This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft File: wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json) Hash identifier: +C0tY3xnWKi3DQIS4a1A5cAaJDFKtZFbBMiQuS9MTbw= Subject key identifier: 2C:2E:11:4D:B2:0E:6C:F6:63:44:DD:30:E4:BD:53:41:CF:BF:36:24 Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Certificate serial: 019B465CE4F82ACB6D1B762D63F256600E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft Manifest number: 12 Signing time: Mon 22 Dec 2025 14:00:51 +0000 Manifest this update: Mon 22 Dec 2025 14:00:51 +0000 Manifest next update: Tue 23 Dec 2025 14:00:51 +0000 Files and hashes: 1: uXrBd9STFbzQ7RbY_QhW1DASaQM.roa (hash: JPg9whwqcXD7TUzimVhwfL+E/nwy9N2IPDLnzW5mDFI=) 2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: HwV1XpKfjIggZUstchGoo5Hm5+kRnWXbSO4CpL50r3s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5c:e4:f8:2a:cb:6d:1b:76:2d:63:f2:56:60:0e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Validity Not Before: Dec 22 14:00:51 2025 GMT Not After : Dec 23 14:00:51 2025 GMT Subject: CN=2c2e114db20e6cf66344dd30e4bd5341cfbf3624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e2:45:e8:9d:c2:dc:a7:6c:fe:94:4c:cc:4d: be:e4:f8:d8:80:21:98:b4:97:5f:2e:c4:27:e4:fa: b8:6c:4e:aa:1b:65:a0:0f:86:7b:9d:e7:cf:4a:93: a5:3d:ae:cb:4b:91:db:aa:62:76:92:59:6d:c2:66: 81:69:8b:40:96:3f:df:0f:53:24:f2:e5:a3:77:53: 24:e9:1b:29:13:f8:5f:93:94:a7:a8:63:80:f7:62: 04:1d:d1:10:72:80:aa:f8:25:06:03:4c:bb:0f:b1: f2:8b:eb:a8:ea:64:ef:b8:68:37:51:76:e2:8b:ff: 42:8f:13:53:09:a5:42:ef:d3:c6:f0:02:c0:3e:1b: a3:1d:52:a6:7f:62:30:47:95:8d:8a:9e:a4:92:37: de:75:cb:5c:4f:e7:eb:a1:a8:89:29:45:be:dc:aa: f2:56:8d:80:9f:53:12:b3:2f:e6:72:d0:f7:01:44: c0:dd:ee:ba:d2:95:46:c5:73:27:f8:1d:0b:71:f4: fa:82:53:53:07:7e:72:32:4a:ce:b1:c1:70:c5:f8: fd:a1:00:2e:12:4e:26:72:4f:f4:b6:2e:0e:df:2b: 00:31:3a:7c:91:41:89:06:f9:93:62:3c:d2:da:a7: 51:74:77:1c:5d:81:c7:98:a3:2a:47:fe:d9:b3:50: d6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2E:11:4D:B2:0E:6C:F6:63:44:DD:30:E4:BD:53:41:CF:BF:36:24 X509v3 Authority Key Identifier: keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7e:c3:e8:3f:76:50:55:a2:2b:43:6f:e4:bf:38:d0:d8:95: fa:53:3f:eb:4e:f5:22:04:fc:ae:02:bf:6b:c6:ac:fd:5b:e2: 6a:17:92:c3:58:f4:f7:68:a7:fd:48:23:08:d8:c7:ed:33:35: 0e:3c:ff:f0:75:39:78:d8:22:ea:97:19:cc:89:38:57:80:28: 1a:43:29:d6:46:fa:09:dd:1e:0a:55:5c:18:c9:6e:af:78:06: 33:a8:51:19:50:d4:89:e3:b7:0f:81:d1:59:1c:3c:55:76:99: 93:f5:8e:aa:70:af:20:35:bd:23:39:2c:2b:52:9a:68:f9:85: 3f:6b:c2:8a:f3:53:92:36:d5:dc:6d:cb:c6:c0:20:6b:7e:d6: b2:84:04:24:30:79:f8:0e:75:fa:4b:2a:ae:9a:d4:8e:20:6d: ca:93:4f:1f:f9:be:38:a1:5d:09:dc:84:65:8a:d4:d7:f3:81: 32:d5:a0:ed:c7:55:79:98:fd:3f:a2:2a:ca:41:9d:12:32:2d: 37:3b:0a:ba:c3:65:84:2a:ba:21:f1:09:bf:fd:90:bf:74:ec: 15:b5:49:b5:5b:22:43:a9:7b:dd:27:ec:df:7b:50:da:26:90: 28:7d:81:3a:14:33:2f:8d:6c:dd:60:dc:a8:26:d8:e0:ec:59: b1:c3:c5:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXOT4KsttG3YtY/JWYA6cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWM0NWZmYTRhMzEyNDYwYzAwZmZlZGUzMmQ0ZGM0MWZk MmY3Y2YwHhcNMjUxMjIyMTQwMDUxWhcNMjUxMjIzMTQwMDUxWjAzMTEwLwYDVQQD EygyYzJlMTE0ZGIyMGU2Y2Y2NjM0NGRkMzBlNGJkNTM0MWNmYmYzNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+JF6J3C3Kds/pRMzE2+5PjYgCGY tJdfLsQn5Pq4bE6qG2WgD4Z7nefPSpOlPa7LS5HbqmJ2klltwmaBaYtAlj/fD1Mk 8uWjd1Mk6RspE/hfk5SnqGOA92IEHdEQcoCq+CUGA0y7D7Hyi+uo6mTvuGg3UXbi i/9CjxNTCaVC79PG8ALAPhujHVKmf2IwR5WNip6kkjfedctcT+froaiJKUW+3Kry Vo2An1MSsy/mctD3AUTA3e660pVGxXMn+B0LcfT6glNTB35yMkrOscFwxfj9oQAu Ek4mck/0ti4O3ysAMTp8kUGJBvmTYjzS2qdRdHccXYHHmKMqR/7Zs1DWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwuEU2yDmz2Y0TdMOS9U0HPvzYkMB8GA1UdIwQY MBaAFMJcRf+koxJGDAD/7eMtTcQf0vfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAt NzAxOWJkYmIxMTc3LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAtNzAxOWJkYmIxMTc3 LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn7D6D92 UFWiK0Nv5L840NiV+lM/6071IgT8rgK/a8as/VviaheSw1j092in/UgjCNjH7TM1 Djz/8HU5eNgi6pcZzIk4V4AoGkMp1kb6Cd0eClVcGMlur3gGM6hRGVDUieO3D4HR WRw8VXaZk/WOqnCvIDW9IzksK1KaaPmFP2vCivNTkjbV3G3LxsAga37WsoQEJDB5 +A51+ksqrprUjiBtypNPH/m+OKFdCdyEZYrU1/OBMtWg7cdVeZj9P6IqykGdEjIt NzsKusNlhCq6IfEJv/2Qv3TsFbVJtVsiQ6l73Sfs33tQ2iaQKH2BOhQzL41s3WDc qCbY4OxZscPFGA== -----END CERTIFICATE-----Generated at Mon Dec 22 18:37:17 2025 by rpki-client