This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json) Hash identifier: tJ2/3+iJs/opQyKbAzquVhXt8C36PaWvsjXzVEQsYLA= Subject key identifier: 00:E2:69:37:E5:DC:C3:0B:1E:90:52:69:3C:A5:C8:52:5F:2C:FC:43 Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Certificate serial: 019B390F1AACA9A9A6B92A56453B0880F699 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft Manifest number: 0D86 Signing time: Sat 20 Dec 2025 00:00:49 +0000 Manifest this update: Sat 20 Dec 2025 00:00:49 +0000 Manifest next update: Sun 21 Dec 2025 00:00:49 +0000 Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=) 2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: 9hDIqCbYUm3/u98OAQlWzZm+JSYAnggXd4LlVzHG0Os=) 3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:1a:ac:a9:a9:a6:b9:2a:56:45:3b:08:80:f6:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19 Validity Not Before: Dec 20 00:00:49 2025 GMT Not After : Dec 21 00:00:49 2025 GMT Subject: CN=00e26937e5dcc30b1e9052693ca5c8525f2cfc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:28:b1:66:96:ba:bd:6c:d8:59:71:7f:36: f0:bb:b7:0c:a7:16:7f:13:fb:40:19:fa:28:36:99: b0:7f:e1:eb:95:fb:d4:35:26:ea:89:df:f9:b2:7d: 94:5a:93:d9:2b:66:7d:de:10:d3:c6:39:6d:94:3c: 53:9a:93:64:69:b4:3c:83:3b:31:38:85:a5:55:61: da:3e:bc:20:04:2e:f6:1a:11:ae:9b:b4:06:5d:92: bf:cb:25:1d:90:f4:b9:42:a3:69:d9:85:7e:8e:ab: ea:f4:06:de:2d:b3:fe:7d:f3:53:bb:37:76:8d:a1: d9:1c:3c:23:b3:34:d9:9d:3d:8b:95:a0:8b:cc:39: 50:52:a9:1d:67:2d:33:6b:bd:38:da:b9:90:a9:e5: 75:f5:30:90:b7:09:c1:c9:d7:3d:29:5d:9c:de:e9: 8e:bb:00:c1:6a:f6:5a:1b:3a:70:92:0a:e9:f4:52: e7:5e:20:6e:ca:f1:65:45:41:a6:b5:60:cc:0d:da: e3:cb:3e:8d:55:08:ff:5b:b2:6c:02:78:4a:76:54: de:a8:6b:07:d2:7f:7b:4e:a0:1b:6c:83:a1:c6:17: 3d:f1:95:ef:77:d6:1a:0a:05:a0:25:e9:3a:55:1f: fd:c0:32:38:9f:08:63:54:e9:67:42:29:a7:a3:f8: a3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E2:69:37:E5:DC:C3:0B:1E:90:52:69:3C:A5:C8:52:5F:2C:FC:43 X509v3 Authority Key Identifier: keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:11:5a:d8:c3:6b:75:04:4b:56:a0:1a:4c:57:fd:92:ec:62: 6b:11:c3:18:c5:62:39:6b:14:34:4b:7b:df:77:13:18:4b:8c: b2:b5:07:d2:14:84:a0:e6:e4:42:2e:31:fd:d7:37:25:c0:a8: 19:f9:3a:b8:48:41:89:2f:83:29:ed:2d:4f:65:96:b9:12:6c: 06:23:12:28:dd:04:20:9d:d7:7a:a5:d8:0f:7f:98:4a:02:e1: ae:86:d7:cb:2b:87:22:70:0d:9a:84:28:4e:f7:44:9e:75:5a: 37:29:96:f9:a9:61:1e:5e:63:21:d7:21:cb:d8:ab:37:5f:69: be:7a:33:59:65:6e:6c:2c:4b:0b:32:09:60:38:e9:a9:d1:a6: e1:d0:8f:b4:f4:50:52:f4:96:7c:81:aa:5a:50:3b:48:03:81: da:28:b0:71:6b:ac:27:46:c4:8b:bc:e8:04:6e:1f:b4:7c:18: 86:c1:bc:dc:5c:a1:8d:a8:23:97:f3:ae:bd:11:24:c4:31:87: 5c:06:f9:f4:3c:f3:d9:bf:ef:7e:1a:f3:e3:61:02:39:59:a8: 10:08:3b:45:4d:46:3d:de:34:cd:4c:74:6b:3c:fc:0a:be:a2: 6a:db:ed:20:82:12:1b:6b:31:d9:fd:1a:7d:92:b8:1d:e4:63: f4:26:c3:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DxqsqammuSpWRTsIgPaZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWMxZTA2MjQwMzliZDFmMWE5NDZjYjUxM2M5MzM4NmZh YjZiMTkwHhcNMjUxMjIwMDAwMDQ5WhcNMjUxMjIxMDAwMDQ5WjAzMTEwLwYDVQQD EygwMGUyNjkzN2U1ZGNjMzBiMWU5MDUyNjkzY2E1Yzg1MjVmMmNmYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4YosWaWur1s2Flxfzbwu7cMpxZ/ E/tAGfooNpmwf+HrlfvUNSbqid/5sn2UWpPZK2Z93hDTxjltlDxTmpNkabQ8gzsx OIWlVWHaPrwgBC72GhGum7QGXZK/yyUdkPS5QqNp2YV+jqvq9AbeLbP+ffNTuzd2 jaHZHDwjszTZnT2LlaCLzDlQUqkdZy0za7042rmQqeV19TCQtwnBydc9KV2c3umO uwDBavZaGzpwkgrp9FLnXiBuyvFlRUGmtWDMDdrjyz6NVQj/W7JsAnhKdlTeqGsH 0n97TqAbbIOhxhc98ZXvd9YaCgWgJek6VR/9wDI4nwhjVOlnQimno/ijiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADiaTfl3MMLHpBSaTylyFJfLPxDMB8GA1UdIwQY MBaAFFscHgYkA5vR8alGy1E8kzhvq2sZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgt YmZiNmNmMGYwODM1LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xODQwM2QtNzc5Mi00ZjlkLTkzNjgtYmZiNmNmMGYwODM1 LzEvV3h3ZUJpUURtOUh4cVViTFVUeVRPRy1yYXhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwxFa2MNr dQRLVqAaTFf9kuxiaxHDGMViOWsUNEt733cTGEuMsrUH0hSEoObkQi4x/dc3JcCo Gfk6uEhBiS+DKe0tT2WWuRJsBiMSKN0EIJ3XeqXYD3+YSgLhrobXyyuHInANmoQo TvdEnnVaNymW+alhHl5jIdchy9irN19pvnozWWVubCxLCzIJYDjpqdGm4dCPtPRQ UvSWfIGqWlA7SAOB2iiwcWusJ0bEi7zoBG4ftHwYhsG83Fyhjagjl/OuvREkxDGH XAb59Dzz2b/vfhrz42ECOVmoEAg7RU1GPd40zUx0azz8Cr6iatvtIIISG2sx2f0a fZK4HeRj9CbDHA== -----END CERTIFICATE-----Generated at Sat Dec 20 02:03:24 2025 by rpki-client