This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json) Hash identifier: Aqh4qzWOycMlIGtNKrZ0DBwVPqoeTP48+C6ZTXtPQSM= Subject key identifier: DE:71:A6:19:56:F8:2F:70:8E:02:12:43:7F:8F:4D:4C:EE:51:14:AC Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef Certificate serial: 019B34C4C04B79EDA4892886019FA122ADAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft Manifest number: 09C5 Signing time: Fri 19 Dec 2025 04:01:08 +0000 Manifest this update: Fri 19 Dec 2025 04:01:08 +0000 Manifest next update: Sat 20 Dec 2025 04:01:08 +0000 Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=) 2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: ZC+qxuJUQ3/XPVKEyj2TMLdZ7O/0RsISF+yRQ+SdcaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:c0:4b:79:ed:a4:89:28:86:01:9f:a1:22:ad:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef Validity Not Before: Dec 19 04:01:08 2025 GMT Not After : Dec 20 04:01:08 2025 GMT Subject: CN=de71a61956f82f708e0212437f8f4d4cee5114ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:c6:a6:6a:d8:43:b1:d3:ea:b4:02:5f:24: e7:97:59:b2:99:e1:8c:e8:4c:87:21:46:79:bc:1b: 01:b5:e9:9c:14:fc:19:93:be:0e:b4:8a:80:37:c9: e5:62:64:01:c2:11:53:a3:fd:90:62:69:63:dc:4c: 23:7f:01:65:0c:e6:f5:36:cc:08:bb:61:d2:dd:6c: 4a:b1:ae:96:0c:82:ff:46:a6:bc:a8:ce:ed:f3:bd: a9:74:4a:a6:ed:6c:48:f2:02:8a:da:a1:a3:ab:85: 63:12:e8:76:da:2c:2a:cb:f4:82:ab:2c:f5:dd:a7: d7:b2:65:ef:3f:a6:ce:fc:02:4d:b1:b4:81:a3:97: 9d:65:01:20:d0:7d:67:f2:07:0c:6c:4a:03:91:56: 15:ff:42:7d:6c:06:5b:ea:f6:9c:17:8c:e7:3f:53: bc:2e:c1:8f:c3:a6:9d:2d:6a:e4:9e:8b:61:26:a6: b3:68:1c:c4:3d:73:b9:07:00:4f:8c:c1:9d:5e:76: 8a:21:6a:37:b0:72:ac:ad:97:ec:0b:b8:92:70:ac: 4c:58:f8:58:ea:42:80:94:26:cb:29:9b:f0:a2:8c: 60:a4:42:d8:c3:c8:32:ec:41:99:68:e4:e5:b9:7a: 72:1b:cb:7f:51:6a:75:1d:d1:04:2f:2f:94:01:1f: 42:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:71:A6:19:56:F8:2F:70:8E:02:12:43:7F:8F:4D:4C:EE:51:14:AC X509v3 Authority Key Identifier: keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4f:4a:95:f4:b0:b7:30:fe:67:e7:0c:6a:82:a0:73:2d:86: dd:7b:35:a4:b4:84:6c:4f:cd:ff:7d:a5:99:95:a0:b8:ee:a5: 00:fe:74:32:53:05:f5:3e:d4:4b:14:71:28:d7:18:09:ae:34: 82:6f:d2:c8:ec:f5:fb:20:65:ec:31:25:78:07:25:d6:19:13: cc:bb:66:7a:25:40:63:d5:dc:40:b2:e4:65:03:73:34:30:1a: d3:40:b2:8d:25:4c:fd:79:0a:4d:42:4b:c9:e3:87:c8:4b:a1: 1d:12:7c:61:80:ac:3c:ba:31:2a:d8:f9:eb:5d:df:03:ec:af: a1:27:cb:3c:12:3a:55:1b:e1:dc:42:31:f4:9a:82:06:c3:47: 9a:c6:b4:37:a3:35:3c:d0:ea:ed:af:c7:37:4d:50:84:d5:d5: 3b:82:59:a4:a0:2b:00:35:86:4c:f1:86:49:e3:94:fe:cc:af: 0e:e7:e4:10:ac:b0:68:1b:8f:f7:a6:6e:f7:52:f2:74:97:a0: bc:a6:08:07:06:40:34:8e:85:b6:ac:16:ef:95:14:77:d8:89: 88:89:47:64:01:d4:5e:55:26:50:be:f8:5b:4d:08:7c:b2:b5: 1e:a9:54:a2:7b:f1:13:f7:97:cc:93:51:ff:09:57:5d:1a:4d: 81:d4:82:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xMBLee2kiSiGAZ+hIq2rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNWQ0NTY1NGZhNTk3ZDM1MjJlZGExNjg4MzkxOTNlYmU3 ODJlZWYwHhcNMjUxMjE5MDQwMTA4WhcNMjUxMjIwMDQwMTA4WjAzMTEwLwYDVQQD EyhkZTcxYTYxOTU2ZjgyZjcwOGUwMjEyNDM3ZjhmNGQ0Y2VlNTExNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrfGpmrYQ7HT6rQCXyTnl1mymeGM 6EyHIUZ5vBsBtemcFPwZk74OtIqAN8nlYmQBwhFTo/2QYmlj3EwjfwFlDOb1NswI u2HS3WxKsa6WDIL/Rqa8qM7t872pdEqm7WxI8gKK2qGjq4VjEuh22iwqy/SCqyz1 3afXsmXvP6bO/AJNsbSBo5edZQEg0H1n8gcMbEoDkVYV/0J9bAZb6vacF4znP1O8 LsGPw6adLWrknothJqazaBzEPXO5BwBPjMGdXnaKIWo3sHKsrZfsC7iScKxMWPhY 6kKAlCbLKZvwooxgpELYw8gy7EGZaOTluXpyG8t/UWp1HdEELy+UAR9CTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5xphlW+C9wjgISQ3+PTUzuURSsMB8GA1UdIwQY MBaAFFpdRWVPpZfTUi7aFog5GT6+eC7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzIt Yzk2NDBkMjUwYWZjLzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzItYzk2NDBkMjUwYWZj LzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApE9KlfSw tzD+Z+cMaoKgcy2G3Xs1pLSEbE/N/32lmZWguO6lAP50MlMF9T7USxRxKNcYCa40 gm/SyOz1+yBl7DEleAcl1hkTzLtmeiVAY9XcQLLkZQNzNDAa00CyjSVM/XkKTUJL yeOHyEuhHRJ8YYCsPLoxKtj5613fA+yvoSfLPBI6VRvh3EIx9JqCBsNHmsa0N6M1 PNDq7a/HN01QhNXVO4JZpKArADWGTPGGSeOU/syvDufkEKywaBuP96Zu91LydJeg vKYIBwZANI6FtqwW75UUd9iJiIlHZAHUXlUmUL74W00IfLK1HqlUonvxE/eXzJNR /wlXXRpNgdSCyQ== -----END CERTIFICATE-----Generated at Fri Dec 19 09:41:45 2025 by rpki-client