This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft File: wg5lyt2-zUjS-HeHmTEThCvfzl0.mft (raw, json) Hash identifier: m+fbx58Kk+S0jhgOmdXPlOa5RV1bERojVfzE2h7s5oA= Subject key identifier: D4:E4:B7:FE:51:D9:9B:EE:B5:39:A7:A3:54:59:26:4D:0D:4B:AF:2C Authority key identifier: C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D Certificate issuer: /CN=c20e65caddbecd48d2f87787993113842bdfce5d Certificate serial: 019B5BD28D5B0A2B99B10D73D07819E28599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft Manifest number: 1220 Signing time: Fri 26 Dec 2025 18:01:23 +0000 Manifest this update: Fri 26 Dec 2025 18:01:23 +0000 Manifest next update: Sat 27 Dec 2025 18:01:23 +0000 Files and hashes: 1: 7kdmagU4QbQazPFAKJN_jh3ESjI.roa (hash: UKie7fx67vGuUXCr+OJM9sf2md8+FYbcDpZ0gOMQ3f0=) 2: oMWup55nUaojGXh2IYtrkxVaIxk.roa (hash: IgvfZQFj2syunyqqYTcXoGNSKYWlXxrN3iDEjFeptJ0=) 3: wg5lyt2-zUjS-HeHmTEThCvfzl0.crl (hash: d/Odvq+EmA9lTx+hJKPHbn3y4j17plSUTeOZD0rCMt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:8d:5b:0a:2b:99:b1:0d:73:d0:78:19:e2:85:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20e65caddbecd48d2f87787993113842bdfce5d Validity Not Before: Dec 26 18:01:23 2025 GMT Not After : Dec 27 18:01:23 2025 GMT Subject: CN=d4e4b7fe51d99beeb539a7a35459264d0d4baf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:3d:cb:27:c8:1a:13:e0:fe:52:1d:bb:3b:d3: ae:ca:74:82:bd:11:aa:b5:ab:7c:41:f9:e7:6b:c0: b6:e6:7b:2f:0f:f9:3f:00:69:fd:2d:3e:63:fc:f9: 29:c2:fd:0f:8e:06:6c:cc:24:b2:f0:f6:f5:15:78: 4e:91:c5:b9:d9:fa:55:1e:c1:61:53:d1:17:72:cf: fa:97:77:d7:5e:f4:bc:61:e2:2b:85:8f:be:d2:2f: 72:40:5a:87:2b:f0:92:a4:4b:7d:4b:4e:5f:b5:c8: c3:c7:fd:57:fc:2a:e1:6b:0b:76:e2:f9:3f:b6:53: 7a:64:07:18:ef:7d:5a:df:19:32:29:14:d2:62:0b: 27:1b:ef:1b:7e:e9:c8:d5:e7:04:49:7d:2a:d6:61: 72:55:6c:ad:1e:42:01:f7:15:00:ca:b7:4a:0e:61: 4f:de:28:c4:45:a3:39:41:db:f7:5d:ab:18:31:74: 1b:4a:1b:e8:02:86:62:b7:2a:64:28:61:1a:c9:5e: 7c:9a:f1:9c:96:5d:4d:ab:90:3b:78:51:46:88:2b: 77:11:d3:80:38:03:74:e4:b6:3a:ca:dd:6b:c7:dc: 5a:f0:06:9c:a3:4f:61:e5:9b:08:be:67:90:6f:62: c2:11:88:5b:d2:31:b0:85:9e:2c:ec:d2:12:65:e3: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E4:B7:FE:51:D9:9B:EE:B5:39:A7:A3:54:59:26:4D:0D:4B:AF:2C X509v3 Authority Key Identifier: