This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json) Hash identifier: W6vlIkbpwPzJZn88B7nlNb9Z8p9BLzKvaMF7nDZvjT0= Subject key identifier: 8A:1D:F2:C0:75:92:54:94:D0:39:72:37:C1:9F:26:5C:88:92:A9:9E Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5 Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5 Certificate serial: 019B0FDC01A87C563F711966960E915FA157 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft Manifest number: 097F Signing time: Fri 12 Dec 2025 00:00:35 +0000 Manifest this update: Fri 12 Dec 2025 00:00:35 +0000 Manifest next update: Sat 13 Dec 2025 00:00:35 +0000 Files and hashes: 1: CrZg-KF8Q9A22OHJJHctF4UJ8vA.roa (hash: TgN9LzFg5B6mAl/H8RLYxQOgYmdpxQcOV4fT/DnUDn0=) 2: SQ2_vb8pZ2pKG_CAnGQ99aAzhXc.roa (hash: BeWy+dlaJycBkNeRNkXcy0pfdCOJIP2bN9zt/qAhbUY=) 3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: lMrKes7k9Gz4aZKjEe4SI2E4OMHgW5k/KqeNOVPG+bA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:dc:01:a8:7c:56:3f:71:19:66:96:0e:91:5f:a1:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5 Validity Not Before: Dec 12 00:00:35 2025 GMT Not After : Dec 13 00:00:35 2025 GMT Subject: CN=8a1df2c075925494d0397237c19f265c8892a99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:82:5c:a7:b7:af:ef:fb:7b:4b:5a:be:9d: 72:10:0e:e0:a1:ee:1c:60:d8:1d:d1:f8:93:93:77: 25:cf:2b:25:74:c1:d7:bb:e3:14:37:1b:04:56:23: e2:95:3b:71:59:96:8d:55:3c:9d:d1:3d:19:8e:be: 36:bb:b4:2c:0f:e5:b4:41:40:e1:10:5c:35:ba:13: 38:92:74:b0:44:45:14:ef:20:e3:23:7c:cf:63:2f: 75:e5:d5:43:21:89:1d:a5:ae:c9:fa:14:bb:2f:a6: 6d:7f:92:2c:8b:b7:b3:50:a8:f6:02:ce:01:9e:a5: a1:40:85:f7:4d:a7:e8:b0:69:f2:72:4b:84:f0:e2: c9:bf:bd:a6:98:9c:63:2c:ab:3f:dc:5b:af:88:e8: e6:f4:d9:46:9e:12:c1:79:2a:64:19:f2:79:d0:00: 39:88:23:1b:61:fb:b7:11:32:bd:91:2f:b4:e5:3e: 26:56:5b:c4:b2:74:21:e8:b8:41:4e:62:02:98:53: f1:3c:00:31:1f:a0:94:c7:04:f4:c2:18:ba:97:a0: 91:9b:15:f2:97:6f:9d:f9:bc:b7:ba:d8:e7:63:bf: 58:42:f0:01:8d:7d:8d:3b:00:52:99:9b:92:e8:bb: 22:a6:ef:21:11:08:13:1a:da:be:f6:60:1f:00:ef: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1D:F2:C0:75:92:54:94:D0:39:72:37:C1:9F:26:5C:88:92:A9:9E X509v3 Authority Key Identifier: keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fe:4e:85:28:d3:9a:88:a2:2e:59:6e:00:de:35:74:df:c5: 5f:e0:fd:07:44:ad:f8:49:77:b9:c3:79:b6:80:7b:3f:b8:fb: ad:ca:9b:d0:02:8a:e1:2f:32:15:62:2b:14:8f:4a:80:e0:57: 04:52:27:70:f3:d9:23:40:c2:b2:ac:59:f5:5a:d5:fa:27:c6: e0:28:78:f2:51:e2:6a:07:64:6b:6b:99:85:6e:33:3c:ba:c2: 44:31:1d:16:f0:37:a3:86:1e:5e:e5:8b:0e:01:2a:f3:9c:8e: 73:dc:36:e1:0a:20:1c:0d:8e:2b:c4:0f:08:71:1f:1f:8d:3e: f6:db:04:50:68:b2:4e:d4:66:7b:87:0e:93:3e:34:98:b8:55: 79:97:4c:87:09:2f:fe:1c:30:84:5c:91:c0:64:00:9d:04:4d: 9b:da:0c:66:53:53:f7:50:5e:79:a6:6c:4c:8b:ff:ad:18:29: 55:9e:b4:49:87:85:d5:76:09:15:55:fb:bd:bd:76:76:56:73: 48:ae:29:ab:6b:46:ae:a4:c4:43:43:84:40:9c:5c:8c:2d:48: 8b:6d:de:01:8e:91:cb:92:96:61:ea:27:b9:2f:31:1f:0c:42: c2:76:fb:82:eb:bf:59:a1:0e:50:c7:47:9f:68:ce:f2:bb:b6: 0a:b0:34:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsP3AGofFY/cRlmlg6RX6FXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl YTYzYjUwHhcNMjUxMjEyMDAwMDM1WhcNMjUxMjEzMDAwMDM1WjAzMTEwLwYDVQQD Eyg4YTFkZjJjMDc1OTI1NDk0ZDAzOTcyMzdjMTlmMjY1Yzg4OTJhOTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGuCXKe3r+/7e0tavp1yEA7goe4c YNgd0fiTk3clzysldMHXu+MUNxsEViPilTtxWZaNVTyd0T0Zjr42u7QsD+W0QUDh EFw1uhM4knSwREUU7yDjI3zPYy915dVDIYkdpa7J+hS7L6Ztf5Isi7ezUKj2As4B nqWhQIX3TafosGnyckuE8OLJv72mmJxjLKs/3FuviOjm9NlGnhLBeSpkGfJ50AA5 iCMbYfu3ETK9kS+05T4mVlvEsnQh6LhBTmICmFPxPAAxH6CUxwT0whi6l6CRmxXy l2+d+by3utjnY79YQvABjX2NOwBSmZuS6Lsipu8hEQgTGtq+9mAfAO8d6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIod8sB1klSU0DlyN8GfJlyIkqmeMB8GA1UdIwQY MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALv5OhSjT moiiLlluAN41dN/FX+D9B0St+El3ucN5toB7P7j7rcqb0AKK4S8yFWIrFI9KgOBX BFIncPPZI0DCsqxZ9VrV+ifG4Ch48lHiagdka2uZhW4zPLrCRDEdFvA3o4YeXuWL DgEq85yOc9w24QogHA2OK8QPCHEfH40+9tsEUGiyTtRme4cOkz40mLhVeZdMhwkv /hwwhFyRwGQAnQRNm9oMZlNT91BeeaZsTIv/rRgpVZ60SYeF1XYJFVX7vb12dlZz SK4pq2tGrqTEQ0OEQJxcjC1Ii23eAY6Ry5KWYeonuS8xHwxCwnb7guu/WaEOUMdH n2jO8ru2CrA0YA== -----END CERTIFICATE-----Generated at Fri Dec 12 01:11:49 2025 by rpki-client