This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft File: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json) Hash identifier: ZETWrUrwh5+t4knOUTH7icJ2FIG7/149K/OJJKzj7Fo= Subject key identifier: 5A:27:37:0C:0F:9D:DE:1C:26:FA:EB:56:44:16:04:DE:81:77:AD:6A Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 Certificate issuer: /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Certificate serial: 019B41DB48EF4713462462ED9083C393D72F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft Manifest number: 0F83 Signing time: Sun 21 Dec 2025 17:00:48 +0000 Manifest this update: Sun 21 Dec 2025 17:00:48 +0000 Manifest next update: Mon 22 Dec 2025 17:00:48 +0000 Files and hashes: 1: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (hash: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=) 2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: Gn/e+WVlPXLUTDyKpMl/628vYsc5lv+yt8+DKQc1X+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:48:ef:47:13:46:24:62:ed:90:83:c3:93:d7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Validity Not Before: Dec 21 17:00:48 2025 GMT Not After : Dec 22 17:00:48 2025 GMT Subject: CN=5a27370c0f9dde1c26faeb56441604de8177ad6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:93:ae:63:48:f7:a0:c5:93:8b:22:a9:ca:b9: c0:8f:ea:fd:2a:5b:cc:12:1e:43:c9:45:84:16:59: ef:c7:e2:eb:4a:2f:93:2a:dd:4b:1f:74:1a:99:b4: 27:84:44:56:24:11:a9:4d:d9:d0:42:2d:00:55:0f: fc:48:33:0d:7c:47:eb:3a:f9:62:8d:3b:c7:82:7c: 59:0b:cb:7b:74:69:52:e3:6b:fe:25:53:72:28:c1: 61:db:14:f2:80:48:ce:6f:ec:f4:74:5d:83:cb:4e: 51:33:75:03:37:bd:bd:38:86:25:35:89:6f:8a:25: 67:98:fa:f4:5a:54:02:c5:ef:2f:a3:1f:62:a7:17: 64:ee:74:e7:21:5d:05:e5:18:00:02:44:26:dd:3d: 99:28:32:cd:7b:aa:9a:98:c6:73:0d:2b:b0:f8:2a: db:c5:29:8e:e6:8d:64:6b:ec:4f:ee:86:b7:1e:48: 10:0e:21:50:9e:d7:74:97:37:93:5c:1e:19:e0:d3: 6f:cd:f4:0b:ed:d6:46:ae:1e:3c:2a:71:c1:d8:e9: 52:63:c6:9e:ee:0f:8f:f3:bb:43:14:47:f3:74:7a: d7:0e:09:93:e4:2a:85:f6:81:29:8f:f1:ad:1c:a7: 1d:2c:8d:6e:d9:eb:03:93:96:c5:73:75:26:9c:c2: 0b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:27:37:0C:0F:9D:DE:1C:26:FA:EB:56:44:16:04:DE:81:77:AD:6A X509v3 Authority Key Identifier: keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:d9:ec:bf:91:ac:14:a9:65:aa:e1:a9:e2:7c:70:26:94:fa: 90:d5:5b:ca:47:10:cc:86:96:82:2b:43:7e:d8:76:7b:b9:1b: c8:c5:5c:34:ec:1c:fb:a8:e2:dd:70:ee:ca:64:9a:24:38:cc: 8b:e3:de:2e:68:5c:1f:e4:46:51:4c:04:d6:ca:50:e2:a5:68: 3b:4e:02:1b:20:34:11:ec:a2:63:91:06:d3:62:1f:46:6c:c4: 43:9e:48:b7:bc:4d:80:ba:4f:0a:2c:28:cd:07:34:6e:05:d5: ad:d1:af:71:e7:4d:b9:18:ec:86:92:0f:dc:c3:b9:76:c5:6c: 55:08:e8:f0:b5:13:eb:2b:52:29:83:64:42:84:64:61:f2:6e: 6f:45:34:6d:37:2a:f5:0d:32:12:6a:ac:33:55:94:31:86:bb: bc:58:48:4c:1c:5a:a4:4e:09:c1:14:9b:02:8c:c5:d3:c8:fa: 74:1f:95:8c:18:18:d9:aa:9e:64:cb:b4:65:85:09:2a:a8:a0: 90:95:28:97:f0:3e:38:70:a4:e1:ae:b6:47:0c:8c:5b:6c:99: aa:87:03:9a:c8:67:e1:db:2a:c5:e1:46:6b:7a:c4:b2:c8:9c: 79:68:f1:8c:2f:9f:4f:80:76:5c:01:0a:61:2c:dc:58:f7:93: f7:9b:6b:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB20jvRxNGJGLtkIPDk9cvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj NGFkODQwHhcNMjUxMjIxMTcwMDQ4WhcNMjUxMjIyMTcwMDQ4WjAzMTEwLwYDVQQD Eyg1YTI3MzcwYzBmOWRkZTFjMjZmYWViNTY0NDE2MDRkZTgxNzdhZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZOuY0j3oMWTiyKpyrnAj+r9KlvM Eh5DyUWEFlnvx+LrSi+TKt1LH3QambQnhERWJBGpTdnQQi0AVQ/8SDMNfEfrOvli jTvHgnxZC8t7dGlS42v+JVNyKMFh2xTygEjOb+z0dF2Dy05RM3UDN729OIYlNYlv iiVnmPr0WlQCxe8vox9ipxdk7nTnIV0F5RgAAkQm3T2ZKDLNe6qamMZzDSuw+Crb xSmO5o1ka+xP7oa3HkgQDiFQntd0lzeTXB4Z4NNvzfQL7dZGrh48KnHB2OlSY8ae 7g+P87tDFEfzdHrXDgmT5CqF9oEpj/GtHKcdLI1u2esDk5bFc3UmnMILhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFonNwwPnd4cJvrrVkQWBN6Bd61qMB8GA1UdIwQY MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1 LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNnsv5Gs FKllquGp4nxwJpT6kNVbykcQzIaWgitDfth2e7kbyMVcNOwc+6ji3XDuymSaJDjM i+PeLmhcH+RGUUwE1spQ4qVoO04CGyA0EeyiY5EG02IfRmzEQ55It7xNgLpPCiwo zQc0bgXVrdGvcedNuRjshpIP3MO5dsVsVQjo8LUT6ytSKYNkQoRkYfJub0U0bTcq 9Q0yEmqsM1WUMYa7vFhITBxapE4JwRSbAozF08j6dB+VjBgY2aqeZMu0ZYUJKqig kJUol/A+OHCk4a62RwyMW2yZqocDmshn4dsqxeFGa3rEssiceWjxjC+fT4B2XAEK YSzcWPeT95trfQ== -----END CERTIFICATE-----Generated at Mon Dec 22 01:05:55 2025 by rpki-client