This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft File: Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft (raw, json) Hash identifier: wXyZ0pV2I+zR53VBXlyMnRuBRMukBZbYt3pFxsoWTDw= Subject key identifier: 4D:0A:A8:57:E7:F6:14:C4:21:3F:70:19:5F:F9:FE:AB:A0:18:3C:BC Authority key identifier: 5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41 Certificate issuer: /CN=5b06f746e549ec9763e07cd766fea14e2866d341 Certificate serial: 019B330D32EA4AC8CB633C044A37C0960E3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft Manifest number: 03D1 Signing time: Thu 18 Dec 2025 20:01:01 +0000 Manifest this update: Thu 18 Dec 2025 20:01:01 +0000 Manifest next update: Fri 19 Dec 2025 20:01:01 +0000 Files and hashes: 1: Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl (hash: 3Yz8hqi9jzBjqfFdbbnH6/7Q7l6SxP93OC1yU335LA8=) 2: bW1NhmGBTwYgPPg4roDWhoM3_yw.roa (hash: JPmmBhJ0tN9Tg+cz1OMedHqMeYz4nB4Qc7iEbdz/1O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0d:32:ea:4a:c8:cb:63:3c:04:4a:37:c0:96:0e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b06f746e549ec9763e07cd766fea14e2866d341 Validity Not Before: Dec 18 20:01:01 2025 GMT Not After : Dec 19 20:01:01 2025 GMT Subject: CN=4d0aa857e7f614c4213f70195ff9feaba0183cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:fc:ed:f2:ca:fe:27:0a:c9:3f:8b:8c:e8: b1:8f:4a:bf:7b:fc:e4:1e:5f:69:3c:fb:6f:30:32: 08:54:58:68:ec:9c:d7:23:a9:73:ec:57:48:bf:1a: ea:1e:22:35:ef:21:cc:32:45:5f:73:fe:db:48:c9: 5a:01:d6:24:42:fd:a1:ce:9a:1f:32:6a:53:1e:de: 13:2b:97:f1:3f:b5:9a:84:64:5f:cd:e1:6a:4d:e7: 2e:74:9e:4f:4a:87:5b:d3:c7:64:cb:1b:ad:78:88: aa:64:ec:48:da:25:c6:f9:ec:d7:bc:80:1c:ba:53: f3:a9:32:b7:ce:ed:50:4b:13:58:21:69:85:5c:83: 33:7f:51:c0:e0:b3:eb:82:58:48:20:78:c7:59:d3: c7:92:36:dd:98:9b:08:ea:ee:83:c1:23:9a:cf:b6: cb:e7:a3:6f:bb:09:c6:9a:12:56:f9:81:46:96:19: 13:e2:74:0d:80:d2:de:8c:58:45:c2:ae:b2:fb:4e: 03:d8:06:24:64:cd:1c:36:69:0b:9c:41:86:f3:d8: 2b:e5:2f:a6:a5:02:6d:d6:df:db:52:a7:2f:06:b2: 86:73:40:14:b6:9f:a3:f1:1f:c3:f6:1d:8d:03:da: 88:86:87:ae:f0:27:41:cf:67:9c:ff:49:c4:b5:36: e8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0A:A8:57:E7:F6:14:C4:21:3F:70:19:5F:F9:FE:AB:A0:18:3C:BC X509v3 Authority Key Identifier: keyid:5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:59:29:45:45:6d:35:41:00:1d:29:06:14:0e:28:67:fa:d6: 24:5e:48:72:de:68:aa:c4:6d:15:b9:83:3b:63:bc:f2:80:55: 9a:8d:c6:10:65:a4:8e:c6:1b:51:36:64:6a:49:89:93:29:d9: cb:17:b2:50:91:98:ff:29:70:ca:32:73:d4:c0:9c:53:04:39: e0:a8:4a:b0:bb:2e:86:14:af:bb:b8:98:d0:98:61:24:06:78: 06:c3:95:93:b5:72:c2:61:41:0f:af:81:07:77:38:61:47:a8: 17:8b:e9:3e:88:64:9a:19:35:7b:f0:8b:b6:33:84:e7:96:e8: 4e:31:45:d2:31:a3:97:c5:e9:26:12:88:76:fb:a8:b1:26:b1: 75:e9:22:60:4f:d1:7a:f0:da:34:47:d9:f7:46:a8:6d:cf:a1: bb:6e:b8:65:5c:96:59:be:26:13:39:1a:2a:5c:fb:51:8d:5a: f4:97:64:b9:64:f8:db:cb:45:f6:d1:a2:c1:22:a1:ca:8a:3d: 62:66:8a:8d:66:e2:a4:18:8b:cc:51:6c:54:b7:e5:0e:f3:9c: 2c:08:2c:d3:a8:ab:a7:2d:27:54:78:e9:da:22:2d:44:11:3b: 5b:d2:7c:31:09:2b:a8:1e:6c:4c:85:60:e4:fa:bd:72:8c:28: 91:03:86:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDTLqSsjLYzwESjfAlg48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDZmNzQ2ZTU0OWVjOTc2M2UwN2NkNzY2ZmVhMTRlMjg2 NmQzNDEwHhcNMjUxMjE4MjAwMTAxWhcNMjUxMjE5MjAwMTAxWjAzMTEwLwYDVQQD Eyg0ZDBhYTg1N2U3ZjYxNGM0MjEzZjcwMTk1ZmY5ZmVhYmEwMTgzY2JjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEz87fLK/icKyT+LjOixj0q/e/zk Hl9pPPtvMDIIVFho7JzXI6lz7FdIvxrqHiI17yHMMkVfc/7bSMlaAdYkQv2hzpof MmpTHt4TK5fxP7WahGRfzeFqTecudJ5PSodb08dkyxuteIiqZOxI2iXG+ezXvIAc ulPzqTK3zu1QSxNYIWmFXIMzf1HA4LPrglhIIHjHWdPHkjbdmJsI6u6DwSOaz7bL 56NvuwnGmhJW+YFGlhkT4nQNgNLejFhFwq6y+04D2AYkZM0cNmkLnEGG89gr5S+m pQJt1t/bUqcvBrKGc0AUtp+j8R/D9h2NA9qIhoeu8CdBz2ec/0nEtTboYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0KqFfn9hTEIT9wGV/5/qugGDy8MB8GA1UdIwQY MBaAFFsG90blSeyXY+B812b+oU4oZtNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUt YmU0MTE3ZTIzMTljLzEvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUtYmU0MTE3ZTIzMTlj LzEvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflkpRUVt NUEAHSkGFA4oZ/rWJF5Ict5oqsRtFbmDO2O88oBVmo3GEGWkjsYbUTZkakmJkynZ yxeyUJGY/ylwyjJz1MCcUwQ54KhKsLsuhhSvu7iY0JhhJAZ4BsOVk7VywmFBD6+B B3c4YUeoF4vpPohkmhk1e/CLtjOE55boTjFF0jGjl8XpJhKIdvuosSaxdekiYE/R evDaNEfZ90aobc+hu264ZVyWWb4mEzkaKlz7UY1a9JdkuWT428tF9tGiwSKhyoo9 YmaKjWbipBiLzFFsVLflDvOcLAgs06irpy0nVHjp2iItRBE7W9J8MQkrqB5sTIVg 5Pq9cowokQOGog== -----END CERTIFICATE-----Generated at Thu Dec 18 22:48:28 2025 by rpki-client