This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft File: WRoP7x77ru2z0o1Dnz1cz639iHM.mft (raw, json) Hash identifier: KL9RDKtBmOmK0/XKxgX2nrKwXwqe5AAW+tjLpI5QZno= Subject key identifier: C3:D3:75:6A:BD:A3:FD:43:7C:F4:06:02:7C:DC:07:B1:F4:3B:27:67 Authority key identifier: 59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73 Certificate issuer: /CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873 Certificate serial: 019B38A144DB04250ADB4ECC51897A628277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 22:00:51 +0000 Manifest this update: Fri 19 Dec 2025 22:00:51 +0000 Manifest next update: Sat 20 Dec 2025 22:00:51 +0000 Files and hashes: 1: LUyjz5khkwF0up_SKtv4Oh6tO7Q.roa (hash: rBnLOroG+8zcnjSq90aHGH7YJtrPhERWyt49grALMsE=) 2: WRoP7x77ru2z0o1Dnz1cz639iHM.crl (hash: 1SIkqaJWJ91lhBoZkhDZgH8ZclF2w7+ihGis4pge0JM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:44:db:04:25:0a:db:4e:cc:51:89:7a:62:82:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591a0fef1efbaeedb3d28d439f3d5ccfadfd8873 Validity Not Before: Dec 19 22:00:51 2025 GMT Not After : Dec 20 22:00:51 2025 GMT Subject: CN=c3d3756abda3fd437cf406027cdc07b1f43b2767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:25:af:01:7a:1b:20:56:cf:8e:54:9e:e3: 3e:34:65:ac:a1:98:f0:cd:cd:d6:0d:de:e3:69:af: 51:d9:22:ee:6d:02:98:60:2a:e8:17:f6:9f:e8:de: ca:7b:9d:9d:09:35:d5:69:f3:7c:28:2c:8c:d3:be: 12:42:c6:62:0d:91:43:8b:d3:bf:d1:86:92:ab:20: 8e:97:37:5f:cc:49:5a:4d:29:0b:0c:64:bf:58:10: a2:00:2e:83:a4:4a:93:ba:1c:28:9a:f5:50:36:60: bc:40:be:1f:98:b3:c3:39:5e:03:f6:a0:ea:85:2d: 79:61:4d:6c:be:ae:91:2f:06:01:9a:a2:76:b9:65: 46:d3:79:0b:9e:11:4f:65:47:c6:d9:2b:af:dc:ea: 46:89:e4:78:09:c6:71:59:55:57:4d:a8:3d:f6:ae: f4:e7:43:32:53:2c:5d:be:c5:aa:91:7c:34:8b:f2: 5e:17:df:dd:02:7c:39:b2:9b:46:fe:b9:ea:f0:35: 61:6c:3f:30:c1:e8:69:b1:66:d0:34:aa:9d:28:a0: 14:09:5e:68:e8:43:35:29:c6:26:b5:5f:ae:49:b5: 5a:af:3f:14:04:49:0f:05:b3:0b:e8:4b:50:dc:79: 87:31:70:87:5f:fc:45:d0:47:c6:d6:ba:e2:2a:cb: 50:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D3:75:6A:BD:A3:FD:43:7C:F4:06:02:7C:DC:07:B1:F4:3B:27:67 X509v3 Authority Key Identifier: keyid:59:1A:0F:EF:1E:FB:AE:ED:B3:D2:8D:43:9F:3D:5C:CF:AD:FD:88:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRoP7x77ru2z0o1Dnz1cz639iHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/217bee-cab6-422f-88cc-c2664e37c327/1/WRoP7x77ru2z0o1Dnz1cz639iHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:40:70:2f:35:4a:52:c7:8a:65:41:35:61:0f:c9:0b:39:41: 