This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft File: wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json) Hash identifier: xgE312N2WcUayanN1nAx42/6MJ24YDZxolMZ6JXU40c= Subject key identifier: 5D:C3:E1:25:27:4D:49:13:51:B3:5E:2A:12:E8:66:85:05:60:79:CE Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56 Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56 Certificate serial: 019B3CB5273096B9C9F1C156B8540B44BD40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 17:01:03 +0000 Manifest this update: Sat 20 Dec 2025 17:01:03 +0000 Manifest next update: Sun 21 Dec 2025 17:01:03 +0000 Files and hashes: 1: 56E2eRNFxzpXqTECZSNhq9NrPOQ.roa (hash: kVqvgKF+nZSGal/AwDKY90LYsegDO41+Dxp8TZ0XdP8=) 2: JtbkknZoz-ZpYkGR5Faik_dT6m8.roa (hash: CKgz0QGH5sNSVcZST2h0jpMtQH08uuEFFd8ZyzC9G3o=) 3: ltRYivrHDrWNdxne_A9FIv1LJlY.roa (hash: qB1Eut1IyAFg4Lz5YzqH97WbuLNnEkbs/hF3c3T/wFo=) 4: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: SQWPIahjtBEW8R4ybSsLmVtLrBXOGX4vfKDj+DAKAUc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:27:30:96:b9:c9:f1:c1:56:b8:54:0b:44:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56 Validity Not Before: Dec 20 17:01:03 2025 GMT Not After : Dec 21 17:01:03 2025 GMT Subject: CN=5dc3e125274d491351b35e2a12e86685056079ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:09:aa:bd:f1:f1:f4:8b:d2:58:12:f4:1d:64: 06:ec:72:0a:c6:6f:1c:b1:c2:01:e6:82:6b:9a:86: 63:25:e0:e0:11:43:f3:02:59:4e:9e:2f:c9:87:0d: d8:6c:7d:83:7e:9b:da:db:7b:e9:97:5b:d9:21:62: 78:1e:b8:cf:f5:56:20:dc:47:b9:0a:0e:ee:3e:62: 85:7c:5d:fe:a9:fd:8f:44:70:99:f0:ed:a8:68:22: 40:c2:53:d4:e0:f7:a7:f4:cb:2e:d2:b2:8c:15:e1: 3f:34:3d:23:a4:4f:b0:22:36:2c:c1:01:6e:96:d8: 2e:16:94:1e:08:6a:c3:72:fa:ae:6e:0a:3c:ea:ee: e7:c7:eb:02:be:2c:b5:a1:85:ed:6e:97:d9:f5:9f: 0d:3d:21:ad:b3:f0:d3:8d:bf:1d:0a:e3:3e:75:a4: d4:b0:ce:66:ad:85:2a:d7:63:e2:c3:db:4c:09:e8: 6a:58:91:8d:af:1f:97:7a:3d:3f:e2:b2:54:a3:44: 6a:dd:ce:0e:67:fd:45:f8:4f:0f:91:0c:9f:80:cd: be:42:5d:13:d1:9b:0f:c9:6b:8d:71:4e:dc:13:5c: 5b:ef:72:cb:b2:f3:f0:8f:b4:a7:7e:06:cb:c1:90: 51:fa:4f:4c:5b:90:75:e8:49:08:9f:5e:c7:ed:f3: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C3:E1:25:27:4D:49:13:51:B3:5E:2A:12:E8:66:85:05:60:79:CE X509v3 Authority Key Identifier: keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c9:48:e3:73:86:a9:d0:d8:6f:02:70:04:49:12:d1:e0:ae: ef:d0:2a:00:28:00:fc:48:ee:37:a5:dd:88:65:cd:a5:ae:a8: d4:7d:4d:e8:2f:a5:7f:61:7e:e2:39:a0:39:35:50:0e:1c:9f: 9f:52:00:cd:36:10:f2:d3:75:10:1c:b5:e3:14:bc:cc:c6:5f: 7d:18:81:98:86:51:53:11:ea:5d:0f:41:9c:7a:3a:82:11:8f: 77:d4:e6:40:66:12:56:bf:37:d9:96:79:73:06:d0:06:29:1a: f8:ae:2c:46:4b:ea:3f:30:58:6f:ea:0d:62:e7:8b:34:50:50: 54:6d:81:b0:65:8e:01:b3:8e:97:76:81:8b:6c:47:9a:fd:8f: c5:30:6e:79:87:53:b4:35:d9:ac:8f:5c:8f:59:3c:2c:4d:0c: fe:cd:c1:ee:eb:4e:0e:5e:66:78:58:0a:9b:fa:3f:2f:e3:a0: 05:25:11:c0:d3:54:55:bc:19:06:37:ed:ba:66:f1:a7:f8:71: 3c:03:51:51:db:a1:8d:5d:46:73:c3:47:ad:7c:57:de:d1:8b: 62:1e:44:23:57:10:53:80:2b:93:d4:0b:7f:32:4c:de:f7:02: 00:20:bb:3f:ba:e5:a2:1e:31:08:b0:06:3a:5c:a7:af:c0:27: 25:c7:68:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tScwlrnJ8cFWuFQLRL1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDgyY2NmMGM4ZGVhN2Q3ZjZhZDcyZThlNjI0NjJkN2Jl MjBkNTYwHhcNMjUxMjIwMTcwMTAzWhcNMjUxMjIxMTcwMTAzWjAzMTEwLwYDVQQD Eyg1ZGMzZTEyNTI3NGQ0OTEzNTFiMzVlMmExMmU4NjY4NTA1NjA3OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwmqvfHx9IvSWBL0HWQG7HIKxm8c scIB5oJrmoZjJeDgEUPzAllOni/Jhw3YbH2Dfpva23vpl1vZIWJ4HrjP9VYg3Ee5 Cg7uPmKFfF3+qf2PRHCZ8O2oaCJAwlPU4Pen9Msu0rKMFeE/ND0jpE+wIjYswQFu ltguFpQeCGrDcvqubgo86u7nx+sCviy1oYXtbpfZ9Z8NPSGts/DTjb8dCuM+daTU sM5mrYUq12Piw9tMCehqWJGNrx+Xej0/4rJUo0Rq3c4OZ/1F+E8PkQyfgM2+Ql0T 0ZsPyWuNcU7cE1xb73LLsvPwj7SnfgbLwZBR+k9MW5B16EkIn17H7fPMHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3D4SUnTUkTUbNeKhLoZoUFYHnOMB8GA1UdIwQY MBaAFMLYLM8Mjep9f2rXLo5iRi174g1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUt NDMxMThlNDk2ZDQwLzEvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zMjc5NTItNGM2Ni00Yjk1LWI2ZGUtNDMxMThlNDk2ZDQw LzEvd3Rnc3p3eU42bjFfYXRjdWptSkdMWHZpRFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvslI43OG qdDYbwJwBEkS0eCu79AqACgA/EjuN6XdiGXNpa6o1H1N6C+lf2F+4jmgOTVQDhyf n1IAzTYQ8tN1EBy14xS8zMZffRiBmIZRUxHqXQ9BnHo6ghGPd9TmQGYSVr832ZZ5 cwbQBika+K4sRkvqPzBYb+oNYueLNFBQVG2BsGWOAbOOl3aBi2xHmv2PxTBueYdT tDXZrI9cj1k8LE0M/s3B7utODl5meFgKm/o/L+OgBSURwNNUVbwZBjftumbxp/hx PANRUduhjV1Gc8NHrXxX3tGLYh5EI1cQU4Ark9QLfzJM3vcCACC7P7rloh4xCLAG Olynr8AnJcdoaA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:09:48 2025 by rpki-client