This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft File: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json) Hash identifier: DLyWXR7MqRRJxxswF5GVPjQR0K7pih3bF4RRp4Jm67w= Subject key identifier: AB:8C:4C:36:59:6E:85:04:8A:CD:C0:61:0B:94:9A:85:07:8F:A8:B9 Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 Certificate issuer: /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Certificate serial: 019B21070A6D72CF1D4ADC9ABA23A43A63DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft Manifest number: 0F72 Signing time: Mon 15 Dec 2025 08:01:07 +0000 Manifest this update: Mon 15 Dec 2025 08:01:07 +0000 Manifest next update: Tue 16 Dec 2025 08:01:07 +0000 Files and hashes: 1: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (hash: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=) 2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: xlIGU54V1xPQUIVQV0eMOROr1I/wCcn+C3q2Gk/5ZMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:07:0a:6d:72:cf:1d:4a:dc:9a:ba:23:a4:3a:63:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Validity Not Before: Dec 15 08:01:07 2025 GMT Not After : Dec 16 08:01:07 2025 GMT Subject: CN=ab8c4c36596e85048acdc0610b949a85078fa8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c0:31:a6:8e:45:47:03:cb:74:fe:42:89:72: e3:da:8b:2b:90:1c:78:fe:d9:d5:db:e1:cf:d8:32: f7:65:4c:f2:de:0a:9d:93:04:3f:43:a6:51:bd:36: 32:3f:fd:60:fd:ce:33:94:21:1c:f2:9b:d2:7f:b6: a1:27:9c:6d:75:b9:ab:fd:f9:09:bb:f5:20:41:53: db:35:ac:f8:27:7b:ac:b6:57:b0:54:cf:6b:36:ad: 23:7c:6c:06:39:d5:89:f6:85:b3:27:71:4a:5a:54: ab:5a:35:2e:4f:c5:4e:0a:71:9a:1a:e8:08:5e:42: 59:7b:f4:3a:20:bb:18:bb:81:09:47:85:21:cd:e7: 28:57:b6:71:fc:81:10:c2:d1:0c:35:50:b4:48:98: 61:1b:a3:d7:6a:9c:04:89:31:44:f3:fc:32:3b:08: 7e:20:b6:b0:88:a0:44:d6:15:13:4a:f1:9e:94:7d: 01:ce:5c:f4:42:9b:95:58:7b:42:60:33:e1:c3:4a: 31:9f:ab:09:29:80:7b:bb:3a:90:dd:65:54:6d:ad: bc:b7:f9:63:6c:e3:2d:3d:f2:b1:79:45:c4:92:5b: 50:9e:a2:bb:45:d6:e0:5e:fb:9a:d0:68:84:20:9c: ff:0f:86:ff:d7:db:c6:f9:0e:f7:68:de:6b:73:6b: 1d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:8C:4C:36:59:6E:85:04:8A:CD:C0:61:0B:94:9A:85:07:8F:A8:B9 X509v3 Authority Key Identifier: keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c9:a7:a5:5f:b3:fb:df:72:69:e6:58:31:b6:1a:4e:d9:72: b8:23:f6:33:9e:14:6f:78:a7:d2:bb:96:f3:5b:ba:15:e7:26: b5:38:01:6f:05:13:0a:14:53:44:55:08:e0:65:a1:7f:fa:03: 8f:f7:09:97:47:79:d2:85:f9:c7:52:b4:7a:73:e0:5e:c2:51: b8:c6:7d:67:e5:92:7a:2d:d9:6e:af:09:11:df:a8:96:f8:34: 58:b9:26:68:0b:65:a1:b1:5e:5e:33:ac:c3:2c:e7:89:e2:47: d4:6e:73:c1:cd:b0:2d:9c:b3:6d:b2:05:5b:15:51:44:f3:8f: 54:04:1d:db:ee:55:66:f6:7c:c4:a5:e2:6c:c4:5c:0f:49:7b: 36:19:2f:87:b5:f8:38:2a:a5:91:9a:9e:94:4c:3f:9b:2b:cd: 15:e6:c1:e7:f9:58:1d:a2:82:05:3f:2a:ff:ad:db:6a:0a:bc: 5b:05:30:e7:9b:ee:b3:b0:38:06:54:6d:05:3c:1d:78:c5:71: 6c:0b:82:9d:bc:89:67:f1:52:26:54:c0:8e:87:f0:1f:59:4d: ec:5f:7b:42:98:6c:31:8b:a6:7c:21:f5:05:a4:97:33:e6:87: 33:04:d0:77:a0:32:06:e7:b0:c6:28:22:eb:db:15:f8:7c:c2: 9f:f9:ea:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBwptcs8dStyauiOkOmPfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj NGFkODQwHhcNMjUxMjE1MDgwMTA3WhcNMjUxMjE2MDgwMTA3WjAzMTEwLwYDVQQD EyhhYjhjNGMzNjU5NmU4NTA0OGFjZGMwNjEwYjk0OWE4NTA3OGZhOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8Axpo5FRwPLdP5CiXLj2osrkBx4 /tnV2+HP2DL3ZUzy3gqdkwQ/Q6ZRvTYyP/1g/c4zlCEc8pvSf7ahJ5xtdbmr/fkJ u/UgQVPbNaz4J3ustlewVM9rNq0jfGwGOdWJ9oWzJ3FKWlSrWjUuT8VOCnGaGugI XkJZe/Q6ILsYu4EJR4UhzecoV7Zx/IEQwtEMNVC0SJhhG6PXapwEiTFE8/wyOwh+ ILawiKBE1hUTSvGelH0Bzlz0QpuVWHtCYDPhw0oxn6sJKYB7uzqQ3WVUba28t/lj bOMtPfKxeUXEkltQnqK7RdbgXvua0GiEIJz/D4b/19vG+Q73aN5rc2sdFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuMTDZZboUEis3AYQuUmoUHj6i5MB8GA1UdIwQY MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1 LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXcmnpV+z +99yaeZYMbYaTtlyuCP2M54Ub3in0ruW81u6FecmtTgBbwUTChRTRFUI4GWhf/oD j/cJl0d50oX5x1K0enPgXsJRuMZ9Z+WSei3Zbq8JEd+olvg0WLkmaAtlobFeXjOs wyznieJH1G5zwc2wLZyzbbIFWxVRRPOPVAQd2+5VZvZ8xKXibMRcD0l7Nhkvh7X4 OCqlkZqelEw/myvNFebB5/lYHaKCBT8q/63bagq8WwUw55vus7A4BlRtBTwdeMVx bAuCnbyJZ/FSJlTAjofwH1lN7F97QphsMYumfCH1BaSXM+aHMwTQd6AyBuewxigi 69sV+HzCn/nqFg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:23:25 2025 by rpki-client