This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json) Hash identifier: SiBJdOY6vSFAAmCr7n9cFuvqP0TWitsnRYjrI+3jeD8= Subject key identifier: 45:ED:48:6C:5A:3C:5F:C0:D0:28:BE:DA:7E:C8:F8:87:90:85:17:26 Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de Certificate serial: 019B541897704C66B56730081F6A24AC5213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft Manifest number: 033B Signing time: Thu 25 Dec 2025 06:00:56 +0000 Manifest this update: Thu 25 Dec 2025 06:00:56 +0000 Manifest next update: Fri 26 Dec 2025 06:00:56 +0000 Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: tRJqJMbxKbWtw9UI/xjrt3rWOve+HAxlTpQN8OVLa2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:97:70:4c:66:b5:67:30:08:1f:6a:24:ac:52:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de Validity Not Before: Dec 25 06:00:56 2025 GMT Not After : Dec 26 06:00:56 2025 GMT Subject: CN=45ed486c5a3c5fc0d028beda7ec8f88790851726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:d9:0b:39:4e:14:08:7e:08:4c:5c:8b:06: 95:0b:35:17:d2:cf:d6:48:5e:ec:67:6b:9b:c9:d0: 97:6c:06:9b:c7:a1:56:08:c7:cc:dc:75:ce:d9:c0: 92:b4:59:61:71:65:e7:20:ed:38:f3:1c:16:59:6b: d7:79:2d:89:f7:45:75:54:98:4f:97:6a:48:9c:62: 84:08:64:84:7f:ad:31:0e:7f:45:f1:7b:7d:90:2c: 01:25:88:94:34:f9:ee:0c:07:c3:27:72:13:7f:04: 34:0c:be:98:83:fa:02:ad:c6:0a:34:0c:88:f3:f0: 85:6d:39:00:19:da:d9:c2:68:8b:20:ea:3a:cd:cc: 78:0d:9f:a2:cf:ae:72:f0:23:f8:55:01:44:27:68: 56:ec:05:94:00:46:2c:c1:2a:fb:a9:3e:9c:11:52: 6c:b6:d3:d8:cb:17:e0:4c:03:82:10:fd:a5:af:62: 11:84:41:52:61:08:e9:e6:33:83:5d:bf:63:96:b8: fd:19:f8:36:34:e9:ad:09:0d:68:94:fa:5e:f8:28: fb:91:84:16:ce:f3:c7:e2:6f:7c:aa:f6:36:34:7d: 0b:fc:5e:18:28:04:de:a0:c5:d0:0d:ab:84:ef:5a: c6:30:80:a0:90:7a:2b:4f:6f:e6:0b:cc:b7:16:ca: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:ED:48:6C:5A:3C:5F:C0:D0:28:BE:DA:7E:C8:F8:87:90:85:17:26 X509v3 Authority Key Identifier: keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2d:25:f2:f7:e6:bb:c9:b3:71:81:d6:75:4a:5b:bd:be:e1: 96:87:d5:c8:99:fd:ba:95:7f:04:09:8b:14:9a:37:b4:19:06: 6f:9a:cc:d1:ce:32:73:2c:67:34:92:f1:80:01:80:1f:6e:b1: 6a:ec:14:13:19:b8:81:a5:6b:1e:e2:5b:ad:34:43:ff:b8:dc: f6:0b:26:27:ab:64:c2:65:e8:59:fc:ec:f4:89:51:a4:e1:ac: ff:5d:2c:cd:d6:f3:0b:8f:9a:d4:93:8a:78:64:d0:2f:e0:69: 33:94:bc:29:27:bc:3f:48:96:bb:4e:b2:31:a6:9f:94:5c:83: d1:64:ca:44:56:e1:dd:ec:f0:bb:a2:60:2e:e7:70:06:f2:33: a9:d0:3c:16:eb:bc:4f:1b:71:fc:2a:23:b6:34:01:01:19:11: 93:fa:b5:f9:e1:61:67:c0:23:eb:4b:1b:7d:34:3e:e8:a0:fd: 3a:0e:5c:05:c7:e5:d2:68:a9:44:0f:54:16:33:2e:fb:d8:87: 95:f2:f6:ad:2b:c8:18:b6:11:01:c4:fb:8b:34:87:7a:7d:1a: 8f:23:92:e0:48:c1:16:c5:e9:b2:af:0c:c8:dc:45:bf:83:20: 20:06:c2:18:ef:f3:78:5c:ea:a7:5f:4b:f5:0d:91:e3:4a:e9: 92:7a:a2:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGJdwTGa1ZzAIH2okrFITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MjVlYWZiNzhmM2Q1NjkyNjUxN2MyYTNjZDUzMzlhYTUx Mzg2ZGUwHhcNMjUxMjI1MDYwMDU2WhcNMjUxMjI2MDYwMDU2WjAzMTEwLwYDVQQD Eyg0NWVkNDg2YzVhM2M1ZmMwZDAyOGJlZGE3ZWM4Zjg4NzkwODUxNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil/ZCzlOFAh+CExciwaVCzUX0s/W SF7sZ2ubydCXbAabx6FWCMfM3HXO2cCStFlhcWXnIO048xwWWWvXeS2J90V1VJhP l2pInGKECGSEf60xDn9F8Xt9kCwBJYiUNPnuDAfDJ3ITfwQ0DL6Yg/oCrcYKNAyI 8/CFbTkAGdrZwmiLIOo6zcx4DZ+iz65y8CP4VQFEJ2hW7AWUAEYswSr7qT6cEVJs ttPYyxfgTAOCEP2lr2IRhEFSYQjp5jODXb9jlrj9Gfg2NOmtCQ1olPpe+Cj7kYQW zvPH4m98qvY2NH0L/F4YKATeoMXQDauE71rGMICgkHorT2/mC8y3FsrKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXtSGxaPF/A0Ci+2n7I+IeQhRcmMB8GA1UdIwQY MBaAFFgl6vt489VpJlF8KjzVM5qlE4beMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMt ZDVjNmFlMjYyNWFhLzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMtZDVjNmFlMjYyNWFh LzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoi0l8vfm u8mzcYHWdUpbvb7hlofVyJn9upV/BAmLFJo3tBkGb5rM0c4ycyxnNJLxgAGAH26x auwUExm4gaVrHuJbrTRD/7jc9gsmJ6tkwmXoWfzs9IlRpOGs/10szdbzC4+a1JOK eGTQL+BpM5S8KSe8P0iWu06yMaaflFyD0WTKRFbh3ezwu6JgLudwBvIzqdA8Fuu8 Txtx/CojtjQBARkRk/q1+eFhZ8Aj60sbfTQ+6KD9Og5cBcfl0mipRA9UFjMu+9iH lfL2rSvIGLYRAcT7izSHen0ajyOS4EjBFsXpsq8MyNxFv4MgIAbCGO/zeFzqp19L 9Q2R40rpknqiMg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:58:02 2025 by rpki-client