This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json) Hash identifier: PICiFy8auTCJkrtO9W4DNuiQuYfWbznnv9qbBWZXn9w= Subject key identifier: 9E:49:0F:D9:F5:C4:92:9A:43:9C:7A:E1:63:7F:B1:8B:82:04:D5:1B Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Certificate serial: 019B59E3A38AD0ACC5FE70DBF05DFBE467BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft Manifest number: 1635 Signing time: Fri 26 Dec 2025 09:00:49 +0000 Manifest this update: Fri 26 Dec 2025 09:00:49 +0000 Manifest next update: Sat 27 Dec 2025 09:00:49 +0000 Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=) 2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: z3dLUlLcDnuvBQJVnQqU7V1Ywofm3bxW4eeBGSUSADI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:a3:8a:d0:ac:c5:fe:70:db:f0:5d:fb:e4:67:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Validity Not Before: Dec 26 09:00:49 2025 GMT Not After : Dec 27 09:00:49 2025 GMT Subject: CN=9e490fd9f5c4929a439c7ae1637fb18b8204d51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:49:68:1f:93:51:8f:72:2d:4d:e3:29:46:d4: 3b:bd:b7:bb:18:df:8c:61:71:fc:1e:f9:03:88:e2: b1:bb:d4:d2:c0:09:6d:ad:73:0a:72:c8:5d:82:6e: 2b:d8:70:50:e1:9d:56:92:51:56:cc:78:4c:5a:73: 79:b1:48:2b:91:86:ee:28:36:23:25:a3:c5:ea:fc: 41:3e:fd:ef:5c:cf:b3:1f:96:43:50:21:38:e1:c2: 33:de:a3:01:80:d7:cc:fd:f0:b6:17:b8:ca:ce:9b: fc:3c:76:6b:99:fb:eb:63:4d:94:b0:cf:7f:fd:42: 36:a5:7b:f9:46:33:0c:ef:58:a5:2a:72:f5:35:99: 9a:b4:a3:c1:48:18:9c:d6:1b:c3:87:fa:e7:cb:04: b6:48:ab:3c:63:ce:6e:58:64:83:fe:47:12:69:87: 59:bb:04:55:a5:00:ef:d0:a4:08:f9:4b:e8:54:d8: d1:d6:72:76:6d:2f:80:3f:0f:53:44:4f:9b:b9:ef: 74:01:dd:1f:6e:46:2f:b9:99:b0:ad:25:56:c9:ff: 1d:67:07:89:3e:3d:c8:a8:ed:ad:8d:cd:9c:21:1a: ae:44:26:92:3c:c4:29:36:7c:21:9d:35:0e:3b:09: 3f:61:7e:76:8d:ce:64:3f:e4:34:94:46:35:52:98: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:49:0F:D9:F5:C4:92:9A:43:9C:7A:E1:63:7F:B1:8B:82:04:D5:1B X509v3 Authority Key Identifier: keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:51:e6:21:ed:7c:21:ac:7d:2a:75:84:6f:e4:35:17:22:3b: 6f:18:75:0c:ee:b2:f5:91:cb:8c:a5:53:2b:7f:eb:3b:0d:2e: 67:6c:ba:fe:61:37:ba:06:b0:34:29:4d:60:e3:18:dc:75:67: 9b:e9:a0:e8:19:40:1b:e7:1c:dc:50:d4:20:0e:0f:d3:67:42: 98:b4:9a:bf:f0:c4:36:8d:0c:d5:85:72:3c:37:ca:eb:16:c3: ff:2d:77:78:c2:6a:6d:ab:0a:a6:f8:f0:fe:0f:32:72:87:97: 82:b2:0d:c2:96:2f:02:36:2b:16:74:76:e7:16:2c:48:6e:07: cb:dd:96:d1:7e:58:31:34:39:31:c2:a9:ba:9f:ff:d8:30:51: 08:3c:47:9f:43:f0:27:dd:dd:28:b1:ad:4f:96:fa:2f:88:cc: 0a:bc:3e:3c:bc:3d:9e:f0:3b:d3:41:3b:c8:b9:9a:98:54:3c: 11:46:34:f4:08:d2:02:d4:f2:b2:f1:ea:5b:a9:b1:c0:6c:d7: 19:2f:1b:dc:a7:01:e8:70:e8:39:7a:e5:c1:85:11:a7:81:77: db:77:f9:3d:37:98:30:53:dd:51:d9:3c:c9:1b:56:74:10:da: a2:4f:b2:be:16:cd:7a:19:8f:05:5e:74:c1:e1:4c:3e:7e:11: 78:5d:56:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ46OK0KzF/nDb8F375Ge8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl MGUzZTQwHhcNMjUxMjI2MDkwMDQ5WhcNMjUxMjI3MDkwMDQ5WjAzMTEwLwYDVQQD Eyg5ZTQ5MGZkOWY1YzQ5MjlhNDM5YzdhZTE2MzdmYjE4YjgyMDRkNTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUloH5NRj3ItTeMpRtQ7vbe7GN+M YXH8HvkDiOKxu9TSwAltrXMKcshdgm4r2HBQ4Z1WklFWzHhMWnN5sUgrkYbuKDYj JaPF6vxBPv3vXM+zH5ZDUCE44cIz3qMBgNfM/fC2F7jKzpv8PHZrmfvrY02UsM9/ /UI2pXv5RjMM71ilKnL1NZmatKPBSBic1hvDh/rnywS2SKs8Y85uWGSD/kcSaYdZ uwRVpQDv0KQI+UvoVNjR1nJ2bS+APw9TRE+bue90Ad0fbkYvuZmwrSVWyf8dZweJ Pj3IqO2tjc2cIRquRCaSPMQpNnwhnTUOOwk/YX52jc5kP+Q0lEY1UphK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5JD9n1xJKaQ5x64WN/sYuCBNUbMB8GA1UdIwQY MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2 LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVHmIe18 Iax9KnWEb+Q1FyI7bxh1DO6y9ZHLjKVTK3/rOw0uZ2y6/mE3ugawNClNYOMY3HVn m+mg6BlAG+cc3FDUIA4P02dCmLSav/DENo0M1YVyPDfK6xbD/y13eMJqbasKpvjw /g8ycoeXgrINwpYvAjYrFnR25xYsSG4Hy92W0X5YMTQ5McKpup//2DBRCDxHn0Pw J93dKLGtT5b6L4jMCrw+PLw9nvA700E7yLmamFQ8EUY09AjSAtTysvHqW6mxwGzX GS8b3KcB6HDoOXrlwYURp4F323f5PTeYMFPdUdk8yRtWdBDaok+yvhbNehmPBV50 weFMPn4ReF1W3g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:16 2025 by rpki-client