This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft File: WtERZRPCPYeqy_Wxu-45mBx2McE.mft (raw, json) Hash identifier: 4Sn9WyAz8rBuRNtxo7hYoZy5nI9nYUSrJ6ToA3agOD0= Subject key identifier: 6F:24:B3:D7:5A:7B:B5:FA:04:68:7B:5C:74:A2:A8:D6:CA:06:01:E5 Authority key identifier: 5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1 Certificate issuer: /CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1 Certificate serial: 019B589A3FDCF3244AD2CAE0440573DCB2AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft Manifest number: 06D4 Signing time: Fri 26 Dec 2025 03:01:02 +0000 Manifest this update: Fri 26 Dec 2025 03:01:02 +0000 Manifest next update: Sat 27 Dec 2025 03:01:02 +0000 Files and hashes: 1: DPHxPFz4hD849uPgUxDNkAj6z10.roa (hash: Piql48dJ9y76IkzwD/1Mb1jMycR207R9MhGmJ1kgKWk=) 2: WtERZRPCPYeqy_Wxu-45mBx2McE.crl (hash: +fLM+hiCMipp3Pzpfl8Ngdm68rjWC/ACFIve/ntMtdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 21:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:9a:3f:dc:f3:24:4a:d2:ca:e0:44:05:73:dc:b2:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad1116513c23d87aacbf5b1bbee39981c7631c1 Validity Not Before: Dec 26 03:01:02 2025 GMT Not After : Dec 27 03:01:02 2025 GMT Subject: CN=6f24b3d75a7bb5fa04687b5c74a2a8d6ca0601e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:29:bc:fd:fc:19:c7:c4:f2:5a:73:3d:d7: 2c:f5:b9:31:2e:54:13:71:cb:d9:b5:d3:55:88:1c: 51:b2:6f:2a:43:c6:ed:72:2e:7c:8b:0e:af:d9:58: 32:4f:b8:72:62:23:14:d9:43:fc:d5:04:6e:e2:b1: e8:18:cf:21:a5:32:61:f9:65:21:7a:ef:83:41:66: f8:02:d6:28:37:2d:4f:6f:8e:f0:e7:3f:35:2c:36: 37:03:5e:6a:d1:0d:69:c3:57:ac:f9:11:6b:9c:84: a5:c6:a1:9d:f5:eb:ee:e0:1f:24:94:98:d4:b2:19: 2f:58:0b:d0:be:e0:ee:52:86:75:8a:58:9f:b8:4f: b3:35:02:4e:71:e0:d3:14:6e:b1:7b:6c:e1:db:f0: 3f:56:98:b7:62:f0:a2:00:0d:e0:eb:d2:4b:9d:1e: c4:4c:82:70:1f:e8:18:a0:a1:e3:21:e4:7c:c0:0b: 8f:3d:bd:4d:a0:77:46:7e:56:ad:e2:89:fe:74:02: 2e:ae:4d:3c:01:30:06:6a:1c:e7:59:f3:1b:6a:d9: 35:1c:53:fe:ca:c4:a1:1e:23:47:70:26:27:ac:96: dd:55:bf:ee:2a:e9:2e:3f:b5:db:b7:8e:d2:8c:a1: 8d:29:c4:21:b4:85:e1:e9:a4:b9:1f:e0:1a:83:93: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:24:B3:D7:5A:7B:B5:FA:04:68:7B:5C:74:A2:A8:D6:CA:06:01:E5 X509v3 Authority Key Identifier: