This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft File: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft (raw, json) Hash identifier: k4wsXAEeqK7v3vKDEzdWnZrXlDonXPnnpgSb8kwoQKQ= Subject key identifier: BD:E3:4D:00:AB:2F:3E:C0:BC:44:49:08:64:E9:18:BA:79:CF:8B:F2 Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79 Certificate issuer: /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479 Certificate serial: 019B5A1B0E99FED2AB2D160DCD021049B90D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft Manifest number: 033F Signing time: Fri 26 Dec 2025 10:01:21 +0000 Manifest this update: Fri 26 Dec 2025 10:01:21 +0000 Manifest next update: Sat 27 Dec 2025 10:01:21 +0000 Files and hashes: 1: LMxG4l0eF9eJnp89vxztiAbfpWQ.roa (hash: pvqnV3wqhGmX8KDOv1jOvLMFpSWPvUzeNMWmPHFAIwc=) 2: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl (hash: Afd75OaL9g8AOBxlLR8sxJqr6FrccQ6e0sP3hDZI2l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1b:0e:99:fe:d2:ab:2d:16:0d:cd:02:10:49:b9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479 Validity Not Before: Dec 26 10:01:21 2025 GMT Not After : Dec 27 10:01:21 2025 GMT Subject: CN=bde34d00ab2f3ec0bc44490864e918ba79cf8bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:24:70:02:3f:46:d7:b7:6e:6a:6b:b1:a3: bb:69:ac:af:c8:5a:b2:df:64:c3:2b:70:ff:ad:3a: ce:6f:7b:67:1e:b3:78:0e:0f:6a:6b:5e:5a:08:c8: a1:8a:df:19:e2:ba:8a:4e:6e:62:38:92:fd:b6:e1: fe:b0:fe:e7:98:55:08:ca:c6:14:09:e9:cb:1f:e8: 0d:ea:83:e3:27:ea:85:cc:ad:22:aa:a5:f6:8e:f6: 95:2a:23:c9:0c:22:19:e2:d2:33:d4:fe:95:50:25: c7:ab:6f:f1:ae:b4:d9:b9:43:e9:14:71:62:88:3b: 1e:b7:38:6c:a8:2d:1f:f5:c2:22:c8:15:38:f0:88: b3:59:76:30:2d:ab:16:8e:8a:77:92:49:50:1f:52: 6f:a5:a1:68:aa:06:89:ba:86:fe:9b:ec:83:13:f0: c1:59:a7:57:85:ed:d2:f9:d0:c1:ab:f6:be:d3:92: 9a:d2:b2:e8:45:76:89:6d:cb:cf:ff:2b:12:35:da: 25:19:06:70:10:77:8a:d1:70:a3:4f:a5:a7:08:b9: 43:34:47:ff:90:b9:86:8a:d7:69:01:7e:c4:e5:6e: 8d:01:24:cb:0e:64:41:8e:e0:f2:44:e8:69:11:e2: 2a:79:83:3f:cb:0f:22:11:13:04:29:17:83:fc:0b: bd:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E3:4D:00:AB:2F:3E:C0:BC:44:49:08:64:E9:18:BA:79:CF:8B:F2 X509v3 Authority Key Identifier: keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:04:e6:53:e4:27:0a:dd:9c:ac:9c:c7:d6:42:5a:1d:8f:f0: f2:23:31:ab:da:51:5c:19:06:2f:a8:63:03:c4:31:e8:b0:09: 32:9e:d5:52:22:b0:bc:38:1d:1f:07:31:18:28:dc:a3:cc:b3: c2:e7:e7:15:2e:40:3e:b2:35:6a:32:a1:af:56:d7:51:16:b4: 40:e0:47:82:9a:b4:04:48:02:fc:72:ae:e5:76:bb:09:e3:eb: 33:d0:70:8b:e7:ac:04:f5:9e:14:bf:91:c2:25:52:ca:43:38: c2:eb:3d:30:93:33:57:82:48:36:07:f2:52:a5:d2:52:34:d7: 38:cd:54:5b:d1:1d:6e:4a:ae:99:26:21:8c:74:85:71:e3:89: b0:7f:b9:10:25:a1:51:c2:a4:73:af:5f:69:e5:b6:94:2c:d7: 99:68:0b:30:d8:84:85:22:cb:ca:bf:b0:fd:84:d3:25:e1:ac: 7c:51:78:4a:95:64:dc:7c:6a:42:fd:f4:6c:7a:53:70:5b:a1: 34:7a:35:3a:dc:55:81:4c:97:6b:e6:d4:13:e9:25:20:5b:22: 28:7f:bd:f6:7d:44:d2:c0:4d:0e:92:6f:bc:f6:d2:f1:82:1f: fc:ee:72:fc:22:3d:d2:e8:76:3c:17:ee:73:86:a0:8b:1d:e2: 21:f6:3d:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGw6Z/tKrLRYNzQIQSbkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGQ4NWIyZTFlYzFmMjFkY2FjNWQ1ODc5ZTY5Y2IzNDJm ZDE0NzkwHhcNMjUxMjI2MTAwMTIxWhcNMjUxMjI3MTAwMTIxWjAzMTEwLwYDVQQD EyhiZGUzNGQwMGFiMmYzZWMwYmM0NDQ5MDg2NGU5MThiYTc5Y2Y4YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+0kcAI/Rte3bmprsaO7aayvyFqy 32TDK3D/rTrOb3tnHrN4Dg9qa15aCMihit8Z4rqKTm5iOJL9tuH+sP7nmFUIysYU CenLH+gN6oPjJ+qFzK0iqqX2jvaVKiPJDCIZ4tIz1P6VUCXHq2/xrrTZuUPpFHFi iDsetzhsqC0f9cIiyBU48IizWXYwLasWjop3kklQH1JvpaFoqgaJuob+m+yDE/DB WadXhe3S+dDBq/a+05Ka0rLoRXaJbcvP/ysSNdolGQZwEHeK0XCjT6WnCLlDNEf/ kLmGitdpAX7E5W6NASTLDmRBjuDyROhpEeIqeYM/yw8iERMEKReD/Au9nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3jTQCrLz7AvERJCGTpGLp5z4vyMB8GA1UdIwQY MBaAFFqNhbLh7B8h3KxdWHnmnLNC/RR5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGIt MmI2ZjI0YmRkMDYxLzEvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kMzk3YzMtY2Y2Zi00NGQwLTlhMGItMmI2ZjI0YmRkMDYx LzEvV28yRnN1SHNIeUhjckYxWWVlYWNzMEw5RkhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZgTmU+Qn Ct2crJzH1kJaHY/w8iMxq9pRXBkGL6hjA8Qx6LAJMp7VUiKwvDgdHwcxGCjco8yz wufnFS5APrI1ajKhr1bXURa0QOBHgpq0BEgC/HKu5Xa7CePrM9Bwi+esBPWeFL+R wiVSykM4wus9MJMzV4JINgfyUqXSUjTXOM1UW9EdbkqumSYhjHSFceOJsH+5ECWh UcKkc69faeW2lCzXmWgLMNiEhSLLyr+w/YTTJeGsfFF4SpVk3HxqQv30bHpTcFuh NHo1OtxVgUyXa+bUE+klIFsiKH+99n1E0sBNDpJvvPbS8YIf/O5y/CI90uh2PBfu c4agix3iIfY9yQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:11 2025 by rpki-client