This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft File: wrXTr9C3Lrc0wh7XgjKetufBzkE.mft (raw, json) Hash identifier: 46qKmHh53XvxiFOadiBXcy56LDDtGKrIFszCcea6U1A= Subject key identifier: 35:C1:5C:A1:2C:2E:7C:98:91:E9:F9:71:59:AF:EC:F5:79:72:06:A9 Authority key identifier: C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 Certificate issuer: /CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Certificate serial: 019B736CF78842AB5CD704503FA2324BECCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft Manifest number: 0A70 Signing time: Wed 31 Dec 2025 08:01:19 +0000 Manifest this update: Wed 31 Dec 2025 08:01:19 +0000 Manifest next update: Thu 01 Jan 2026 08:01:19 +0000 Files and hashes: 1: 24ln-8DkQtv-Hk-B6dzvfSqyjQY.roa (hash: SeW6VNZ/+9bUzjzq/OzL5WVkY+lRaswkW52Mz3zEsYI=) 2: wrXTr9C3Lrc0wh7XgjKetufBzkE.crl (hash: bp15C6q9xKqXJR9hXa5yAH1CsrFZAXBhbH9zrRQEVuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:6c:f7:88:42:ab:5c:d7:04:50:3f:a2:32:4b:ec:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b5d3afd0b72eb734c21ed782329eb6e7c1ce41 Validity Not Before: Dec 31 08:01:19 2025 GMT Not After : Jan 1 08:01:19 2026 GMT Subject: CN=35c15ca12c2e7c9891e9f97159afecf5797206a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:42:30:5f:33:25:f4:52:c9:9a:4a:f4:c4: 52:7e:cf:5b:cc:b3:db:51:6a:20:68:cf:3e:13:56: 65:56:ed:21:23:72:99:40:47:71:e8:fc:11:36:fe: 3c:3f:36:df:5b:94:1f:27:12:12:b4:1e:95:01:ef: 0f:15:4b:f6:b7:1a:65:e3:eb:67:97:8e:ee:af:c3: 61:e7:32:bb:38:01:8a:75:34:27:8d:27:07:a4:5e: 5b:0d:cc:ad:e4:0b:12:d2:ed:50:0a:d7:2d:32:06: a3:36:17:39:af:1e:1e:07:97:0f:c4:aa:bc:c8:03: aa:e2:13:32:b4:62:a7:7e:96:9d:d1:57:69:7a:b1: 84:7f:e9:bc:65:c6:2c:12:d0:4d:80:1c:44:a1:f0: 2d:36:a4:f0:7f:21:c3:c0:8e:2f:9f:f7:72:9a:60: 6d:f4:25:9a:37:23:c6:4a:52:38:3a:df:22:fa:3f: 6c:11:95:40:d6:36:fb:fc:64:e2:78:34:65:a3:c0: 1e:04:27:24:24:f3:e7:f5:a7:9e:c5:33:a1:d5:ed: d0:8f:91:97:23:03:37:b2:88:64:04:05:28:44:ed: 42:0b:90:e5:3e:38:0f:df:7b:a3:b3:f8:65:dd:52: d9:cd:99:c6:54:45:ac:ee:98:b5:50:27:8f:63:0e: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C1:5C:A1:2C:2E:7C:98:91:E9:F9:71:59:AF:EC:F5:79:72:06:A9 X509v3 Authority Key Identifier: keyid:C2:B5:D3:AF:D0:B7:2E:B7:34:C2:1E:D7:82:32:9E:B6:E7:C1:CE:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrXTr9C3Lrc0wh7XgjKetufBzkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/e2e048-2788-49b8-9ed5-453bd8995bca/1/wrXTr9C3Lrc0wh7XgjKetufBzkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:78:38:38:8e:e5:37:06:c4:0d:87:3f:22:72:bf:41:b7:db: