This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft File: Wxos8vE3Re4bv38KdL6tPOUHSFU.mft (raw, json) Hash identifier: BqzW3hwRHs0XcDyUIk5NLucwKY0xlQzI64kgGNlLR28= Subject key identifier: 99:BB:27:78:A0:B1:32:AD:3D:07:83:54:CF:D9:70:60:91:29:EF:71 Authority key identifier: 5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55 Certificate issuer: /CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855 Certificate serial: 019B0E25D471FC21B888FFDABC9B192E5ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 16:01:58 +0000 Manifest this update: Thu 11 Dec 2025 16:01:58 +0000 Manifest next update: Fri 12 Dec 2025 16:01:58 +0000 Files and hashes: 1: L7K-XR4rTNFTEnboIJT8rcKDxW4.roa (hash: Orjc5PbTzJEGwidvDgWcdnyYtJunNcWhaUwiDHcpNvs=) 2: Wxos8vE3Re4bv38KdL6tPOUHSFU.crl (hash: 7iHaK/AchiEW2pSi0lc1+AkatBDmRf9o+mgQlCT6Jhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:d4:71:fc:21:b8:88:ff:da:bc:9b:19:2e:5e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1a2cf2f13745ee1bbf7f0a74bead3ce5074855 Validity Not Before: Dec 11 16:01:58 2025 GMT Not After : Dec 12 16:01:58 2025 GMT Subject: CN=99bb2778a0b132ad3d078354cfd970609129ef71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:28:28:15:b2:da:a9:30:2c:5b:35:8c:ab:ec: d1:b3:80:65:3c:df:94:bb:67:fe:87:21:33:ab:d3: a7:53:8c:56:df:6e:bd:35:a2:37:08:ef:5f:27:73: c9:26:20:e5:9b:58:e4:26:77:a9:eb:a6:cc:df:55: d7:fe:98:6d:d3:f0:0d:fe:43:30:64:4f:f3:ba:d3: ae:cf:b8:94:6e:c8:1d:28:f6:75:f4:6f:ca:4e:f9: cb:b0:c3:54:77:a9:cf:5f:7e:8e:67:f1:6e:e7:97: 1e:d2:01:09:a2:b8:85:53:62:9d:a3:4d:98:b5:bf: 70:ac:5d:25:26:4a:44:15:2c:8e:33:0e:07:f8:05: 7d:f1:27:88:39:75:44:e6:e5:b2:0f:54:2c:40:bc: b3:6d:10:99:a7:f7:d2:d3:33:0e:93:b7:cc:cd:76: 60:93:70:df:08:20:43:bb:f3:ca:36:82:b0:63:92: a6:0a:fe:b7:ed:30:91:e2:b0:81:de:31:e5:51:38: 91:17:eb:9c:16:eb:83:f8:9d:44:15:88:4d:e5:a4: 15:e8:ad:fa:1b:78:5c:8d:b7:1e:12:28:09:84:34: 52:0c:28:9a:6e:a4:c8:e2:cb:e7:b0:e8:d6:b3:77: 95:77:f8:34:c1:02:78:d9:2e:9c:7b:d3:32:89:19: f1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BB:27:78:A0:B1:32:AD:3D:07:83:54:CF:D9:70:60:91:29:EF:71 X509v3 Authority Key Identifier: keyid:5B:1A:2C:F2:F1:37:45:EE:1B:BF:7F:0A:74:BE:AD:3C:E5:07:48:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wxos8vE3Re4bv38KdL6tPOUHSFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/24f02d-b23a-4c81-91f0-7f9025e53109/1/Wxos8vE3Re4bv38KdL6tPOUHSFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ef:63:a1:84:25:50:c7:66:7b:0a:99:48:61:49:bf:97:f9: