This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json) Hash identifier: OtLxE9G8pfjtCd7Jxuk/tzcc0N0SXW/e0OjP8jMtx28= Subject key identifier: DF:36:5E:07:C0:DE:B6:66:F4:EE:F2:DA:78:F4:1E:33:9E:5F:87:2F Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Certificate serial: 019B4E4DE2E7CEC66E1CAF9E64B960498667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft Manifest number: 0D91 Signing time: Wed 24 Dec 2025 03:01:25 +0000 Manifest this update: Wed 24 Dec 2025 03:01:25 +0000 Manifest next update: Thu 25 Dec 2025 03:01:25 +0000 Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=) 2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: 2jvr5wSt7srl3eTXLrrDT4HMW3j5NtbF6emVrJejMSM=) 3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:e2:e7:ce:c6:6e:1c:af:9e:64:b9:60:49:86:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Validity Not Before: Dec 24 03:01:25 2025 GMT Not After : Dec 25 03:01:25 2025 GMT Subject: CN=df365e07c0deb666f4eef2da78f41e339e5f872f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:21:aa:2b:5d:de:95:85:9a:ee:0f:d5:00:42: fe:a5:58:43:05:47:a0:2a:d0:26:5e:a8:c2:23:95: ba:92:f2:46:c7:6d:9d:cb:1a:80:6d:0e:73:b3:6b: c9:a8:69:cf:2b:0f:66:94:16:a0:a7:39:45:ea:0e: 9a:63:bb:f5:9f:ba:1c:90:e7:4d:13:fe:01:81:a9: 79:0c:51:2d:c9:3f:93:bf:51:e0:db:da:85:9a:d5: 8a:cb:90:fe:65:55:ef:fd:ec:c0:10:72:f8:6c:93: 52:32:ef:11:02:73:34:d0:79:01:b8:13:2c:7f:f4: 34:72:ba:5c:34:7b:e6:8b:04:19:b3:3b:d7:1c:44: 77:6f:33:06:6f:89:b3:80:6a:cf:e3:3d:b1:9c:5e: 92:c6:83:d6:39:57:79:96:eb:89:66:80:04:61:3b: 8a:2d:e3:d1:59:82:39:98:c6:9f:1e:89:a4:48:8c: 99:0d:14:06:7d:60:02:45:1a:b8:4c:08:1a:e3:99: bf:88:7d:a5:fa:e3:9f:7d:05:2b:f2:71:f8:f0:44: f5:75:e2:6f:56:0d:de:29:c5:c6:97:ba:36:af:5b: 51:a0:8c:18:24:13:69:90:eb:92:19:3b:49:84:57: c7:44:44:5c:19:c3:a1:ce:50:16:92:71:e7:b1:f6: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:36:5E:07:C0:DE:B6:66:F4:EE:F2:DA:78:F4:1E:33:9E:5F:87:2F X509v3 Authority Key Identifier: keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:df:d7:52:40:40:8f:4c:b1:c6:a7:d6:80:97:a2:2e:55:25: a8:38:6d:a2:fd:24:61:de:91:5d:7a:dd:c5:86:3a:36:3c:31: 78:e2:9f:9e:63:28:6f:7b:7d:db:39:8e:bc:79:81:18:bb:b2: 7e:85:c8:96:ab:48:e0:26:7d:23:53:c0:52:f6:41:96:f6:49: 14:94:c4:32:a9:27:bc:f8:a9:8b:68:b1:51:5c:90:52:d9:46: eb:d2:71:b0:57:45:d5:14:30:9e:cf:c3:0a:5a:cd:04:ea:e5: 5b:f8:3f:c5:13:f9:b3:90:f4:3e:0d:bc:b5:69:d0:7d:98:26: b1:ec:df:11:fd:bb:02:c4:e8:00:d1:e5:10:c2:25:df:80:c2: a8:91:7f:73:11:2a:45:4c:bc:bf:e9:48:c0:b6:9d:b1:28:13: 12:96:65:d7:db:a2:2e:bc:1a:2f:b0:e7:69:20:24:00:8f:0d: 19:a3:63:a7:4c:00:2d:a1:88:42:2c:ba:44:dd:62:d2:37:1e: 76:4c:1d:96:48:3b:34:e1:82:5c:26:19:c6:01:f3:1f:a7:62: 11:d4:ce:9d:08:17:12:1d:1c:0c:70:2b:41:d2:1f:75:bd:4d: 9c:52:97:0d:97:52:8b:e8:e1:75:5b:eb:bd:96:fe:7c:8c:be: 64:d9:80:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTeLnzsZuHK+eZLlgSYZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh YjZiMTkwHhcNMjUxMjI0MDMwMTI1WhcNMjUxMjI1MDMwMTI1WjAzMTEwLwYDVQQD EyhkZjM2NWUwN2MwZGViNjY2ZjRlZWYyZGE3OGY0MWUzMzllNWY4NzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyGqK13elYWa7g/VAEL+pVhDBUeg KtAmXqjCI5W6kvJGx22dyxqAbQ5zs2vJqGnPKw9mlBagpzlF6g6aY7v1n7ockOdN E/4Bgal5DFEtyT+Tv1Hg29qFmtWKy5D+ZVXv/ezAEHL4bJNSMu8RAnM00HkBuBMs f/Q0crpcNHvmiwQZszvXHER3bzMGb4mzgGrP4z2xnF6SxoPWOVd5luuJZoAEYTuK LePRWYI5mMafHomkSIyZDRQGfWACRRq4TAga45m/iH2l+uOffQUr8nH48ET1deJv Vg3eKcXGl7o2r1tRoIwYJBNpkOuSGTtJhFfHRERcGcOhzlAWknHnsfabbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN82XgfA3rZm9O7y2nj0HjOeX4cvMB8GA1UdIwQY MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt YmZiNmNmMGYwODM1LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1 LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEd/XUkBA j0yxxqfWgJeiLlUlqDhtov0kYd6RXXrdxYY6NjwxeOKfnmMob3t92zmOvHmBGLuy foXIlqtI4CZ9I1PAUvZBlvZJFJTEMqknvPipi2ixUVyQUtlG69JxsFdF1RQwns/D ClrNBOrlW/g/xRP5s5D0Pg28tWnQfZgmsezfEf27AsToANHlEMIl34DCqJF/cxEq RUy8v+lIwLadsSgTEpZl19uiLrwaL7DnaSAkAI8NGaNjp0wALaGIQiy6RN1i0jce dkwdlkg7NOGCXCYZxgHzH6diEdTOnQgXEh0cDHArQdIfdb1NnFKXDZdSi+jhdVvr vZb+fIy+ZNmAHA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:49 2025 by rpki-client