This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft File: Wva8LaPCxkKxSuEpwb__JnhS1vw.mft (raw, json) Hash identifier: JTJfn1maUxBr48Df4WBz3ESLU4oyVhZNIdfagDhP9Is= Subject key identifier: 64:5B:B4:44:47:77:0E:00:11:B7:0B:21:98:AA:0F:30:83:05:CA:9D Authority key identifier: 5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC Certificate issuer: /CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Certificate serial: 019B59AC69E1648DCE864797ACEA688F0442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft Manifest number: 01BC Signing time: Fri 26 Dec 2025 08:00:30 +0000 Manifest this update: Fri 26 Dec 2025 08:00:30 +0000 Manifest next update: Sat 27 Dec 2025 08:00:30 +0000 Files and hashes: 1: 6kuYBzw429hTfcmzLy4TgFrJKDQ.roa (hash: v8D/cGNdDOxEWcCfZs7ngYEeBNL4fY/mcOnmBbmdr7k=) 2: Wva8LaPCxkKxSuEpwb__JnhS1vw.crl (hash: elg+kdavK3PV7lDMsbBI4U8gMXJKSqUeZN8MCk1v9L0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:69:e1:64:8d:ce:86:47:97:ac:ea:68:8f:04:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Validity Not Before: Dec 26 08:00:30 2025 GMT Not After : Dec 27 08:00:30 2025 GMT Subject: CN=645bb44447770e0011b70b2198aa0f308305ca9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:28:96:1b:68:58:6b:98:49:6c:a9:ce:ae:e7: e7:c3:48:94:12:e8:4f:a8:a2:54:d2:2f:4e:27:ee: 28:ae:66:b1:3a:53:59:b0:ae:46:ea:5f:36:c7:5b: ba:06:4e:c7:65:74:2a:3c:81:4a:e1:0c:43:eb:54: 2b:3c:2d:0b:9e:0e:f3:d4:98:53:42:b8:29:c9:ac: fc:3b:14:9a:e2:cf:48:1a:f5:01:43:1f:7c:d9:2f: 1a:75:46:8b:85:10:79:96:85:fb:07:0d:49:88:d7: bd:be:0f:e7:78:14:6b:ca:41:04:6d:8b:05:31:ef: d2:27:9e:16:5d:3f:9b:11:38:a9:19:50:50:f3:87: 34:d5:99:29:d8:47:87:15:60:fc:e0:cf:d5:bf:1f: 14:d5:e7:85:2f:57:ba:94:2a:53:24:ee:5e:0c:21: 52:cd:c2:8e:c8:22:eb:25:56:8c:cd:a7:73:61:25: 29:2b:58:39:96:08:9a:cf:54:27:56:f9:9f:a6:bb: 07:84:7a:31:c4:3d:e7:96:2c:44:3a:18:ef:8b:92: 32:34:c5:0f:6b:bd:fe:e5:50:93:ab:5d:fb:e2:05: 41:27:90:52:8e:86:f3:d2:22:30:4e:6d:e0:7b:84: 8a:43:54:60:bf:1b:72:c3:50:d5:1f:22:c5:e0:96: bd:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5B:B4:44:47:77:0E:00:11:B7:0B:21:98:AA:0F:30:83:05:CA:9D X509v3 Authority Key Identifier: keyid:5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:44:c1:a6:12:c4:c7:d6:86:08:b3:f9:96:68:6c:7b:38:8b: 93:c6:d3:ad:c1:28:f1:b1:b2:cc:ca:42:bd:2f:de:a7:e4:91: f4:50:39:47:96:18:cd:6f:a0:1b:3d:56:b1:5f:c9:4d:b4:30: 34:8a:64:6b:24:51:c5:81:89:45:ab:3f:c1:99:b9:e8:75:d3: ec:4f:a4:5c:c5:c1:90:bb:61:9d:54:0b:dd:03:c1:35:48:4e: 08:e1:cd:51:c8:68:98:ca:b7:a5:a1:f1:12:47:a7:ea:2e:05: 62:bc:94:55:ce:6f:dd:f4:57:9c:3f:91:fc:8a:4a:78:18:7f: 12:4d:f9:1a:f5:c0:5e:fb:73:e0:e7:fc:98:98:bd:54:3c:a8: 06:fd:e7:df:f8:01:c8:66:6b:e7:e2:89:60:b1:dd:3e:d2:6a: 82:ce:02:a0:9e:f9:a3:b5:a5:bf:6e:29:76:85:35:43:be:2b: 9d:5f:2f:6f:81:e3:51:e4:57:78:47:0b:5b:b9:96:72:3e:4f: 7d:c5:e3:02:e6:77:34:75:68:d2:d7:77:64:c2:c3:c0:9f:76: b3:e1:f3:d1:94:09:fe:4a:3f:88:b4:14:2b:11:33:e6:3a:a0: e3:42:f0:e1:b0:5d:da:07:47:13:dc:c3:9d:89:20:a7:72:b6: 02:84:c0:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrGnhZI3OhkeXrOpojwRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZjZiYzJkYTNjMmM2NDJiMTRhZTEyOWMxYmZmZjI2Nzg1 MmQ2ZmMwHhcNMjUxMjI2MDgwMDMwWhcNMjUxMjI3MDgwMDMwWjAzMTEwLwYDVQQD Eyg2NDViYjQ0NDQ3NzcwZTAwMTFiNzBiMjE5OGFhMGYzMDgzMDVjYTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCiWG2hYa5hJbKnOrufnw0iUEuhP qKJU0i9OJ+4ormaxOlNZsK5G6l82x1u6Bk7HZXQqPIFK4QxD61QrPC0Lng7z1JhT Qrgpyaz8OxSa4s9IGvUBQx982S8adUaLhRB5loX7Bw1JiNe9vg/neBRrykEEbYsF Me/SJ54WXT+bETipGVBQ84c01Zkp2EeHFWD84M/Vvx8U1eeFL1e6lCpTJO5eDCFS zcKOyCLrJVaMzadzYSUpK1g5lgiaz1QnVvmfprsHhHoxxD3nlixEOhjvi5IyNMUP a73+5VCTq1374gVBJ5BSjobz0iIwTm3ge4SKQ1Rgvxtyw1DVHyLF4Ja9zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRbtERHdw4AEbcLIZiqDzCDBcqdMB8GA1UdIwQY MBaAFFr2vC2jwsZCsUrhKcG//yZ4Utb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTkt OWFkYWE0YjJiMTk2LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTktOWFkYWE0YjJiMTk2 LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0TBphLE x9aGCLP5lmhseziLk8bTrcEo8bGyzMpCvS/ep+SR9FA5R5YYzW+gGz1WsV/JTbQw NIpkayRRxYGJRas/wZm56HXT7E+kXMXBkLthnVQL3QPBNUhOCOHNUchomMq3paHx Eken6i4FYryUVc5v3fRXnD+R/IpKeBh/Ek35GvXAXvtz4Of8mJi9VDyoBv3n3/gB yGZr5+KJYLHdPtJqgs4CoJ75o7Wlv24pdoU1Q74rnV8vb4HjUeRXeEcLW7mWcj5P fcXjAuZ3NHVo0td3ZMLDwJ92s+Hz0ZQJ/ko/iLQUKxEz5jqg40Lw4bBd2gdHE9zD nYkgp3K2AoTAmw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:56 2025 by rpki-client