This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft File: WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json) Hash identifier: 3IWyJxbwUWqnpuh/jjuXiVjtTstvFf5vm9nsqZmekpI= Subject key identifier: 09:DC:A9:2D:FC:59:E3:E9:68:CB:8B:30:2B:7A:EC:2D:92:A7:FC:F0 Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Certificate serial: 019B1202CCBAE1D05C015B97848BAFFE3EA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft Manifest number: 025D Signing time: Fri 12 Dec 2025 10:02:11 +0000 Manifest this update: Fri 12 Dec 2025 10:02:11 +0000 Manifest next update: Sat 13 Dec 2025 10:02:11 +0000 Files and hashes: 1: 2mKN6eYxCZSzg1HkhTBmFH-Muzs.roa (hash: vCnqByRm0RvU7dzU3TpA6IT8qwABaBJlH4t+NDPI9V0=) 2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: OWXHNcvh+voItTXvmcLkH8tljRSMcA9uomIvR+U/HoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:cc:ba:e1:d0:5c:01:5b:97:84:8b:af:fe:3e:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Validity Not Before: Dec 12 10:02:11 2025 GMT Not After : Dec 13 10:02:11 2025 GMT Subject: CN=09dca92dfc59e3e968cb8b302b7aec2d92a7fcf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:54:7d:be:c6:a0:73:a8:fc:4c:e9:3c:24: 45:e5:2b:c4:39:f0:da:1b:3d:ed:1b:60:f0:47:c2: 40:37:cc:80:c7:79:b6:f7:cc:c7:89:46:63:b4:fb: 3d:7f:a0:a6:63:86:0e:a9:70:89:ab:f3:79:a4:4f: d4:81:49:ab:06:56:f2:e0:b9:d7:85:02:56:59:c3: f3:ce:c0:f5:e7:ce:10:39:98:cf:83:a4:e0:b7:14: 42:dd:88:c5:6a:3a:1c:e1:d0:50:45:9e:b2:9b:cc: 5f:37:27:b0:15:81:af:54:30:4f:7d:29:9b:31:26: 43:ee:b8:d2:a7:aa:97:b2:01:73:6d:74:00:2e:74: 55:9c:13:84:b2:de:26:23:67:45:90:bc:3d:89:50: a4:ed:71:4f:57:ab:74:c7:a7:e7:c5:a0:51:55:4b: df:7c:ff:10:f0:78:cd:0d:00:9d:82:ac:d2:3e:c3: ca:14:8e:37:85:1f:3f:2c:8d:2a:af:27:f8:ec:87: 6e:13:4d:9b:21:78:75:f2:72:a8:98:a2:92:81:5a: bf:34:40:0a:25:25:20:8a:1f:c7:52:1d:b1:d3:4f: b5:7b:b3:57:ad:ce:51:cd:f0:97:59:fe:81:5f:49: f4:9d:08:48:ce:5f:4f:12:2f:37:98:49:21:77:e1: 75:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DC:A9:2D:FC:59:E3:E9:68:CB:8B:30:2B:7A:EC:2D:92:A7:FC:F0 X509v3 Authority Key Identifier: keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a7:47:03:7b:8d:55:b1:af:c1:2b:ae:9f:ed:03:c5:c4:91: d0:1d:55:0e:aa:3b:2a:fc:5d:76:ff:87:a9:98:21:fe:06:dc: 5d:a3:63:cc:df:ac:a0:c2:35:4f:b8:96:f8:ec:f0:ce:ef:61: d4:43:31:51:f7:69:d2:24:ed:96:4c:9e:1b:67:d5:72:99:26: c4:ca:c1:75:01:1e:f9:08:72:1d:84:05:6a:24:cf:52:06:ea: a4:b2:1f:2d:3b:78:81:5c:31:47:6f:89:90:f6:af:44:b6:4a: 04:bc:65:ac:07:b0:e4:a9:e5:95:2a:16:24:4f:79:94:58:e3: 9d:d6:7b:8f:56:67:79:2c:de:25:34:b4:4a:5e:bc:60:26:68: 31:35:a9:58:ec:35:7e:ab:df:24:bf:fa:dc:e1:11:7e:b2:26: 2a:3d:e5:0d:e7:05:66:df:60:b3:c7:2d:82:1b:e2:0b:b3:3f: 0b:a3:cf:20:8e:c6:e1:42:bc:70:b6:56:a4:a5:d2:c3:b2:cc: e5:e6:7a:60:d4:17:40:88:8c:de:24:9b:cf:99:c5:bc:7e:12: 84:1f:a0:66:2a:1e:f9:6f:21:a8:c1:34:e2:68:87:3c:fe:ac: 17:38:6c:7e:1f:fc:f2:9e:77:fb:eb:78:38:02:22:32:06:fb: 30:c2:5c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAsy64dBcAVuXhIuv/j6lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ1NWViY2IwM2JmZjJhMmQ5NzVhZDQwODFmOTQxOWJh Y2FmMzUwHhcNMjUxMjEyMTAwMjExWhcNMjUxMjEzMTAwMjExWjAzMTEwLwYDVQQD EygwOWRjYTkyZGZjNTllM2U5NjhjYjhiMzAyYjdhZWMyZDkyYTdmY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYhUfb7GoHOo/EzpPCRF5SvEOfDa Gz3tG2DwR8JAN8yAx3m298zHiUZjtPs9f6CmY4YOqXCJq/N5pE/UgUmrBlby4LnX hQJWWcPzzsD1584QOZjPg6TgtxRC3YjFajoc4dBQRZ6ym8xfNyewFYGvVDBPfSmb MSZD7rjSp6qXsgFzbXQALnRVnBOEst4mI2dFkLw9iVCk7XFPV6t0x6fnxaBRVUvf fP8Q8HjNDQCdgqzSPsPKFI43hR8/LI0qryf47IduE02bIXh18nKomKKSgVq/NEAK JSUgih/HUh2x00+1e7NXrc5RzfCXWf6BX0n0nQhIzl9PEi83mEkhd+F1jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAncqS38WePpaMuLMCt67C2Sp/zwMB8GA1UdIwQY MBaAFFl0VevLA7/yotl1rUCB+UGbrK81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYt ZWYzNGRkNGRlNTcyLzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYtZWYzNGRkNGRlNTcy LzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6dHA3uN VbGvwSuun+0DxcSR0B1VDqo7Kvxddv+HqZgh/gbcXaNjzN+soMI1T7iW+Ozwzu9h 1EMxUfdp0iTtlkyeG2fVcpkmxMrBdQEe+QhyHYQFaiTPUgbqpLIfLTt4gVwxR2+J kPavRLZKBLxlrAew5KnllSoWJE95lFjjndZ7j1ZneSzeJTS0Sl68YCZoMTWpWOw1 fqvfJL/63OERfrImKj3lDecFZt9gs8ctghviC7M/C6PPII7G4UK8cLZWpKXSw7LM 5eZ6YNQXQIiM3iSbz5nFvH4ShB+gZioe+W8hqME04miHPP6sFzhsfh/88p53++t4 OAIiMgb7MMJc1A== -----END CERTIFICATE-----Generated at Fri Dec 12 13:21:18 2025 by rpki-client