This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft File: WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json) Hash identifier: iunEnEuGQ3N0NwpeC63brS5BTRMPea9WVOiBMY86Lv4= Subject key identifier: 8A:90:CA:3E:A7:26:26:A4:72:FB:1E:33:C4:E5:D3:F0:6E:FA:0C:CC Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254 Certificate serial: 019B07EC05E7835752AEB8380B4ED2B8217A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft Manifest number: 0CAB Signing time: Wed 10 Dec 2025 11:01:07 +0000 Manifest this update: Wed 10 Dec 2025 11:01:07 +0000 Manifest next update: Thu 11 Dec 2025 11:01:07 +0000 Files and hashes: 1: 5eabaHyJMZC6xaOfXyNUDeK_Rik.roa (hash: TiX60vap4EuHd5z3yDdwzlNIdcxuV5BI27iNpoK9+cI=) 2: 9IgQeewcmfQZ2of_HORQ6vbbFA8.roa (hash: sNpLBHfgEi3gbYovfnENOUMmh30fF1DezNwtozBcHSM=) 3: GhuWyLVOMNHxmFtEArmLaJYowk4.roa (hash: Ywh/XerdCYDMoWXCvI6EJekE/VduBkzUPrWkloYwW84=) 4: Iz0OKJRfyer26_x0SY8wqmCTEJs.roa (hash: HkA+qgxdvNNdPmwk6Y1yGdSU/udB+TT9eU5dbnjc99g=) 5: K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa (hash: Yhb6Fai21E+jsd4/blJv2P5GA32ORQPomY/nTv3MFQg=) 6: L3grILjJ_vBSj2YCgvXjKpgjiWU.roa (hash: zbnShwYTCfimkRsR6IKcduvWEFccf6OGK+/x/bSSG/M=) 7: UXVtX6UoLEHhJuxT7xg98dsguX4.roa (hash: Wn8t5yXBLmGlY0GUVjzMedcma1MlPEFfvqaYJWVQeOw=) 8: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: 2wfyO8NqR7jHCGKuYV2sKHQpku4iGaPXfqQ962XnoDo=) 9: mgeZXaYJi1mGQLwX_WKlPtn0jjk.roa (hash: iNQ43jlhE2le2IQ9QNlwHj3Mrd2xsSBGVvBmoug3MRI=) 10: s9iX_8jHbmVHXFKczRfEqvS3lbg.roa (hash: 9PT8eOG35z7CULatEOKv2/jHURYTkpGSxPnig8wWGg4=) 11: yZwsLCLxkLtfitXXeEOI5AriQ5I.roa (hash: FCm9aXyNhOi8/TlmLq+ZnY1dbeCxrjPul5TAE2wJRI4=) 12: ymWVOHnFwPNMW_S5oeDKQGMzw9U.roa (hash: FZumat6xUga+T6l1YL5PAYgikdkbXVT6ADcushDrJaM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:ec:05:e7:83:57:52:ae:b8:38:0b:4e:d2:b8:21:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254 Validity Not Before: Dec 10 11:01:07 2025 GMT Not After : Dec 11 11:01:07 2025 GMT Subject: CN=8a90ca3ea72626a472fb1e33c4e5d3f06efa0ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:12:4e:04:53:03:8a:39:46:e6:05:5e:e7:d0: f6:35:18:49:79:70:b6:8e:68:46:97:f7:aa:27:73: 4a:da:00:e3:c2:51:e3:89:c1:74:6e:b4:86:30:b4: 59:21:ce:5e:4a:7d:11:24:de:45:46:4f:ce:76:50: 1c:95:f0:26:fe:c6:ff:9b:76:13:e2:10:8e:a3:2c: b5:8a:2c:6e:db:de:bd:12:57:a3:19:b4:22:d9:3e: a5:d1:95:30:3d:7c:44:0b:96:54:20:bf:8e:33:4a: a1:38:b8:4a:4b:e3:0b:05:83:f6:f9:e7:4c:95:25: 38:31:c0:ab:48:22:f2:ec:44:d1:88:63:c2:b3:7e: f4:a3:c2:5e:d8:8f:b8:fb:83:ab:c2:54:b9:65:6d: 18:3c:c9:01:40:bb:29:b7:5e:b8:c5:b2:c4:b7:8e: 