This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json) Hash identifier: Gft3N1KDQCrzqAYWh51otbzpdcM6c+pkPjN5MrX1tV8= Subject key identifier: B7:6F:B9:F1:89:EE:91:D9:BF:C3:A2:4F:B6:65:D7:92:57:ED:BC:D6 Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188 Certificate serial: 019B4E84DB88F8F7DECA7C70FD0BC50A4331 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft Manifest number: 1700 Signing time: Wed 24 Dec 2025 04:01:28 +0000 Manifest this update: Wed 24 Dec 2025 04:01:28 +0000 Manifest next update: Thu 25 Dec 2025 04:01:28 +0000 Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: ZGoZONViHF06wPwPjGRUCtE8rKmiQ5M2e3cjh3X+C4Q=) 2: p_8FvngKjmLITizbNldEoC6LGv4.roa (hash: N/fSzmwZu/FbuI0gwUdxFYVJzK7d4SGahDnYSUc+txs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:84:db:88:f8:f7:de:ca:7c:70:fd:0b:c5:0a:43:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b3358110dadf224e719914161731df5e56c4188 Validity Not Before: Dec 24 04:01:28 2025 GMT Not After : Dec 25 04:01:28 2025 GMT Subject: CN=b76fb9f189ee91d9bfc3a24fb665d79257edbcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:9a:dd:32:44:ab:30:ce:89:46:45:c4:15: ba:ff:c8:69:96:18:7b:a5:e5:1b:a9:b4:2e:f3:4f: 42:51:07:5f:1b:4f:b2:8b:01:49:dd:96:ab:c9:e8: f0:13:b6:64:55:1c:c2:15:e4:69:8f:79:06:d9:28: 98:77:3d:a2:8e:ed:57:c3:d2:c4:25:aa:97:e4:9a: ed:13:1b:d5:83:bf:2c:18:f3:d5:87:b8:dd:d9:cc: 9e:4d:20:10:1b:6e:6c:51:6d:7d:15:b9:a0:54:de: 1e:7a:51:9e:fd:76:8d:2b:4e:08:7a:4d:11:78:9e: d6:73:6f:7f:f0:d9:7a:85:f0:32:62:10:b6:b3:bc: 3e:c3:35:6c:0d:03:ad:ff:43:a0:d8:a9:49:a6:8c: 3c:4e:ee:8c:fa:8e:eb:d0:33:ed:9d:73:08:ea:db: b9:dd:1a:e6:06:ea:e1:0d:d5:b7:c7:a3:14:db:2c: 83:f9:3c:65:c2:08:a3:4b:3b:d5:9c:34:b2:9e:3f: 6f:26:44:38:1c:27:ca:a7:78:70:18:1d:64:1d:ac: 17:00:25:76:98:85:5a:fb:52:9e:ba:e3:7d:5f:15: 4c:53:f1:bb:af:50:21:b7:60:95:87:64:67:70:cb: e6:ed:ff:ce:f0:53:7c:e5:7b:45:82:1e:9a:82:55: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6F:B9:F1:89:EE:91:D9:BF:C3:A2:4F:B6:65:D7:92:57:ED:BC:D6 X509v3 Authority Key Identifier: keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:34:35:fa:b4:07:ff:ae:a3:a9:af:ec:57:b6:5f:9a:5b:44: eb:3a:5c:13:e4:3e:9d:fe:a1:f5:34:92:30:ea:92:d3:96:99: c4:0f:85:48:0c:df:f2:ec:7e:8f:87:58:c7:07:e6:97:1d:22: 44:ad:ba:64:67:fc:fa:65:3c:6b:3b:4c:59:44:de:be:f5:b6: 2e:56:78:0b:0d:48:17:b6:fc:b6:1d:3c:5b:08:45:f7:67:e2: 64:c3:88:d2:a8:cb:da:c9:fe:d3:ff:38:83:ae:4a:8f:8d:2a: f8:0f:c2:8b:8d:4d:e5:78:ae:9e:c4:37:e4:ed:9b:4f:ed:5d: 0d:7d:45:c4:7f:91:58:c7:17:cc:d5:23:1c:02:98:62:07:3e: c0:77:64:c8:17:e7:e9:62:43:8a:ef:de:ba:a6:77:19:af:8e: 74:7a:cf:d9:6d:b6:5a:26:22:71:67:e8:b2:9b:24:63:0f:8f: f2:ee:87:30:97:52:61:81:75:a4:8e:05:25:46:fb:18:e8:75: c0:2b:26:5a:d9:38:bb:21:6f:a7:20:02:e3:da:de:75:49:e1: 55:5b:16:16:d0:f5:34:b2:09:89:06:d4:e0:26:c5:62:5a:6a: 0e:41:6f:53:dd:b6:2b:72:9d:de:dc:40:a8:b2:1c:f6:f9:a1: 03:32:bf:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOhNuI+Pfeynxw/QvFCkMxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2 YzQxODgwHhcNMjUxMjI0MDQwMTI4WhcNMjUxMjI1MDQwMTI4WjAzMTEwLwYDVQQD EyhiNzZmYjlmMTg5ZWU5MWQ5YmZjM2EyNGZiNjY1ZDc5MjU3ZWRiY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXGa3TJEqzDOiUZFxBW6/8hplhh7 peUbqbQu809CUQdfG0+yiwFJ3ZaryejwE7ZkVRzCFeRpj3kG2SiYdz2iju1Xw9LE JaqX5JrtExvVg78sGPPVh7jd2cyeTSAQG25sUW19FbmgVN4eelGe/XaNK04Iek0R eJ7Wc29/8Nl6hfAyYhC2s7w+wzVsDQOt/0Og2KlJpow8Tu6M+o7r0DPtnXMI6tu5 3RrmBurhDdW3x6MU2yyD+TxlwgijSzvVnDSynj9vJkQ4HCfKp3hwGB1kHawXACV2 mIVa+1KeuuN9XxVMU/G7r1Aht2CVh2RncMvm7f/O8FN85XtFgh6aglUl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLdvufGJ7pHZv8OiT7Zl15JX7bzWMB8GA1UdIwQY MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAETQ1+rQH /66jqa/sV7ZfmltE6zpcE+Q+nf6h9TSSMOqS05aZxA+FSAzf8ux+j4dYxwfmlx0i RK26ZGf8+mU8aztMWUTevvW2LlZ4Cw1IF7b8th08WwhF92fiZMOI0qjL2sn+0/84 g65Kj40q+A/Ci41N5XiunsQ35O2bT+1dDX1FxH+RWMcXzNUjHAKYYgc+wHdkyBfn 6WJDiu/euqZ3Ga+OdHrP2W22WiYicWfospskYw+P8u6HMJdSYYF1pI4FJUb7GOh1 wCsmWtk4uyFvpyAC49redUnhVVsWFtD1NLIJiQbU4CbFYlpqDkFvU922K3Kd3txA qLIc9vmhAzK/GA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:31:13 2025 by rpki-client