60:61:c9:13:40:5a:1f:0c:54:95:22:ad:9f:e5:a6:bf:d9:86: cc:db:69:38:da:a6:79:37:99:d3:e6:1a:22:bc:57:80:94:c1: 83:96:bb:c2:4b:0e:cc:50:62:e0:12:8a:6c:ce:7d:c8:40:bd: 9b:26:92:07:cc:ff:d7:ec:d9:09:cc:91:26:4a:aa:fb:71:0d: 55:b4:f2:42:e8:62:84:28:8a:5a:68:e3:09:89:0e:62:d5:19: 43:e0:ba:17:ef:3a:ae:32:f0:10:29:50:dd:fd:ed:8e:37:9e: 20:40:5d:d0:6f:4a:48:a4:9c:25:63:5e:a3:f8:0f:8f:47:70: 7d:31:88:c0:49:1a:d1:2a:da:68:bd:82:77:38:62:2d:70:a5: 4d:ae:b2:1e:11:49:9a:64:b8:c5:57:ea:1a:bf:94:9d:b6:41: d2:02:a2:4d:12:f3:46:4e:df:81:10:1e:5d:97:1f:94:47:7f: 45:80:3d:0e:f9:1e:72:69:51:0f:ba:fc:93:ae:89:64:99:3e: c9:b7:a3:ec:bb:48:a3:da:40:68:00:c7:c6:7d:bd:be:c4:03: c2:9b:32:bb:d4:d4:0a:39:0f:2a:c3:6c:31:8e:90:39:b2:af: a5:51:95:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oUTbBCUK207MUYl6YoJ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MWEwZmVmMWVmYmFlZWRiM2QyOGQ0MzlmM2Q1Y2NmYWRm ZDg4NzMwHhcNMjUxMjE5MjIwMDUxWhcNMjUxMjIwMjIwMDUxWjAzMTEwLwYDVQQD EyhjM2QzNzU2YWJkYTNmZDQzN2NmNDA2MDI3Y2RjMDdiMWY0M2IyNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPglrwF6GyBWz45UnuM+NGWsoZjw zc3WDd7jaa9R2SLubQKYYCroF/af6N7Ke52dCTXVafN8KCyM074SQsZiDZFDi9O/ 0YaSqyCOlzdfzElaTSkLDGS/WBCiAC6DpEqTuhwomvVQNmC8QL4fmLPDOV4D9qDq hS15YU1svq6RLwYBmqJ2uWVG03kLnhFPZUfG2Suv3OpGieR4CcZxWVVXTag99q70 50MyUyxdvsWqkXw0i/JeF9/dAnw5sptG/rnq8DVhbD8wwehpsWbQNKqdKKAUCV5o 6EM1KcYmtV+uSbVarz8UBEkPBbML6EtQ3HmHMXCHX/xF0EfG1rriKstQLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPTdWq9o/1DfPQGAnzcB7H0OydnMB8GA1UdIwQY MBaAFFkaD+8e+67ts9KNQ589XM+t/YhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JvUDd4NzdydTJ6MG8xRG56MWN6NjM5aUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yMTdiZWUtY2FiNi00MjJmLTg4Y2Mt YzI2NjRlMzdjMzI3LzEvV1JvUDd4NzdydTJ6MG8xRG56MWN6NjM5aUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yMTdiZWUtY2FiNi00MjJmLTg4Y2MtYzI2NjRlMzdjMzI3 LzEvV1JvUDd4NzdydTJ6MG8xRG56MWN6NjM5aUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1EBwLzVK UseKZUE1YQ/JCzlBYGHJE0BaHwxUlSKtn+Wmv9mGzNtpONqmeTeZ0+YaIrxXgJTB g5a7wksOzFBi4BKKbM59yEC9myaSB8z/1+zZCcyRJkqq+3ENVbTyQuhihCiKWmjj CYkOYtUZQ+C6F+86rjLwEClQ3f3tjjeeIEBd0G9KSKScJWNeo/gPj0dwfTGIwEka 0SraaL2CdzhiLXClTa6yHhFJmmS4xVfqGr+UnbZB0gKiTRLzRk7fgRAeXZcflEd/ RYA9DvkecmlRD7r8k66JZJk+ybej7LtIo9pAaADHxn29vsQDwpsyu9TUCjkPKsNs MY6QObKvpVGVpw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:33:39 2025 by rpki-client