This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft File: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft (raw, json) Hash identifier: g2G36e26CBATB9E0/J85lIDZHVFC6lrcpIfE4ZL5M1A= Subject key identifier: 36:0B:12:F8:17:6B:72:1A:0D:FD:1B:68:73:A7:E0:80:7A:0E:55:6C Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5 Certificate issuer: /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5 Certificate serial: 019B752409117D83690468607F370712FBF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft Manifest number: 17AA Signing time: Wed 31 Dec 2025 16:00:54 +0000 Manifest this update: Wed 31 Dec 2025 16:00:54 +0000 Manifest next update: Thu 01 Jan 2026 16:00:54 +0000 Files and hashes: 1: WQIOJXHFculSf7VKNcTI4G1FzB0.roa (hash: 1m31qu3p2ND5PEv0/zfE1Skv8FXpx3eh76tg/GNUGqE=) 2: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl (hash: rdiIMVKVLpkBzcXfPc8eKMVdaT1+bGLqM+1PBVngzoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:24:09:11:7d:83:69:04:68:60:7f:37:07:12:fb:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5 Validity Not Before: Dec 31 16:00:54 2025 GMT Not After : Jan 1 16:00:54 2026 GMT Subject: CN=360b12f8176b721a0dfd1b6873a7e0807a0e556c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e5:29:5b:e2:a0:9f:45:a1:93:77:6e:25:7e: aa:76:46:35:7b:ba:90:86:a9:9e:6c:bf:04:f8:13: 8a:f4:a0:88:68:3f:0e:3a:97:dc:ba:ef:6f:98:59: 4c:8b:d9:05:8e:f6:5b:4f:9c:43:90:a2:c2:86:4a: 44:fb:33:0d:03:f2:c5:ce:3d:e6:23:bc:44:ee:f6: 23:cc:d5:76:8a:b4:00:c3:e1:fc:22:a0:4e:d4:e9: 91:60:6f:17:f8:4e:31:19:d4:03:3b:29:08:b1:c2: 9f:ea:1a:e0:21:4e:21:0c:1e:43:70:81:a8:07:a9: 7a:7b:d7:ba:67:c4:d9:e1:a3:69:20:44:6d:bd:77: 5e:13:5e:b8:c9:61:bd:37:56:cf:02:cb:76:21:8f: 73:fe:f9:aa:33:4c:0c:4d:32:64:da:5c:39:d7:21: 97:98:2f:d2:84:b4:98:06:cc:13:1f:a8:58:61:bc: b3:c5:c9:b8:76:a0:51:23:b2:89:74:ee:c8:dd:eb: 4b:49:cb:87:84:aa:97:5f:49:33:78:bd:32:1f:8f: bc:dd:0a:f0:a0:79:7b:cc:b4:d7:10:f3:0b:d4:3b: 6f:c3:a0:b0:6b:1f:9d:ef:00:27:0f:b1:02:6e:d8: ff:d0:42:05:89:41:bb:06:2b:84:5d:64:2e:11:a4: 9d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:12:F8:17:6B:72:1A:0D:FD:1B:68:73:A7:E0:80:7A:0E:55:6C X509v3 Authority Key Identifier: keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f2:e2:c1:73:1a:0f:a3:be:28:16:f6:6b:d1:b0:cf:60:94: 6b:77:6d:da:fb:29:bb:34:13:c6:69:b6:88:91:f8:c9:da:9a: 03:f0:41:79:19:fc:8c:6a:e7:f6:ce:26:a2:93:2a:ca:f2:ae: fc:61:53:ad:8f:08:2d:e3:fc:0c:e5:45:61:81:37:da:42:c6: e0:3c:72:44:db:be:74:e1:60:37:da:95:bf:a1:e6:e8:62:b3: 27:62:31:10:84:fc:6b:c5:1e:dd:d7:43:28:ac:16:cc:9a:a3: d3:7a:36:15:c0:6a:42:7a:0f:27:10:12:06:b9:b4:65:db:7b: 4b:01:de:73:ce:94:db:d5:5e:27:8d:86:f5:c2:63:54:c2:d0: e6:39:d0:ad:0a:ed:c1:c0:cd:f5:e7:ad:89:86:74:ad:9f:03: 16:ad:7f:51:c5:88:4c:b1:88:5a:82:2e:c1:65:17:44:e5:57: bd:6b:f7:33:4c:71:b3:96:60:7c:b8:dd:38:b8:0e:58:f4:e0: f2:97:d7:1c:0c:ad:43:59:64:fe:94:cc:b4:53:53:1a:d7:14: c1:47:70:9f:35:73:5b:fb:4d:a0:fa:21:a0:9e:e3:42:33:65: ba:e0:30:c4:d7:f1:39:6f:ba:cc:f9:78:a5:43:13:eb:4d:36: c6:b3:0f:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1JAkRfYNpBGhgfzcHEvvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRjN2I3ZTZkZjc1Nzg0NjZkODJiNTI3MTVjYjIwOWY3 ZjIxYzUwHhcNMjUxMjMxMTYwMDU0WhcNMjYwMTAxMTYwMDU0WjAzMTEwLwYDVQQD EygzNjBiMTJmODE3NmI3MjFhMGRmZDFiNjg3M2E3ZTA4MDdhMGU1NTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OUpW+Kgn0Whk3duJX6qdkY1e7qQ hqmebL8E+BOK9KCIaD8OOpfcuu9vmFlMi9kFjvZbT5xDkKLChkpE+zMNA/LFzj3m I7xE7vYjzNV2irQAw+H8IqBO1OmRYG8X+E4xGdQDOykIscKf6hrgIU4hDB5DcIGo B6l6e9e6Z8TZ4aNpIERtvXdeE164yWG9N1bPAst2IY9z/vmqM0wMTTJk2lw51yGX mC/ShLSYBswTH6hYYbyzxcm4dqBRI7KJdO7I3etLScuHhKqXX0kzeL0yH4+83Qrw oHl7zLTXEPML1Dtvw6Cwax+d7wAnD7ECbtj/0EIFiUG7BiuEXWQuEaSd4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDYLEvgXa3IaDf0baHOn4IB6DlVsMB8GA1UdIwQY MBaAFFlUx7fm33V4Rm2CtScVyyCffyHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDVmZDAtZTY5Yi00ZTMyLWE0Mjct OGIxMDUyZmZjZjZkLzEvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lNDVmZDAtZTY5Yi00ZTMyLWE0MjctOGIxMDUyZmZjZjZk LzEvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofLiwXMa D6O+KBb2a9Gwz2CUa3dt2vspuzQTxmm2iJH4ydqaA/BBeRn8jGrn9s4mopMqyvKu /GFTrY8ILeP8DOVFYYE32kLG4DxyRNu+dOFgN9qVv6Hm6GKzJ2IxEIT8a8Ue3ddD KKwWzJqj03o2FcBqQnoPJxASBrm0Zdt7SwHec86U29VeJ42G9cJjVMLQ5jnQrQrt wcDN9eetiYZ0rZ8DFq1/UcWITLGIWoIuwWUXROVXvWv3M0xxs5ZgfLjdOLgOWPTg 8pfXHAytQ1lk/pTMtFNTGtcUwUdwnzVzW/tNoPohoJ7jQjNluuAwxNfxOW+6zPl4 pUMT6002xrMPYw== -----END CERTIFICATE-----Generated at Thu Jan 1 01:07:03 2026 by rpki-client