This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft File: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json) Hash identifier: FtztgkZoXx9eG21grP3UXf2mnrycUH3T8eVcue1zN9w= Subject key identifier: B4:0D:00:C6:E3:41:55:64:02:D2:9E:6C:99:2D:9C:7B:E3:EB:8A:56 Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E Certificate issuer: /CN=c115b327e84761685022f47328d6f4cbd6d3041e Certificate serial: 019B3D599E4B0E36E46B8CDCC57F608CC5A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft Manifest number: 1544 Signing time: Sat 20 Dec 2025 20:00:41 +0000 Manifest this update: Sat 20 Dec 2025 20:00:41 +0000 Manifest next update: Sun 21 Dec 2025 20:00:41 +0000 Files and hashes: 1: IIaW89ZzFdGKWt-qkretRuZFhUw.roa (hash: +wV4CyXS7FosexYu6VMQZY2Kh9jsLDP8nTTtEBowsxI=) 2: hKI1gIRkFSpeDRxr6Gy5U-0E8bg.roa (hash: wtwNxYOC1NaLQTBIVmgD52Go7NqEorx1g4IWXnECaeA=) 3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: caz4bPABocMdc9lnVwmMUndiczlW+BwD1eCIP0zEGFo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:9e:4b:0e:36:e4:6b:8c:dc:c5:7f:60:8c:c5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e Validity Not Before: Dec 20 20:00:41 2025 GMT Not After : Dec 21 20:00:41 2025 GMT Subject: CN=b40d00c6e341556402d29e6c992d9c7be3eb8a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:74:8a:4c:a9:1d:38:2b:21:38:42:1a:d3:98: 31:1b:cd:d9:66:fc:f6:6d:d5:b4:25:b6:ff:8c:3d: f7:49:bc:3b:af:45:fa:09:7b:78:c2:e4:97:0f:9f: c2:e0:45:7c:98:1a:5a:f9:05:c8:bc:23:e0:99:f8: 46:eb:9c:d2:c4:d4:29:87:d4:70:ee:e9:f4:f5:e8: 1e:27:16:ad:4a:01:8a:9d:a9:88:02:ee:33:45:43: 4c:41:76:e1:02:6b:a7:eb:46:72:8d:ce:f8:19:74: 17:5f:65:a8:78:c1:98:ff:42:b2:75:0c:34:c4:3d: 0d:33:ce:07:20:57:6c:04:5f:d3:51:39:14:fa:af: fb:ce:43:e8:9b:78:63:4a:1b:82:cb:f1:34:d2:60: b1:65:35:19:71:31:e6:46:1e:6a:a2:0d:3c:9a:b8: 58:45:39:94:06:eb:da:7c:7b:2f:71:91:44:7d:f9: 0c:37:c2:1d:5a:f0:a0:aa:ac:8f:ca:9a:5f:a1:0e: 3c:fa:05:d0:84:80:aa:71:74:3e:f6:54:83:ce:0c: d0:ed:bf:71:6f:3c:ec:ff:c2:41:37:3c:7d:06:7c: 60:39:8d:5c:a8:9b:78:48:ce:66:18:6e:65:1e:fb: 62:6d:5c:15:10:be:51:f8:68:db:83:69:80:5b:58: 52:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0D:00:C6:E3:41:55:64:02:D2:9E:6C:99:2D:9C:7B:E3:EB:8A:56 X509v3 Authority Key Identifier: keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:05:cb:9c:bd:c7:5c:dd:e6:39:2a:c2:a1:ed:93:58:b0:00: 4c:d5:c5:79:89:09:97:4a:a5:e8:6c:5c:1d:71:f2:54:b8:34: e3:7c:d3:ea:90:22:56:df:50:a0:20:54:ad:ae:ae:5a:b5:b7: 13:0e:57:03:a2:91:5c:b9:1b:49:71:68:56:4c:de:3f:5d:a6: 26:37:9f:46:d3:5e:11:a0:66:27:a0:73:06:07:86:99:87:6b: 17:70:63:c0:89:42:05:a3:2a:c1:1d:cc:27:b9:9d:15:50:06: d0:0f:dc:a8:14:17:2e:e0:4e:31:35:76:2d:be:9e:d3:37:c8: 66:41:14:0a:26:ce:e4:dd:7b:a2:77:0b:ca:50:ce:bc:78:a8: 88:b5:5d:a3:5d:d6:9e:07:ec:c1:16:96:a4:4c:49:ee:58:ad: c9:69:84:a4:77:9d:86:ea:3f:60:40:32:a9:2e:2f:82:28:a7: 36:cf:2e:5a:f7:a9:fe:5f:50:ba:4b:de:44:c5:7c:a3:f8:04: 5b:f8:7c:88:2b:a1:aa:22:04:f1:a3:80:f6:41:9a:3c:99:f8: ee:f3:9f:86:f9:06:6f:48:49:bc:37:36:72:5d:bd:93:03:b9: 35:00:22:bf:e5:f8:19:d5:66:2c:64:cb:39:be:d6:1c:98:7f: bb:cb:df:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WZ5LDjbka4zcxX9gjMWkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMTViMzI3ZTg0NzYxNjg1MDIyZjQ3MzI4ZDZmNGNiZDZk MzA0MWUwHhcNMjUxMjIwMjAwMDQxWhcNMjUxMjIxMjAwMDQxWjAzMTEwLwYDVQQD EyhiNDBkMDBjNmUzNDE1NTY0MDJkMjllNmM5OTJkOWM3YmUzZWI4YTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHSKTKkdOCshOEIa05gxG83ZZvz2 bdW0Jbb/jD33Sbw7r0X6CXt4wuSXD5/C4EV8mBpa+QXIvCPgmfhG65zSxNQph9Rw 7un09egeJxatSgGKnamIAu4zRUNMQXbhAmun60Zyjc74GXQXX2WoeMGY/0KydQw0 xD0NM84HIFdsBF/TUTkU+q/7zkPom3hjShuCy/E00mCxZTUZcTHmRh5qog08mrhY RTmUBuvafHsvcZFEffkMN8IdWvCgqqyPyppfoQ48+gXQhICqcXQ+9lSDzgzQ7b9x bzzs/8JBNzx9BnxgOY1cqJt4SM5mGG5lHvtibVwVEL5R+Gjbg2mAW1hShwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQNAMbjQVVkAtKebJktnHvj64pWMB8GA1UdIwQY MBaAFMEVsyfoR2FoUCL0cyjW9MvW0wQeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMt MjI0ZmQ3OGVmODI3LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hNGJkZjctMjU3OS00YmQwLThhOTMtMjI0ZmQ3OGVmODI3 LzEvd1JXekotaEhZV2hRSXZSektOYjB5OWJUQkI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwXLnL3H XN3mOSrCoe2TWLAATNXFeYkJl0ql6GxcHXHyVLg043zT6pAiVt9QoCBUra6uWrW3 Ew5XA6KRXLkbSXFoVkzeP12mJjefRtNeEaBmJ6BzBgeGmYdrF3BjwIlCBaMqwR3M J7mdFVAG0A/cqBQXLuBOMTV2Lb6e0zfIZkEUCibO5N17oncLylDOvHioiLVdo13W ngfswRaWpExJ7lityWmEpHedhuo/YEAyqS4vgiinNs8uWvep/l9QukveRMV8o/gE W/h8iCuhqiIE8aOA9kGaPJn47vOfhvkGb0hJvDc2cl29kwO5NQAiv+X4GdVmLGTL Ob7WHJh/u8vfNg== -----END CERTIFICATE-----Generated at Sat Dec 20 22:46:53 2025 by rpki-client