This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft File: wJLY1VEbGezkVpYPI7-ohu4dVws.mft (raw, json) Hash identifier: qnqmWJfOiunKEzqGlJNEc72bS7VBd6UfG4YBdXr5ibw= Subject key identifier: AC:75:ED:76:0F:B0:A4:A3:BF:DE:C8:A8:9B:04:22:5F:06:E8:6F:60 Authority key identifier: C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B Certificate issuer: /CN=c092d8d5511b19ece456960f23bfa886ee1d570b Certificate serial: 019B3AFDE510F103C35E83A3C7E40D788032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 09:01:16 +0000 Manifest this update: Sat 20 Dec 2025 09:01:16 +0000 Manifest next update: Sun 21 Dec 2025 09:01:16 +0000 Files and hashes: 1: Q_ZP2vofzPczALgXLi87Ewl-QYw.roa (hash: L4KrlBgHzgT5N8Y6ICGM0vsH5QclmvNH7VTwBVn5LIU=) 2: Xlu1RjkLIjpUuW9uaM7jn9hmpOM.roa (hash: 4HPailMxVKUe4raNE7C7jB5qTjzwPsjAoquzi7o0XrM=) 3: jz90vv6kT8814r7qD_fGqQHUToc.roa (hash: f3X0CYyJUtKdKPAZKVCkw70r2WPKMFX9nLw9xUALHgQ=) 4: wJLY1VEbGezkVpYPI7-ohu4dVws.crl (hash: QNPs/KFaFcdv64czs88+doi0PdN3h437vh6Pceyi4hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:e5:10:f1:03:c3:5e:83:a3:c7:e4:0d:78:80:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c092d8d5511b19ece456960f23bfa886ee1d570b Validity Not Before: Dec 20 09:01:16 2025 GMT Not After : Dec 21 09:01:16 2025 GMT Subject: CN=ac75ed760fb0a4a3bfdec8a89b04225f06e86f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c5:2c:13:11:0a:0a:f2:a5:a5:39:2f:74:01: 10:9f:25:f1:16:8d:55:ae:2d:03:d0:c2:fc:b8:cf: fb:ac:27:32:87:73:df:d7:14:54:d3:f9:0c:18:d5: 7b:89:47:ed:37:12:fa:28:b2:9c:1e:00:ce:84:2d: 4c:48:89:1f:07:eb:71:d4:d6:b3:10:96:a8:da:ab: db:9f:5a:c4:6c:80:68:04:73:01:51:65:31:9f:04: e5:6c:81:cd:60:06:b9:65:a2:1a:eb:76:6b:38:f9: 1c:67:51:77:02:c7:f0:b0:cb:18:22:e9:b9:23:be: 81:5d:ea:83:91:3a:79:be:f9:83:12:f8:61:ff:cf: 6f:96:72:0a:ab:4a:bd:6f:a0:a3:5d:23:c0:95:02: eb:73:76:45:4e:cf:74:5d:b8:c1:9f:74:4c:24:83: 60:45:58:bf:06:8e:19:5c:c6:2b:4c:27:9e:e0:b8: ba:de:3f:58:18:65:27:1b:b3:c1:12:e2:45:df:16: 48:86:15:43:be:e4:b1:51:ae:b4:cd:68:3a:4e:26: 3d:9f:30:10:6a:20:58:c5:15:71:d7:52:c5:ef:08: 14:82:ac:35:68:3e:a3:3c:3b:9a:b4:5a:79:41:dd: 4d:2b:d5:4b:57:c2:a5:83:b6:30:77:60:87:c9:e0: 57:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:75:ED:76:0F:B0:A4:A3:BF:DE:C8:A8:9B:04:22:5F:06:E8:6F:60 X509v3 Authority Key Identifier: