This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json) Hash identifier: o0pBBf8yALhSPRp0ymzrtMoPe1LLk+NVRbrfuAx5fRA= Subject key identifier: E0:8A:4C:2E:A5:FB:25:96:EA:F8:E6:56:B6:E8:85:90:9A:97:7D:71 Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Certificate serial: 019B3EDA5C99215FD502C943E3F6184DB85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft Manifest number: 1627 Signing time: Sun 21 Dec 2025 03:00:56 +0000 Manifest this update: Sun 21 Dec 2025 03:00:56 +0000 Manifest next update: Mon 22 Dec 2025 03:00:56 +0000 Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=) 2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: 8cHI2WM0Lv2Gd1G0UlmGXXhaBDLfDf0Yj7PLAscqgC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:5c:99:21:5f:d5:02:c9:43:e3:f6:18:4d:b8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Validity Not Before: Dec 21 03:00:56 2025 GMT Not After : Dec 22 03:00:56 2025 GMT Subject: CN=e08a4c2ea5fb2596eaf8e656b6e885909a977d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:48:fb:ab:4a:9e:b5:04:2d:3c:e7:aa:db:3e: 19:f9:4a:8c:01:bb:bc:24:ed:36:59:0e:db:59:2e: e3:0d:a0:e2:69:f8:a5:de:a7:3c:9e:79:a9:72:67: 4f:9b:1b:16:73:52:7c:e9:01:e7:d3:27:ab:05:02: 0e:c5:62:12:9d:6a:31:e7:66:34:c7:07:10:8e:c3: 03:cd:dc:8a:02:83:ff:ed:0d:30:22:19:78:92:ef: 4e:fb:03:e9:c6:38:39:96:f6:18:5b:db:8d:bf:46: 4c:24:43:17:18:35:f9:4a:96:1d:80:ce:92:6a:ff: e5:ab:e5:75:94:90:d7:9c:e1:ee:fa:d8:89:fc:d1: 6c:80:2b:ec:c3:57:e8:33:83:2f:0b:81:9d:74:c5: e9:9b:bf:06:21:32:cc:df:e2:43:9e:d0:b0:08:8b: ce:04:15:b2:5e:59:62:fe:1f:6f:ed:e2:27:3a:a1: 34:98:35:01:2a:ee:62:cd:66:a8:d3:6e:47:73:68: c8:4f:46:9d:eb:97:b4:3f:bb:54:06:ad:24:b0:cd: 47:1f:4f:45:06:81:31:22:21:05:a1:77:9c:2a:52: aa:0a:9e:d2:5c:d2:55:7f:db:25:8f:2d:55:4e:54: e1:30:29:be:51:62:94:a5:07:6f:f9:00:eb:37:06: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:4C:2E:A5:FB:25:96:EA:F8:E6:56:B6:E8:85:90:9A:97:7D:71 X509v3 Authority Key Identifier: keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:15:5e:b8:a5:b3:48:b7:c6:76:7a:65:2e:50:98:ad:e5:25: bb:ff:9d:de:ff:f7:69:fb:c6:97:67:77:1d:4e:a3:a5:f6:dd: 4c:85:43:02:3c:0d:61:a6:22:f4:e9:8d:88:55:df:03:cf:dc: d0:bb:b8:9a:a2:9b:f8:be:70:5a:0c:df:39:fd:dc:67:b7:09: 79:87:3b:18:0a:9e:92:ec:91:44:79:81:d1:9e:1c:d1:9c:97: 5d:c2:f4:64:5e:fb:db:e5:d1:a1:ac:f2:04:19:f2:f5:77:4c: 95:dd:a7:7a:ee:1a:be:28:7a:58:18:b7:46:36:09:43:44:af: 18:91:8f:19:cd:56:a4:fe:56:a5:18:41:7c:cd:78:78:e4:dc: b1:16:0b:cd:35:8e:11:a0:cc:09:6a:91:bb:41:db:d5:6e:d2: cc:87:64:f0:b5:43:41:90:0d:78:b3:41:ed:a1:f8:1f:d6:82: 1c:a5:5c:3e:df:9d:9b:80:fe:00:e7:81:49:6f:15:e4:e0:70: 2a:d9:c2:9f:f7:ad:24:d9:ed:4f:9f:2f:32:0e:12:68:54:77: 31:67:62:cd:93:40:d3:d5:fb:fc:71:d4:7f:a2:53:37:e7:17: a8:0e:34:13:07:9f:8f:ad:d7:36:de:ed:f0:d5:d6:2a:20:05: c6:83:29:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lyZIV/VAslD4/YYTbhdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl MGUzZTQwHhcNMjUxMjIxMDMwMDU2WhcNMjUxMjIyMDMwMDU2WjAzMTEwLwYDVQQD EyhlMDhhNGMyZWE1ZmIyNTk2ZWFmOGU2NTZiNmU4ODU5MDlhOTc3ZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkj7q0qetQQtPOeq2z4Z+UqMAbu8 JO02WQ7bWS7jDaDiafil3qc8nnmpcmdPmxsWc1J86QHn0yerBQIOxWISnWox52Y0 xwcQjsMDzdyKAoP/7Q0wIhl4ku9O+wPpxjg5lvYYW9uNv0ZMJEMXGDX5SpYdgM6S av/lq+V1lJDXnOHu+tiJ/NFsgCvsw1foM4MvC4GddMXpm78GITLM3+JDntCwCIvO BBWyXlli/h9v7eInOqE0mDUBKu5izWao025Hc2jIT0ad65e0P7tUBq0ksM1HH09F BoExIiEFoXecKlKqCp7SXNJVf9sljy1VTlThMCm+UWKUpQdv+QDrNwbzhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCKTC6l+yWW6vjmVrbohZCal31xMB8GA1UdIwQY MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2 LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARVeuKWz SLfGdnplLlCYreUlu/+d3v/3afvGl2d3HU6jpfbdTIVDAjwNYaYi9OmNiFXfA8/c 0Lu4mqKb+L5wWgzfOf3cZ7cJeYc7GAqekuyRRHmB0Z4c0ZyXXcL0ZF772+XRoazy BBny9XdMld2neu4avih6WBi3RjYJQ0SvGJGPGc1WpP5WpRhBfM14eOTcsRYLzTWO EaDMCWqRu0Hb1W7SzIdk8LVDQZANeLNB7aH4H9aCHKVcPt+dm4D+AOeBSW8V5OBw KtnCn/etJNntT58vMg4SaFR3MWdizZNA09X7/HHUf6JTN+cXqA40Ewefj63XNt7t 8NXWKiAFxoMpUA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:34:06 2025 by rpki-client