrtf244zz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MWEwZmVmMWVmYmFlZWRiM2QyOGQ0MzlmM2Q1Y2NmYWRm ZDg4NzMwHhcNMjUxMjMwMTkwMDIxWhcNMjUxMjMxMTkwMDIxWjAzMTEwLwYDVQQD Eyg1YWYyNDg0Yjg5OWQ4YzAzNWJjMTU4MjJiNzk4MjY3MTAzYzc4ZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG9EqjMoWlw75vqF9lwTdoHwAg5g Qragh1Jxu+fZaP0SEIha8zj+SZ8lsdDCk3MruvM3Y9swHwHbDp3f+Z0G9ASeGKol LMMCSnVBCMv/w99k0v/1YFqyyshaixb0fwflpWP+r8YHvoJS1w8cvRD1pSFhDUO/ qlm7gl8P+e33AeXo75h6VnL8w1tZlYksqmPPC+PQ0S3hrVvtUWq9ug82jOqprwA9 MjA+mgSpwDuZ8JlrF9qX5Xt4FcknWP7FckAYxm+9aenGqXV+e3D55ymDFdARvkah nc3vAf16dYFZxhF61JAtOPWoK/hkCq4SrgiRkN9HAMvP4UBrWg4eH6hwMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrySEuJnYwDW8FYIreYJnEDx44RMB8GA1UdIwQY MBaAFFkaD+8e+67ts9KNQ589XM+t/YhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JvUDd4NzdydTJ6MG8xRG56MWN6NjM5aUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMTdiZWUtY2FiNi00MjJmLTg4Y2Mt YzI2NjRlMzdjMzI3LzEvV1JvUDd4NzdydTJ6MG8xRG56MWN6NjM5aUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMTdiZWUtY2FiNi00MjJmLTg4Y2MtYzI2NjRlMzdjMzI3 LzEvV1JvUDd4NzdydTJ6MG8xRG56MWN6NjM5aUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWWxy14B 5dL75B43RAe5Mjr+XF5qDWj9qWb/1wiPZcqHCYFKg9QtS2PwzurRZpmvjnaY9aBA jRdJqNZU0Kap9BVBov4Mw0cXF3cM300ukC+1j9WuipWEJQwb38ggVDjFUzwTMwEj cvGv1hcENungoT697xHQtZNEqLLuZFLghSP8AjG2t1XnQW0hX+yL1QLTv0QitAAG Sme8bXFKibF4NTgNmJ9bBL7BSE3zGLweWwkM1eCZF+yeswQxGqiU1rICC/I6v7B4 hWPc0qQJHNCpIy3kxgIXNBsHkdV1VL2PMGQSlcqVcOuhMWS4pzHWXOD4tZNIqOhN ++MKnz9KhHsgig== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:51 2025 by rpki-client