This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft File: wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json) Hash identifier: 9jA75/4RM+KkLiZFrtSym4F6CZOQTBrC5VyW8JGZwXk= Subject key identifier: 8B:99:10:F6:FA:A9:F8:02:AB:28:86:89:99:FD:0D:1F:36:4A:C8:2E Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 Certificate issuer: /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1 Certificate serial: 019B5A5170E8F947E98CDF0198AE5860EFD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft Manifest number: 05B5 Signing time: Fri 26 Dec 2025 11:00:45 +0000 Manifest this update: Fri 26 Dec 2025 11:00:45 +0000 Manifest next update: Sat 27 Dec 2025 11:00:45 +0000 Files and hashes: 1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=) 2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 7GnFVl4DVSnOoi8mLwK3EAgGIgE2wwgrB1x4tBuTGsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:70:e8:f9:47:e9:8c:df:01:98:ae:58:60:ef:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1 Validity Not Before: Dec 26 11:00:45 2025 GMT Not After : Dec 27 11:00:45 2025 GMT Subject: CN=8b9910f6faa9f802ab28868999fd0d1f364ac82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:ee:5c:be:2c:70:b7:6d:e4:c8:74:17:81: 37:46:e6:4c:29:09:92:6e:1e:bb:ba:77:8c:fd:d2: 02:c7:16:f2:c8:2b:6d:75:5e:7c:25:3a:b3:c1:43: cd:39:e3:c4:80:1a:23:ae:f3:b0:e1:0a:d9:fd:87: 6e:c6:1b:47:94:bd:1c:90:91:bd:2a:59:bb:a9:08: 20:88:62:60:73:00:23:56:41:59:42:cf:2b:7f:28: 7f:a9:1d:f9:39:16:18:0d:bc:49:b6:f0:f0:49:3f: c9:f7:98:1d:6d:45:b6:a0:09:87:10:3e:08:c9:e6: c7:14:93:f7:d3:e2:74:84:e3:f9:43:e3:80:a7:2f: a7:b1:12:dc:05:73:1d:bc:f4:fa:d5:07:0a:71:30: a5:b1:06:1a:8c:4a:2d:5f:41:60:5f:9b:a0:32:59: 52:33:a1:3c:5d:1d:1c:c4:67:67:8c:06:54:a0:19: 71:5b:51:7b:2a:74:d9:a2:41:68:25:53:15:03:c5: a5:41:f1:20:11:0b:b0:cc:e9:f7:90:86:34:ab:a0: 91:84:f1:cd:25:00:fb:17:a9:77:6b:fb:75:1c:05: 65:f5:f5:67:8d:9c:60:08:cf:c5:a5:65:1f:50:99: 3a:ac:17:13:f3:f1:4d:57:59:00:3f:8b:cf:8d:93: 62:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:99:10:F6:FA:A9:F8:02:AB:28:86:89:99:FD:0D:1F:36:4A:C8:2E X509v3 Authority Key Identifier: keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:79:a0:25:7e:c8:0d:00:63:5a:eb:65:98:81:eb:21:b4:2c: dd:b6:3f:3e:04:59:a1:2f:dc:b8:f4:6b:35:1d:85:09:76:e5: a8:02:39:54:7a:3b:e2:36:6e:bb:08:02:9d:c5:07:a2:95:14: 99:4c:4e:ce:8c:85:fc:2a:78:2a:35:77:01:d6:c3:78:32:44: 28:25:fa:ef:68:8f:60:2e:c4:d8:fc:41:a1:fe:6e:a6:29:82: a1:b2:61:0d:59:d5:a7:c7:47:bd:3a:d6:2b:18:5f:00:ec:bf: 50:9e:71:ea:1e:de:e0:89:71:79:4e:d6:b2:ff:0d:59:85:b7: c1:03:38:a1:69:15:ac:8b:12:52:b4:3f:f0:a2:d8:ae:31:c9: 07:e3:9e:ac:e4:a6:10:3d:02:42:53:6e:a1:de:09:68:66:e4: 25:df:6a:4d:10:13:70:43:49:d2:94:3d:1f:25:5d:0a:f2:98: cc:31:f4:89:b0:7c:c5:39:86:59:1d:ba:7d:45:c7:6b:e7:e7: 5a:8f:ec:34:a6:d8:1f:66:f5:5d:91:3a:a9:31:f5:f8:80:f3: 00:d9:00:9c:6b:7e:d9:00:0c:78:28:02:d3:31:f7:bc:2c:a1: aa:9e:80:21:72:23:f6:bc:f7:64:c3:22:a1:5b:29:fe:82:dd: bd:d6:c1:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXDo+UfpjN8BmK5YYO/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5 NmEwZjEwHhcNMjUxMjI2MTEwMDQ1WhcNMjUxMjI3MTEwMDQ1WjAzMTEwLwYDVQQD Eyg4Yjk5MTBmNmZhYTlmODAyYWIyODg2ODk5OWZkMGQxZjM2NGFjODJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hfuXL4scLdt5Mh0F4E3RuZMKQmS bh67uneM/dICxxbyyCttdV58JTqzwUPNOePEgBojrvOw4QrZ/YduxhtHlL0ckJG9 Klm7qQggiGJgcwAjVkFZQs8rfyh/qR35ORYYDbxJtvDwST/J95gdbUW2oAmHED4I yebHFJP30+J0hOP5Q+OApy+nsRLcBXMdvPT61QcKcTClsQYajEotX0FgX5ugMllS M6E8XR0cxGdnjAZUoBlxW1F7KnTZokFoJVMVA8WlQfEgEQuwzOn3kIY0q6CRhPHN JQD7F6l3a/t1HAVl9fVnjZxgCM/FpWUfUJk6rBcT8/FNV1kAP4vPjZNi6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIuZEPb6qfgCqyiGiZn9DR82SsguMB8GA1UdIwQY MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanmgJX7I DQBjWutlmIHrIbQs3bY/PgRZoS/cuPRrNR2FCXblqAI5VHo74jZuuwgCncUHopUU mUxOzoyF/Cp4KjV3AdbDeDJEKCX672iPYC7E2PxBof5upimCobJhDVnVp8dHvTrW KxhfAOy/UJ5x6h7e4IlxeU7Wsv8NWYW3wQM4oWkVrIsSUrQ/8KLYrjHJB+OerOSm ED0CQlNuod4JaGbkJd9qTRATcENJ0pQ9HyVdCvKYzDH0ibB8xTmGWR26fUXHa+fn Wo/sNKbYH2b1XZE6qTH1+IDzANkAnGt+2QAMeCgC0zH3vCyhqp6AIXIj9rz3ZMMi oVsp/oLdvdbBdw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:21 2025 by rpki-client