This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json) Hash identifier: 2tIhKBIpGmPPeYx8VOIYdWJlR6swr2W7VKdoJl6VJ9M= Subject key identifier: B6:05:A9:D8:F5:3F:6E:09:6C:F5:5C:31:72:07:8B:D9:70:CC:F0:1E Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799 Certificate serial: 019B3C10889E02BBCAB719E27A10B691CCE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:01:15 +0000 Manifest this update: Sat 20 Dec 2025 14:01:15 +0000 Manifest next update: Sun 21 Dec 2025 14:01:15 +0000 Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=) 2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: 9CgklVk3FQekJpYSd5sgqxq79ouws5ceisuUVNdXHXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:88:9e:02:bb:ca:b7:19:e2:7a:10:b6:91:cc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799 Validity Not Before: Dec 20 14:01:15 2025 GMT Not After : Dec 21 14:01:15 2025 GMT Subject: CN=b605a9d8f53f6e096cf55c3172078bd970ccf01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5d:8b:9a:6f:ad:2e:25:c1:06:dc:9c:ba:97: 88:c7:42:ac:b7:e0:40:41:1c:e7:2d:b0:7e:03:ec: 2c:a2:05:d2:37:82:fa:32:d0:30:d5:1a:cd:88:38: 0f:ca:50:49:80:5b:3d:05:7d:67:db:ff:1d:ce:3b: 61:9f:0a:9e:7d:6e:a7:7e:ae:f8:b2:2a:dd:fe:97: 2b:b2:bd:68:4c:f8:d2:a4:f5:67:ff:53:85:19:3a: 11:b1:c3:fa:89:df:c0:4c:1a:6a:b8:cd:a5:0a:d0: 30:4a:29:6b:14:3e:72:86:c5:fd:7a:bb:24:92:01: cb:b8:58:2d:3d:7f:9a:da:0d:b2:73:34:e7:e3:a8: 1c:55:45:f2:7b:72:68:84:7d:87:1b:47:9d:24:bf: c9:b7:a9:78:a4:58:2e:fd:b0:74:65:14:91:9a:e5: 8f:9d:b3:50:83:f0:4f:c7:2f:b1:ef:28:52:bc:9b: 66:50:63:03:fe:a6:98:e2:06:bf:6e:00:fe:6b:29: 77:df:44:a3:81:4a:0a:33:24:4f:b1:c8:f8:d3:60: a1:44:09:c5:96:fc:55:a3:64:aa:a3:55:38:8f:82: 89:e4:2b:e5:52:9a:ab:30:54:0a:72:b3:e8:62:e4: 64:fa:06:07:1f:e4:34:ea:c5:50:b1:85:c6:36:60: b4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:05:A9:D8:F5:3F:6E:09:6C:F5:5C:31:72:07:8B:D9:70:CC:F0:1E X509v3 Authority Key Identifier: keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:ac:3e:15:6a:dc:97:f7:10:d5:25:66:03:c0:61:b6:2d:22: 4c:d1:ea:eb:06:e3:0e:b9:9f:73:69:d4:09:27:b1:33:26:79: 22:22:33:ca:84:27:a4:07:50:b7:64:ef:da:42:cb:f5:10:40: 81:25:da:0a:e7:0b:ba:22:4a:c7:8b:54:d5:99:70:ac:52:fc: 69:32:f6:dd:45:79:37:3e:d6:d0:20:6c:76:68:63:21:5d:43: ac:af:f0:88:64:a2:b7:c6:97:d2:54:0f:a4:af:35:69:00:2f: 79:fa:41:e6:d9:ff:3a:38:c7:2a:26:34:a0:fa:b5:44:a1:43: 48:f7:d2:3b:4b:78:e8:39:39:89:f6:84:a6:db:2a:43:08:1d: 24:f0:46:c2:2b:a4:4f:78:72:a4:4b:ca:55:4c:de:36:73:ec: 56:69:63:db:10:7d:18:c7:b7:a3:c3:fe:8c:d3:1a:e2:5a:79: be:14:0c:2a:0d:c1:9c:12:0f:e5:78:69:86:b6:79:d1:11:55: 36:e8:36:4f:d0:11:63:2e:c9:ea:23:25:c7:87:22:7f:56:12: c7:11:3b:7e:33:a1:c1:4b:9c:e6:55:f8:55:2e:cd:cd:67:a4: 62:81:2b:2e:58:77:b0:2f:ef:fb:79:23:99:a5:92:fc:a5:4b: 6f:d1:03:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EIieArvKtxniehC2kczhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl NTA3OTkwHhcNMjUxMjIwMTQwMTE1WhcNMjUxMjIxMTQwMTE1WjAzMTEwLwYDVQQD EyhiNjA1YTlkOGY1M2Y2ZTA5NmNmNTVjMzE3MjA3OGJkOTcwY2NmMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF2Lmm+tLiXBBtycupeIx0Kst+BA QRznLbB+A+wsogXSN4L6MtAw1RrNiDgPylBJgFs9BX1n2/8dzjthnwqefW6nfq74 sird/pcrsr1oTPjSpPVn/1OFGToRscP6id/ATBpquM2lCtAwSilrFD5yhsX9ersk kgHLuFgtPX+a2g2yczTn46gcVUXye3JohH2HG0edJL/Jt6l4pFgu/bB0ZRSRmuWP nbNQg/BPxy+x7yhSvJtmUGMD/qaY4ga/bgD+ayl330SjgUoKMyRPscj402ChRAnF lvxVo2Sqo1U4j4KJ5CvlUpqrMFQKcrPoYuRk+gYHH+Q06sVQsYXGNmC0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYFqdj1P24JbPVcMXIHi9lwzPAeMB8GA1UdIwQY MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqw+FWrc l/cQ1SVmA8Bhti0iTNHq6wbjDrmfc2nUCSexMyZ5IiIzyoQnpAdQt2Tv2kLL9RBA gSXaCucLuiJKx4tU1ZlwrFL8aTL23UV5Nz7W0CBsdmhjIV1DrK/wiGSit8aX0lQP pK81aQAvefpB5tn/OjjHKiY0oPq1RKFDSPfSO0t46Dk5ifaEptsqQwgdJPBGwiuk T3hypEvKVUzeNnPsVmlj2xB9GMe3o8P+jNMa4lp5vhQMKg3BnBIP5XhphrZ50RFV Nug2T9ARYy7J6iMlx4cif1YSxxE7fjOhwUuc5lX4VS7NzWekYoErLlh3sC/v+3kj maWS/KVLb9ED6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 17:51:30 2025 by rpki-client