keyid:5A:D1:11:65:13:C2:3D:87:AA:CB:F5:B1:BB:EE:39:98:1C:76:31:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtERZRPCPYeqy_Wxu-45mBx2McE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1cc8d-8808-4c1e-81f0-23ac979d41ad/1/WtERZRPCPYeqy_Wxu-45mBx2McE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:46:ee:8f:6c:05:c0:f8:8d:19:b4:e4:f6:bb:95:c8:5e:ef: 43:bd:bd:2b:2c:03:6a:3c:f4:f9:5d:81:0e:50:37:c0:35:bb: c0:bb:f0:64:2a:6a:b3:52:27:02:b0:78:b2:97:92:c1:dc:21: 48:47:0e:7c:00:00:3f:c7:4e:4d:9a:50:55:64:39:50:52:1d: 06:8d:0f:c6:aa:8c:7b:53:e4:c7:48:90:10:00:f8:1b:ca:a6: 96:31:dd:8e:ff:dc:68:b4:06:e0:d6:18:77:9b:0a:44:c3:ab: e4:b0:89:22:57:a9:34:5c:ac:70:9b:e9:33:72:c0:24:f9:95: 6b:53:0b:74:49:78:8f:ef:f9:0d:f8:d6:19:b3:42:fd:27:1c: 64:95:77:00:44:3f:c6:bf:ba:d6:ec:78:52:40:2a:f1:28:3a: f8:5b:71:27:0c:c7:38:05:1d:bd:5c:76:5a:a4:de:8e:ce:d7: e7:9e:cb:b3:ac:83:84:3d:a4:34:4e:84:d2:d0:d6:da:d8:e3: 94:c3:5a:8a:66:4a:9b:e8:a1:11:9f:26:53:f1:48:4e:a0:cc: 23:04:59:18:06:90:c8:b6:4e:b3:3e:67:bf:4f:c0:0a:be:b8: 0c:85:6a:3b:ea:01:59:49:0f:07:7a:d2:61:28:a2:44:59:ad: 8f:86:32:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtYmj/c8yRK0srgRAVz3LKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDExMTY1MTNjMjNkODdhYWNiZjViMWJiZWUzOTk4MWM3 NjMxYzEwHhcNMjUxMjI2MDMwMTAyWhcNMjUxMjI3MDMwMTAyWjAzMTEwLwYDVQQD Eyg2ZjI0YjNkNzVhN2JiNWZhMDQ2ODdiNWM3NGEyYThkNmNhMDYwMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojApvP38GcfE8lpzPdcs9bkxLlQT ccvZtdNViBxRsm8qQ8btci58iw6v2VgyT7hyYiMU2UP81QRu4rHoGM8hpTJh+WUh eu+DQWb4AtYoNy1Pb47w5z81LDY3A15q0Q1pw1es+RFrnISlxqGd9evu4B8klJjU shkvWAvQvuDuUoZ1ilifuE+zNQJOceDTFG6xe2zh2/A/Vpi3YvCiAA3g69JLnR7E TIJwH+gYoKHjIeR8wAuPPb1NoHdGflat4on+dAIurk08ATAGahznWfMbatk1HFP+ ysShHiNHcCYnrJbdVb/uKukuP7Xbt47SjKGNKcQhtIXh6aS5H+Aag5OTZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8ks9dae7X6BGh7XHSiqNbKBgHlMB8GA1UdIwQY MBaAFFrREWUTwj2Hqsv1sbvuOZgcdjHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAt MjNhYzk3OWQ0MWFkLzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMWNjOGQtODgwOC00YzFlLTgxZjAtMjNhYzk3OWQ0MWFk LzEvV3RFUlpSUENQWWVxeV9XeHUtNDVtQngyTWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkbuj2wF wPiNGbTk9ruVyF7vQ729KywDajz0+V2BDlA3wDW7wLvwZCpqs1InArB4speSwdwh SEcOfAAAP8dOTZpQVWQ5UFIdBo0PxqqMe1Pkx0iQEAD4G8qmljHdjv/caLQG4NYY d5sKRMOr5LCJIlepNFyscJvpM3LAJPmVa1MLdEl4j+/5DfjWGbNC/SccZJV3AEQ/ xr+61ux4UkAq8Sg6+FtxJwzHOAUdvVx2WqTejs7X557Ls6yDhD2kNE6E0tDW2tjj lMNaimZKm+ihEZ8mU/FITqDMIwRZGAaQyLZOsz5nv0/ACr64DIVqO+oBWUkPB3rS YSiiRFmtj4Yy+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 06:37:13 2025 by rpki-client