This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft File: wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json) Hash identifier: m+iJIwBUGKUYENrbI23J2gt5P0pLIOPkqqmS+RTfb7w= Subject key identifier: 8B:A0:9A:15:A9:40:B6:D1:19:9E:1B:CE:B8:AC:5F:54:85:BF:25:DC Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3 Certificate issuer: /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3 Certificate serial: 019B5975969C7EBD434A8EC926876AEF69ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft Manifest number: 11B2 Signing time: Fri 26 Dec 2025 07:00:36 +0000 Manifest this update: Fri 26 Dec 2025 07:00:36 +0000 Manifest next update: Sat 27 Dec 2025 07:00:36 +0000 Files and hashes: 1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=) 2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: DF8hvGXjvUAm3Kk211LBfqSWRMDuPiA0udRhlMUgmJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:96:9c:7e:bd:43:4a:8e:c9:26:87:6a:ef:69:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3 Validity Not Before: Dec 26 07:00:36 2025 GMT Not After : Dec 27 07:00:36 2025 GMT Subject: CN=8ba09a15a940b6d1199e1bceb8ac5f5485bf25dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:55:da:9a:da:90:8f:7c:2d:64:18:b7:a5: 6a:62:00:61:45:c9:f9:d9:41:77:92:05:df:eb:29: 2d:f4:a2:78:26:87:f1:ed:e2:39:d0:60:b1:37:99: c3:81:9a:bf:08:c9:b4:9b:97:33:2b:e4:35:a5:73: 69:56:9d:8b:f0:49:0b:10:22:3b:04:09:4c:7c:ee: 64:1e:07:8c:57:bf:f9:43:95:ca:d6:0d:17:a7:45: 1c:0e:e8:33:20:74:b9:8d:78:e1:11:aa:d0:64:22: a4:24:9e:fd:82:6a:5e:ad:68:4f:6d:57:78:5a:3b: 41:94:54:a5:7b:3d:92:a7:eb:1f:92:20:4d:f2:a9: e9:ae:dc:bf:16:a3:59:c6:87:f9:25:43:9c:86:9c: 57:af:27:19:c4:b3:b2:8a:c0:54:d7:5c:94:e7:cf: 17:3b:d0:2a:6d:33:50:69:e5:76:3c:7b:58:b6:c7: 5f:59:16:63:3d:c9:be:4d:ca:d0:f7:f5:20:04:6f: ac:8c:8a:33:7e:c6:6b:12:34:09:59:80:91:8c:f4: 25:c8:22:0f:c1:67:6d:c7:05:ed:3d:bf:78:e0:be: e2:ae:01:f6:84:81:16:94:9d:83:54:42:b1:10:1b: 8c:1c:6d:3a:47:04:21:d6:01:4f:b7:c1:6e:f4:93: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A0:9A:15:A9:40:B6:D1:19:9E:1B:CE:B8:AC:5F:54:85:BF:25:DC X509v3 Authority Key Identifier: keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:36:35:c8:0f:bb:a0:23:1c:24:ce:e9:a1:34:39:12:45:a6: 22:12:c4:44:68:d8:e1:4b:27:09:24:8c:c3:9f:3b:1b:c8:53: 8b:79:ee:8b:82:83:d0:5b:29:7b:dd:63:d8:2e:00:39:ef:1e: ca:4f:5c:4c:67:97:38:19:0a:33:a0:4e:4d:f1:bc:13:1f:3c: 9c:d8:9e:ef:c3:82:d1:17:d5:12:a2:55:20:e5:9d:26:e0:ee: 62:d3:23:24:5d:7c:71:f6:00:ca:2b:bc:1a:5b:fd:81:5a:e6: b4:32:61:e1:93:d5:78:e9:4f:b2:31:d3:c8:ce:df:84:e5:4d: 9f:13:b6:97:76:fd:4d:00:b2:2b:9b:f1:52:74:86:12:63:82: 8d:93:47:78:fa:af:73:17:28:e8:c3:60:02:b7:26:06:b7:85: e7:a2:47:f7:b5:28:5a:da:f1:b4:a2:84:8a:3b:d1:b4:30:38: 6d:34:06:72:d5:d0:32:c7:89:1c:81:e2:28:00:86:13:3d:69: 7c:aa:df:42:3a:58:e3:96:5d:31:86:76:04:be:38:5c:7e:4b: de:b9:34:16:54:1f:b4:23:7e:97:f8:7b:ce:4f:09:49:92:f1: cc:89:fb:55:2f:c5:2c:c1:bf:c6:fa:64:83:ac:0b:d2:97:0a: b9:37:3f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdZacfr1DSo7JJodq72ntMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOTFhN2JmMmYwM2E2N2ZkZmZjYjcxNDRiZDJmODExNGRj ZGQzYjMwHhcNMjUxMjI2MDcwMDM2WhcNMjUxMjI3MDcwMDM2WjAzMTEwLwYDVQQD Eyg4YmEwOWExNWE5NDBiNmQxMTk5ZTFiY2ViOGFjNWY1NDg1YmYyNWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9NV2prakI98LWQYt6VqYgBhRcn5 2UF3kgXf6ykt9KJ4Jofx7eI50GCxN5nDgZq/CMm0m5czK+Q1pXNpVp2L8EkLECI7 BAlMfO5kHgeMV7/5Q5XK1g0Xp0UcDugzIHS5jXjhEarQZCKkJJ79gmperWhPbVd4 WjtBlFSlez2Sp+sfkiBN8qnprty/FqNZxof5JUOchpxXrycZxLOyisBU11yU588X O9AqbTNQaeV2PHtYtsdfWRZjPcm+TcrQ9/UgBG+sjIozfsZrEjQJWYCRjPQlyCIP wWdtxwXtPb944L7irgH2hIEWlJ2DVEKxEBuMHG06RwQh1gFPt8Fu9JPikQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIugmhWpQLbRGZ4bzrisX1SFvyXcMB8GA1UdIwQY MBaAFMGRp78vA6Z/3/y3FEvS+BFNzdOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQt MzQ5MjhmOWExYzRmLzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQtMzQ5MjhmOWExYzRm LzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejY1yA+7 oCMcJM7poTQ5EkWmIhLERGjY4UsnCSSMw587G8hTi3nui4KD0Fspe91j2C4AOe8e yk9cTGeXOBkKM6BOTfG8Ex88nNie78OC0RfVEqJVIOWdJuDuYtMjJF18cfYAyiu8 Glv9gVrmtDJh4ZPVeOlPsjHTyM7fhOVNnxO2l3b9TQCyK5vxUnSGEmOCjZNHePqv cxco6MNgArcmBreF56JH97UoWtrxtKKEijvRtDA4bTQGctXQMseJHIHiKACGEz1p fKrfQjpY45ZdMYZ2BL44XH5L3rk0FlQftCN+l/h7zk8JSZLxzIn7VS/FLMG/xvpk g6wL0pcKuTc/6g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:08:52 2025 by rpki-client