This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft File: WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json) Hash identifier: /j8kOFkF4yuhCMdNyFxhBUnjGPNZe3gmyEEMO/V4U3k= Subject key identifier: 70:72:1C:41:81:B8:79:C2:AD:6A:33:C6:EB:55:CD:F1:F2:78:F4:19 Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Certificate serial: 019B34C62E264BD1D169639F37B323178511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft Manifest number: 026F Signing time: Fri 19 Dec 2025 04:02:41 +0000 Manifest this update: Fri 19 Dec 2025 04:02:41 +0000 Manifest next update: Sat 20 Dec 2025 04:02:41 +0000 Files and hashes: 1: 2mKN6eYxCZSzg1HkhTBmFH-Muzs.roa (hash: vCnqByRm0RvU7dzU3TpA6IT8qwABaBJlH4t+NDPI9V0=) 2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: 7UonCNT7XDZUPOKr+isNOTZeBevQ39v9MWIAneKy/Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c6:2e:26:4b:d1:d1:69:63:9f:37:b3:23:17:85:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Validity Not Before: Dec 19 04:02:41 2025 GMT Not After : Dec 20 04:02:41 2025 GMT Subject: CN=70721c4181b879c2ad6a33c6eb55cdf1f278f419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:c7:a4:30:b5:d2:19:29:3e:7c:04:b9:59: 22:c4:f6:a9:5a:72:89:59:f9:7b:a6:62:5c:ea:ac: 1a:09:7c:0f:68:90:2d:17:96:f7:51:e5:50:f5:b5: 9a:b0:85:2d:d7:f4:3b:66:6c:21:44:86:19:bd:11: d6:77:ec:5a:f8:0b:c3:3f:c8:27:82:7d:d5:b2:46: 8c:50:2a:ee:2a:c6:dd:8f:61:d7:79:25:c5:e1:8b: 43:b3:5a:7e:bf:ee:0d:98:c5:55:12:b6:1b:e7:e9: ef:ae:a5:8a:89:10:6c:9f:02:e5:09:ea:3f:d9:bc: 0b:fa:00:dd:db:68:2f:39:03:a9:31:90:07:82:c4: a6:7b:a9:9b:b4:4b:5f:6e:81:65:27:7e:b4:dc:14: 48:9c:46:48:c2:0d:3a:fd:88:ef:b8:10:9d:f2:2c: 55:98:bf:ff:4d:1f:04:3b:92:67:82:0d:d5:90:a8: a9:2b:fb:17:c3:f2:c3:4d:4f:6d:24:f6:37:9c:b0: 9e:65:b5:7f:3d:0f:94:46:e6:a8:f3:82:77:bb:4b: 54:fa:74:44:eb:d3:8f:35:c6:10:cb:50:5d:51:27: fd:5b:6f:07:cb:49:b0:fc:c7:06:01:61:b0:d5:37: fb:e4:1e:45:52:0b:e3:7a:36:6f:6f:4b:df:98:d8: a4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:1C:41:81:B8:79:C2:AD:6A:33:C6:EB:55:CD:F1:F2:78:F4:19 X509v3 Authority Key Identifier: keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:aa:6f:84:ff:f0:e8:6b:b4:52:6a:f4:73:1c:78:4c:4c:90: d4:00:26:5c:39:e0:a0:ea:ff:fb:72:17:a3:d1:f6:45:ed:0b: d4:52:3d:10:21:cc:19:77:b6:ff:d2:43:e3:09:30:fb:91:42: c4:20:50:cf:83:b1:a7:65:ec:bf:07:6a:6a:5d:8d:5e:6e:9d: 89:d4:71:68:8e:79:fb:f6:39:89:8a:50:67:89:46:c1:13:cd: 46:96:b6:67:ba:ff:0b:a2:a2:1c:0c:92:d3:9f:a7:a7:3a:c4: e7:ea:14:b5:a8:9a:da:18:39:30:8c:a9:5d:a4:1b:2e:33:4e: 6c:13:36:76:b2:30:bc:c0:41:fa:fc:3a:d6:f8:3c:68:94:09: 22:60:37:40:20:dd:56:ae:9b:0c:51:73:e2:eb:4c:c9:f7:ca: e7:ce:77:6d:b3:4e:d7:1c:8b:4e:93:d8:48:7c:63:c6:9d:3e: 1d:a7:a4:5b:0b:d9:db:ed:58:17:8d:11:57:d8:bc:b8:66:d2: ff:15:3d:17:6f:92:0c:b1:cd:51:ba:06:a6:7d:30:f9:75:85: 2a:ec:3a:8b:52:86:f2:ae:24:f8:4a:71:9d:52:0d:db:dd:92: 7e:f5:18:73:c7:d4:76:a1:41:c5:8a:69:f1:93:e0:fd:d9:77: 42:44:ea:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xi4mS9HRaWOfN7MjF4URMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ1NWViY2IwM2JmZjJhMmQ5NzVhZDQwODFmOTQxOWJh Y2FmMzUwHhcNMjUxMjE5MDQwMjQxWhcNMjUxMjIwMDQwMjQxWjAzMTEwLwYDVQQD Eyg3MDcyMWM0MTgxYjg3OWMyYWQ2YTMzYzZlYjU1Y2RmMWYyNzhmNDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUXHpDC10hkpPnwEuVkixPapWnKJ Wfl7pmJc6qwaCXwPaJAtF5b3UeVQ9bWasIUt1/Q7ZmwhRIYZvRHWd+xa+AvDP8gn gn3VskaMUCruKsbdj2HXeSXF4YtDs1p+v+4NmMVVErYb5+nvrqWKiRBsnwLlCeo/ 2bwL+gDd22gvOQOpMZAHgsSme6mbtEtfboFlJ3603BRInEZIwg06/YjvuBCd8ixV mL//TR8EO5Jngg3VkKipK/sXw/LDTU9tJPY3nLCeZbV/PQ+URuao84J3u0tU+nRE 69OPNcYQy1BdUSf9W28Hy0mw/McGAWGw1Tf75B5FUgvjejZvb0vfmNik9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHByHEGBuHnCrWozxutVzfHyePQZMB8GA1UdIwQY MBaAFFl0VevLA7/yotl1rUCB+UGbrK81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYt ZWYzNGRkNGRlNTcyLzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYtZWYzNGRkNGRlNTcy LzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeapvhP/w 6Gu0Umr0cxx4TEyQ1AAmXDngoOr/+3IXo9H2Re0L1FI9ECHMGXe2/9JD4wkw+5FC xCBQz4Oxp2Xsvwdqal2NXm6didRxaI55+/Y5iYpQZ4lGwRPNRpa2Z7r/C6KiHAyS 05+npzrE5+oUtaia2hg5MIypXaQbLjNObBM2drIwvMBB+vw61vg8aJQJImA3QCDd Vq6bDFFz4utMyffK5853bbNO1xyLTpPYSHxjxp0+HaekWwvZ2+1YF40RV9i8uGbS /xU9F2+SDLHNUboGpn0w+XWFKuw6i1KG8q4k+EpxnVIN292SfvUYc8fUdqFBxYpp 8ZPg/dl3QkTqRg== -----END CERTIFICATE-----Generated at Fri Dec 19 10:41:53 2025 by rpki-client