This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft File: wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json) Hash identifier: USUeU2xv5h62l0avGBgR8oVfkX8X8fco7//ULY+KTuM= Subject key identifier: 1A:C3:30:A1:5A:3C:86:B9:1F:AE:E1:4A:77:1A:2B:CA:01:FB:23:DD Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77 Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77 Certificate serial: 019B4C95BEC5824A545AEE98C62CD380FE1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft Manifest number: 0E14 Signing time: Tue 23 Dec 2025 19:00:40 +0000 Manifest this update: Tue 23 Dec 2025 19:00:40 +0000 Manifest next update: Wed 24 Dec 2025 19:00:40 +0000 Files and hashes: 1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=) 2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: IRK8Cf+RQ9ubKR0dc1QshPzLg8e6JxaDbYr/uzQ6G5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:95:be:c5:82:4a:54:5a:ee:98:c6:2c:d3:80:fe:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77 Validity Not Before: Dec 23 19:00:40 2025 GMT Not After : Dec 24 19:00:40 2025 GMT Subject: CN=1ac330a15a3c86b91faee14a771a2bca01fb23dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:10:57:94:a6:32:ad:9e:11:92:61:c2:9b:de: c7:a9:ff:34:e8:ab:70:cd:47:44:1d:3a:2a:ab:be: ec:02:9a:b3:ac:dc:58:61:1a:fc:68:42:a9:80:07: 31:0e:3b:aa:04:35:a7:08:7c:d3:85:78:92:aa:85: 18:fa:0a:b3:e4:c8:d0:81:8b:2e:07:27:09:11:9a: 57:c5:40:ce:cd:a5:df:65:0e:75:d1:04:79:ff:cb: a0:31:50:b7:e8:40:07:48:3c:5e:42:e0:a2:8e:90: 3a:0f:48:09:10:72:4c:07:ee:01:13:db:9c:16:4e: 55:0c:9d:12:e5:28:74:61:86:68:aa:f2:bd:d1:04: 57:2a:b4:c1:74:55:97:7e:27:98:e7:be:97:bd:9f: 66:9b:ba:88:27:05:84:a5:26:4d:e4:02:b4:0a:55: 5c:f1:ac:81:ef:a5:d5:9c:6b:32:7b:90:56:8b:1e: 93:ee:da:9d:ac:2b:4d:10:c8:b9:e9:a8:2a:a0:09: 78:b8:ec:6a:7d:0f:16:d8:98:37:62:af:e6:9d:f0: 5a:82:47:2f:8c:a4:13:27:fc:21:70:45:87:eb:1c: 1b:4f:bb:72:fe:cb:01:8b:bb:54:02:5c:52:bf:d1: 28:7d:6d:80:2d:eb:f7:b9:cc:d3:30:9c:22:71:75: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C3:30:A1:5A:3C:86:B9:1F:AE:E1:4A:77:1A:2B:CA:01:FB:23:DD X509v3 Authority Key Identifier: keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2d:61:0c:72:ad:1d:b4:30:97:5c:a1:2f:8c:c2:68:bb:48: 2b:db:e4:20:4a:0c:c2:1c:10:4c:f4:9f:99:47:1b:9c:c2:ea: 39:ac:5a:0d:9f:ee:3b:82:50:82:57:12:46:54:1e:1f:97:72: ed:15:c7:d4:82:ea:ee:d6:e1:46:4f:a5:75:e0:03:46:47:7b: ef:67:57:d6:5a:e1:be:07:0d:1c:d9:95:53:08:fb:16:c7:1a: 1b:20:b7:c7:88:64:8b:10:07:f7:5d:67:5f:4f:0e:82:4b:fa: 3e:15:2a:33:40:4c:1f:72:a4:cb:7e:4c:fc:88:42:96:f2:be: 91:9c:fc:65:d0:cc:90:68:8f:08:4d:8a:1b:d7:68:dc:f1:d6: 2f:75:aa:53:e8:10:37:a1:49:49:94:f9:ca:b0:3e:81:4a:67: 2f:e8:37:e0:83:3e:7d:72:be:4a:90:d9:94:49:70:43:a6:a2: cb:30:e2:a0:3d:08:c1:be:91:4b:86:57:66:2f:4c:f5:41:70: 8e:e6:33:94:86:24:5c:9b:e3:66:6d:8f:25:e5:21:ae:35:b7: 2a:3c:de:41:95:04:fd:eb:f2:49:41:e2:b8:28:35:91:62:fe: 32:4b:b0:bf:b3:76:68:29:4d:81:30:2b:9d:14:f8:c1:24:99: 97:46:46:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMlb7FgkpUWu6YxizTgP4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNTIzM2FmNGJhNTkxMTlkNmZmMTk0ZDdjZDg2NjUwODRh NmVlNzcwHhcNMjUxMjIzMTkwMDQwWhcNMjUxMjI0MTkwMDQwWjAzMTEwLwYDVQQD EygxYWMzMzBhMTVhM2M4NmI5MWZhZWUxNGE3NzFhMmJjYTAxZmIyM2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBBXlKYyrZ4RkmHCm97Hqf806Ktw zUdEHToqq77sApqzrNxYYRr8aEKpgAcxDjuqBDWnCHzThXiSqoUY+gqz5MjQgYsu BycJEZpXxUDOzaXfZQ510QR5/8ugMVC36EAHSDxeQuCijpA6D0gJEHJMB+4BE9uc Fk5VDJ0S5Sh0YYZoqvK90QRXKrTBdFWXfieY576XvZ9mm7qIJwWEpSZN5AK0ClVc 8ayB76XVnGsye5BWix6T7tqdrCtNEMi56agqoAl4uOxqfQ8W2Jg3Yq/mnfBagkcv jKQTJ/whcEWH6xwbT7ty/ssBi7tUAlxSv9EofW2ALev3uczTMJwicXUgWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrDMKFaPIa5H67hSncaK8oB+yPdMB8GA1UdIwQY MBaAFMFSM69LpZEZ1v8ZTXzYZlCEpu53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMt NGI3ZjM3NWVjZDA2LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMtNGI3ZjM3NWVjZDA2 LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHS1hDHKt HbQwl1yhL4zCaLtIK9vkIEoMwhwQTPSfmUcbnMLqOaxaDZ/uO4JQglcSRlQeH5dy 7RXH1ILq7tbhRk+ldeADRkd772dX1lrhvgcNHNmVUwj7FscaGyC3x4hkixAH911n X08Ogkv6PhUqM0BMH3Kky35M/IhClvK+kZz8ZdDMkGiPCE2KG9do3PHWL3WqU+gQ N6FJSZT5yrA+gUpnL+g34IM+fXK+SpDZlElwQ6aiyzDioD0Iwb6RS4ZXZi9M9UFw juYzlIYkXJvjZm2PJeUhrjW3KjzeQZUE/evySUHiuCg1kWL+Mkuwv7N2aClNgTAr nRT4wSSZl0ZG/g== -----END CERTIFICATE-----Generated at Wed Dec 24 00:31:14 2025 by rpki-client