This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft File: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft (raw, json) Hash identifier: qtwGAb+3xKECc0KHfG7MbayaR6krtWl6WJ9n2jBovlA= Subject key identifier: 14:EA:08:00:3A:88:4C:99:A5:89:39:C1:51:77:1F:CD:63:24:8D:7C Authority key identifier: 5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E Certificate issuer: /CN=5a5125afc5ec978b2a321291c2a5570fe619159e Certificate serial: 019B3C7E551BF376CDCF8F5251E3997EED4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 16:01:10 +0000 Manifest this update: Sat 20 Dec 2025 16:01:10 +0000 Manifest next update: Sun 21 Dec 2025 16:01:10 +0000 Files and hashes: 1: WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl (hash: WLuSCQu7MXFbQKJRfKM8e+fGT2tNNsXBuVJTFvRK9ok=) 2: Y5NkjhxNGx4ss5GCzKl7-rIduCM.roa (hash: /DJ0Dj5nLfrACSNcG6NOE2ReJp4ef+Ajvh1vnuYm/CY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:55:1b:f3:76:cd:cf:8f:52:51:e3:99:7e:ed:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a5125afc5ec978b2a321291c2a5570fe619159e Validity Not Before: Dec 20 16:01:10 2025 GMT Not After : Dec 21 16:01:10 2025 GMT Subject: CN=14ea08003a884c99a58939c151771fcd63248d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:bd:81:1d:a2:05:ce:64:cd:13:77:ab:50: b6:86:69:ee:fd:6b:19:13:cf:2b:99:79:a9:22:8c: 77:c3:78:2a:fd:2c:18:10:8e:f8:ad:47:be:4e:33: f3:6a:96:ff:d6:21:5d:f3:7b:f2:3f:6a:3c:f6:ec: f0:6f:57:5a:40:88:d4:a1:2c:33:f1:42:4c:6d:27: 75:cd:02:98:c0:09:4e:99:37:91:e5:d3:11:32:9a: 90:cd:66:37:95:04:d4:52:0a:f5:4c:2f:bb:f3:6e: ce:a6:f2:f3:3c:ca:92:72:cc:6f:67:82:e6:b4:4c: ef:dc:c9:a9:1f:3e:e2:e3:40:4d:dc:6d:11:ff:96: 57:41:af:a9:e4:cd:3a:6f:0d:5f:ba:83:70:13:e4: f0:eb:2c:a5:d6:61:e7:8b:be:d7:55:79:7f:00:4c: b0:56:e5:4d:b8:b2:f1:38:da:39:ef:39:79:fe:4c: 8c:31:61:9a:48:e8:85:43:98:ed:ab:6b:6b:25:2c: d9:16:4c:c2:3c:ca:88:c1:ad:d7:92:36:65:50:06: 44:aa:10:f6:30:1f:4b:b3:58:ca:5d:e1:75:f8:4a: f5:e4:24:4b:87:1b:27:bd:1e:c8:02:ec:fb:75:05: ab:09:ae:44:cc:fd:81:9e:4d:83:03:3b:55:e0:ef: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:EA:08:00:3A:88:4C:99:A5:89:39:C1:51:77:1F:CD:63:24:8D:7C X509v3 Authority Key Identifier: keyid:5A:51:25:AF:C5:EC:97:8B:2A:32:12:91:C2:A5:57:0F:E6:19:15:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7940ab-f7ca-4c07-a123-a6fb4df5481e/1/WlElr8Xsl4sqMhKRwqVXD-YZFZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b2:b6:40:92:5a:10:a9:22:2b:d6:08:d7:05:ef:a8:54:ec: 