This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft File: WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json) Hash identifier: LI8ThFs7yA+WR5nIYiCP36xEWwboy3Sc/qmYtJ9pMkM= Subject key identifier: F4:62:FC:FA:09:79:3A:C8:48:14:B3:0E:E0:24:D6:20:85:73:AB:D0 Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Certificate serial: 019B53AB9C06B28D431CB59360272E88F80D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft Manifest number: 027F Signing time: Thu 25 Dec 2025 04:01:54 +0000 Manifest this update: Thu 25 Dec 2025 04:01:54 +0000 Manifest next update: Fri 26 Dec 2025 04:01:54 +0000 Files and hashes: 1: 2mKN6eYxCZSzg1HkhTBmFH-Muzs.roa (hash: vCnqByRm0RvU7dzU3TpA6IT8qwABaBJlH4t+NDPI9V0=) 2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: LngjkAcX7q5a8yhv++hWccVIHdDmixrPVgCn0hKczg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:9c:06:b2:8d:43:1c:b5:93:60:27:2e:88:f8:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Validity Not Before: Dec 25 04:01:54 2025 GMT Not After : Dec 26 04:01:54 2025 GMT Subject: CN=f462fcfa09793ac84814b30ee024d6208573abd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:c3:58:6f:3a:98:4a:15:73:3d:03:1a:07: ea:6a:35:cb:70:2f:01:6d:2e:03:5f:65:08:6f:a8: 19:32:8f:67:cc:96:eb:6f:eb:93:90:ee:ba:e1:4e: 05:dc:fa:36:6a:3e:5c:ca:83:8a:68:bd:6e:3d:2a: 6b:4d:e2:f4:99:eb:cc:69:e1:2c:4b:ae:d7:06:93: aa:d6:b9:30:9f:9f:96:36:b0:af:9b:b3:5d:d3:a8: ab:ad:52:68:74:be:be:9f:93:19:a4:b4:30:df:15: 9a:ee:b3:8b:65:5e:53:55:00:33:f2:31:f3:2c:e4: 56:8a:31:91:30:31:fa:f4:1b:ec:8d:c4:16:8d:16: 31:2a:52:7d:7c:7e:d3:fa:7b:68:bc:b4:b6:07:0e: a9:3d:6b:1f:3f:9a:89:cc:44:ba:3e:cb:cf:0b:7c: c4:20:9b:2d:ac:df:04:82:13:cd:8b:0c:92:1d:bf: 9d:5c:0e:cf:e4:58:5e:4e:23:e0:30:42:a2:a7:7b: 5d:b2:63:cf:15:7e:c9:e4:38:26:dd:16:8e:a5:5d: c7:e8:ee:a6:bd:10:7f:ce:d5:29:b6:a3:4b:60:42: ea:d3:a6:b8:f0:09:d2:73:eb:28:02:c3:83:77:5b: 53:81:4d:c3:d7:26:09:ac:d9:f8:4b:08:59:97:21: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:62:FC:FA:09:79:3A:C8:48:14:B3:0E:E0:24:D6:20:85:73:AB:D0 X509v3 Authority Key Identifier: keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1c:c9:0e:e6:4d:59:e9:90:e1:03:d2:6b:14:74:6b:7c:9e: 5c:0e:82:31:4b:4f:c6:f9:d5:97:b2:f7:ad:3a:0f:81:65:79: b1:2c:d5:bd:26:3c:4f:22:2b:a2:25:18:d0:ec:0f:ef:6c:c7: 25:eb:d6:85:52:7a:9e:f9:b3:27:a0:58:a9:87:11:f5:9b:e6: 76:9a:f4:be:11:d1:92:96:c1:b6:8f:ea:ea:15:64:22:75:54: 3f:e8:fb:da:80:00:c1:36:a0:34:0c:22:c4:4e:b6:26:76:95: 07:98:ab:32:55:b9:c7:36:01:f0:23:89:37:a0:c8:cc:90:eb: ff:f8:2b:0c:82:cd:ca:16:8d:cb:42:a7:df:88:60:05:78:e7: be:8c:b5:e6:de:d2:25:18:34:43:5b:ca:3e:2c:71:4e:f7:db: 94:94:d5:55:a8:a0:20:80:b8:9d:62:43:8f:c1:20:84:20:02: 07:bc:f2:ec:74:c7:bc:3e:f0:6b:8b:48:4a:0e:8f:09:fb:f0: c2:af:1a:da:95:d5:17:18:ea:9a:bc:c2:7e:e5:ad:9e:51:88: cc:e6:60:29:5e:9b:bd:f7:f8:b0:05:b0:73:0d:57:f1:a6:11: bb:dd:71:4a:82:6e:65:a1:f7:fb:47:d8:dc:11:a0:22:2e:5d: 36:85:90:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq5wGso1DHLWTYCcuiPgNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ1NWViY2IwM2JmZjJhMmQ5NzVhZDQwODFmOTQxOWJh Y2FmMzUwHhcNMjUxMjI1MDQwMTU0WhcNMjUxMjI2MDQwMTU0WjAzMTEwLwYDVQQD EyhmNDYyZmNmYTA5NzkzYWM4NDgxNGIzMGVlMDI0ZDYyMDg1NzNhYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnrDWG86mEoVcz0DGgfqajXLcC8B bS4DX2UIb6gZMo9nzJbrb+uTkO664U4F3Po2aj5cyoOKaL1uPSprTeL0mevMaeEs S67XBpOq1rkwn5+WNrCvm7Nd06irrVJodL6+n5MZpLQw3xWa7rOLZV5TVQAz8jHz LORWijGRMDH69BvsjcQWjRYxKlJ9fH7T+ntovLS2Bw6pPWsfP5qJzES6PsvPC3zE IJstrN8EghPNiwySHb+dXA7P5FheTiPgMEKip3tdsmPPFX7J5Dgm3RaOpV3H6O6m vRB/ztUptqNLYELq06a48AnSc+soAsODd1tTgU3D1yYJrNn4SwhZlyHoTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRi/PoJeTrISBSzDuAk1iCFc6vQMB8GA1UdIwQY MBaAFFl0VevLA7/yotl1rUCB+UGbrK81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYt ZWYzNGRkNGRlNTcyLzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYtZWYzNGRkNGRlNTcy LzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbxzJDuZN WemQ4QPSaxR0a3yeXA6CMUtPxvnVl7L3rToPgWV5sSzVvSY8TyIroiUY0OwP72zH JevWhVJ6nvmzJ6BYqYcR9Zvmdpr0vhHRkpbBto/q6hVkInVUP+j72oAAwTagNAwi xE62JnaVB5irMlW5xzYB8COJN6DIzJDr//grDILNyhaNy0Kn34hgBXjnvoy15t7S JRg0Q1vKPixxTvfblJTVVaigIIC4nWJDj8EghCACB7zy7HTHvD7wa4tISg6PCfvw wq8a2pXVFxjqmrzCfuWtnlGIzOZgKV6bvff4sAWwcw1X8aYRu91xSoJuZaH3+0fY 3BGgIi5dNoWQzQ== -----END CERTIFICATE-----Generated at Thu Dec 25 11:21:54 2025 by rpki-client