This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json) Hash identifier: aHJS2q40y2hcK0x0f89uJN+gQEObwd8TFMcfgxqvgTQ= Subject key identifier: 2C:79:67:B2:14:F5:0F:CA:8D:08:0E:3C:4B:3E:6D:A9:CC:8B:FD:EA Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188 Certificate serial: 019B42EE1DF3AFA3207DB8CD53E1B2D0A66B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft Manifest number: 16FA Signing time: Sun 21 Dec 2025 22:00:59 +0000 Manifest this update: Sun 21 Dec 2025 22:00:59 +0000 Manifest next update: Mon 22 Dec 2025 22:00:59 +0000 Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: 4ge9an68kDRMXjc2I4mRjx63lH3kV9ZMXNhVy8WP8NY=) 2: p_8FvngKjmLITizbNldEoC6LGv4.roa (hash: N/fSzmwZu/FbuI0gwUdxFYVJzK7d4SGahDnYSUc+txs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:1d:f3:af:a3:20:7d:b8:cd:53:e1:b2:d0:a6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b3358110dadf224e719914161731df5e56c4188 Validity Not Before: Dec 21 22:00:59 2025 GMT Not After : Dec 22 22:00:59 2025 GMT Subject: CN=2c7967b214f50fca8d080e3c4b3e6da9cc8bfdea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:b4:f6:96:dc:e7:42:0f:04:6a:33:e5:88: 4f:ba:cf:16:e2:f5:59:86:05:54:87:f3:33:86:ec: 51:01:42:eb:ba:d3:18:7e:02:87:a0:2d:a6:95:ae: 1b:28:88:bb:2a:0f:56:6f:01:f1:cc:3d:5d:0b:b0: 89:76:fd:af:56:5f:20:ce:bc:f1:af:40:e5:e5:5f: db:73:af:aa:d6:4a:8e:f7:4a:e5:e1:2b:68:22:a3: 81:7a:90:9e:b5:c7:c4:b9:b2:bd:34:1d:b0:45:df: 0c:3c:0a:ab:25:54:13:2a:84:ff:1b:35:34:98:d5: 52:53:1c:08:da:f6:66:d1:21:ef:de:1d:24:bc:28: bb:71:58:39:e5:24:94:d2:5d:1a:fd:4d:88:9d:49: 46:5e:c2:eb:13:06:18:d3:b2:73:4f:98:77:88:3e: ef:4f:e8:ee:a2:35:8d:11:a7:b9:41:39:c6:c0:5a: ae:df:19:e5:0d:49:82:34:0f:ed:a7:a4:e8:ef:d7: bb:7e:be:3a:24:de:3d:d9:1e:b3:d1:e6:ab:a7:4d: 54:98:12:23:16:02:74:cc:89:1b:d5:94:36:fe:33: 9b:70:53:78:85:94:b2:2c:aa:de:43:73:9d:e9:4e: d5:94:45:ea:f9:41:dd:02:88:51:44:6a:ba:d6:91: 8e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:79:67:B2:14:F5:0F:CA:8D:08:0E:3C:4B:3E:6D:A9:CC:8B:FD:EA X509v3 Authority Key Identifier: keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:dd:e4:74:6a:a7:5f:2f:39:ca:59:6b:cd:3f:0e:bc:4f:0c: 9b:19:8b:6d:bc:f0:3f:c9:1d:41:be:f7:53:29:3f:67:12:32: 47:a1:63:2e:4f:28:df:22:a2:e3:38:cf:f8:71:20:ab:51:d0: f7:97:05:c7:40:30:a9:f6:d2:5c:a3:e8:a5:22:81:3d:d5:92: 6e:6a:1b:ca:90:66:79:5f:75:b2:c9:18:b0:93:ef:31:bd:ae: 5d:83:1c:fc:e2:5f:a2:94:e2:a1:4f:5f:75:f2:6f:e7:73:eb: 2a:8a:c9:ea:ba:e8:d0:1d:cd:2a:b3:44:9c:83:ce:70:91:d4: bc:1c:9a:01:f5:69:ec:24:eb:02:d9:04:63:cc:1c:df:eb:d6: a6:ff:45:cd:32:81:19:7e:9e:79:c4:29:ad:cf:f6:cb:f9:56: f2:73:a9:6a:97:dd:1c:26:46:54:b1:49:d9:35:35:c8:5d:6f: 62:77:eb:43:fa:5e:78:e4:95:3d:38:16:fa:db:27:9e:e9:29: 35:52:8d:4e:1a:64:8f:70:8e:2d:f6:ad:71:0c:ab:ea:43:8a: e7:9b:6d:64:88:e1:1a:eb:a4:5e:fe:a0:d1:0f:04:14:69:9e: ec:c5:71:04:90:c3:4b:b3:92:94:b4:f2:d7:f2:05:a7:c9:a8: 27:91:96:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7h3zr6MgfbjNU+Gy0KZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2 YzQxODgwHhcNMjUxMjIxMjIwMDU5WhcNMjUxMjIyMjIwMDU5WjAzMTEwLwYDVQQD EygyYzc5NjdiMjE0ZjUwZmNhOGQwODBlM2M0YjNlNmRhOWNjOGJmZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpy09pbc50IPBGoz5YhPus8W4vVZ hgVUh/MzhuxRAULrutMYfgKHoC2mla4bKIi7Kg9WbwHxzD1dC7CJdv2vVl8gzrzx r0Dl5V/bc6+q1kqO90rl4StoIqOBepCetcfEubK9NB2wRd8MPAqrJVQTKoT/GzU0 mNVSUxwI2vZm0SHv3h0kvCi7cVg55SSU0l0a/U2InUlGXsLrEwYY07JzT5h3iD7v T+juojWNEae5QTnGwFqu3xnlDUmCNA/tp6To79e7fr46JN492R6z0earp01UmBIj FgJ0zIkb1ZQ2/jObcFN4hZSyLKreQ3Od6U7VlEXq+UHdAohRRGq61pGO1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCx5Z7IU9Q/KjQgOPEs+banMi/3qMB8GA1UdIwQY MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZt3kdGqn Xy85yllrzT8OvE8MmxmLbbzwP8kdQb73Uyk/ZxIyR6FjLk8o3yKi4zjP+HEgq1HQ 95cFx0AwqfbSXKPopSKBPdWSbmobypBmeV91sskYsJPvMb2uXYMc/OJfopTioU9f dfJv53PrKorJ6rro0B3NKrNEnIPOcJHUvByaAfVp7CTrAtkEY8wc3+vWpv9FzTKB GX6eecQprc/2y/lW8nOpapfdHCZGVLFJ2TU1yF1vYnfrQ/peeOSVPTgW+tsnnukp NVKNThpkj3COLfatcQyr6kOK55ttZIjhGuukXv6g0Q8EFGme7MVxBJDDS7OSlLTy 1/IFp8moJ5GWcw== -----END CERTIFICATE-----Generated at Mon Dec 22 02:52:04 2025 by rpki-client