This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft File: wJLY1VEbGezkVpYPI7-ohu4dVws.mft (raw, json) Hash identifier: x+w1S1vls0PcXKK17iMDA5lQHguy/kLLQedfU2lIq3I= Subject key identifier: B1:5C:BD:94:76:D9:59:BD:DD:77:BC:94:89:D8:DC:16:01:B9:46:B2 Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b Certificate serial: 019B3720D768A43DB4B1E2B095731306D954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft Manifest number: 1793 Signing time: Fri 19 Dec 2025 15:00:57 +0000 Manifest this update: Fri 19 Dec 2025 15:00:57 +0000 Manifest next update: Sat 20 Dec 2025 15:00:57 +0000 Files and hashes: 1: Q_ZP2vofzPczALgXLi87Ewl-QYw.roa (hash: L4KrlBgHzgT5N8Y6ICGM0vsH5QclmvNH7VTwBVn5LIU=) 2: Xlu1RjkLIjpUuW9uaM7jn9hmpOM.roa (hash: 4HPailMxVKUe4raNE7C7jB5qTjzwPsjAoquzi7o0XrM=) 3: jz90vv6kT8814r7qD_fGqQHUToc.roa (hash: f3X0CYyJUtKdKPAZKVCkw70r2WPKMFX9nLw9xUALHgQ=) 4: wJLY1VEbGezkVpYPI7-ohu4dVws.crl (hash: hWqtSXuK9UDR8Cc+CKH944SZDhpUbP6kMtL36rw1IgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:20:d7:68:a4:3d:b4:b1:e2:b0:95:73:13:06:d9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b Validity Not Before: Dec 19 15:00:57 2025 GMT Not After : Dec 20 15:00:57 2025 GMT Subject: CN=b15cbd9476d959bddd77bc9489d8dc1601b946b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:d7:1c:d7:d1:97:fc:fc:9f:19:69:05:70: f2:1b:6e:2a:ca:6a:a8:3a:28:f0:5d:75:7a:3a:fe: 4f:66:ff:ef:04:94:bd:34:90:98:88:bb:a4:2c:15: 84:53:d4:1a:a6:ad:d8:98:df:68:9f:74:86:b0:67: 2a:15:ca:ea:be:9b:95:0d:18:96:dc:f4:9d:47:fe: 19:24:14:8e:97:f8:55:5d:b2:76:c4:57:d9:42:b4: 74:14:cd:2f:6f:93:48:c7:b6:e4:ac:48:e8:0f:97: ae:7d:80:08:ce:4b:dc:15:b9:bd:09:d4:68:80:55: fe:7d:57:0d:cf:a6:cd:15:b3:a0:87:15:01:a4:f8: 8b:69:61:9b:e3:66:1d:49:0a:40:c5:f3:8a:0b:b6: 54:1c:3e:c9:1a:d2:53:04:63:ab:48:37:ca:15:bf: 52:ed:27:85:7a:06:46:11:c4:c0:db:26:53:0b:c9: 51:d4:42:d1:b9:6b:97:7f:09:32:90:05:c1:53:58: 5f:e2:84:41:7e:e8:92:a3:15:95:4d:a8:86:a3:d2: 98:c9:1f:70:9e:ca:55:71:fe:05:1d:26:c0:6a:90: e3:5e:73:f4:72:d1:f8:69:6c:bb:fe:0b:96:0e:ad: 35:81:24:3c:62:94:8a:37:3e:66:86:17:43:81:6e: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:5C:BD:94:76:D9:59:BD:DD:77:BC:94:89:D8:DC:16:01:B9:46:B2 X509v3 Authority Key Identifier: keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:d1:a5:a3:67:81:05:38:92:58:5b:2d:78:79:98:97:b2:1f: 05:e9:5a:2f:97:a6:98:11:2d:57:9f:25:af:94:02:2b:2c:74: bb:12:a4:5e:b6:7f:bd:a6:69:76:0a:54:fb:30:df:98:4e:61: e6:70:4b:4f:42:cc:e2:4a:0b:fc:1d:8f:ba:01:bc:f2:cc:f4: a8:44:87:1d:ee:8b:83:6d:d7:1d:2c:a6:b4:98:1e:f2:70:d8: 68:26:43:4b:82:ec:3e:7e:74:87:bd:9d:df:4e:71:c3:9e:23: 31:51:8c:6f:8b:1d:d6:a8:49:77:4a:8e:1e:20:87:56:b8:0e: 98:3a:43:32:c2:27:b1:6a:17:da:3d:fd:ef:e7:2b:28:67:86: 1b:0d:ab:7c:01:1d:bb:ac:13:65:72:c2:3f:46:84:3c:00:81: a9:3c:c9:35:84:1d:3c:df:4f:8e:3f:8e:07:c3:d1:70:ae:a1: 7a:11:a0:c6:a7:13:7e:4f:e8:69:28:84:b9:ee:43:51:52:f6: 74:37:fc:33:b2:6a:6c:2a:69:9d:5b:0a:89:4a:93:3e:a9:d5: 2c:e4:df:5b:39:73:48:e7:21:b1:ed:26:70:57:bc:95:9c:0a: 06:4c:c5:f6:7f:a5:2f:63:ae:e5:4e:82:6f:15:fb:e3:b9:14: f1:8f:4c:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3INdopD20seKwlXMTBtlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOTJkOGQ1NTExYjE5ZWNlNDU2OTYwZjIzYmZhODg2ZWUx ZDU3MGIwHhcNMjUxMjE5MTUwMDU3WhcNMjUxMjIwMTUwMDU3WjAzMTEwLwYDVQQD EyhiMTVjYmQ5NDc2ZDk1OWJkZGQ3N2JjOTQ4OWQ4ZGMxNjAxYjk0NmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4/XHNfRl/z8nxlpBXDyG24qymqo OijwXXV6Ov5PZv/vBJS9NJCYiLukLBWEU9Qapq3YmN9on3SGsGcqFcrqvpuVDRiW 3PSdR/4ZJBSOl/hVXbJ2xFfZQrR0FM0vb5NIx7bkrEjoD5eufYAIzkvcFbm9CdRo gFX+fVcNz6bNFbOghxUBpPiLaWGb42YdSQpAxfOKC7ZUHD7JGtJTBGOrSDfKFb9S 7SeFegZGEcTA2yZTC8lR1ELRuWuXfwkykAXBU1hf4oRBfuiSoxWVTaiGo9KYyR9w nspVcf4FHSbAapDjXnP0ctH4aWy7/guWDq01gSQ8YpSKNz5mhhdDgW72OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFcvZR22Vm93Xe8lInY3BYBuUayMB8GA1UdIwQY MBaAFMCS2NVRGxns5FaWDyO/qIbuHVcLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEt MjY3YTE2YjQ2MjlmLzEvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEtMjY3YTE2YjQ2Mjlm LzEvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA49Glo2eB BTiSWFsteHmYl7IfBelaL5emmBEtV58lr5QCKyx0uxKkXrZ/vaZpdgpU+zDfmE5h 5nBLT0LM4koL/B2PugG88sz0qESHHe6Lg23XHSymtJge8nDYaCZDS4LsPn50h72d 305xw54jMVGMb4sd1qhJd0qOHiCHVrgOmDpDMsInsWoX2j397+crKGeGGw2rfAEd u6wTZXLCP0aEPACBqTzJNYQdPN9Pjj+OB8PRcK6hehGgxqcTfk/oaSiEue5DUVL2 dDf8M7JqbCppnVsKiUqTPqnVLOTfWzlzSOchse0mcFe8lZwKBkzF9n+lL2Ou5U6C bxX747kU8Y9MnQ== -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:13 2025 by rpki-client