This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft File: WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json) Hash identifier: 9htq8IBpBGQqcXx8/dUWSgs/3VS//C2T+fK8z9qH4oA= Subject key identifier: 71:5A:8F:3A:73:FD:C7:EF:87:91:36:62:A5:9E:4F:20:E4:2B:51:22 Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55 Certificate issuer: /CN=5af662b3f3dc8312b1b6bc917f0af00622775355 Certificate serial: 019B59E3C2C81F17492C76AE84FD3F9AEFCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 09:00:57 +0000 Manifest this update: Fri 26 Dec 2025 09:00:57 +0000 Manifest next update: Sat 27 Dec 2025 09:00:57 +0000 Files and hashes: 1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=) 2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: v4T7EW86lr7NZJ4tZzImRukLmIG5Q4gT/EKFQ8qY1Go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:c2:c8:1f:17:49:2c:76:ae:84:fd:3f:9a:ef:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355 Validity Not Before: Dec 26 09:00:57 2025 GMT Not After : Dec 27 09:00:57 2025 GMT Subject: CN=715a8f3a73fdc7ef87913662a59e4f20e42b5122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:9d:94:1f:60:1d:7b:bd:2b:a0:8e:03:f8: 7d:59:9b:3e:b6:5d:f7:ba:b9:04:67:36:cc:bd:30: 36:d5:a9:60:06:e1:11:f7:8f:5b:c4:03:44:f8:43: 69:82:e8:9e:dd:84:dd:a3:61:ff:a5:0c:16:6b:20: a7:5a:4f:6a:2d:b4:e3:2f:69:1d:90:9e:7e:20:35: 98:75:06:aa:75:b5:d9:e4:46:c0:60:03:8c:d2:84: d8:95:7a:4b:de:84:57:a8:16:1a:7f:18:7d:1f:50: 0d:25:3b:d6:73:0b:dd:8b:1c:6e:04:ff:c1:fc:ce: cc:b2:53:7c:ce:a4:e1:f5:ee:38:f5:eb:c7:b8:70: 93:23:b1:d0:62:71:14:9c:af:3b:ec:9b:52:26:f7: 9b:7a:1b:aa:f0:a0:0d:43:1b:d0:b0:62:4f:00:3c: 31:6e:90:1b:e9:7c:80:69:ba:9d:25:aa:a6:12:c6: 78:26:d8:32:0f:28:7b:7f:16:d9:d9:7f:bf:37:c1: 41:c8:fd:bd:0f:e0:4a:07:ca:b2:81:2b:31:0e:33: d2:9e:c0:94:23:a9:49:05:22:ec:74:b2:b1:d9:5f: 3e:05:d6:0f:51:b3:6d:c7:ad:9e:60:71:d5:fc:5d: e6:6a:b4:8e:f6:ba:be:e4:9e:a0:48:61:98:b8:94: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5A:8F:3A:73:FD:C7:EF:87:91:36:62:A5:9E:4F:20:E4:2B:51:22 X509v3 Authority Key Identifier: keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bd:21:9d:aa:08:20:4a:9b:d4:2f:b2:21:49:a1:a5:9c:cf: 5e:8d:36:cc:27:29:a2:e2:ea:d7:38:a1:40:b9:4c:af:a2:41: cf:38:39:c6:5a:fb:f1:d1:75:79:14:5a:5f:d3:cf:d3:a9:0b: f0:ba:d2:25:e9:26:27:3f:4a:3d:66:59:2c:17:d1:29:4a:b3: d9:be:8f:e3:46:4c:88:2b:41:d0:33:ff:ec:84:c5:f7:b8:85: 67:ff:56:09:36:ea:5c:02:fe:ae:58:23:93:01:41:cc:9c:06: f6:91:11:cf:e5:f1:75:19:b8:b9:45:4d:3b:ae:6f:4a:45:56: 0a:3c:f8:7f:55:27:11:ba:c5:8c:45:50:c9:14:7c:f5:bf:b6: b0:2d:1d:14:56:78:90:f2:1e:dc:db:e1:4a:b8:be:67:5f:e4: da:15:98:a7:b7:b6:99:52:a0:1c:74:fb:f2:1e:4f:cd:25:1d: b4:a6:9a:0f:5e:80:d8:98:fd:f6:b1:70:e4:d6:77:c2:11:a8: bd:2c:fb:7c:da:bd:8e:5f:42:a8:25:40:3d:f4:49:c5:ca:35: d1:a5:e6:30:9d:47:d0:db:f1:82:96:fb:cf:a2:96:ab:5f:52: 2f:60:6d:c6:55:60:de:30:46:5b:5c:8c:9f:58:af:e9:71:06: 57:fa:3f:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ48LIHxdJLHauhP0/mu/KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZjY2MmIzZjNkYzgzMTJiMWI2YmM5MTdmMGFmMDA2MjI3 NzUzNTUwHhcNMjUxMjI2MDkwMDU3WhcNMjUxMjI3MDkwMDU3WjAzMTEwLwYDVQQD Eyg3MTVhOGYzYTczZmRjN2VmODc5MTM2NjJhNTllNGYyMGU0MmI1MTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0badlB9gHXu9K6COA/h9WZs+tl33 urkEZzbMvTA21algBuER949bxANE+ENpguie3YTdo2H/pQwWayCnWk9qLbTjL2kd kJ5+IDWYdQaqdbXZ5EbAYAOM0oTYlXpL3oRXqBYafxh9H1ANJTvWcwvdixxuBP/B /M7MslN8zqTh9e449evHuHCTI7HQYnEUnK877JtSJvebehuq8KANQxvQsGJPADwx bpAb6XyAabqdJaqmEsZ4JtgyDyh7fxbZ2X+/N8FByP29D+BKB8qygSsxDjPSnsCU I6lJBSLsdLKx2V8+BdYPUbNtx62eYHHV/F3marSO9rq+5J6gSGGYuJQzPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFajzpz/cfvh5E2YqWeTyDkK1EiMB8GA1UdIwQY MBaAFFr2YrPz3IMSsba8kX8K8AYid1NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jYjQ2MjEtNDcxMC00YzRjLTg1YmEt ODcxY2Y0MDk3NzQ2LzEvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jYjQ2MjEtNDcxMC00YzRjLTg1YmEtODcxY2Y0MDk3NzQ2 LzEvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF70hnaoI IEqb1C+yIUmhpZzPXo02zCcpouLq1zihQLlMr6JBzzg5xlr78dF1eRRaX9PP06kL 8LrSJekmJz9KPWZZLBfRKUqz2b6P40ZMiCtB0DP/7ITF97iFZ/9WCTbqXAL+rlgj kwFBzJwG9pERz+XxdRm4uUVNO65vSkVWCjz4f1UnEbrFjEVQyRR89b+2sC0dFFZ4 kPIe3NvhSri+Z1/k2hWYp7e2mVKgHHT78h5PzSUdtKaaD16A2Jj99rFw5NZ3whGo vSz7fNq9jl9CqCVAPfRJxco10aXmMJ1H0Nvxgpb7z6KWq19SL2BtxlVg3jBGW1yM n1iv6XEGV/o/Pg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:17 2025 by rpki-client