f1:f5:90:22:d4:e8:b4:e1:2d:28:69:45:e6:3b:13:a5:09:da: 5a:36:fa:13:f6:9b:2b:48:c4:31:43:a2:45:d7:4a:8e:e0:b6: 75:5e:44:23:ec:86:a3:ae:af:b7:dd:2a:e5:ef:7e:03:cf:85: d9:a5:5d:2b:d0:06:f3:1d:f4:db:2f:ae:a1:b3:80:ff:b9:c9: 37:d9:cc:cc:35:b9:0e:31:fa:d2:84:0b:54:ff:cf:a1:7d:5a: 34:4c:d7:0b:2d:1b:fc:19:10:7c:a0:30:2e:9e:2d:c6:24:fe: 44:7c:bb:80:d8:e0:cc:d7:f0:34:8b:ea:88:35:39:43:11:82: 7b:7c:6c:1a:b1:0c:4b:71:fb:5d:d8:75:7d:11:54:e0:78:1f: 19:a6:59:97:8b:82:d7:0f:b8:6e:0c:af:44:a7:e9:cb:f1:35: b6:bd:21:5e:d2:93:74:d7:e8:c2:ff:87:d1:4f:80:ed:e2:c9: b4:bc:1c:2d:d2:0f:5e:d9:cc:62:82:89:1f:fc:f7:16:49:c1: dd:50:e9:fb:df:f8:46:00:6a:96:53:e3:09:2d:7b:80:18:f8: e9:bf:70:b9:6e:b7:d8:a5:4e:c0:6d:4e:be:d0:35:42:9b:96: 46:b9:8e:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJdRx/CG4iP/avJsZLl7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWEyY2YyZjEzNzQ1ZWUxYmJmN2YwYTc0YmVhZDNjZTUw NzQ4NTUwHhcNMjUxMjExMTYwMTU4WhcNMjUxMjEyMTYwMTU4WjAzMTEwLwYDVQQD Eyg5OWJiMjc3OGEwYjEzMmFkM2QwNzgzNTRjZmQ5NzA2MDkxMjllZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SgoFbLaqTAsWzWMq+zRs4BlPN+U u2f+hyEzq9OnU4xW3269NaI3CO9fJ3PJJiDlm1jkJnep66bM31XX/pht0/AN/kMw ZE/zutOuz7iUbsgdKPZ19G/KTvnLsMNUd6nPX36OZ/Fu55ce0gEJoriFU2Kdo02Y tb9wrF0lJkpEFSyOMw4H+AV98SeIOXVE5uWyD1QsQLyzbRCZp/fS0zMOk7fMzXZg k3DfCCBDu/PKNoKwY5KmCv637TCR4rCB3jHlUTiRF+ucFuuD+J1EFYhN5aQV6K36 G3hcjbceEigJhDRSDCiabqTI4svnsOjWs3eVd/g0wQJ42S6ce9MyiRnxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJm7J3igsTKtPQeDVM/ZcGCRKe9xMB8GA1UdIwQY MBaAFFsaLPLxN0XuG79/CnS+rTzlB0hVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAt N2Y5MDI1ZTUzMTA5LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yNGYwMmQtYjIzYS00YzgxLTkxZjAtN2Y5MDI1ZTUzMTA5 LzEvV3hvczh2RTNSZTRidjM4S2RMNnRQT1VIU0ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx+9joYQl UMdmewqZSGFJv5f58fWQItTotOEtKGlF5jsTpQnaWjb6E/abK0jEMUOiRddKjuC2 dV5EI+yGo66vt90q5e9+A8+F2aVdK9AG8x302y+uobOA/7nJN9nMzDW5DjH60oQL VP/PoX1aNEzXCy0b/BkQfKAwLp4txiT+RHy7gNjgzNfwNIvqiDU5QxGCe3xsGrEM S3H7Xdh1fRFU4HgfGaZZl4uC1w+4bgyvRKfpy/E1tr0hXtKTdNfowv+H0U+A7eLJ tLwcLdIPXtnMYoKJH/z3FknB3VDp+9/4RgBqllPjCS17gBj46b9wuW632KVOwG1O vtA1QpuWRrmO0Q== -----END CERTIFICATE-----Generated at Fri Dec 12 00:31:40 2025 by rpki-client