This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json) Hash identifier: pcRrHhmEnJ6CgkVon+yS5ENWaUBFctoaGfAm2h6mN1M= Subject key identifier: A9:95:93:AB:B4:54:E2:93:72:C6:80:D1:02:A1:5D:E0:2D:2B:3F:0E Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Certificate serial: 019B4C5ED65560467F69600E5266495FC549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft Manifest number: 0C42 Signing time: Tue 23 Dec 2025 18:00:42 +0000 Manifest this update: Tue 23 Dec 2025 18:00:42 +0000 Manifest next update: Wed 24 Dec 2025 18:00:42 +0000 Files and hashes: 1: XIE6pSr5Se_ddJ-sbF0LHvUWRNo.roa (hash: ksy2bMoShyEx+Z2LrrV0ovXdXkbwK/G4ElQgVhhEd+k=) 2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: 2UNojDOLa03H32l4aCVLvOzhsfnDFBFPnLaDmQxrpfU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:d6:55:60:46:7f:69:60:0e:52:66:49:5f:c5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Validity Not Before: Dec 23 18:00:42 2025 GMT Not After : Dec 24 18:00:42 2025 GMT Subject: CN=a99593abb454e29372c680d102a15de02d2b3f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bb:8f:2e:bd:32:c2:c1:92:c7:2c:38:d5:4d: e1:f6:fd:af:ee:ae:c7:3f:bb:08:8e:26:45:fd:70: 6f:09:7a:17:a1:2a:df:8f:f8:fb:51:12:c0:14:fa: 59:ee:08:26:9c:8c:57:70:5d:42:7e:f7:08:a5:d4: 15:1d:1a:aa:34:38:bf:1e:6b:ae:44:18:f0:96:7c: 79:e2:64:c1:19:4a:d2:6c:65:de:c3:bd:8d:23:ba: b1:a7:fa:bf:b9:eb:e4:ea:b1:86:8c:8d:f5:87:15: f6:31:1f:c3:e6:81:86:c0:31:61:8a:a2:19:38:dc: 79:ac:be:32:4a:72:d9:5f:eb:a9:7f:2d:6b:f8:6b: 74:84:bd:cf:06:13:33:d6:68:55:b4:c0:69:d6:3a: ea:a5:ad:d0:8e:79:1a:5c:86:51:31:6f:23:13:fe: bb:07:95:1d:0a:64:b9:bb:f7:03:bc:bd:d3:7b:26: b1:41:d5:56:11:08:d6:63:a0:68:c9:0d:07:67:ea: 95:73:fc:7d:62:51:f4:02:67:be:6a:11:d0:c6:e4: 5b:a0:0c:ed:9c:f2:c5:c7:d7:73:21:e8:f4:46:db: f1:c7:f0:32:9a:b8:94:49:ff:8f:6e:75:b3:96:65: aa:de:ab:b3:0b:3a:af:1e:c9:b8:f8:af:df:e5:1f: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:95:93:AB:B4:54:E2:93:72:C6:80:D1:02:A1:5D:E0:2D:2B:3F:0E X509v3 Authority Key Identifier: keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a2:db:42:c2:0c:42:71:c6:7e:d2:50:ad:6b:c2:68:dc:d6: ed:87:7e:46:54:dd:a5:bb:ba:2f:49:38:89:96:41:fc:c5:02: 9a:54:79:14:de:65:39:24:d2:4b:04:f8:3c:da:b9:22:c4:a7: 28:d8:8e:28:9f:17:11:fc:79:a3:e3:c8:9f:74:94:20:7c:7f: fe:3a:6a:58:a4:9c:43:c6:e6:e3:e2:67:f2:2a:ab:72:42:d9: 91:b9:ae:15:d7:54:1b:42:17:44:12:c5:51:01:67:ef:f9:ab: 28:c8:8a:df:90:25:ac:44:ef:6f:52:c1:62:23:11:b8:fe:2d: 64:77:dc:d5:f3:84:90:e7:f6:ef:b3:b7:8d:11:19:5b:1a:48: 34:70:1d:01:7a:ee:cd:df:27:8b:4c:ea:1d:ff:6e:23:8b:62: 57:d9:c4:fc:59:dd:7d:99:64:bc:70:42:ea:56:8f:cd:02:61: 68:cb:86:07:46:04:b1:ad:f4:b5:d0:f2:12:f0:24:01:62:b7: 6c:df:8a:45:ec:3b:10:a4:29:e8:8f:a9:3e:84:b3:1d:e8:df: 02:92:8f:84:2f:2e:7e:2f:44:a4:62:28:17:dd:79:c6:9e:22: fe:bc:f3:6e:94:c7:0f:55:0e:d1:c2:bd:d6:68:35:aa:cb:cd: cb:c6:65:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXtZVYEZ/aWAOUmZJX8VJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzY0MmQxYWIzOWQzMDllYzVmMzNlNGU4ODE0YWRjMzU4 NDgyNWYwHhcNMjUxMjIzMTgwMDQyWhcNMjUxMjI0MTgwMDQyWjAzMTEwLwYDVQQD EyhhOTk1OTNhYmI0NTRlMjkzNzJjNjgwZDEwMmExNWRlMDJkMmIzZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7uPLr0ywsGSxyw41U3h9v2v7q7H P7sIjiZF/XBvCXoXoSrfj/j7URLAFPpZ7ggmnIxXcF1CfvcIpdQVHRqqNDi/Hmuu RBjwlnx54mTBGUrSbGXew72NI7qxp/q/uevk6rGGjI31hxX2MR/D5oGGwDFhiqIZ ONx5rL4ySnLZX+upfy1r+Gt0hL3PBhMz1mhVtMBp1jrqpa3QjnkaXIZRMW8jE/67 B5UdCmS5u/cDvL3TeyaxQdVWEQjWY6BoyQ0HZ+qVc/x9YlH0Ame+ahHQxuRboAzt nPLFx9dzIej0Rtvxx/AymriUSf+PbnWzlmWq3quzCzqvHsm4+K/f5R8RwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmVk6u0VOKTcsaA0QKhXeAtKz8OMB8GA1UdIwQY MBaAFMI2QtGrOdMJ7F8z5OiBStw1hIJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQt MjI2Nzk2OGI2NTJmLzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQtMjI2Nzk2OGI2NTJm LzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZaLbQsIM QnHGftJQrWvCaNzW7Yd+RlTdpbu6L0k4iZZB/MUCmlR5FN5lOSTSSwT4PNq5IsSn KNiOKJ8XEfx5o+PIn3SUIHx//jpqWKScQ8bm4+Jn8iqrckLZkbmuFddUG0IXRBLF UQFn7/mrKMiK35AlrETvb1LBYiMRuP4tZHfc1fOEkOf277O3jREZWxpINHAdAXru zd8ni0zqHf9uI4tiV9nE/FndfZlkvHBC6laPzQJhaMuGB0YEsa30tdDyEvAkAWK3 bN+KRew7EKQp6I+pPoSzHejfApKPhC8ufi9EpGIoF915xp4i/rzzbpTHD1UO0cK9 1mg1qsvNy8Zl6w== -----END CERTIFICATE-----Generated at Wed Dec 24 00:13:37 2025 by rpki-client