ed:51:4b:d3:29:51:00:94:c0:f7:b6:1c:e5:51:4c:92:35:dd: d6:54:88:57:4b:2d:20:6e:f9:4e:c7:c1:42:3d:4f:41:a1:bc: cb:2f:d7:ce:04:7f:e0:04:dd:1a:a8:01:46:9b:d5:c4:e3:28: 90:73:5b:40:6e:59:50:34:22:b7:b8:c1:5f:c8:1c:79:b6:b5: 81:c3:d4:14:fc:73:fc:77:dd:96:32:3f:a1:69:55:9f:6b:7c: 98:7e:a7:f2:0a:1c:87:a3:d3:3a:d5:56:f6:c4:38:5e:70:43: ca:82:c2:63:77:c4:ce:e5:bd:15:ee:1a:21:ab:db:2f:f4:44: 4e:70:f9:ee:8a:42:f3:fc:0c:a0:f6:c0:a6:21:4c:e1:46:7a: 3c:04:4d:16:29:69:04:03:55:63:e9:8f:aa:e1:26:47:17:70: ea:d0:48:3f:54:9c:11:19:46:42:e9:76:75:f1:7a:43:7a:63: 78:19:6b:2f:5e:5c:0b:ee:a2:40:04:9f:44:64:94:64:01:b4: 81:26:b9:64:2b:78:99:ee:a5:1d:c8:c3:d2:f4:54:73:89:0e: e4:9b:4c:44:e4:3b:36:a0:c4:38:9a:73:02:c5:a8:97:4e:54: e1:b3:20:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzbPeIQqtc1wRQP6IyS+zMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjVkM2FmZDBiNzJlYjczNGMyMWVkNzgyMzI5ZWI2ZTdj MWNlNDEwHhcNMjUxMjMxMDgwMTE5WhcNMjYwMTAxMDgwMTE5WjAzMTEwLwYDVQQD EygzNWMxNWNhMTJjMmU3Yzk4OTFlOWY5NzE1OWFmZWNmNTc5NzIwNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9BCMF8zJfRSyZpK9MRSfs9bzLPb UWogaM8+E1ZlVu0hI3KZQEdx6PwRNv48PzbfW5QfJxIStB6VAe8PFUv2txpl4+tn l47ur8Nh5zK7OAGKdTQnjScHpF5bDcyt5AsS0u1QCtctMgajNhc5rx4eB5cPxKq8 yAOq4hMytGKnfpad0VdperGEf+m8ZcYsEtBNgBxEofAtNqTwfyHDwI4vn/dymmBt 9CWaNyPGSlI4Ot8i+j9sEZVA1jb7/GTieDRlo8AeBCckJPPn9aeexTOh1e3Qj5GX IwM3sohkBAUoRO1CC5DlPjgP33ujs/hl3VLZzZnGVEWs7pi1UCePYw6DWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXBXKEsLnyYken5cVmv7PV5cgapMB8GA1UdIwQY MBaAFMK106/Qty63NMIe14Iynrbnwc5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUt NDUzYmQ4OTk1YmNhLzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS9lMmUwNDgtMjc4OC00OWI4LTllZDUtNDUzYmQ4OTk1YmNh LzEvd3JYVHI5QzNMcmMwd2g3WGdqS2V0dWZCemtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEng4OI7l NwbEDYc/InK/Qbfb7VFL0ylRAJTA97Yc5VFMkjXd1lSIV0stIG75TsfBQj1PQaG8 yy/XzgR/4ATdGqgBRpvVxOMokHNbQG5ZUDQit7jBX8gceba1gcPUFPxz/HfdljI/ oWlVn2t8mH6n8goch6PTOtVW9sQ4XnBDyoLCY3fEzuW9Fe4aIavbL/RETnD57opC 8/wMoPbApiFM4UZ6PARNFilpBANVY+mPquEmRxdw6tBIP1ScERlGQul2dfF6Q3pj eBlrL15cC+6iQASfRGSUZAG0gSa5ZCt4me6lHcjD0vRUc4kO5JtMROQ7NqDEOJpz AsWol05U4bMg5w== -----END CERTIFICATE-----Generated at Wed Dec 31 10:48:30 2025 by rpki-client