This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json) Hash identifier: SuBx6e+Tbag7HvFp33bf4kHWQqESz7cS6gh/jPiUoNA= Subject key identifier: D9:7D:B9:54:8C:E3:67:E1:AD:F1:92:FE:90:9D:7A:04:AE:B1:F6:69 Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e Certificate serial: 019B49274E6726DE6CE28F6AD84696D36977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft Manifest number: 10E2 Signing time: Tue 23 Dec 2025 03:01:11 +0000 Manifest this update: Tue 23 Dec 2025 03:01:11 +0000 Manifest next update: Wed 24 Dec 2025 03:01:11 +0000 Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: O2+dKvQGu/056tT9EzZye3A3zfnyEHN/BEOqOeoaU2o=) 2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:4e:67:26:de:6c:e2:8f:6a:d8:46:96:d3:69:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e Validity Not Before: Dec 23 03:01:11 2025 GMT Not After : Dec 24 03:01:11 2025 GMT Subject: CN=d97db9548ce367e1adf192fe909d7a04aeb1f669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d8:1a:09:74:59:d9:25:1d:19:25:80:42:d2: a4:fc:ee:4c:93:0d:65:44:7b:94:73:7c:86:38:ec: ef:23:a5:9b:95:c4:72:40:db:c0:41:ae:fa:3b:4f: e8:40:3f:5b:38:01:48:13:c6:13:c9:9f:0e:8b:9c: e1:90:9b:bd:d4:06:51:f6:09:3e:81:4d:f0:49:0b: a9:da:98:7a:f9:45:64:f0:a8:76:74:01:7d:60:2f: 4f:10:92:76:04:c0:ed:ec:b8:c9:76:68:51:ff:3b: 37:f9:74:94:85:88:a1:f2:ec:65:ae:58:74:52:9e: 5a:ca:59:e6:8f:44:03:37:c3:3d:97:c5:67:f3:ef: 8b:01:74:c6:94:3d:5d:5b:a1:cd:ed:a3:3b:3e:f9: bf:6a:f9:35:ef:93:4a:b4:e1:73:e2:1f:e7:85:77: cb:52:91:09:d4:14:fc:9a:11:99:d8:f1:02:d0:30: 8a:85:6d:fe:72:3e:63:a9:a7:5e:8c:58:98:39:a1: 25:65:fe:46:1b:9a:0d:57:90:7d:43:96:6e:d3:e9: af:96:50:6c:a4:be:c6:0f:40:66:2e:ff:9c:86:fb: fa:c2:f7:9e:ea:50:bf:31:1c:d2:40:52:38:62:20: 49:db:7a:45:40:a9:83:a5:47:e3:b0:43:ef:68:1e: 92:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7D:B9:54:8C:E3:67:E1:AD:F1:92:FE:90:9D:7A:04:AE:B1:F6:69 X509v3 Authority Key Identifier: keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:bd:69:78:ff:46:e5:e7:e4:35:c3:57:08:1e:94:c7:64:a4: a8:76:20:57:36:85:98:8a:0d:3c:18:43:0d:2a:77:40:b3:0b: c4:ae:39:da:db:41:0e:88:06:1a:93:c7:77:cb:0c:dc:c4:e7: 6e:cf:67:0a:21:d8:d7:56:4a:96:33:80:90:06:c5:41:ce:e4: f0:74:2c:8d:e8:51:4c:b3:dc:46:64:1e:91:a0:9b:ca:2b:56: b8:59:ae:fe:7b:bd:09:cc:97:69:6a:59:ed:e8:df:9c:a7:2d: e9:1d:79:3d:e5:86:d4:3e:55:ef:90:bd:f8:9d:d5:92:2a:e9: e9:73:61:41:0e:1f:b6:70:60:de:6c:d5:33:6c:1a:7e:08:d6: 00:f0:6f:8e:b8:5e:9f:71:85:da:ef:6e:72:2c:1f:c8:5d:ec: 82:d9:3e:75:db:2b:7f:04:c9:24:ab:71:4d:91:5d:9f:7c:02: b0:de:fd:fd:d7:0f:81:88:65:1e:cd:0e:f1:24:81:d1:d0:e4: 04:fb:25:ce:13:79:8b:56:78:2b:5e:a1:1e:c7:b2:ca:11:1e: e5:4a:7b:d4:2e:02:e7:49:b0:b0:6d:fe:f2:1c:e4:eb:6a:4d: 29:05:72:a6:53:34:b5:62:ad:35:6f:e2:39:67:4f:b0:08:64: 6f:87:ab:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJ05nJt5s4o9q2EaW02l3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ1ZDlhMWEyMjQxNjgzM2RlNTlhNWU2MTlkMTIwOTZk MDk2OWUwHhcNMjUxMjIzMDMwMTExWhcNMjUxMjI0MDMwMTExWjAzMTEwLwYDVQQD EyhkOTdkYjk1NDhjZTM2N2UxYWRmMTkyZmU5MDlkN2EwNGFlYjFmNjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdgaCXRZ2SUdGSWAQtKk/O5Mkw1l RHuUc3yGOOzvI6WblcRyQNvAQa76O0/oQD9bOAFIE8YTyZ8Oi5zhkJu91AZR9gk+ gU3wSQup2ph6+UVk8Kh2dAF9YC9PEJJ2BMDt7LjJdmhR/zs3+XSUhYih8uxlrlh0 Up5aylnmj0QDN8M9l8Vn8++LAXTGlD1dW6HN7aM7Pvm/avk175NKtOFz4h/nhXfL UpEJ1BT8mhGZ2PEC0DCKhW3+cj5jqadejFiYOaElZf5GG5oNV5B9Q5Zu0+mvllBs pL7GD0BmLv+chvv6wvee6lC/MRzSQFI4YiBJ23pFQKmDpUfjsEPvaB6SWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl9uVSM42fhrfGS/pCdegSusfZpMB8GA1UdIwQY MBaAFFrEXZoaIkFoM95ZpeYZ0SCW0JaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMt M2EwMDMxMzVhYWQxLzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMtM2EwMDMxMzVhYWQx LzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMr1peP9G 5efkNcNXCB6Ux2SkqHYgVzaFmIoNPBhDDSp3QLMLxK452ttBDogGGpPHd8sM3MTn bs9nCiHY11ZKljOAkAbFQc7k8HQsjehRTLPcRmQekaCbyitWuFmu/nu9CcyXaWpZ 7ejfnKct6R15PeWG1D5V75C9+J3Vkirp6XNhQQ4ftnBg3mzVM2wafgjWAPBvjrhe n3GF2u9uciwfyF3sgtk+ddsrfwTJJKtxTZFdn3wCsN79/dcPgYhlHs0O8SSB0dDk BPslzhN5i1Z4K16hHseyyhEe5Up71C4C50mwsG3+8hzk62pNKQVyplM0tWKtNW/i OWdPsAhkb4ermA== -----END CERTIFICATE-----Generated at Tue Dec 23 09:04:00 2025 by rpki-client