8b:5b:7f:66:3b:39:3c:b3:34:8c:ea:cb:32:36:9c:9b:9a:fe: a2:16:10:d9:41:62:2c:d0:d8:45:86:46:4e:57:86:0a:0e:f0: dc:d6:6d:a5:0f:60:94:d6:f2:58:b4:a4:61:b7:20:df:e1:72: d6:5c:2d:34:4c:5e:cc:27:eb:e7:18:7d:6b:3a:17:e1:4a:22: 89:7e:65:02:23:5f:9d:8d:3c:41:80:ec:af:8d:a4:eb:ca:04: 86:d8:ad:f4:01:ca:d2:8e:be:6f:6b:8c:52:90:4e:ac:25:d3: 6c:44:a6:db:5c:ac:f5:16:2f:aa:78:b8:e1:78:f1:46:5c:c2: 80:db:96:df:63:48:7d:62:dc:fd:6b:6d:d1:d7:29:d0:a3:02: d8:86:7a:b8:41:c3:b9:04:77:a8:60:7b:13:a4:78:37:4e:6e: 18:e7:cd:e5:2f:fd:54:b3:5a:ee:2c:18:a7:37:a1:d5:3a:cb: 06:94:4b:0f:fd:b0:81:a0:b5:a6:61:e2:69:98:58:77:e3:e7: d2:5a:d3:73:14:f8:31:88:84:9b:6c:ae:1c:cc:10:11:24:c2: 47:9d:71:12:4f:85:c0:58:cf:43:6d:73:d7:17:fb:0a:f7:50: 5b:3b:75:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flUb83bNz49SUeOZfu1LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNTEyNWFmYzVlYzk3OGIyYTMyMTI5MWMyYTU1NzBmZTYx OTE1OWUwHhcNMjUxMjIwMTYwMTEwWhcNMjUxMjIxMTYwMTEwWjAzMTEwLwYDVQQD EygxNGVhMDgwMDNhODg0Yzk5YTU4OTM5YzE1MTc3MWZjZDYzMjQ4ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzS9gR2iBc5kzRN3q1C2hmnu/WsZ E88rmXmpIox3w3gq/SwYEI74rUe+TjPzapb/1iFd83vyP2o89uzwb1daQIjUoSwz 8UJMbSd1zQKYwAlOmTeR5dMRMpqQzWY3lQTUUgr1TC+7827OpvLzPMqScsxvZ4Lm tEzv3MmpHz7i40BN3G0R/5ZXQa+p5M06bw1fuoNwE+Tw6yyl1mHni77XVXl/AEyw VuVNuLLxONo57zl5/kyMMWGaSOiFQ5jtq2trJSzZFkzCPMqIwa3XkjZlUAZEqhD2 MB9Ls1jKXeF1+Er15CRLhxsnvR7IAuz7dQWrCa5EzP2Bnk2DAztV4O8y3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTqCAA6iEyZpYk5wVF3H81jJI18MB8GA1UdIwQY MBaAFFpRJa/F7JeLKjISkcKlVw/mGRWeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMt YTZmYjRkZjU0ODFlLzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83OTQwYWItZjdjYS00YzA3LWExMjMtYTZmYjRkZjU0ODFl LzEvV2xFbHI4WHNsNHNxTWhLUndxVlhELVlaRlo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrK2QJJa EKkiK9YI1wXvqFTsi1t/Zjs5PLM0jOrLMjacm5r+ohYQ2UFiLNDYRYZGTleGCg7w 3NZtpQ9glNbyWLSkYbcg3+Fy1lwtNExezCfr5xh9azoX4UoiiX5lAiNfnY08QYDs r42k68oEhtit9AHK0o6+b2uMUpBOrCXTbESm21ys9RYvqni44XjxRlzCgNuW32NI fWLc/Wtt0dcp0KMC2IZ6uEHDuQR3qGB7E6R4N05uGOfN5S/9VLNa7iwYpzeh1TrL BpRLD/2wgaC1pmHiaZhYd+Pn0lrTcxT4MYiEm2yuHMwQESTCR51xEk+FwFjPQ21z 1xf7CvdQWzt1zQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:10:09 2025 by rpki-client