This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft File: Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft (raw, json) Hash identifier: Qa5tUdE8iExDGhzmojLNyyb32WF48gT8TueC8/unrf0= Subject key identifier: ED:96:4F:B8:0E:8A:CB:41:A2:41:74:2B:D1:01:E1:5B:56:03:66:6D Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a Certificate serial: 019B5AF63C191BEE26159C67B5190D955911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft Manifest number: 06F2 Signing time: Fri 26 Dec 2025 14:00:45 +0000 Manifest this update: Fri 26 Dec 2025 14:00:45 +0000 Manifest next update: Sat 27 Dec 2025 14:00:45 +0000 Files and hashes: 1: 9u-rsDWtE_83E-zt9uyk1Tmhx_c.roa (hash: e8hWv5F2Yw7MHTSO7w0icoPmtLInDJiNFNJcyngC6B0=) 2: Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl (hash: 18jEBQl6kuqCLJRa5R05Ts1l6REGPmwnT0f7qDO5vhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:3c:19:1b:ee:26:15:9c:67:b5:19:0d:95:59:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a Validity Not Before: Dec 26 14:00:45 2025 GMT Not After : Dec 27 14:00:45 2025 GMT Subject: CN=ed964fb80e8acb41a241742bd101e15b5603666d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:dd:38:ec:7f:62:22:53:26:7a:86:97:3c:21: 2c:1c:d3:f4:12:d3:54:70:c6:ad:b3:21:eb:c7:85: bf:8a:62:63:70:5b:ff:8c:cf:f4:28:66:77:70:81: 5d:66:db:bb:03:90:08:aa:3d:80:7c:72:d5:77:8c: 0a:d4:d6:14:b1:dc:5f:33:d8:e9:79:43:6a:2f:16: 51:d6:88:31:3a:64:3b:26:1f:c9:22:7d:3c:38:20: c0:cd:60:d8:e1:64:2f:7d:cb:dd:66:e4:e2:b5:4b: 4c:d4:bc:62:27:3e:26:d5:e1:e7:1a:85:1a:34:c8: 77:e5:65:1b:61:6a:85:0d:53:a3:69:46:26:c9:6d: 8b:c4:2a:12:1c:80:7b:19:62:66:8c:92:23:f3:ce: 44:14:59:e3:9a:af:5e:9e:81:f7:97:0b:bd:e6:6a: 19:da:31:f4:66:67:c7:95:c7:44:78:26:4b:ac:99: 3d:ab:b4:c8:5b:37:d3:64:a7:a1:8f:d9:61:57:62: 0b:a2:a3:8d:d2:e1:bc:0a:0a:17:c4:63:3f:c2:05: d1:fe:7c:6a:7c:2d:4f:18:3c:02:30:ce:ec:3f:e3: 18:24:bd:ce:ca:7a:d4:2c:ef:b7:a7:24:f0:5b:44: d9:59:d5:8b:76:f4:a4:8c:6f:4d:8c:3f:6b:80:a2: 5f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:96:4F:B8:0E:8A:CB:41:A2:41:74:2B:D1:01:E1:5B:56:03:66:6D X509v3 Authority Key Identifier: keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9a:c7:ba:95:f8:88:dc:d8:36:d7:7d:ae:ed:22:17:d6:f8: 11:7f:92:de:be:7f:37:76:c9:35:a0:be:d4:f0:47:21:4a:01: 6b:7b:7c:24:e4:dc:43:31:2f:ea:0b:66:28:04:47:49:0f:8a: 69:50:03:d2:ca:2b:27:73:bb:72:40:de:5f:88:8e:b0:22:04: 8a:fa:d7:24:31:7b:c6:8b:a7:18:a4:7f:c2:ef:32:be:99:33: 5e:5d:d6:9e:8b:af:6c:6c:9f:d6:ed:04:61:64:3f:50:c5:6b: b2:86:56:f1:39:19:9b:0f:83:a3:54:52:e7:e2:eb:6b:06:31: 95:38:e4:0a:21:3d:18:70:af:14:00:3b:22:08:2a:53:08:bd: 64:57:fc:35:84:a7:9a:aa:53:0f:be:fc:88:66:3b:4c:88:a3: 68:e6:26:14:84:4e:31:ed:d7:6a:0a:8d:bd:c2:72:1c:e1:d4: f2:81:37:13:1a:5c:f1:7d:8e:42:ef:1c:3f:38:df:d2:66:98: a8:06:63:eb:d8:b0:63:6f:60:48:07:95:0a:56:83:c4:e3:ad: 7f:19:d8:7e:8f:dc:23:d0:58:42:08:b5:61:56:04:48:c2:01: e9:ce:f3:5c:1c:f2:e0:12:85:8c:9e:38:99:97:8a:d4:17:49: 42:ab:f8:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9jwZG+4mFZxntRkNlVkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNWM3YzA4ZDc0OTAxYjdiODEwOTM3ZWM2M2U4NTU2M2Qz Njc4NmEwHhcNMjUxMjI2MTQwMDQ1WhcNMjUxMjI3MTQwMDQ1WjAzMTEwLwYDVQQD EyhlZDk2NGZiODBlOGFjYjQxYTI0MTc0MmJkMTAxZTE1YjU2MDM2NjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39047H9iIlMmeoaXPCEsHNP0EtNU cMatsyHrx4W/imJjcFv/jM/0KGZ3cIFdZtu7A5AIqj2AfHLVd4wK1NYUsdxfM9jp eUNqLxZR1ogxOmQ7Jh/JIn08OCDAzWDY4WQvfcvdZuTitUtM1LxiJz4m1eHnGoUa NMh35WUbYWqFDVOjaUYmyW2LxCoSHIB7GWJmjJIj885EFFnjmq9enoH3lwu95moZ 2jH0ZmfHlcdEeCZLrJk9q7TIWzfTZKehj9lhV2ILoqON0uG8CgoXxGM/wgXR/nxq fC1PGDwCMM7sP+MYJL3OynrULO+3pyTwW0TZWdWLdvSkjG9NjD9rgKJfNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2WT7gOistBokF0K9EB4VtWA2ZtMB8GA1UdIwQY MBaAFFpcfAjXSQG3uBCTfsY+hVY9NnhqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2x4OENOZEpBYmU0RUpOLXhqNkZWajAyZUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83MzgwNWItOWJmZi00ZDA0LWJkYzQt MWE1YmEzYmI3MGFiLzEvV2x4OENOZEpBYmU0RUpOLXhqNkZWajAyZUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy83MzgwNWItOWJmZi00ZDA0LWJkYzQtMWE1YmEzYmI3MGFi LzEvV2x4OENOZEpBYmU0RUpOLXhqNkZWajAyZUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5rHupX4 iNzYNtd9ru0iF9b4EX+S3r5/N3bJNaC+1PBHIUoBa3t8JOTcQzEv6gtmKARHSQ+K aVAD0sorJ3O7ckDeX4iOsCIEivrXJDF7xounGKR/wu8yvpkzXl3WnouvbGyf1u0E YWQ/UMVrsoZW8TkZmw+Do1RS5+LrawYxlTjkCiE9GHCvFAA7IggqUwi9ZFf8NYSn mqpTD778iGY7TIijaOYmFIROMe3XagqNvcJyHOHU8oE3Expc8X2OQu8cPzjf0maY qAZj69iwY29gSAeVClaDxOOtfxnYfo/cI9BYQgi1YVYESMIB6c7zXBzy4BKFjJ44 mZeK1BdJQqv4Dw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:27 2025 by rpki-client