07:d0:f8:08:9b:38:46:2a:9d:1b:79:7a:e5:7f:10: a9:02:43:80:2f:88:30:8d:7b:89:8a:5e:d9:49:d6: 76:ed:96:1d:68:66:c0:a2:b4:f2:3b:f3:9b:e9:da: c8:f1:eb:ac:45:8d:05:a2:79:16:3b:4d:46:35:6a: f7:6c:0d:8c:b6:9d:aa:cb:49:5b:30:3f:c9:a3:f1: 63:c4:19:51:bf:a3:74:b8:64:76:42:ab:86:16:7f: 65:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:90:CA:3E:A7:26:26:A4:72:FB:1E:33:C4:E5:D3:F0:6E:FA:0C:CC X509v3 Authority Key Identifier: keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fe:0a:9c:45:3b:e2:c6:29:50:dd:c2:1e:0f:98:66:1f:70: 59:52:f2:42:77:c1:40:a6:3f:28:7a:30:f7:99:91:8f:0a:55: 32:a9:56:e2:34:13:94:23:0b:4d:7d:6d:d5:15:f8:d9:28:3d: f8:bf:0c:d3:75:14:b0:0c:6f:a8:bb:c9:d0:75:78:8d:c3:70: a5:66:29:d2:3a:eb:fb:cb:b2:70:b4:f6:cf:0f:1f:37:4e:2b: 46:f9:2a:cc:0b:62:11:9f:12:dd:96:52:4a:54:08:54:eb:21: c1:ef:9a:a9:e5:5c:a7:bb:6d:e3:e0:a1:a6:2b:9f:a6:1a:94: 27:67:95:4c:77:23:9e:ad:bd:f8:f5:d2:55:18:38:7c:28:ad: ac:75:af:35:35:0b:e9:54:38:b5:a0:b5:5a:da:0f:b5:d7:d5: 0a:2e:8c:1a:8a:9f:17:ce:f3:17:c7:18:16:55:ad:46:00:6a: aa:88:b8:4b:7d:7a:04:ac:d0:e8:7d:0a:d6:ea:81:19:32:3b: 67:29:da:07:d0:04:1f:c5:3b:b6:7d:f6:1b:60:fe:59:9a:d3: 04:45:68:3d:c4:70:7c:5c:5e:d5:c8:fe:6b:2e:43:33:cd:01: 05:88:fe:22:c0:d7:b7:0e:74:25:b7:44:23:8f:a6:6f:db:ec: 51:26:38:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsH7AXng1dSrrg4C07SuCF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh ZWYyNTQwHhcNMjUxMjEwMTEwMTA3WhcNMjUxMjExMTEwMTA3WjAzMTEwLwYDVQQD Eyg4YTkwY2EzZWE3MjYyNmE0NzJmYjFlMzNjNGU1ZDNmMDZlZmEwY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRJOBFMDijlG5gVe59D2NRhJeXC2 jmhGl/eqJ3NK2gDjwlHjicF0brSGMLRZIc5eSn0RJN5FRk/OdlAclfAm/sb/m3YT 4hCOoyy1iixu2969ElejGbQi2T6l0ZUwPXxEC5ZUIL+OM0qhOLhKS+MLBYP2+edM lSU4McCrSCLy7ETRiGPCs370o8Je2I+4+4OrwlS5ZW0YPMkBQLspt164xbLEt44H 0PgImzhGKp0beXrlfxCpAkOAL4gwjXuJil7ZSdZ27ZYdaGbAorTyO/Ob6drI8eus RY0FonkWO01GNWr3bA2Mtp2qy0lbMD/Jo/FjxBlRv6N0uGR2QquGFn9lXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqQyj6nJiakcvseM8Tl0/Bu+gzMMB8GA1UdIwQY MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt MmNjNjc1NzI2OTc1LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1 LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQP4KnEU7 4sYpUN3CHg+YZh9wWVLyQnfBQKY/KHow95mRjwpVMqlW4jQTlCMLTX1t1RX42Sg9 +L8M03UUsAxvqLvJ0HV4jcNwpWYp0jrr+8uycLT2zw8fN04rRvkqzAtiEZ8S3ZZS SlQIVOshwe+aqeVcp7tt4+ChpiufphqUJ2eVTHcjnq29+PXSVRg4fCitrHWvNTUL 6VQ4taC1WtoPtdfVCi6MGoqfF87zF8cYFlWtRgBqqoi4S316BKzQ6H0K1uqBGTI7 ZynaB9AEH8U7tn32G2D+WZrTBEVoPcRwfFxe1cj+ay5DM80BBYj+IsDXtw50JbdE I4+mb9vsUSY4Vg== -----END CERTIFICATE-----Generated at Wed Dec 10 14:22:11 2025 by rpki-client