This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft File: Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft (raw, json) Hash identifier: zvdnORYwz8YBFM5oVYPRV8Pe7bIDtdDAL0b0TL1Dp3A= Subject key identifier: F2:A6:63:21:61:78:35:E0:B9:AB:56:2D:CF:4A:73:E1:F5:DA:42:82 Authority key identifier: 5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B Certificate issuer: /CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b Certificate serial: 019B59E362B52FD9EC44C3B91A709E41FA2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 09:00:32 +0000 Manifest this update: Fri 26 Dec 2025 09:00:32 +0000 Manifest next update: Sat 27 Dec 2025 09:00:32 +0000 Files and hashes: 1: Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl (hash: f3eiT9aP/Um/ksNK5lVpAereto1VBg0zZsVk04zepRw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:62:b5:2f:d9:ec:44:c3:b9:1a:70:9e:41:fa:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b Validity Not Before: Dec 26 09:00:32 2025 GMT Not After : Dec 27 09:00:32 2025 GMT Subject: CN=f2a66321617835e0b9ab562dcf4a73e1f5da4282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:c5:c1:da:4f:d1:7a:0b:80:5b:79:20:93: 94:9d:93:b6:c9:14:8d:f5:02:c3:ee:98:f0:a3:a1: 5c:02:10:0e:68:fd:3d:52:df:c4:5e:74:ae:41:02: b6:1d:2e:09:ab:e0:c5:f4:db:23:44:c1:80:73:4d: 55:7c:ac:74:29:0f:da:33:a2:02:de:95:44:6a:b8: 3c:65:a0:08:4a:d8:9a:a4:e0:7f:36:79:5d:d4:d3: 6d:fa:1d:ef:5d:72:3b:a2:d8:93:17:f0:bb:78:22: d4:8e:17:85:b2:c9:43:5c:dd:70:03:aa:42:0d:03: 74:c4:6f:1b:39:06:97:83:00:4e:d2:59:e1:4b:42: 18:cf:02:ac:9b:a8:8d:7d:ca:05:c1:00:62:5b:58: ba:ee:91:7a:e4:1e:eb:93:d8:c3:37:19:1a:b0:5e: 72:f4:d1:8c:7a:95:64:95:8f:d0:fd:9c:1b:03:2d: 07:a6:c4:cf:5c:e5:61:65:3a:86:3a:69:54:20:cc: 1e:d7:d6:4f:a7:63:bb:60:9e:4d:2f:5b:5f:95:63: b9:cd:60:e2:0c:c4:60:e6:99:c0:3b:ec:f5:df:24: d3:72:bc:6d:50:06:da:ba:ab:54:7b:ca:b3:37:62: 56:fd:e3:bc:92:b8:06:72:f7:81:34:74:36:74:52: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A6:63:21:61:78:35:E0:B9:AB:56:2D:CF:4A:73:E1:F5:DA:42:82 X509v3 Authority Key Identifier: keyid:5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:df:1d:e1:b2:38:b4:6b:7b:48:25:f5:05:22:e9:13:d8:c3: f6:49:0a:89:f9:ac:ff:b5:d6:52:1a:52:d2:cf:d2:f4:be:4e: 5a:0b:8a:71:fb:1a:9c:1f:b9:a5:30:2f:72:d8:e4:6a:9b:cb: 34:a7:83:e5:44:c9:b7:d4:2d:d4:3f:78:06:3f:39:f7:cd:7c: a0:f5:a9:f0:12:7a:d0:25:cf:3f:45:1b:ea:28:74:8b:f2:0b: 08:be:c7:7a:1f:1f:aa:5a:29:45:07:e5:fe:2a:ff:c0:0a:d1: a7:5b:45:c0:d0:fc:7a:de:f2:34:89:28:1c:7c:df:63:b7:09: d3:7d:08:f6:a2:d7:a7:21:ea:f5:72:b2:35:ae:c0:76:8c:5f: 95:0d:18:35:af:c0:99:79:71:30:90:61:a0:c6:07:8e:7a:fe: 33:c4:89:a7:1d:1c:b0:cd:99:8b:83:53:60:1a:ed:42:86:a0: 44:1d:de:76:03:40:d9:4e:d7:dc:b4:f5:85:62:36:25:3b:50: a8:de:6b:76:37:68:cb:24:08:6f:1b:40:bc:ad:1d:ba:49:9e: 03:70:e2:fb:d2:29:59:0d:38:2a:c2:dd:6e:85:6e:5a:05:2f: 9b:2a:94:2c:7a:9d:4d:80:1d:fb:11:e2:83:8e:76:fe:0c:0f: 04:c2:18:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42K1L9nsRMO5GnCeQfovMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOWY4Y2MyNmFiZDM5ZmIzZWQ4NDM5NTk1Njc2N2E4MjZm OTRkNWIwHhcNMjUxMjI2MDkwMDMyWhcNMjUxMjI3MDkwMDMyWjAzMTEwLwYDVQQD EyhmMmE2NjMyMTYxNzgzNWUwYjlhYjU2MmRjZjRhNzNlMWY1ZGE0MjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRfFwdpP0XoLgFt5IJOUnZO2yRSN 9QLD7pjwo6FcAhAOaP09Ut/EXnSuQQK2HS4Jq+DF9NsjRMGAc01VfKx0KQ/aM6IC 3pVEarg8ZaAIStiapOB/Nnld1NNt+h3vXXI7otiTF/C7eCLUjheFsslDXN1wA6pC DQN0xG8bOQaXgwBO0lnhS0IYzwKsm6iNfcoFwQBiW1i67pF65B7rk9jDNxkasF5y 9NGMepVklY/Q/ZwbAy0HpsTPXOVhZTqGOmlUIMwe19ZPp2O7YJ5NL1tflWO5zWDi DMRg5pnAO+z13yTTcrxtUAbauqtUe8qzN2JW/eO8krgGcveBNHQ2dFK4fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKmYyFheDXguatWLc9Kc+H12kKCMB8GA1UdIwQY MBaAFFqfjMJqvTn7PthDlZVnZ6gm+U1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3AtTXdtcTlPZnMtMkVPVmxXZG5xQ2I1VFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80NmIyYTktODFkZC00MGI1LTg4OWYt ZDA3YzYwMDAxYzU1LzEvV3AtTXdtcTlPZnMtMkVPVmxXZG5xQ2I1VFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80NmIyYTktODFkZC00MGI1LTg4OWYtZDA3YzYwMDAxYzU1 LzEvV3AtTXdtcTlPZnMtMkVPVmxXZG5xQ2I1VFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAed8d4bI4 tGt7SCX1BSLpE9jD9kkKifms/7XWUhpS0s/S9L5OWguKcfsanB+5pTAvctjkapvL NKeD5UTJt9Qt1D94Bj859818oPWp8BJ60CXPP0Ub6ih0i/ILCL7Heh8fqlopRQfl /ir/wArRp1tFwND8et7yNIkoHHzfY7cJ030I9qLXpyHq9XKyNa7AdoxflQ0YNa/A mXlxMJBhoMYHjnr+M8SJpx0csM2Zi4NTYBrtQoagRB3edgNA2U7X3LT1hWI2JTtQ qN5rdjdoyyQIbxtAvK0dukmeA3Di+9IpWQ04KsLdboVuWgUvmyqULHqdTYAd+xHi g452/gwPBMIYKQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:04 2025 by rpki-client