This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json) Hash identifier: ZehfZO9X84F0Yej8SB5Qk+G8G8wpzLHiX9fETik7szo= Subject key identifier: 81:EB:0D:9F:CF:55:E3:48:89:5C:25:91:9E:5A:9D:DA:F7:0E:82:DA Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c Certificate serial: 019B3D5A2B9E86BFC18CE1B0506A097BC410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft Manifest number: 175D Signing time: Sat 20 Dec 2025 20:01:18 +0000 Manifest this update: Sat 20 Dec 2025 20:01:18 +0000 Manifest next update: Sun 21 Dec 2025 20:01:18 +0000 Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=) 2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: zoxYfsYQuIewT5TGAstAbuX9G+sEtuqf1ZSppRP2olA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:2b:9e:86:bf:c1:8c:e1:b0:50:6a:09:7b:c4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aae19678aa37525512229a94e7890147183273c Validity Not Before: Dec 20 20:01:18 2025 GMT Not After : Dec 21 20:01:18 2025 GMT Subject: CN=81eb0d9fcf55e348895c25919e5a9ddaf70e82da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:85:a4:d7:82:51:a9:f0:20:83:64:c8:90: 68:15:0f:1d:b0:17:e5:95:bd:ea:b3:de:1e:82:06: 23:e8:9b:91:23:8b:16:43:8d:a6:d4:0b:71:15:0c: 53:17:f5:b1:20:ee:3b:b0:de:31:9c:f1:3f:d2:f2: 9e:62:de:65:af:c9:34:ce:e4:49:9a:db:f7:a0:bc: 57:a7:02:15:8a:ea:9a:41:12:ca:f5:ee:d1:0a:94: 1f:ca:d1:ed:47:b4:eb:42:58:dc:e9:8b:20:37:48: 0e:15:e3:33:0e:f1:83:ff:a0:a6:a1:e5:3a:e8:22: 50:80:44:bb:e6:a3:95:ef:da:a6:e7:8a:d7:10:cc: b7:30:32:ec:18:e8:1e:25:6b:40:fb:ff:8e:e1:db: 19:a5:8b:ea:ca:f3:54:e3:77:4f:38:83:3a:53:28: 70:ff:c3:60:8a:64:40:eb:43:67:f7:c9:88:bd:64: ab:21:4a:8b:5b:de:62:d2:29:22:e1:9e:5d:e0:b2: bc:17:cf:95:b7:d8:6f:a2:b3:27:a6:41:a7:73:f6: ee:be:77:40:8a:b4:ef:88:b6:77:26:c9:ae:79:46: fe:bb:b8:cc:fb:4b:7a:c3:55:18:a3:26:57:c0:a5: 82:bc:db:de:ef:ff:1f:ab:1a:c1:80:ef:af:76:34: 21:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EB:0D:9F:CF:55:E3:48:89:5C:25:91:9E:5A:9D:DA:F7:0E:82:DA X509v3 Authority Key Identifier: keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:57:4b:65:23:20:07:99:23:46:89:3f:82:ff:ee:75:dc:95: d1:5b:97:54:6d:20:d1:3b:65:81:73:db:aa:71:37:69:f9:45: 48:03:38:24:1d:16:b1:e0:1f:70:9f:9c:c7:0e:73:e1:d0:87: 3a:48:9d:ef:2c:75:71:a1:81:7b:0a:8f:cd:b0:71:1f:3f:ce: 81:99:8e:f0:4f:f0:4f:ce:bc:e4:07:e5:f8:8d:5d:ad:10:4e: 49:55:e7:b8:e9:a6:f9:cb:40:ab:3b:c2:27:64:6d:39:c5:eb: 80:bb:0b:59:9a:15:a4:89:90:f5:00:17:49:29:47:bf:75:8a: 00:33:44:70:03:e6:05:f0:19:27:d2:00:65:b8:5b:a0:be:32: 24:c1:0a:2f:7b:f5:6a:1d:0d:8d:d3:80:b8:c0:f7:33:c7:9d: 2c:56:d5:35:35:86:14:97:83:09:fd:bb:66:97:87:03:ea:02: 3e:54:3a:d5:33:a7:6f:84:1d:a6:9e:43:ef:5f:40:e7:7d:b5: 7f:d2:5d:3a:e2:1d:06:b0:f2:7e:22:03:d8:b6:4d:9a:de:a2: c1:3a:e1:00:fc:0e:71:09:13:98:d3:a0:df:ac:e3:de:76:fc: 0f:92:e6:b0:5e:29:ca:35:a9:01:8f:3e:8d:82:9c:9a:2c:89: 64:cb:57:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wiuehr/BjOGwUGoJe8QQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWUxOTY3OGFhMzc1MjU1MTIyMjlhOTRlNzg5MDE0NzE4 MzI3M2MwHhcNMjUxMjIwMjAwMTE4WhcNMjUxMjIxMjAwMTE4WjAzMTEwLwYDVQQD Eyg4MWViMGQ5ZmNmNTVlMzQ4ODk1YzI1OTE5ZTVhOWRkYWY3MGU4MmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbiFpNeCUanwIINkyJBoFQ8dsBfl lb3qs94eggYj6JuRI4sWQ42m1AtxFQxTF/WxIO47sN4xnPE/0vKeYt5lr8k0zuRJ mtv3oLxXpwIViuqaQRLK9e7RCpQfytHtR7TrQljc6YsgN0gOFeMzDvGD/6CmoeU6 6CJQgES75qOV79qm54rXEMy3MDLsGOgeJWtA+/+O4dsZpYvqyvNU43dPOIM6Uyhw /8NgimRA60Nn98mIvWSrIUqLW95i0iki4Z5d4LK8F8+Vt9hvorMnpkGnc/buvndA irTviLZ3JsmueUb+u7jM+0t6w1UYoyZXwKWCvNve7/8fqxrBgO+vdjQhFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHrDZ/PVeNIiVwlkZ5andr3DoLaMB8GA1UdIwQY MBaAFFquGWeKo3UlUSIpqU54kBRxgyc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2Et NjQzZjAyZGFlYjllLzEvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2EtNjQzZjAyZGFlYjll LzEvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFdLZSMg B5kjRok/gv/uddyV0VuXVG0g0TtlgXPbqnE3aflFSAM4JB0WseAfcJ+cxw5z4dCH Okid7yx1caGBewqPzbBxHz/OgZmO8E/wT8685Afl+I1drRBOSVXnuOmm+ctAqzvC J2RtOcXrgLsLWZoVpImQ9QAXSSlHv3WKADNEcAPmBfAZJ9IAZbhboL4yJMEKL3v1 ah0NjdOAuMD3M8edLFbVNTWGFJeDCf27ZpeHA+oCPlQ61TOnb4Qdpp5D719A5321 f9JdOuIdBrDyfiID2LZNmt6iwTrhAPwOcQkTmNOg36zj3nb8D5LmsF4pyjWpAY8+ jYKcmiyJZMtXaw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:25:33 2025 by rpki-client