This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json) Hash identifier: DCfw4zVYG4eg/cN5am9VNvnUa9lKRJmm34zx6KvQTyM= Subject key identifier: 91:52:5D:DA:EA:90:41:90:8B:25:10:C1:E8:90:1B:77:08:30:2E:66 Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1 Certificate serial: 019B4136FA8A4649E7C7BCF68411B70DA161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft Manifest number: 05A8 Signing time: Sun 21 Dec 2025 14:01:20 +0000 Manifest this update: Sun 21 Dec 2025 14:01:20 +0000 Manifest next update: Mon 22 Dec 2025 14:01:20 +0000 Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=) 2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: Wig6Bv7PEa7fjjFL2E6QAuyIwLEEYXSrdTwZCdOOOvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:fa:8a:46:49:e7:c7:bc:f6:84:11:b7:0d:a1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1 Validity Not Before: Dec 21 14:01:20 2025 GMT Not After : Dec 22 14:01:20 2025 GMT Subject: CN=91525ddaea9041908b2510c1e8901b7708302e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:c5:1c:cf:83:ac:8f:55:a7:b1:b0:09:49: 9f:d0:62:22:ee:de:24:41:20:72:c3:22:bf:8f:3f: 4c:24:b4:bb:98:88:4c:35:4e:07:15:38:0b:64:55: 18:b0:e0:04:3d:fa:99:55:93:9a:7f:09:5d:4c:c6: ff:92:87:ca:56:e9:6f:85:87:70:49:30:6d:f0:e9: 1f:08:fb:ff:79:12:13:0f:8f:5c:cc:99:5d:50:0a: 0e:58:31:14:df:43:76:6b:de:dd:77:59:88:01:e4: ae:df:a9:30:4d:0a:a5:4c:2f:88:34:e1:3b:54:36: 2a:a4:4d:ec:47:69:cb:11:41:51:c6:bf:c0:5f:c7: 03:68:87:d2:95:1a:fa:3e:a2:64:1e:70:2c:d6:96: e2:ca:a0:ff:99:b2:48:8d:bb:89:31:60:4f:d3:53: 7f:31:70:03:25:09:dc:fa:3f:32:f6:25:45:02:7d: 7b:77:70:d6:62:98:da:de:3c:14:8b:74:45:99:bc: 9e:f9:39:08:11:65:38:6f:38:05:91:c8:6e:a4:fa: b5:b8:1d:ab:7f:e9:78:e0:2f:29:61:3c:98:4b:0b: 5b:77:fa:4f:ba:b9:ee:72:bb:5f:5b:32:a4:dc:4a: dc:0b:87:00:75:68:68:ab:c1:f5:44:0b:56:82:9b: e7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:52:5D:DA:EA:90:41:90:8B:25:10:C1:E8:90:1B:77:08:30:2E:66 X509v3 Authority Key Identifier: keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:ae:f4:af:92:40:11:c4:50:6a:7f:ad:81:02:fd:6d:45:ad: ee:3d:13:98:40:17:ed:86:e1:54:84:24:91:a0:d2:60:73:18: 50:bf:dc:d7:6b:99:6f:05:08:16:5e:cc:3f:85:59:3f:15:ad: 9d:c9:c7:7a:db:d3:62:bb:a8:fa:1f:35:dc:39:06:a9:3f:a5: 33:b4:6a:e3:44:21:1f:fa:72:42:57:3b:b5:ef:df:e2:0e:c1: c2:21:c2:68:26:91:69:fa:a9:1e:c1:99:fc:08:0d:08:0f:85: 58:af:54:93:da:d4:81:53:67:c8:39:2f:f2:0d:50:88:81:a4: e0:1b:7d:6c:1b:44:fc:05:e4:32:aa:29:fc:4f:ad:58:ba:78: ac:ab:d8:4c:97:1d:d5:70:01:b2:40:f2:18:54:d6:d3:50:bf: d0:e6:d4:04:2b:77:73:01:90:6a:e8:49:40:51:56:d7:b8:f3: cf:25:f7:24:e7:00:57:f2:f3:59:1e:f3:f7:94:0e:c9:e0:ab: 07:bf:47:25:1c:57:a9:ae:e4:a8:af:9d:50:a0:79:f1:77:be: a9:50:9b:27:bb:a7:b6:91:bd:18:c1:e0:81:97:fb:83:f1:16: 65:31:c6:44:38:7a:65:dc:ff:d0:ef:cd:32:40:0a:8c:b1:a4: 15:de:86:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNvqKRknnx7z2hBG3DaFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5 NmEwZjEwHhcNMjUxMjIxMTQwMTIwWhcNMjUxMjIyMTQwMTIwWjAzMTEwLwYDVQQD Eyg5MTUyNWRkYWVhOTA0MTkwOGIyNTEwYzFlODkwMWI3NzA4MzAyZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS7FHM+DrI9Vp7GwCUmf0GIi7t4k QSBywyK/jz9MJLS7mIhMNU4HFTgLZFUYsOAEPfqZVZOafwldTMb/kofKVulvhYdw STBt8OkfCPv/eRITD49czJldUAoOWDEU30N2a97dd1mIAeSu36kwTQqlTC+INOE7 VDYqpE3sR2nLEUFRxr/AX8cDaIfSlRr6PqJkHnAs1pbiyqD/mbJIjbuJMWBP01N/ MXADJQnc+j8y9iVFAn17d3DWYpja3jwUi3RFmbye+TkIEWU4bzgFkchupPq1uB2r f+l44C8pYTyYSwtbd/pPurnucrtfWzKk3ErcC4cAdWhoq8H1RAtWgpvn6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFSXdrqkEGQiyUQweiQG3cIMC5mMB8GA1UdIwQY MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhK70r5JA EcRQan+tgQL9bUWt7j0TmEAX7YbhVIQkkaDSYHMYUL/c12uZbwUIFl7MP4VZPxWt ncnHetvTYruo+h813DkGqT+lM7Rq40QhH/pyQlc7te/f4g7BwiHCaCaRafqpHsGZ /AgNCA+FWK9Uk9rUgVNnyDkv8g1QiIGk4Bt9bBtE/AXkMqop/E+tWLp4rKvYTJcd 1XABskDyGFTW01C/0ObUBCt3cwGQauhJQFFW17jzzyX3JOcAV/LzWR7z95QOyeCr B79HJRxXqa7kqK+dUKB58Xe+qVCbJ7untpG9GMHggZf7g/EWZTHGRDh6Zdz/0O/N MkAKjLGkFd6G+A== -----END CERTIFICATE-----Generated at Sun Dec 21 15:48:47 2025 by rpki-client