This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json) Hash identifier: 08uQ5e1ICacjZYQVwTINR1R0TKASGgGa0faAMNqM0CY= Subject key identifier: A4:18:E6:A8:0B:18:C9:21:AD:50:CF:6C:FF:D7:65:31:B3:8F:53:90 Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Certificate serial: 019B3EDAAF3CDEDFB021D19C6CC134EA80D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft Manifest number: 0C3B Signing time: Sun 21 Dec 2025 03:01:17 +0000 Manifest this update: Sun 21 Dec 2025 03:01:17 +0000 Manifest next update: Mon 22 Dec 2025 03:01:17 +0000 Files and hashes: 1: XIE6pSr5Se_ddJ-sbF0LHvUWRNo.roa (hash: ksy2bMoShyEx+Z2LrrV0ovXdXkbwK/G4ElQgVhhEd+k=) 2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: jquZadbiF0y6LbCHNJzttQ0pJhQk6RAsYKfIt45ikWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:af:3c:de:df:b0:21:d1:9c:6c:c1:34:ea:80:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Validity Not Before: Dec 21 03:01:17 2025 GMT Not After : Dec 22 03:01:17 2025 GMT Subject: CN=a418e6a80b18c921ad50cf6cffd76531b38f5390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d4:2c:22:52:7e:74:e8:c2:df:ca:2a:37:bd: 39:88:76:df:92:e5:6e:20:37:79:61:c7:9b:98:ad: 13:79:2e:3c:2b:8f:76:ed:75:08:d4:1d:7a:41:a8: 24:b6:92:23:01:7a:0f:0f:78:e5:5d:e4:dd:53:f0: 81:f5:5d:53:cf:97:fb:f1:99:69:f1:f0:bb:49:fa: 9a:83:c6:fb:07:dc:76:2f:be:19:55:46:bd:a3:cb: 04:e4:8c:9c:21:35:11:a3:d7:07:79:42:b7:e7:ec: a0:76:79:3d:bc:5e:71:47:4e:f7:a1:ea:70:e0:80: 37:4d:97:cd:51:a5:fa:e1:5f:56:e9:46:7c:cf:2d: fb:81:43:4e:a8:bd:f8:a0:ff:d9:2c:47:78:dc:c6: f0:83:80:9c:13:f9:d1:c2:14:28:c7:6f:1e:70:93: e4:74:a2:ad:14:d2:3e:2a:2c:1b:5b:2e:46:22:12: 93:8d:4b:3e:59:98:a8:c6:98:de:5d:5a:46:a4:55: 49:0a:a5:2b:7e:a6:6f:2c:c3:56:f0:73:96:43:da: 41:a0:2f:f9:0d:37:36:ba:00:6f:19:b8:c4:e8:b1: e6:a7:e5:30:9f:56:23:9c:37:e7:2a:e5:7e:7b:7a: 5a:88:8d:89:55:a3:df:2e:a4:18:91:7b:09:2a:9a: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:18:E6:A8:0B:18:C9:21:AD:50:CF:6C:FF:D7:65:31:B3:8F:53:90 X509v3 Authority Key Identifier: keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f7:33:03:74:67:70:ea:6f:dc:ef:68:21:de:74:05:99:d1: d6:0a:62:43:0c:e5:3b:c8:b7:42:b5:b3:55:0d:87:2f:68:20: ce:b3:f5:12:7b:62:63:31:b4:2b:41:5d:e5:b3:95:65:27:5d: 4b:81:7c:85:f3:04:c8:12:54:49:28:d8:77:68:18:cf:89:a2: de:48:04:4a:99:02:9c:13:0c:5b:e5:31:7c:c7:05:0f:5f:04: b8:ce:52:c2:ea:41:23:e8:98:65:d2:44:33:8e:60:a6:8e:3a: 1b:c8:65:ac:35:c6:6c:79:99:41:f3:9a:0f:e6:ad:fa:08:ab: 73:14:8d:79:e6:84:93:63:b2:84:46:58:85:25:cb:f7:83:90: 01:09:fc:e9:c8:4f:79:52:98:c3:0e:cc:57:d6:91:50:20:b6: 53:d3:2e:4f:be:4f:0c:03:1d:8d:c4:04:38:64:61:00:e9:da: 03:a4:40:38:cd:a8:a6:63:d3:ff:eb:a4:80:57:70:76:2f:71: e0:b3:34:41:1b:56:52:80:9f:88:f0:82:15:e2:b5:11:0d:7d: e4:a3:24:1a:bb:34:c4:56:4a:49:84:78:2b:8b:cd:fc:16:c4: 45:5c:4e:15:16:95:08:b0:c7:bc:cf:bf:6a:8b:34:10:22:ab: 38:71:a3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2q883t+wIdGcbME06oDSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzY0MmQxYWIzOWQzMDllYzVmMzNlNGU4ODE0YWRjMzU4 NDgyNWYwHhcNMjUxMjIxMDMwMTE3WhcNMjUxMjIyMDMwMTE3WjAzMTEwLwYDVQQD EyhhNDE4ZTZhODBiMThjOTIxYWQ1MGNmNmNmZmQ3NjUzMWIzOGY1MzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtQsIlJ+dOjC38oqN705iHbfkuVu IDd5YcebmK0TeS48K4927XUI1B16QagktpIjAXoPD3jlXeTdU/CB9V1Tz5f78Zlp 8fC7Sfqag8b7B9x2L74ZVUa9o8sE5IycITURo9cHeUK35+ygdnk9vF5xR073oepw 4IA3TZfNUaX64V9W6UZ8zy37gUNOqL34oP/ZLEd43Mbwg4CcE/nRwhQox28ecJPk dKKtFNI+KiwbWy5GIhKTjUs+WZioxpjeXVpGpFVJCqUrfqZvLMNW8HOWQ9pBoC/5 DTc2ugBvGbjE6LHmp+Uwn1YjnDfnKuV+e3paiI2JVaPfLqQYkXsJKprlmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQY5qgLGMkhrVDPbP/XZTGzj1OQMB8GA1UdIwQY MBaAFMI2QtGrOdMJ7F8z5OiBStw1hIJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQt MjI2Nzk2OGI2NTJmLzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQtMjI2Nzk2OGI2NTJm LzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPczA3Rn cOpv3O9oId50BZnR1gpiQwzlO8i3QrWzVQ2HL2ggzrP1EntiYzG0K0Fd5bOVZSdd S4F8hfMEyBJUSSjYd2gYz4mi3kgESpkCnBMMW+UxfMcFD18EuM5SwupBI+iYZdJE M45gpo46G8hlrDXGbHmZQfOaD+at+gircxSNeeaEk2OyhEZYhSXL94OQAQn86chP eVKYww7MV9aRUCC2U9MuT75PDAMdjcQEOGRhAOnaA6RAOM2opmPT/+ukgFdwdi9x 4LM0QRtWUoCfiPCCFeK1EQ195KMkGrs0xFZKSYR4K4vN/BbERVxOFRaVCLDHvM+/ aos0ECKrOHGjLg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:06:37 2025 by rpki-client