This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft File: WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json) Hash identifier: wUy9P9f/vfAbeg6y2cOX+0Eh8ovPPRAfpYHfHRv+UNY= Subject key identifier: A2:07:25:28:E8:F7:1D:FB:12:9D:AE:2F:6D:4F:C4:9A:F0:E8:D4:3A Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04 Certificate issuer: /CN=593897174f967490dbf6189d479df2c9371bf404 Certificate serial: 019B3C7E1E5442F186DCAB8FC1801A773596 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft Manifest number: 109C Signing time: Sat 20 Dec 2025 16:00:56 +0000 Manifest this update: Sat 20 Dec 2025 16:00:56 +0000 Manifest next update: Sun 21 Dec 2025 16:00:56 +0000 Files and hashes: 1: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=) 2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: eHdIqYQbWOdcTVZzUB+0CCSPaQmavFIOoxflh/arC4w=) 3: g-54cvk5hO2Au4tfyjhzhnHoH90.roa (hash: Q49mbpUpWnr28zAxYWF00PO3wsoqtVE5pDkqJmiOpho=) 4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=) 5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:1e:54:42:f1:86:dc:ab:8f:c1:80:1a:77:35:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=593897174f967490dbf6189d479df2c9371bf404 Validity Not Before: Dec 20 16:00:56 2025 GMT Not After : Dec 21 16:00:56 2025 GMT Subject: CN=a2072528e8f71dfb129dae2f6d4fc49af0e8d43a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:90:8a:32:8d:a5:8b:1c:5c:20:16:bb:75:55: f6:bf:23:2c:c5:e9:6e:c9:d8:09:e4:42:9a:38:1a: c9:98:42:ba:bb:9e:aa:74:a8:32:34:24:6a:23:7c: 1e:e3:5d:4b:03:c6:68:9b:81:65:d5:05:67:09:81: 48:81:45:eb:b3:5b:94:a0:d3:83:76:81:d2:89:bf: da:ff:e2:07:ff:d0:6b:78:d4:fa:ab:c9:ad:72:77: 36:83:a9:68:92:8f:f7:37:26:da:dc:d9:69:62:77: cb:c1:d7:61:ff:19:66:d0:c4:30:26:92:66:80:77: 3f:73:6d:34:00:83:25:5f:e8:d9:22:5e:17:00:4e: 61:b3:23:63:2e:85:a1:bb:e1:32:40:66:e7:cf:0b: a3:11:02:a1:50:91:17:ff:fd:72:f1:a9:85:44:97: 20:9b:5b:ad:57:19:84:17:2e:a5:32:29:99:f1:e4: af:fd:92:0c:eb:f4:ec:48:76:c1:55:b1:65:91:3e: 4e:7e:19:27:9b:cb:b3:82:44:42:77:1a:40:fb:dd: 13:f0:1a:a4:1f:69:ac:52:59:fd:33:a4:34:82:d3: d6:77:42:e8:33:d0:a5:71:bf:ba:49:fb:06:0e:0d: d4:94:32:14:cb:0b:a5:cb:3f:c3:ee:83:da:a5:9a: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:07:25:28:E8:F7:1D:FB:12:9D:AE:2F:6D:4F:C4:9A:F0:E8:D4:3A X509v3 Authority Key Identifier: keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9d:ab:1d:05:bd:68:20:fa:be:cb:85:43:2c:fd:24:bc:47: 30:3f:01:1f:46:2c:1f:fb:52:aa:ec:66:61:75:3f:bf:a3:63: fc:c9:27:e1:90:0d:9a:f2:f6:e4:da:4f:08:13:73:11:99:ca: 8f:72:76:7d:b6:78:13:97:0a:e3:a3:2e:b7:ec:80:b9:f2:03: af:85:b3:f8:28:6e:79:4e:30:4f:18:12:61:23:a7:26:79:96: d0:73:09:9a:74:41:3a:78:ed:a9:5d:72:fa:fb:27:0c:7e:af: d8:0f:ed:f9:a4:8a:1e:21:cc:1a:bd:7b:cc:b5:ba:a2:20:f3: 76:fb:4d:7b:f8:a1:17:58:77:da:f1:67:96:c1:8c:98:36:2f: c2:bd:49:06:5d:73:1b:a8:5a:0b:2c:5f:d6:0d:ec:d5:53:94: 41:95:b7:a8:f1:96:6b:44:52:e9:1f:6f:09:8d:a0:55:49:08: 6f:79:38:b5:21:9d:ce:97:7e:cc:5e:1b:e1:38:71:27:e8:57: 5a:f2:8f:21:10:0f:4e:60:98:1a:72:09:fe:f9:5d:08:14:fe: f2:88:3a:66:0b:6b:67:78:17:f3:5f:96:99:17:72:72:4e:61: d7:3d:45:ef:a6:d5:e5:1f:98:04:52:ca:ba:f1:bf:a1:73:21: 38:55:cd:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fh5UQvGG3KuPwYAadzWWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Mzg5NzE3NGY5Njc0OTBkYmY2MTg5ZDQ3OWRmMmM5Mzcx YmY0MDQwHhcNMjUxMjIwMTYwMDU2WhcNMjUxMjIxMTYwMDU2WjAzMTEwLwYDVQQD EyhhMjA3MjUyOGU4ZjcxZGZiMTI5ZGFlMmY2ZDRmYzQ5YWYwZThkNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5CKMo2lixxcIBa7dVX2vyMsxelu ydgJ5EKaOBrJmEK6u56qdKgyNCRqI3we411LA8Zom4Fl1QVnCYFIgUXrs1uUoNOD doHSib/a/+IH/9BreNT6q8mtcnc2g6loko/3Nyba3NlpYnfLwddh/xlm0MQwJpJm gHc/c200AIMlX+jZIl4XAE5hsyNjLoWhu+EyQGbnzwujEQKhUJEX//1y8amFRJcg m1utVxmEFy6lMimZ8eSv/ZIM6/TsSHbBVbFlkT5Ofhknm8uzgkRCdxpA+90T8Bqk H2msUln9M6Q0gtPWd0LoM9Clcb+6SfsGDg3UlDIUywulyz/D7oPapZr2uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIHJSjo9x37Ep2uL21PxJrw6NQ6MB8GA1UdIwQY MBaAFFk4lxdPlnSQ2/YYnUed8sk3G/QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTIt NWY4ZmM3MDc4MzZhLzEvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kY2Y5NzYtMDA3ZC00NTQyLWIwZTItNWY4ZmM3MDc4MzZh LzEvV1RpWEYwLVdkSkRiOWhpZFI1M3l5VGNiOUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ2rHQW9 aCD6vsuFQyz9JLxHMD8BH0YsH/tSquxmYXU/v6Nj/Mkn4ZANmvL25NpPCBNzEZnK j3J2fbZ4E5cK46Mut+yAufIDr4Wz+ChueU4wTxgSYSOnJnmW0HMJmnRBOnjtqV1y +vsnDH6v2A/t+aSKHiHMGr17zLW6oiDzdvtNe/ihF1h32vFnlsGMmDYvwr1JBl1z G6haCyxf1g3s1VOUQZW3qPGWa0RS6R9vCY2gVUkIb3k4tSGdzpd+zF4b4ThxJ+hX WvKPIRAPTmCYGnIJ/vldCBT+8og6ZgtrZ3gX81+WmRdyck5h1z1F76bV5R+YBFLK uvG/oXMhOFXN8A== -----END CERTIFICATE-----Generated at Sat Dec 20 19:51:11 2025 by rpki-client