This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft File: wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json) Hash identifier: f7UwPHQ2tadQIT6TtaQn98XBIzqYy3rFLuIld+fFvxM= Subject key identifier: 1A:6F:7C:07:38:FE:33:3D:7A:76:53:12:16:19:D3:04:27:EF:1E:33 Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Certificate serial: 019B5976D775E7759F5DFFB451BB1586B0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft Manifest number: 0E79 Signing time: Fri 26 Dec 2025 07:01:59 +0000 Manifest this update: Fri 26 Dec 2025 07:01:59 +0000 Manifest next update: Sat 27 Dec 2025 07:01:59 +0000 Files and hashes: 1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=) 2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: Jfv6+eK8f5QKysJgg+cvbtvE/btlXqCbjOa7eqAz58Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:d7:75:e7:75:9f:5d:ff:b4:51:bb:15:86:b0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Validity Not Before: Dec 26 07:01:59 2025 GMT Not After : Dec 27 07:01:59 2025 GMT Subject: CN=1a6f7c0738fe333d7a7653121619d30427ef1e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ae:67:c8:bd:58:c6:39:b6:33:95:0f:5c:cc: c2:22:f0:54:30:0c:d5:a0:5e:23:db:15:df:7f:4a: 4c:17:fb:72:e2:97:82:cd:07:48:15:4c:35:28:43: 24:d0:c2:00:9d:a5:39:ea:80:3e:61:fe:c6:6b:29: 7c:59:fa:01:e4:66:36:b3:b4:ad:f8:cd:fc:98:34: bc:f0:fa:b8:06:b4:83:45:fc:45:92:9c:06:a0:b2: 51:16:fb:10:44:d3:70:5e:7b:30:2d:80:a1:47:fb: 1a:47:7a:91:e0:e9:b1:96:3d:29:53:70:f8:39:40: 00:35:43:33:07:e8:98:96:28:69:7d:6a:f8:b6:da: 21:81:69:c6:af:9b:59:94:1b:ee:5d:4f:67:45:89: ec:48:6c:cf:44:b2:da:ff:35:12:5b:24:c7:7b:9e: 32:42:26:f1:76:5f:3c:41:84:c3:cf:5f:09:5c:e7: 8b:c5:4f:e4:ed:62:6f:30:e0:b0:d9:2b:ea:44:02: b4:70:13:b5:09:f1:32:eb:21:cf:3a:63:1a:5c:70: d1:07:d7:5e:a0:9d:78:06:10:f2:21:4c:59:db:17: 02:f9:3e:74:d1:ed:be:c3:e8:67:ac:cd:b7:0a:53: 89:ee:b1:1d:27:e7:a2:bc:b5:07:96:d7:c0:f4:5c: ff:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6F:7C:07:38:FE:33:3D:7A:76:53:12:16:19:D3:04:27:EF:1E:33 X509v3 Authority Key Identifier: keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:97:fb:e8:23:56:90:c9:a8:a5:be:5e:3a:2c:b7:a6:b3:7f: b2:83:17:98:04:85:05:e2:f7:cb:d5:ad:5a:9d:81:eb:9f:87: 2a:de:83:44:98:af:8a:fe:b8:d5:29:17:2e:1c:08:b1:15:46: 58:de:54:04:55:7f:d1:7f:c4:cf:54:73:19:74:24:52:0f:bc: ee:3f:7a:39:5f:59:46:2e:af:3d:89:0e:2e:cb:9a:53:b1:1c: eb:00:da:0e:c3:8b:52:6e:bf:b5:27:d4:c1:a3:56:20:ec:8d: c1:2e:66:52:03:af:6b:e0:e2:d2:9a:ea:fb:c6:4c:91:65:a3: 4b:37:dc:12:57:f3:e5:cf:05:3f:45:90:dc:4e:b7:a2:b8:e8: be:8f:7f:0d:3b:05:3d:98:8d:62:15:4b:2f:4c:ce:41:7b:aa: d9:ed:e3:1c:18:ec:68:58:af:64:31:46:8e:e9:9c:08:2d:d7: cf:55:26:e5:c8:1a:54:0f:be:89:4b:64:62:8c:36:d8:77:46: e9:af:65:03:55:07:dc:d1:26:29:4a:12:2f:95:0c:3f:1b:b1: 69:7b:6c:0a:80:5a:d0:c8:f4:75:01:8b:80:7b:c7:72:04:af: 17:76:3d:1d:e0:73:3b:00:1f:ce:73:0c:82:18:9d:23:87:2c: 54:72:e1:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdtd153WfXf+0UbsVhrDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4 M2E3YjMwHhcNMjUxMjI2MDcwMTU5WhcNMjUxMjI3MDcwMTU5WjAzMTEwLwYDVQQD EygxYTZmN2MwNzM4ZmUzMzNkN2E3NjUzMTIxNjE5ZDMwNDI3ZWYxZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua5nyL1Yxjm2M5UPXMzCIvBUMAzV oF4j2xXff0pMF/ty4peCzQdIFUw1KEMk0MIAnaU56oA+Yf7Gayl8WfoB5GY2s7St +M38mDS88Pq4BrSDRfxFkpwGoLJRFvsQRNNwXnswLYChR/saR3qR4Omxlj0pU3D4 OUAANUMzB+iYlihpfWr4ttohgWnGr5tZlBvuXU9nRYnsSGzPRLLa/zUSWyTHe54y Qibxdl88QYTDz18JXOeLxU/k7WJvMOCw2SvqRAK0cBO1CfEy6yHPOmMaXHDRB9de oJ14BhDyIUxZ2xcC+T500e2+w+hnrM23ClOJ7rEdJ+eivLUHltfA9Fz/aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpvfAc4/jM9enZTEhYZ0wQn7x4zMB8GA1UdIwQY MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt MzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZf76CNW kMmopb5eOiy3prN/soMXmASFBeL3y9WtWp2B65+HKt6DRJiviv641SkXLhwIsRVG WN5UBFV/0X/Ez1RzGXQkUg+87j96OV9ZRi6vPYkOLsuaU7Ec6wDaDsOLUm6/tSfU waNWIOyNwS5mUgOva+Di0prq+8ZMkWWjSzfcElfz5c8FP0WQ3E63orjovo9/DTsF PZiNYhVLL0zOQXuq2e3jHBjsaFivZDFGjumcCC3Xz1Um5cgaVA++iUtkYow22HdG 6a9lA1UH3NEmKUoSL5UMPxuxaXtsCoBa0Mj0dQGLgHvHcgSvF3Y9HeBzOwAfznMM ghidI4csVHLhjA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:51 2025 by rpki-client