This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json) Hash identifier: 48jI0cbv58G06Lrd4SdMDdl9vb/kobTmOGqXusX8jtY= Subject key identifier: 1D:EC:D8:A3:AC:26:72:8A:AE:E2:DA:26:5A:0D:74:4F:FE:25:12:2F Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188 Certificate serial: 019B356976377BD5F1760825D51DF1CC3CF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft Manifest number: 16F3 Signing time: Fri 19 Dec 2025 07:01:02 +0000 Manifest this update: Fri 19 Dec 2025 07:01:02 +0000 Manifest next update: Sat 20 Dec 2025 07:01:02 +0000 Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: A7L+tJvmG086+xgjnSA3tE/wemcZkoYpUyy3RMS08P8=) 2: p_8FvngKjmLITizbNldEoC6LGv4.roa (hash: N/fSzmwZu/FbuI0gwUdxFYVJzK7d4SGahDnYSUc+txs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:76:37:7b:d5:f1:76:08:25:d5:1d:f1:cc:3c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b3358110dadf224e719914161731df5e56c4188 Validity Not Before: Dec 19 07:01:02 2025 GMT Not After : Dec 20 07:01:02 2025 GMT Subject: CN=1decd8a3ac26728aaee2da265a0d744ffe25122f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:dd:0c:97:dd:49:74:d6:c5:63:0c:71:32: 0d:38:b6:5f:54:de:cd:17:af:c0:15:d3:23:3d:c1: ea:db:1f:29:8e:5c:ae:77:d0:fb:f8:da:b1:08:07: 09:28:2a:52:2c:4c:d9:25:c0:e7:80:4d:64:e9:a0: ca:aa:30:3e:8b:1d:39:86:55:33:66:f4:0e:f0:d2: af:1e:0d:a2:9f:22:ca:a7:56:ea:c7:c9:bb:74:00: 39:82:37:ca:38:9c:b2:9d:90:07:a0:e3:d6:60:d0: e2:1d:b8:a1:fe:7c:a7:7b:b5:95:a2:a7:d1:18:97: 30:f4:23:f3:e1:24:75:70:5c:4b:0b:88:f2:91:63: 1b:d7:d4:41:e5:fb:ae:3f:a4:1c:18:ef:a5:8e:0f: c4:4e:40:57:ad:37:30:3b:f4:98:9e:b1:f5:c6:23: f6:6a:5c:c5:df:f1:2a:41:99:f8:d1:a1:f5:6e:d5: 8b:c1:c5:be:a9:38:f8:73:71:48:02:ab:18:91:00: 7c:3d:8a:17:6b:99:bb:59:04:24:fa:49:db:cb:21: 64:86:2e:43:61:22:a9:1c:2c:70:01:5c:ea:aa:33: 88:ba:0b:85:95:bc:b1:b4:1e:f7:76:d8:5d:f2:3f: a7:7a:72:c9:44:14:ee:f1:82:c0:34:fc:3d:68:72: 99:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:EC:D8:A3:AC:26:72:8A:AE:E2:DA:26:5A:0D:74:4F:FE:25:12:2F X509v3 Authority Key Identifier: keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:20:94:c5:69:af:d7:e4:46:c5:9b:c2:e4:ad:e0:7b:77:48: 6e:ee:74:7f:1c:f2:e9:18:3c:5a:c5:1a:04:ac:fb:c7:50:23: bf:92:f5:e2:95:10:af:b6:13:a7:13:6a:b6:c1:b0:02:82:24: 12:90:4d:4c:64:8f:e6:48:05:5d:83:93:b1:aa:58:9a:bc:8f: 26:1b:30:97:3f:25:32:bc:8c:28:f7:fa:02:53:5a:7b:26:84: e7:39:24:e1:6d:77:f1:b0:4a:0e:53:ad:35:c5:58:80:81:24: 9e:f2:44:25:48:54:74:53:a1:58:d5:4a:c5:ac:e2:2c:b8:d5: d9:9a:3a:27:c4:a5:e4:a0:7a:46:8c:0b:cf:df:e7:c6:6a:ab: a1:60:c3:62:a4:25:c5:4d:5c:7d:88:5f:6d:c4:c1:b2:a8:bd: df:bc:55:94:6c:9b:b0:33:86:26:31:42:9b:ba:ee:80:5f:00: b4:3d:60:d4:aa:29:2e:5d:7f:e2:ca:2f:be:2c:bf:73:21:7b: 58:79:68:ea:8b:4e:99:ab:2d:05:46:bb:a8:9b:ef:0a:e2:03: 12:1d:4b:f5:cd:8b:fb:14:ea:9b:88:94:79:90:ba:5f:44:bd: 31:48:9b:b2:48:89:1d:0f:69:18:f1:f1:6d:a2:29:aa:85:d9: 51:a8:a7:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aXY3e9Xxdggl1R3xzDzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2 YzQxODgwHhcNMjUxMjE5MDcwMTAyWhcNMjUxMjIwMDcwMTAyWjAzMTEwLwYDVQQD EygxZGVjZDhhM2FjMjY3MjhhYWVlMmRhMjY1YTBkNzQ0ZmZlMjUxMjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vbdDJfdSXTWxWMMcTINOLZfVN7N F6/AFdMjPcHq2x8pjlyud9D7+NqxCAcJKCpSLEzZJcDngE1k6aDKqjA+ix05hlUz ZvQO8NKvHg2inyLKp1bqx8m7dAA5gjfKOJyynZAHoOPWYNDiHbih/nyne7WVoqfR GJcw9CPz4SR1cFxLC4jykWMb19RB5fuuP6QcGO+ljg/ETkBXrTcwO/SYnrH1xiP2 alzF3/EqQZn40aH1btWLwcW+qTj4c3FIAqsYkQB8PYoXa5m7WQQk+knbyyFkhi5D YSKpHCxwAVzqqjOIuguFlbyxtB73dthd8j+nenLJRBTu8YLANPw9aHKZNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3s2KOsJnKKruLaJloNdE/+JRIvMB8GA1UdIwQY MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSCUxWmv 1+RGxZvC5K3ge3dIbu50fxzy6Rg8WsUaBKz7x1Ajv5L14pUQr7YTpxNqtsGwAoIk EpBNTGSP5kgFXYOTsapYmryPJhswlz8lMryMKPf6AlNaeyaE5zkk4W138bBKDlOt NcVYgIEknvJEJUhUdFOhWNVKxaziLLjV2Zo6J8Sl5KB6RowLz9/nxmqroWDDYqQl xU1cfYhfbcTBsqi937xVlGybsDOGJjFCm7rugF8AtD1g1KopLl1/4sovviy/cyF7 WHlo6otOmastBUa7qJvvCuIDEh1L9c2L+xTqm4iUeZC6X0S9MUibskiJHQ9pGPHx baIpqoXZUainSA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:21:55 2025 by rpki-client