This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json) Hash identifier: 3CbKlXmU5MhrUpAbBBfQSUlxglTnFoDw93CRRfNYCBY= Subject key identifier: C7:1C:DD:FC:51:B7:2A:7E:EC:3B:73:CA:7A:3A:81:DA:8F:35:52:63 Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Certificate serial: 019B711030D30966D9613D7D78CCDB9966EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft Manifest number: 1641 Signing time: Tue 30 Dec 2025 21:00:44 +0000 Manifest this update: Tue 30 Dec 2025 21:00:44 +0000 Manifest next update: Wed 31 Dec 2025 21:00:44 +0000 Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=) 2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: +hDsQq9Tb0lpmmeLWTN/eOWEtijYOpkW6x+JUFiJ/2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:30:d3:09:66:d9:61:3d:7d:78:cc:db:99:66:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Validity Not Before: Dec 30 21:00:44 2025 GMT Not After : Dec 31 21:00:44 2025 GMT Subject: CN=c71cddfc51b72a7eec3b73ca7a3a81da8f355263 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f2:66:13:92:2a:04:b8:b8:7e:1a:e8:84:db: 0e:6d:23:66:81:9b:c4:67:f3:3d:33:54:a3:a6:e2: 78:e8:ab:f3:2e:6c:fa:fe:4c:72:22:d6:79:87:19: 61:de:21:2c:ba:67:75:ed:8e:03:a1:8b:35:22:c5: 19:31:bf:1e:85:86:2f:eb:c3:6c:b8:56:a7:32:9b: af:51:1e:6c:be:38:32:2b:dd:00:93:f9:f1:21:26: b0:92:0d:e5:14:d7:05:b4:5f:bd:ee:b8:f2:39:48: 1e:6f:ff:88:54:ba:14:af:8f:32:a3:cd:10:cd:8d: a8:93:3f:10:ac:1b:a4:82:83:dd:6d:5b:a2:51:fd: 1c:6a:88:87:3c:7b:b0:36:46:e9:14:fc:4d:98:50: b8:1f:f0:a1:3f:dd:1e:57:19:af:f4:97:ad:31:bf: 65:c1:24:99:1e:d8:ff:b6:47:40:ba:00:33:f5:09: 7f:5c:d1:dd:b7:f0:6b:d6:19:c9:ca:bf:2c:2c:7b: b9:fe:0b:10:44:ce:ea:0d:8a:2a:80:4e:68:8a:35: cd:9d:9f:d5:b5:88:9d:1f:73:1f:f6:1d:27:96:8e: d8:e9:b3:5f:c4:a7:80:e6:ca:95:36:b4:63:9b:98: 2f:95:99:5b:67:ee:a4:df:7f:b0:57:2c:ca:61:7c: 6b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1C:DD:FC:51:B7:2A:7E:EC:3B:73:CA:7A:3A:81:DA:8F:35:52:63 X509v3 Authority Key Identifier: keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f3:e4:cc:57:04:99:70:e2:46:e9:23:f9:ce:01:8f:ba:92: 22:d7:7c:11:6d:52:e5:55:38:dc:be:66:48:19:a2:55:20:b7: 76:99:9d:e7:89:81:9e:16:c2:f5:63:48:dc:7a:16:c9:9e:1d: 65:c6:c5:97:e1:20:de:65:1f:23:f7:68:d3:9b:41:78:e4:20: cb:68:73:1b:b3:ab:cc:60:ed:7b:ce:8d:ca:41:7c:9d:bb:8d: 29:54:96:1e:a8:ad:e8:ba:ee:b8:8f:65:ce:d0:60:0e:d0:26: a8:ba:d1:4f:c9:b7:f5:af:bb:c6:db:ea:d4:c6:12:c0:9b:7b: 0d:7c:58:09:01:14:3a:72:d9:10:1b:c2:22:46:cb:31:85:74: eb:25:47:8a:79:32:dc:c2:8c:79:13:ff:7e:6e:6f:a3:2e:d7: 3f:39:aa:54:29:05:4a:27:31:28:eb:58:1f:20:7f:fa:2b:7e: 9b:58:9d:69:44:e8:7f:46:ac:ae:00:d2:84:cb:1f:8f:fc:9a: 58:81:6e:bd:be:32:31:04:d7:7a:15:16:0f:d7:74:ec:82:da: ae:20:ed:0a:44:14:de:f4:e7:df:6c:fa:8f:b8:0c:a8:ad:78: a7:7c:99:f1:02:96:df:8b:94:2e:58:d5:f9:74:c0:44:0d:e0: cc:af:21:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEDDTCWbZYT19eMzbmWbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl MGUzZTQwHhcNMjUxMjMwMjEwMDQ0WhcNMjUxMjMxMjEwMDQ0WjAzMTEwLwYDVQQD EyhjNzFjZGRmYzUxYjcyYTdlZWMzYjczY2E3YTNhODFkYThmMzU1MjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPJmE5IqBLi4fhrohNsObSNmgZvE Z/M9M1SjpuJ46KvzLmz6/kxyItZ5hxlh3iEsumd17Y4DoYs1IsUZMb8ehYYv68Ns uFanMpuvUR5svjgyK90Ak/nxISawkg3lFNcFtF+97rjyOUgeb/+IVLoUr48yo80Q zY2okz8QrBukgoPdbVuiUf0caoiHPHuwNkbpFPxNmFC4H/ChP90eVxmv9JetMb9l wSSZHtj/tkdAugAz9Ql/XNHdt/Br1hnJyr8sLHu5/gsQRM7qDYoqgE5oijXNnZ/V tYidH3Mf9h0nlo7Y6bNfxKeA5sqVNrRjm5gvlZlbZ+6k33+wVyzKYXxrVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcc3fxRtyp+7Dtzyno6gdqPNVJjMB8GA1UdIwQY MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2 LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/PkzFcE mXDiRukj+c4Bj7qSItd8EW1S5VU43L5mSBmiVSC3dpmd54mBnhbC9WNI3HoWyZ4d ZcbFl+Eg3mUfI/do05tBeOQgy2hzG7OrzGDte86NykF8nbuNKVSWHqit6LruuI9l ztBgDtAmqLrRT8m39a+7xtvq1MYSwJt7DXxYCQEUOnLZEBvCIkbLMYV06yVHinky 3MKMeRP/fm5voy7XPzmqVCkFSicxKOtYHyB/+it+m1idaUTof0asrgDShMsfj/ya WIFuvb4yMQTXehUWD9d07ILariDtCkQU3vTn32z6j7gMqK14p3yZ8QKW34uULljV +XTARA3gzK8h/g== -----END CERTIFICATE-----Generated at Wed Dec 31 07:25:25 2025 by rpki-client