This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft File: Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json) Hash identifier: SvQ2DcdXtjU+m5ZvgFJqKIewfb8MPjwcztX+bHHaUzo= Subject key identifier: 05:A2:DC:E7:B0:A6:04:68:DC:19:73:45:B5:69:A8:A2:AA:00:61:2F Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56 Certificate issuer: /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56 Certificate serial: 019B0E25FAA2ABCD2E97964B0348053095D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft Manifest number: 0B68 Signing time: Thu 11 Dec 2025 16:02:08 +0000 Manifest this update: Thu 11 Dec 2025 16:02:08 +0000 Manifest next update: Fri 12 Dec 2025 16:02:08 +0000 Files and hashes: 1: JMcsUGuUaLZsEGBNH_a8JRQk3a4.roa (hash: Rd4/PCtPXSBKXGV3ZlmAFHOuRuHln3ehOWxO5fz7X8c=) 2: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: IkRdXNRIUVB34YWzS0sjPbS8iShmsWMmCEWn8YPVGqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:fa:a2:ab:cd:2e:97:96:4b:03:48:05:30:95:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56 Validity Not Before: Dec 11 16:02:08 2025 GMT Not After : Dec 12 16:02:08 2025 GMT Subject: CN=05a2dce7b0a60468dc197345b569a8a2aa00612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8f:83:2d:00:c1:d7:eb:27:fc:5e:2e:7c:68: 77:9c:73:45:a6:99:55:37:15:2d:41:24:dc:99:b0: ba:ff:98:9c:2c:00:d2:92:36:f4:31:e1:01:7a:78: 0f:6b:fa:39:1e:bc:52:94:5d:c5:18:80:1a:4b:67: 03:22:41:af:db:d7:24:d7:4d:9f:51:51:41:47:82: 65:34:d7:a5:31:2b:0a:3a:a8:10:e1:19:b8:9e:f0: 27:0b:9d:dc:21:ea:48:a2:c5:90:8d:df:ce:f7:c8: a4:7f:19:7f:c1:7f:6b:e0:f9:27:c8:5e:41:f7:f3: e0:81:a0:91:aa:e7:77:6d:c6:a1:a6:70:22:7d:ba: 14:c3:b9:d3:d1:96:4d:db:7c:30:f4:0b:43:22:67: 6f:42:8d:81:4c:d4:38:b3:33:dd:6b:49:23:93:df: 64:55:63:21:39:78:79:2f:0b:e1:c0:a8:ab:0f:a6: 31:02:34:3f:2c:85:a8:7b:a7:1f:ea:d5:f3:dc:02: 5e:dd:0d:36:80:22:aa:f6:b3:3e:d9:cb:10:88:7c: 22:a8:cd:3c:6b:a8:7e:47:2f:03:e9:6d:db:d6:73: 4d:ae:83:84:26:0b:b4:73:aa:9c:d8:21:8c:2e:75: d4:93:56:69:f2:6d:bd:f5:5c:1e:df:7d:29:c8:18: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A2:DC:E7:B0:A6:04:68:DC:19:73:45:B5:69:A8:A2:AA:00:61:2F X509v3 Authority Key Identifier: keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:85:78:7e:16:c5:8b:01:2b:91:f2:e2:3f:ce:c8:45:a7:5e: 03:52:d0:ca:12:73:8d:b6:46:6f:29:84:ce:f6:8b:ff:06:64: 28:65:a8:8e:72:8d:67:5c:3e:fa:8a:7f:b0:8a:49:eb:b6:e3: 0b:66:4c:aa:35:eb:c7:12:7a:f6:fa:3b:51:2b:83:6f:f1:ce: 8c:09:23:bd:6e:e2:78:06:a1:50:8f:80:ab:37:e3:00:c7:09: dc:ca:87:ed:b2:12:f1:7c:8e:06:64:d6:cd:c9:f4:41:0f:d2: 40:56:4a:a7:d4:4e:25:f2:2f:c0:c0:0c:7e:9b:b9:ec:f1:79: fb:f4:21:fe:ab:0d:50:d6:a8:70:ca:28:2e:36:9d:5a:cc:d9: ef:cf:3e:d4:9e:d4:6c:6a:fc:e0:35:24:e6:a1:95:2a:16:d3: 26:45:52:49:c3:be:31:0d:e8:9a:ee:63:56:e3:21:c6:15:24: 82:2a:4c:42:1d:ab:25:c7:57:06:15:40:a9:02:e5:82:e4:5f: 3d:bb:e4:ac:38:41:76:c0:fd:2c:15:32:5c:b7:5f:32:8f:3a: c5:5b:91:ee:45:5a:36:a8:6b:80:80:0f:32:29:7c:56:17:4a: 58:ae:62:89:40:94:63:d0:65:c2:94:91:6b:c4:90:db:a7:da: 65:cc:4e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJfqiq80ul5ZLA0gFMJXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNWU2NmIyNzU5ZTUwYmI2OWJiMGE0NDA5ZWViM2JhNDhj NDZjNTYwHhcNMjUxMjExMTYwMjA4WhcNMjUxMjEyMTYwMjA4WjAzMTEwLwYDVQQD EygwNWEyZGNlN2IwYTYwNDY4ZGMxOTczNDViNTY5YThhMmFhMDA2MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo+DLQDB1+sn/F4ufGh3nHNFpplV NxUtQSTcmbC6/5icLADSkjb0MeEBengPa/o5HrxSlF3FGIAaS2cDIkGv29ck102f UVFBR4JlNNelMSsKOqgQ4Rm4nvAnC53cIepIosWQjd/O98ikfxl/wX9r4PknyF5B 9/PggaCRqud3bcahpnAifboUw7nT0ZZN23ww9AtDImdvQo2BTNQ4szPda0kjk99k VWMhOXh5LwvhwKirD6YxAjQ/LIWoe6cf6tXz3AJe3Q02gCKq9rM+2csQiHwiqM08 a6h+Ry8D6W3b1nNNroOEJgu0c6qc2CGMLnXUk1Zp8m299Vwe330pyBgafQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWi3OewpgRo3BlzRbVpqKKqAGEvMB8GA1UdIwQY MBaAFFpeZrJ1nlC7absKRAnus7pIxGxWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWIt NjUzZjIzOWZlOWEwLzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi80Zjc2YjQtN2Q1Ni00N2EwLWFjNWItNjUzZjIzOWZlOWEw LzEvV2w1bXNuV2VVTHRwdXdwRUNlNnp1a2pFYkZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfIV4fhbF iwErkfLiP87IRadeA1LQyhJzjbZGbymEzvaL/wZkKGWojnKNZ1w++op/sIpJ67bj C2ZMqjXrxxJ69vo7USuDb/HOjAkjvW7ieAahUI+AqzfjAMcJ3MqH7bIS8XyOBmTW zcn0QQ/SQFZKp9ROJfIvwMAMfpu57PF5+/Qh/qsNUNaocMooLjadWszZ788+1J7U bGr84DUk5qGVKhbTJkVSScO+MQ3omu5jVuMhxhUkgipMQh2rJcdXBhVAqQLlguRf PbvkrDhBdsD9LBUyXLdfMo86xVuR7kVaNqhrgIAPMil8VhdKWK5iiUCUY9BlwpSR a8SQ26faZcxOrg== -----END CERTIFICATE-----Generated at Thu Dec 11 19:22:44 2025 by rpki-client