This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft File: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft (raw, json) Hash identifier: 7npM7mNpXmepS7nW4k0kSyKjdPKTiCITNdta3VKbxGM= Subject key identifier: 89:64:95:36:2C:81:63:40:3D:36:86:12:E8:85:4C:AA:C4:44:82:B7 Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79 Certificate issuer: /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479 Certificate serial: 019B2DB0A2C96BA92FC87917B0EDB60099D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft Manifest number: 0328 Signing time: Wed 17 Dec 2025 19:01:49 +0000 Manifest this update: Wed 17 Dec 2025 19:01:49 +0000 Manifest next update: Thu 18 Dec 2025 19:01:49 +0000 Files and hashes: 1: LMxG4l0eF9eJnp89vxztiAbfpWQ.roa (hash: pvqnV3wqhGmX8KDOv1jOvLMFpSWPvUzeNMWmPHFAIwc=) 2: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl (hash: /JemcU5cqwJlDgfM9uywZnFWP/aW9WaSnBDqJpD3F1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:a2:c9:6b:a9:2f:c8:79:17:b0:ed:b6:00:99:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479 Validity Not Before: Dec 17 19:01:49 2025 GMT Not After : Dec 18 19:01:49 2025 GMT Subject: CN=896495362c8163403d368612e8854caac44482b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:74:6e:88:ff:6e:6e:88:a6:c3:cb:8b:ff:a9: 5d:8c:e1:d8:6d:8c:c0:87:90:2d:57:8a:ff:a1:1a: 30:27:c1:9c:4e:81:6d:dc:c4:c0:7c:bc:83:1b:89: 67:60:cb:7d:0e:6c:72:86:4b:ac:02:81:1c:4a:6d: 57:13:5e:de:f7:39:90:1e:6f:b6:32:d3:80:e2:af: 32:bf:d3:4e:8c:d1:6f:26:6b:63:dc:2f:c1:ca:b0: 9e:f8:5f:a3:47:3e:64:29:79:db:5c:ce:ae:df:3d: 9f:55:28:3f:df:65:e0:4d:bf:41:bd:c1:53:75:5d: c9:73:f2:fa:bc:04:d0:99:ac:3c:bb:dc:01:b7:16: 37:c3:91:ad:a4:d7:9d:61:f2:34:6c:8f:94:a8:3c: 15:0b:31:c2:71:ae:0e:9f:6a:af:0b:40:5d:3b:9d: 14:f1:06:68:a7:df:51:48:ce:b9:86:d5:00:e6:65: 85:c8:a5:dc:bd:3e:85:5d:ce:ba:81:f8:74:bc:75: 34:aa:d8:c8:b1:d0:25:a5:e1:42:45:a0:43:64:5c: 96:c5:7e:92:6d:da:3b:99:73:ff:9d:c2:0a:59:35: 09:3e:f9:05:39:ac:22:4a:16:a3:8f:10:fc:c3:76: 16:9e:3e:20:76:2d:ac:43:e9:74:e9:96:86:96:af: 0f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:64:95:36:2C:81:63:40:3D:36:86:12:E8:85:4C:AA:C4:44:82:B7 X509v3 Authority Key Identifier: keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:73:52:77:85:6e:cd:02:6d:ab:3f:0d:0e:ae:a4:43:86: 2a:0b:78:ff:8e:42:86:4e:3c:be:a6:d6:c9:71:15:62:e5:d2: 97:a1:b7:2b:79:68:54:73:c4:3c:98:a6:92:93:af:9c:6c:00: a4:20:59:23:53:f7:e3:d4:f3:88:23:5f:94:92:1b:54:62:11: 15:8f:6c:2d:1c:b2:82:0c:72:bd:41:ea:fb:15:30:c9:dc:c5: 7e:76:66:b2:0d:5b:7e:3a:e4:7d:19:62:27:56:e4:78:71:4f: ad:ce:21:f0:90:0b:55:39:5a:84:78:21:e5:0d:fb:78:09:ee: 9f:72:68:a3:4b:68:ad:62:e2:81:c8:fc:5e:50:58:78:90:50: 32:52:56:65:23:63:32:a6:b7:4e:3b:42:8d:78:b7:3c:ac:06: a9:45:e2:94:40:49:a5:5c:a7:3c:c2:b0:08:9c:28:f9:17:02: ad:81:d4:b8:ed:fe:53:b5:69:b6:ca:3c:53:90:45:ec:e4:f7: 5e:dd:bc:16:de:b3:76:68:d1:0f:cb:95:b1:0d:77:3d:0b:e5: 92:f9:4b:6b:e7:f2:31:8e:47:d8:38:7e:67:34:a9:44:6b:a9: 09:ad:75:25:c1:96:65:2b:57:35:6f:5a:13:1a:44:a6:8c:ab: ab:74:f2:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsKLJa6kvyHkXsO22AJnXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGQ4NWIyZTFlYzFmMjFkY2FjNWQ1ODc5ZTY5Y2IzNDJm ZDE0NzkwHhcNMjUxMjE3MTkwMTQ5WhcNMjUxMjE4MTkwMTQ5WjAzMTEwLwYDVQQD Eyg4OTY0OTUzNjJjODE2MzQwM2QzNjg2MTJlODg1NGNhYWM0NDQ4MmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HRuiP9uboimw8uL/6ldjOHYbYzA h5AtV4r/oRowJ8GcToFt3MTAfLyDG4lnYMt9DmxyhkusAoEcSm1XE17e9zmQHm+2 MtOA4q8yv9NOjNFvJmtj3C/ByrCe+F+jRz5kKXnbXM6u3z2fVSg/32XgTb9BvcFT dV3Jc/L6vATQmaw8u9wBtxY3w5GtpNedYfI0bI+UqDwVCzHCca4On2qvC0BdO50U 8QZop99RSM65htUA5mWFyKXcvT6FXc66gfh0vHU0qtjIsdAlpeFCRaBDZFyWxX6S bdo7mXP/ncIKWTUJPvkFOawiShajjxD8w3YWnj4gdi2sQ+l06ZaGlq8PowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIlklTYsgWNAPTaGEuiFTKrERIK3MB8GA1UdIwQY MBaAFFqNhbLh7B8h3KxdWHnmnLNC/RR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGIt MmI2ZjI0YmRkMDYxLzEvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGItMmI2ZjI0YmRkMDYx LzEvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfj9zUneF bs0Cbas/DQ6upEOGKgt4/45Chk48vqbWyXEVYuXSl6G3K3loVHPEPJimkpOvnGwA pCBZI1P349TziCNflJIbVGIRFY9sLRyyggxyvUHq+xUwydzFfnZmsg1bfjrkfRli J1bkeHFPrc4h8JALVTlahHgh5Q37eAnun3Joo0torWLigcj8XlBYeJBQMlJWZSNj Mqa3TjtCjXi3PKwGqUXilEBJpVynPMKwCJwo+RcCrYHUuO3+U7Vptso8U5BF7OT3 Xt28Ft6zdmjRD8uVsQ13PQvlkvlLa+fyMY5H2Dh+ZzSpRGupCa11JcGWZStXNW9a ExpEpoyrq3TyWA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:24:36 2025 by rpki-client