keyid:C2:0E:65:CA:DD:BE:CD:48:D2:F8:77:87:99:31:13:84:2B:DF:CE:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5lyt2-zUjS-HeHmTEThCvfzl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/35ead2-4aa4-4ff0-b5cb-7efaa4a74f97/1/wg5lyt2-zUjS-HeHmTEThCvfzl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:40:93:54:30:ae:98:e1:51:7d:6a:9d:9a:c1:b8:1d:0d:5d: a2:e6:21:81:f2:fb:2b:3e:99:dd:ec:62:eb:87:78:1b:45:d0: 0f:b1:f3:5c:53:b5:ba:a7:65:46:4c:5e:ec:a8:ce:67:f6:22: 72:79:71:9d:7a:10:5d:da:ec:bc:a9:43:59:0b:ff:57:ff:1f: aa:28:ea:8c:b5:0c:e2:cc:e7:6b:cd:43:a3:bd:b0:de:3d:41: 9e:ae:1f:72:e8:84:01:a1:1e:74:8d:23:d7:13:6e:ca:e6:30: ea:1a:71:f8:b9:a0:e4:25:cb:99:c7:62:cf:32:6c:42:c5:30: ac:80:dd:9d:69:e3:f0:5f:c4:ef:93:7a:f9:63:3e:af:34:de: d5:d1:d3:cd:f9:0a:67:23:d1:16:9f:01:63:20:9f:f6:63:6e: 2c:c5:d0:ba:ad:28:d3:f1:2f:ae:5f:fd:e2:41:90:ed:4c:d1: 50:62:0f:78:52:2d:e5:13:02:72:8d:40:7e:3e:4f:7d:7e:e8: 33:1d:9d:02:69:a6:19:de:5a:b7:92:2f:21:cc:e9:1b:93:37: 53:15:4c:b0:0b:d5:bd:29:77:f7:63:52:e7:23:21:0a:01:9c: 4e:ed:1b:3f:a4:a0:bb:60:21:78:18:c6:41:1b:9a:58:61:48: 35:f2:03:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0o1bCiuZsQ1z0HgZ4oWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGU2NWNhZGRiZWNkNDhkMmY4Nzc4Nzk5MzExMzg0MmJk ZmNlNWQwHhcNMjUxMjI2MTgwMTIzWhcNMjUxMjI3MTgwMTIzWjAzMTEwLwYDVQQD EyhkNGU0YjdmZTUxZDk5YmVlYjUzOWE3YTM1NDU5MjY0ZDBkNGJhZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D3LJ8gaE+D+Uh27O9OuynSCvRGq tat8Qfnna8C25nsvD/k/AGn9LT5j/Pkpwv0PjgZszCSy8Pb1FXhOkcW52fpVHsFh U9EXcs/6l3fXXvS8YeIrhY++0i9yQFqHK/CSpEt9S05ftcjDx/1X/Crhawt24vk/ tlN6ZAcY731a3xkyKRTSYgsnG+8bfunI1ecESX0q1mFyVWytHkIB9xUAyrdKDmFP 3ijERaM5Qdv3XasYMXQbShvoAoZitypkKGEayV58mvGcll1Nq5A7eFFGiCt3EdOA OAN05LY6yt1rx9xa8Aaco09h5ZsIvmeQb2LCEYhb0jGwhZ4s7NISZeOHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTkt/5R2ZvutTmno1RZJk0NS68sMB8GA1UdIwQY MBaAFMIOZcrdvs1I0vh3h5kxE4Qr385dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2It N2VmYWE0YTc0Zjk3LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8zNWVhZDItNGFhNC00ZmYwLWI1Y2ItN2VmYWE0YTc0Zjk3 LzEvd2c1bHl0Mi16VWpTLUhlSG1URVRoQ3ZmemwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0CTVDCu mOFRfWqdmsG4HQ1douYhgfL7Kz6Z3exi64d4G0XQD7HzXFO1uqdlRkxe7KjOZ/Yi cnlxnXoQXdrsvKlDWQv/V/8fqijqjLUM4szna81Do72w3j1Bnq4fcuiEAaEedI0j 1xNuyuYw6hpx+Lmg5CXLmcdizzJsQsUwrIDdnWnj8F/E75N6+WM+rzTe1dHTzfkK ZyPRFp8BYyCf9mNuLMXQuq0o0/Evrl/94kGQ7UzRUGIPeFIt5RMCco1Afj5PfX7o Mx2dAmmmGd5at5IvIczpG5M3UxVMsAvVvSl392NS5yMhCgGcTu0bP6Sgu2AheBjG QRuaWGFINfIDcw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:12:59 2025 by rpki-client