This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json) Hash identifier: E40cqCiMaWxDUkYVFT00pmMplN+K831VpAssKD9+MO0= Subject key identifier: 44:23:69:23:F4:90:1C:C3:FF:F3:14:8D:29:1B:74:43:BA:6E:8F:C1 Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef Certificate serial: 019B59769C3D68EF7C165D872074AA031E83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft Manifest number: 09D8 Signing time: Fri 26 Dec 2025 07:01:43 +0000 Manifest this update: Fri 26 Dec 2025 07:01:43 +0000 Manifest next update: Sat 27 Dec 2025 07:01:43 +0000 Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=) 2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: 3ydgk2KDM55fmX0Uofju42h8CJgBMLmrozzTl36mzss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:9c:3d:68:ef:7c:16:5d:87:20:74:aa:03:1e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef Validity Not Before: Dec 26 07:01:43 2025 GMT Not After : Dec 27 07:01:43 2025 GMT Subject: CN=44236923f4901cc3fff3148d291b7443ba6e8fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:04:2f:c1:f6:91:68:96:73:4c:2b:43:38:ab: c9:9f:ad:49:11:18:cf:98:7e:82:b3:03:94:25:ed: 73:b3:b0:d9:ab:2a:97:bb:01:31:af:30:5b:fd:4a: 4e:db:7e:72:90:58:ed:e0:dd:6d:a3:20:a0:6e:fd: 83:71:61:52:d6:a6:94:09:74:a6:6d:45:f4:92:31: 8d:7a:49:08:31:43:45:38:12:cd:d9:b2:83:92:68: 4d:90:7c:0f:87:1a:af:41:0d:f0:ee:4e:00:b1:fd: 45:23:43:0a:3b:a4:1d:80:bf:6d:6e:24:2c:fe:28: a5:4c:1a:de:49:7f:f9:7c:c1:b7:bf:85:55:4b:1b: 5d:8d:b4:eb:98:98:4f:23:24:18:89:0f:2f:88:42: d1:d5:a9:50:c9:9a:ca:8d:88:e5:41:23:d5:0d:af: 9c:ad:9d:fa:57:03:dd:a5:09:0a:14:c2:f5:de:e1: 50:2d:2c:10:aa:8e:15:22:9a:23:73:22:11:29:ed: fd:a6:f0:7b:85:6c:6a:b4:5e:9e:57:33:97:37:d2: 94:ac:47:5c:db:2f:09:19:d7:89:f6:2d:d1:83:f6: 4d:c8:46:61:f3:16:a1:81:9a:da:26:fa:f9:3f:07: a4:0e:86:32:ed:b5:e7:a3:6a:e1:22:74:bb:ba:78: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:23:69:23:F4:90:1C:C3:FF:F3:14:8D:29:1B:74:43:BA:6E:8F:C1 X509v3 Authority Key Identifier: keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:7a:d9:26:d2:d7:ea:fe:ce:11:b4:51:f0:0c:fe:ed:94:6f: af:9b:80:47:72:cc:a3:06:19:8d:00:c2:33:f5:cd:a3:4c:bb: 9d:67:b9:da:ee:d2:57:a6:68:81:ea:6a:f5:6b:de:5a:5d:7d: 3b:bc:43:99:19:26:82:d0:91:67:ef:4f:d6:96:60:6b:a4:8a: 3d:27:05:12:99:20:de:cd:14:0e:83:02:70:f2:6f:5f:b8:b8: 0f:b4:db:ca:86:66:ec:3c:95:48:99:b3:3d:a7:39:df:30:fa: f7:b9:57:da:b3:e7:22:e2:9e:0a:4b:28:c7:30:a1:1d:16:3d: ae:a3:45:b5:90:6c:ca:cf:85:60:67:7b:a2:03:8f:19:da:76: 8a:ee:a4:3b:d2:31:8a:0d:02:67:d7:4d:aa:3d:f1:a7:38:b2: 4f:ab:b8:a9:bb:7c:9e:1c:32:45:e1:00:95:e2:fd:33:a0:0a: 90:40:a4:d7:10:f3:9d:80:42:9c:32:13:06:7e:a4:35:b0:08: ba:2b:8e:2e:e8:f9:48:03:84:99:b4:8a:ec:03:5a:6a:eb:48: ef:ad:c6:00:c4:5b:f1:05:8c:72:ed:68:64:6d:3f:8a:a4:16: 1b:cb:8d:be:0b:df:5e:78:04:4e:dd:f6:38:b2:0c:0a:74:1f: e5:69:f2:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpw9aO98Fl2HIHSqAx6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNWQ0NTY1NGZhNTk3ZDM1MjJlZGExNjg4MzkxOTNlYmU3 ODJlZWYwHhcNMjUxMjI2MDcwMTQzWhcNMjUxMjI3MDcwMTQzWjAzMTEwLwYDVQQD Eyg0NDIzNjkyM2Y0OTAxY2MzZmZmMzE0OGQyOTFiNzQ0M2JhNmU4ZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgQvwfaRaJZzTCtDOKvJn61JERjP mH6CswOUJe1zs7DZqyqXuwExrzBb/UpO235ykFjt4N1toyCgbv2DcWFS1qaUCXSm bUX0kjGNekkIMUNFOBLN2bKDkmhNkHwPhxqvQQ3w7k4Asf1FI0MKO6QdgL9tbiQs /iilTBreSX/5fMG3v4VVSxtdjbTrmJhPIyQYiQ8viELR1alQyZrKjYjlQSPVDa+c rZ36VwPdpQkKFML13uFQLSwQqo4VIpojcyIRKe39pvB7hWxqtF6eVzOXN9KUrEdc 2y8JGdeJ9i3Rg/ZNyEZh8xahgZraJvr5PwekDoYy7bXno2rhInS7unj6KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQjaSP0kBzD//MUjSkbdEO6bo/BMB8GA1UdIwQY MBaAFFpdRWVPpZfTUi7aFog5GT6+eC7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzIt Yzk2NDBkMjUwYWZjLzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzItYzk2NDBkMjUwYWZj LzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw3rZJtLX 6v7OEbRR8Az+7ZRvr5uAR3LMowYZjQDCM/XNo0y7nWe52u7SV6Zogepq9WveWl19 O7xDmRkmgtCRZ+9P1pZga6SKPScFEpkg3s0UDoMCcPJvX7i4D7TbyoZm7DyVSJmz Pac53zD697lX2rPnIuKeCksoxzChHRY9rqNFtZBsys+FYGd7ogOPGdp2iu6kO9Ix ig0CZ9dNqj3xpziyT6u4qbt8nhwyReEAleL9M6AKkECk1xDznYBCnDITBn6kNbAI uiuOLuj5SAOEmbSK7ANaautI763GAMRb8QWMcu1oZG0/iqQWG8uNvgvfXngETt32 OLIMCnQf5WnyBw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:13 2025 by rpki-client