This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft File: wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json) Hash identifier: ezYzEb53Xiqq3Ex4aKvf9J3Oh0XV4OxfJOAJmeJc7Zg= Subject key identifier: 49:49:FF:4C:43:53:10:E9:D0:81:E6:31:B9:D3:F0:10:68:D0:FC:6D Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67 Certificate issuer: /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267 Certificate serial: 019B3D59D159C7D43E59216D2F0E3DC77F64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft Manifest number: 0668 Signing time: Sat 20 Dec 2025 20:00:54 +0000 Manifest this update: Sat 20 Dec 2025 20:00:54 +0000 Manifest next update: Sun 21 Dec 2025 20:00:54 +0000 Files and hashes: 1: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: ANeivNlFa/Yu8Jacfmal5f1rfDpuDD1hx3a5ozHv+Po=) 2: yDU1rEJ62ylcENkxxq9-gc-Am2g.roa (hash: 7IZ7rxbnUahaLcCnP9skdbmiM7UlbVpGLatma5hP9yw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d1:59:c7:d4:3e:59:21:6d:2f:0e:3d:c7:7f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267 Validity Not Before: Dec 20 20:00:54 2025 GMT Not After : Dec 21 20:00:54 2025 GMT Subject: CN=4949ff4c435310e9d081e631b9d3f01068d0fc6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4c:b0:1d:74:09:d4:1a:a0:97:12:b3:10:0f: c1:2f:6b:c7:fb:92:49:d9:de:2f:50:f8:a4:8d:3e: fa:17:c0:3c:f5:c5:e5:52:c7:63:64:9b:51:78:4a: 8b:11:40:43:f0:cd:df:ee:6a:56:c4:12:8a:27:62: a5:e1:e7:2a:52:ee:19:b9:f8:32:2b:20:65:f2:d3: 47:91:f3:5c:ee:3a:c9:e6:60:10:72:ad:1a:1d:a1: 49:6b:cb:67:19:c3:57:f0:d3:13:e6:d8:8b:4d:41: cc:fe:2b:9d:ee:8f:e6:30:26:67:96:c4:df:5b:78: a7:32:76:4c:6d:57:25:ae:36:28:99:af:f1:2a:3f: 1f:c9:4e:16:c5:2c:fa:59:d5:23:6b:10:e6:7d:71: e9:85:17:7b:a8:0b:44:39:a3:31:b2:f6:1b:34:74: fc:d5:5f:83:fd:02:1f:fc:71:11:67:51:97:be:15: 06:fb:24:cd:50:4c:18:d9:ec:46:b6:bf:7e:cf:14: 06:4e:c1:08:9f:ea:e9:09:93:83:13:d8:63:87:09: a0:b9:f4:49:e9:db:3f:ba:60:78:55:ba:cb:fc:3e: ee:e8:f3:ae:83:95:93:72:83:15:96:01:9e:bf:26: a8:eb:24:b6:05:d7:92:a6:2c:6a:7e:20:eb:0f:0e: 86:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:49:FF:4C:43:53:10:E9:D0:81:E6:31:B9:D3:F0:10:68:D0:FC:6D X509v3 Authority Key Identifier: keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:85:f9:2f:0f:4b:ec:c0:49:12:d1:80:92:1d:10:6e:71:f8: f5:47:af:e3:66:74:2e:c1:7f:2a:d6:6d:d3:23:90:89:10:ec: 30:1c:c6:d8:03:64:c2:53:1f:87:f1:00:cc:b9:bf:c3:59:0f: 9c:b7:a3:f9:64:c5:36:8a:c7:fe:17:c1:f3:0d:34:2c:5e:0c: 3c:3b:61:e0:00:fc:e3:33:52:69:43:56:e1:64:72:b5:88:7c: 8b:8b:6a:2c:19:02:bc:b1:52:65:09:0c:1e:3e:18:58:8d:4d: 79:88:2e:55:92:41:cf:a7:dd:a3:7c:48:72:e6:d7:f1:c7:1b: 7e:97:58:9c:5c:1c:b0:a7:77:3f:f7:77:36:c2:a6:82:90:2a: 8a:7e:eb:03:7f:fe:d3:39:5c:63:a1:9e:31:a3:41:44:ba:d4: d8:b2:36:e0:7d:4d:f5:51:ef:f0:92:d4:3b:b4:c3:87:cc:e7: 7b:45:d7:a4:03:98:8e:94:ad:bf:6b:3d:e0:4a:d9:43:89:7b: 4c:29:9e:d2:cb:a2:5a:e1:0c:da:3f:58:1c:64:c9:ba:96:e1: 96:a9:05:49:87:04:97:5c:99:d5:a2:20:bd:18:0a:0d:9f:e3: 38:7a:37:5e:a1:16:58:44:13:65:2c:47:37:97:42:6f:61:07: da:4d:32:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdFZx9Q+WSFtLw49x39kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNjJlNmFhNTk0NjZmZTU2MWE5M2FiY2Q0ZGNkZjNkZWE0 ZGMyNjcwHhcNMjUxMjIwMjAwMDU0WhcNMjUxMjIxMjAwMDU0WjAzMTEwLwYDVQQD Eyg0OTQ5ZmY0YzQzNTMxMGU5ZDA4MWU2MzFiOWQzZjAxMDY4ZDBmYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kywHXQJ1BqglxKzEA/BL2vH+5JJ 2d4vUPikjT76F8A89cXlUsdjZJtReEqLEUBD8M3f7mpWxBKKJ2Kl4ecqUu4Zufgy KyBl8tNHkfNc7jrJ5mAQcq0aHaFJa8tnGcNX8NMT5tiLTUHM/iud7o/mMCZnlsTf W3inMnZMbVclrjYoma/xKj8fyU4WxSz6WdUjaxDmfXHphRd7qAtEOaMxsvYbNHT8 1V+D/QIf/HERZ1GXvhUG+yTNUEwY2exGtr9+zxQGTsEIn+rpCZODE9hjhwmgufRJ 6ds/umB4VbrL/D7u6POug5WTcoMVlgGevyao6yS2BdeSpixqfiDrDw6GiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElJ/0xDUxDp0IHmMbnT8BBo0PxtMB8GA1UdIwQY MBaAFMBi5qpZRm/lYak6vNTc3z3qTcJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEt MjM3M2ExYmE2ZDBiLzEvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEtMjM3M2ExYmE2ZDBi LzEvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4X5Lw9L 7MBJEtGAkh0QbnH49Uev42Z0LsF/KtZt0yOQiRDsMBzG2ANkwlMfh/EAzLm/w1kP nLej+WTFNorH/hfB8w00LF4MPDth4AD84zNSaUNW4WRytYh8i4tqLBkCvLFSZQkM Hj4YWI1NeYguVZJBz6fdo3xIcubX8ccbfpdYnFwcsKd3P/d3NsKmgpAqin7rA3/+ 0zlcY6GeMaNBRLrU2LI24H1N9VHv8JLUO7TDh8zne0XXpAOYjpStv2s94ErZQ4l7 TCme0suiWuEM2j9YHGTJupbhlqkFSYcEl1yZ1aIgvRgKDZ/jOHo3XqEWWEQTZSxH N5dCb2EH2k0ypg== -----END CERTIFICATE-----Generated at Sun Dec 21 04:05:52 2025 by rpki-client