This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft File: wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json) Hash identifier: AUZaO3ePmwPGoB/2uSJDKcFl0IcxJxLIc3uNFEzKzYQ= Subject key identifier: 32:29:33:FD:9C:A6:D5:69:A3:86:19:26:D2:69:66:7E:6A:E5:3A:20 Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Certificate serial: 019B59AC8F07F933F5C0AE8505096D8D87D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft Manifest number: 1C Signing time: Fri 26 Dec 2025 08:00:39 +0000 Manifest this update: Fri 26 Dec 2025 08:00:39 +0000 Manifest next update: Sat 27 Dec 2025 08:00:39 +0000 Files and hashes: 1: uXrBd9STFbzQ7RbY_QhW1DASaQM.roa (hash: JPg9whwqcXD7TUzimVhwfL+E/nwy9N2IPDLnzW5mDFI=) 2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: jUmzD/l8iPpYbO5euq3HAgGdiqtjosjTqEy0x7twVzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:8f:07:f9:33:f5:c0:ae:85:05:09:6d:8d:87:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Validity Not Before: Dec 26 08:00:39 2025 GMT Not After : Dec 27 08:00:39 2025 GMT Subject: CN=322933fd9ca6d569a3861926d269667e6ae53a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bc:3d:29:91:01:53:08:72:82:60:c5:bc:35: 27:b2:ac:11:e7:6c:0f:2c:17:48:60:1d:30:1e:2e: bd:0a:2a:21:c6:05:7c:f3:52:02:b8:96:ad:13:a8: af:5d:60:f5:e2:f2:89:c6:fc:b1:50:2b:c1:99:9c: 93:69:66:62:db:62:5e:da:78:da:d0:1c:98:fb:cb: 12:f4:71:2e:f3:3f:f3:48:fe:2c:f7:52:51:bb:69: 59:2f:d2:11:05:78:20:45:6e:5a:70:3a:31:3d:f7: f1:1a:ed:ac:2c:92:aa:0f:a4:8a:62:63:c5:d0:c5: b2:9e:00:18:79:70:7b:35:0f:0e:10:ad:80:67:55: 09:7c:d5:ee:3c:22:de:d2:73:27:eb:2d:78:ee:b2: e1:76:84:e0:6c:d6:de:45:3f:3b:0c:71:d2:03:b8: d7:a2:7d:ea:cf:48:40:81:47:97:4f:94:fe:ec:f5: 22:fa:54:81:1b:d3:95:01:fe:e0:c1:a7:5d:8d:c2: 86:40:9b:e0:d6:9b:7b:a5:e2:7d:85:c0:3b:09:9b: 21:27:d3:c0:3d:21:dc:01:f6:cd:e5:a4:18:36:cc: 7f:17:4d:97:58:29:0e:24:0f:37:89:4d:38:4b:c1: 63:ad:5a:85:fc:9b:ec:a4:c6:02:14:74:56:d3:8f: 00:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:29:33:FD:9C:A6:D5:69:A3:86:19:26:D2:69:66:7E:6A:E5:3A:20 X509v3 Authority Key Identifier: keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9e:09:40:bf:4b:96:50:67:01:fb:92:ae:3f:9b:5b:cb:09: 4e:e1:46:54:bc:e7:2b:66:b0:5c:c4:05:cb:a8:5f:5f:82:63: 38:eb:97:7d:88:f2:e7:cd:d9:24:d3:bb:96:0d:0f:8d:97:61: 55:87:ba:d3:a1:91:9a:d8:49:2d:6c:3c:72:4e:9e:3d:6a:14: 0a:36:93:9a:24:1a:15:4e:d4:cc:af:67:26:a8:bf:d2:45:55: 14:e6:7f:07:d3:33:ee:85:95:6a:d8:5d:2b:01:a0:20:0e:f3: 15:1d:e6:b6:f4:b7:99:e2:31:69:ad:71:fe:ab:84:ec:00:3a: a0:82:71:41:ba:76:45:2d:0d:1c:30:fc:0d:fe:e0:35:00:15: 88:78:ad:b8:b7:c5:24:42:65:90:1e:88:ec:f8:39:c5:b8:df: c2:c3:f3:46:8e:ec:c7:be:b9:39:6b:ff:94:05:a3:05:01:ff: ff:e4:de:ae:3d:f5:b5:7f:1d:24:10:0f:da:3b:45:8a:50:c0: 55:c9:0f:45:c9:b6:7d:20:60:3e:25:65:c6:e8:52:f2:54:18: 45:5a:b8:e4:42:df:34:d8:d5:5b:df:32:64:f6:c1:84:f2:92: ae:6b:4f:76:01:4b:79:18:0f:c4:01:49:ab:10:45:92:6c:02: bf:d0:ec:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrI8H+TP1wK6FBQltjYfQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWM0NWZmYTRhMzEyNDYwYzAwZmZlZGUzMmQ0ZGM0MWZk MmY3Y2YwHhcNMjUxMjI2MDgwMDM5WhcNMjUxMjI3MDgwMDM5WjAzMTEwLwYDVQQD EygzMjI5MzNmZDljYTZkNTY5YTM4NjE5MjZkMjY5NjY3ZTZhZTUzYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bw9KZEBUwhygmDFvDUnsqwR52wP LBdIYB0wHi69CiohxgV881ICuJatE6ivXWD14vKJxvyxUCvBmZyTaWZi22Je2nja 0ByY+8sS9HEu8z/zSP4s91JRu2lZL9IRBXggRW5acDoxPffxGu2sLJKqD6SKYmPF 0MWyngAYeXB7NQ8OEK2AZ1UJfNXuPCLe0nMn6y147rLhdoTgbNbeRT87DHHSA7jX on3qz0hAgUeXT5T+7PUi+lSBG9OVAf7gwaddjcKGQJvg1pt7peJ9hcA7CZshJ9PA PSHcAfbN5aQYNsx/F02XWCkOJA83iU04S8FjrVqF/JvspMYCFHRW048AjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIpM/2cptVpo4YZJtJpZn5q5TogMB8GA1UdIwQY MBaAFMJcRf+koxJGDAD/7eMtTcQf0vfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAt NzAxOWJkYmIxMTc3LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAtNzAxOWJkYmIxMTc3 LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZ4JQL9L llBnAfuSrj+bW8sJTuFGVLznK2awXMQFy6hfX4JjOOuXfYjy583ZJNO7lg0PjZdh VYe606GRmthJLWw8ck6ePWoUCjaTmiQaFU7UzK9nJqi/0kVVFOZ/B9Mz7oWVathd KwGgIA7zFR3mtvS3meIxaa1x/quE7AA6oIJxQbp2RS0NHDD8Df7gNQAViHituLfF JEJlkB6I7Pg5xbjfwsPzRo7sx765OWv/lAWjBQH//+Terj31tX8dJBAP2jtFilDA VckPRcm2fSBgPiVlxuhS8lQYRVq45ELfNNjVW98yZPbBhPKSrmtPdgFLeRgPxAFJ qxBFkmwCv9DsDw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:36 2025 by rpki-client