This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json) Hash identifier: CIblfRuX7+OdLrz4WVhWoNdrQaRL6PgB6hDE4Mh+PiA= Subject key identifier: D0:43:9D:FB:C3:61:DA:8A:05:A2:0B:22:F8:5B:17:B8:6A:E5:18:3E Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Certificate serial: 019B522A451ACB524A1A9993081AB037F6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft Manifest number: 0D93 Signing time: Wed 24 Dec 2025 21:01:00 +0000 Manifest this update: Wed 24 Dec 2025 21:01:00 +0000 Manifest next update: Thu 25 Dec 2025 21:01:00 +0000 Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=) 2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: nvVO7coHFUaoCnXX067WTngB79koZ5JWH2HemNaxW5E=) 3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:45:1a:cb:52:4a:1a:99:93:08:1a:b0:37:f6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Validity Not Before: Dec 24 21:01:00 2025 GMT Not After : Dec 25 21:01:00 2025 GMT Subject: CN=d0439dfbc361da8a05a20b22f85b17b86ae5183e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:65:a8:2d:55:7d:ed:fd:3d:4f:ac:a1:70: 57:e6:a8:fa:34:a1:0c:d8:dc:6d:8d:c9:c4:40:d2: fb:72:82:00:32:1b:67:f8:63:3b:46:3b:f8:70:94: 77:d5:91:50:9b:25:f9:f2:7a:dc:b7:25:6d:4b:f8: 2e:94:04:08:9b:5e:65:ae:40:cb:da:0d:36:6a:3c: 20:0e:cc:83:e1:53:1d:3d:36:61:6e:cf:d2:60:a4: 8e:64:07:df:9f:60:fc:87:26:e9:b5:ac:bd:bc:85: 9e:b1:be:cf:e4:9e:fd:46:c5:85:73:24:5b:81:0f: ec:77:a3:b0:9e:17:02:a7:c8:44:d0:a0:47:e9:34: 28:c3:9b:70:b2:1c:fa:c4:5e:38:c5:bc:b8:60:e3: b2:0e:54:c3:f9:52:bd:30:bd:7a:ad:83:2b:7e:ea: 4f:fc:72:34:21:c6:cb:1a:c0:0c:62:ee:13:27:66: eb:b4:d8:9a:e8:1a:50:d6:e9:6b:1f:69:03:da:23: 1b:dd:04:9d:7f:56:1a:3f:34:19:c6:41:c6:4f:5c: 41:54:b0:00:0e:07:89:7f:bd:63:0e:fb:24:09:a8: 5e:5a:e8:b5:e1:65:41:3d:d3:10:b2:fd:d6:21:e5: 54:af:d7:71:6d:65:3b:84:99:bc:ae:8f:54:c3:ad: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:43:9D:FB:C3:61:DA:8A:05:A2:0B:22:F8:5B:17:B8:6A:E5:18:3E X509v3 Authority Key Identifier: keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:51:b3:4a:1e:4a:8c:da:20:93:82:58:a1:68:0a:3f:8e:cf: be:f3:6a:86:e8:92:83:35:de:3f:ff:d8:3b:c2:24:0c:d8:fe: 85:90:bf:61:46:6e:a4:b4:2a:44:97:8f:84:92:4a:40:3e:48: 5e:cc:fb:f6:12:2e:5a:7a:7d:87:bd:1a:da:22:02:51:8f:ad: a2:91:78:8a:e1:91:fd:72:20:03:10:70:58:86:fe:cd:d6:23: b6:5c:c5:6a:4e:e6:91:2d:ce:50:80:74:fa:27:eb:22:50:bb: 95:74:8d:a3:48:07:0b:d5:cb:16:1f:67:ef:3c:ee:e4:c1:80: 13:80:dc:00:72:5c:fe:71:5d:54:8f:14:d2:0e:78:e5:22:08: 49:1d:9f:27:75:9e:70:3e:f1:40:39:2c:93:d6:d4:a2:7e:2f: b2:48:9d:99:82:54:ed:48:72:26:67:ff:a9:85:1c:15:cd:48: df:80:db:f6:60:e7:fc:65:cb:07:fd:01:ba:f8:c5:c1:ab:5d: 04:e0:33:48:76:33:63:ae:2f:27:86:46:b6:6e:83:3f:56:6d: c3:70:56:a6:6f:62:8f:95:64:71:8e:40:70:db:c7:d5:fa:37: 4c:b3:ce:36:7a:88:c3:75:ae:1b:d8:44:83:3e:bf:88:69:7e: f1:b9:cb:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKkUay1JKGpmTCBqwN/bmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh YjZiMTkwHhcNMjUxMjI0MjEwMTAwWhcNMjUxMjI1MjEwMTAwWjAzMTEwLwYDVQQD EyhkMDQzOWRmYmMzNjFkYThhMDVhMjBiMjJmODViMTdiODZhZTUxODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+NlqC1Vfe39PU+soXBX5qj6NKEM 2NxtjcnEQNL7coIAMhtn+GM7Rjv4cJR31ZFQmyX58nrctyVtS/gulAQIm15lrkDL 2g02ajwgDsyD4VMdPTZhbs/SYKSOZAffn2D8hybptay9vIWesb7P5J79RsWFcyRb gQ/sd6OwnhcCp8hE0KBH6TQow5twshz6xF44xby4YOOyDlTD+VK9ML16rYMrfupP /HI0IcbLGsAMYu4TJ2brtNia6BpQ1ulrH2kD2iMb3QSdf1YaPzQZxkHGT1xBVLAA DgeJf71jDvskCaheWui14WVBPdMQsv3WIeVUr9dxbWU7hJm8ro9Uw60i9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBDnfvDYdqKBaILIvhbF7hq5Rg+MB8GA1UdIwQY MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt YmZiNmNmMGYwODM1LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1 LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1GzSh5K jNogk4JYoWgKP47PvvNqhuiSgzXeP//YO8IkDNj+hZC/YUZupLQqRJePhJJKQD5I Xsz79hIuWnp9h70a2iICUY+topF4iuGR/XIgAxBwWIb+zdYjtlzFak7mkS3OUIB0 +ifrIlC7lXSNo0gHC9XLFh9n7zzu5MGAE4DcAHJc/nFdVI8U0g545SIISR2fJ3We cD7xQDksk9bUon4vskidmYJU7UhyJmf/qYUcFc1I34Db9mDn/GXLB/0BuvjFwatd BOAzSHYzY64vJ4ZGtm6DP1Ztw3BWpm9ij5VkcY5AcNvH1fo3TLPONnqIw3WuG9hE gz6/iGl+8bnL+w== -----END CERTIFICATE-----Generated at Thu Dec 25 02:40:21 2025 by rpki-client