keyid:C0:92:D8:D5:51:1B:19:EC:E4:56:96:0F:23:BF:A8:86:EE:1D:57:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJLY1VEbGezkVpYPI7-ohu4dVws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d430d9-d214-41c0-8e51-267a16b4629f/1/wJLY1VEbGezkVpYPI7-ohu4dVws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:1f:16:a5:25:a2:42:48:d2:9c:43:e8:fe:d3:fb:4f:6e:91: 29:2d:62:00:67:a6:31:f4:9b:ac:4d:d9:9f:a0:f1:69:ce:3d: 93:2b:1e:08:2b:e8:9a:a0:ea:1c:e8:c9:0d:2f:d2:1d:02:3e: 94:9b:9d:a0:b0:00:10:1c:75:b6:37:7c:b1:12:62:ef:9b:24: fa:9a:e0:8b:de:76:60:1b:7a:8f:18:9b:d6:db:26:4f:d6:45: 49:53:50:94:a1:69:27:9e:d8:13:5e:95:5f:f8:22:46:ea:09: d1:44:39:97:36:ec:b9:27:45:76:56:fe:61:de:94:54:4a:f6: 5c:e8:b5:82:fa:c2:77:3c:75:d5:ee:5f:a1:ba:e5:0f:0c:89: 9f:b3:9d:a2:33:1c:df:5d:5d:ec:0e:99:df:66:af:7f:68:5c: 77:d3:b9:dc:74:5d:6f:aa:63:fe:5a:24:54:d8:75:ce:11:a8: b1:08:0e:f1:14:f3:55:fb:5d:44:a9:54:91:c0:20:8d:05:5d: 50:cb:48:6f:13:cc:47:96:ed:cd:fb:cd:ff:56:4d:eb:35:99: cd:cd:e3:e6:f6:be:7e:6a:d9:ed:16:45:9b:a9:a2:c5:6d:2f: 53:25:df:9b:45:47:a6:a7:82:1f:98:8b:ad:1c:c1:9a:3d:65: cd:7d:c2:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/eUQ8QPDXoOjx+QNeIAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwOTJkOGQ1NTExYjE5ZWNlNDU2OTYwZjIzYmZhODg2ZWUx ZDU3MGIwHhcNMjUxMjIwMDkwMTE2WhcNMjUxMjIxMDkwMTE2WjAzMTEwLwYDVQQD EyhhYzc1ZWQ3NjBmYjBhNGEzYmZkZWM4YTg5YjA0MjI1ZjA2ZTg2ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcUsExEKCvKlpTkvdAEQnyXxFo1V ri0D0ML8uM/7rCcyh3Pf1xRU0/kMGNV7iUftNxL6KLKcHgDOhC1MSIkfB+tx1Naz EJao2qvbn1rEbIBoBHMBUWUxnwTlbIHNYAa5ZaIa63ZrOPkcZ1F3AsfwsMsYIum5 I76BXeqDkTp5vvmDEvhh/89vlnIKq0q9b6CjXSPAlQLrc3ZFTs90XbjBn3RMJINg RVi/Bo4ZXMYrTCee4Li63j9YGGUnG7PBEuJF3xZIhhVDvuSxUa60zWg6TiY9nzAQ aiBYxRVx11LF7wgUgqw1aD6jPDuatFp5Qd1NK9VLV8Klg7Ywd2CHyeBX7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKx17XYPsKSjv97IqJsEIl8G6G9gMB8GA1UdIwQY MBaAFMCS2NVRGxns5FaWDyO/qIbuHVcLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEt MjY3YTE2YjQ2MjlmLzEvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9kNDMwZDktZDIxNC00MWMwLThlNTEtMjY3YTE2YjQ2Mjlm LzEvd0pMWTFWRWJHZXprVnBZUEk3LW9odTRkVndzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFx8WpSWi QkjSnEPo/tP7T26RKS1iAGemMfSbrE3Zn6Dxac49kyseCCvomqDqHOjJDS/SHQI+ lJudoLAAEBx1tjd8sRJi75sk+prgi952YBt6jxib1tsmT9ZFSVNQlKFpJ57YE16V X/giRuoJ0UQ5lzbsuSdFdlb+Yd6UVEr2XOi1gvrCdzx11e5fobrlDwyJn7OdojMc 311d7A6Z32avf2hcd9O53HRdb6pj/lokVNh1zhGosQgO8RTzVftdRKlUkcAgjQVd UMtIbxPMR5btzfvN/1ZN6zWZzc3j5va+fmrZ7RZFm6mixW0vUyXfm0VHpqeCH5iL rRzBmj1lzX3CSA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:36 2025 by rpki-client