This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft File: wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json) Hash identifier: CNz/sg+1qAQ1YqQcqD7hkv9gjAHOp6nYOhdF8xpSCsY= Subject key identifier: E5:12:AB:D6:41:82:85:25:DE:D6:AE:5B:21:5A:61:66:61:E8:8D:3F Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Certificate serial: 019AF31C866C4FEC6ED92B19D13FE551C509 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft Manifest number: 0E44 Signing time: Sat 06 Dec 2025 10:02:04 +0000 Manifest this update: Sat 06 Dec 2025 10:02:04 +0000 Manifest next update: Sun 07 Dec 2025 10:02:04 +0000 Files and hashes: 1: W1KkGv3sjtsEadnyDnbZKiSJ0W4.roa (hash: Hwc+g3pqAXEzqdnTsf6BwWsSvsLJSB5kNUhL8qZNZ1g=) 2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: vFuFXsrv6iNCQCzESeQOQyWEv30XIOWMgW1SO4iC8SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:86:6c:4f:ec:6e:d9:2b:19:d1:3f:e5:51:c5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Validity Not Before: Dec 6 10:02:04 2025 GMT Not After : Dec 7 10:02:04 2025 GMT Subject: CN=e512abd641828525ded6ae5b215a616661e88d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:28:53:93:9e:ff:16:8d:e2:15:74:0a:82: dd:aa:62:f1:a4:77:4c:ff:20:5b:04:03:de:a6:f3: 4c:91:0f:ad:dc:e7:e1:04:ae:7d:4d:83:7b:4a:f4: 71:6b:fa:18:cd:12:fb:94:f6:e5:7b:f3:c4:a9:79: a2:04:d4:0e:45:1a:73:e2:18:09:f3:ff:38:10:08: f4:ee:f3:ed:cc:25:ca:c5:cb:f2:86:ae:e8:9d:aa: 41:d7:d1:3e:43:ec:7e:09:3c:35:ca:0b:2f:b3:2f: 25:87:27:1c:84:51:c5:23:9e:75:0c:e1:9c:eb:d3: 7d:a6:78:91:16:a1:62:f9:fe:7e:eb:ef:98:58:c9: bb:da:88:6e:8c:13:d4:c7:77:3d:b9:d2:d2:d4:88: 74:19:c6:01:90:6b:de:5f:75:9b:a4:b5:51:ec:5d: 02:be:78:2c:4f:d5:90:cd:4f:89:88:90:32:2a:80: 07:d2:50:9e:a2:7d:7a:ea:b4:91:6d:e3:ac:9d:ba: c7:65:47:4c:73:29:69:82:97:80:3e:64:ca:39:9d: 0e:0b:00:41:9f:2a:4b:a1:6c:0b:6b:58:64:3b:e0: bc:fc:91:1f:31:25:40:ea:40:b4:a7:14:11:30:14: 7f:e0:d8:15:6f:e1:2a:28:0b:a6:48:b7:2e:2d:ed: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:12:AB:D6:41:82:85:25:DE:D6:AE:5B:21:5A:61:66:61:E8:8D:3F X509v3 Authority Key Identifier: keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:53:05:fd:4e:66:72:c1:a4:6b:b0:4b:18:78:f0:c7:f0:6f: 07:92:44:f9:34:e8:10:d1:a8:3b:c8:46:16:86:f0:41:af:91: b1:fc:71:08:b4:7a:32:01:0e:d4:82:4e:d9:2b:34:67:4d:31: 3f:2b:e1:03:b4:4e:03:8d:14:d7:45:d9:98:ce:29:72:1f:8a: b3:5c:d3:13:0b:78:bc:95:77:60:b8:48:e3:ae:e0:f2:95:04: e8:03:70:49:07:94:8b:c4:70:5c:f6:06:c6:0b:fb:8a:b2:2d: 5a:6d:77:b1:0f:5b:8c:ff:3c:49:87:1a:cb:0f:20:e9:bf:91: 1b:c1:54:38:80:8c:e8:96:14:aa:ba:9e:4a:bc:7b:42:6a:f2: d5:bf:33:88:8b:22:0e:42:bd:d4:13:00:bd:b8:9f:82:5a:5e: 16:37:66:e7:17:00:48:85:af:19:78:a1:bd:4a:0a:4c:c0:1a: 2a:bc:49:63:5f:45:6c:87:57:dc:d5:b4:b2:7e:80:37:b2:ee: a8:80:e9:4c:89:c0:8d:b4:bb:4d:db:cc:d4:4b:8e:61:8b:7e: 60:5d:f2:1f:de:59:16:fa:4b:77:c2:cd:24:8b:1e:fc:d5:50: 19:cc:ff:d8:15:b9:47:e4:eb:4b:c8:1a:47:a8:9b:fc:2f:ab: 13:4a:dd:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIZsT+xu2SsZ0T/lUcUJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4 M2E3YjMwHhcNMjUxMjA2MTAwMjA0WhcNMjUxMjA3MTAwMjA0WjAzMTEwLwYDVQQD EyhlNTEyYWJkNjQxODI4NTI1ZGVkNmFlNWIyMTVhNjE2NjYxZTg4ZDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0QoU5Oe/xaN4hV0CoLdqmLxpHdM /yBbBAPepvNMkQ+t3OfhBK59TYN7SvRxa/oYzRL7lPble/PEqXmiBNQORRpz4hgJ 8/84EAj07vPtzCXKxcvyhq7onapB19E+Q+x+CTw1ygsvsy8lhycchFHFI551DOGc 69N9pniRFqFi+f5+6++YWMm72ohujBPUx3c9udLS1Ih0GcYBkGveX3WbpLVR7F0C vngsT9WQzU+JiJAyKoAH0lCeon166rSRbeOsnbrHZUdMcylpgpeAPmTKOZ0OCwBB nypLoWwLa1hkO+C8/JEfMSVA6kC0pxQRMBR/4NgVb+EqKAumSLcuLe01EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUSq9ZBgoUl3tauWyFaYWZh6I0/MB8GA1UdIwQY MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt MzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFMF/U5m csGka7BLGHjwx/BvB5JE+TToENGoO8hGFobwQa+RsfxxCLR6MgEO1IJO2Ss0Z00x PyvhA7ROA40U10XZmM4pch+Ks1zTEwt4vJV3YLhI467g8pUE6ANwSQeUi8RwXPYG xgv7irItWm13sQ9bjP88SYcayw8g6b+RG8FUOICM6JYUqrqeSrx7Qmry1b8ziIsi DkK91BMAvbifglpeFjdm5xcASIWvGXihvUoKTMAaKrxJY19FbIdX3NW0sn6AN7Lu qIDpTInAjbS7TdvM1EuOYYt+YF3yH95ZFvpLd8LNJIse/NVQGcz/2BW5R+TrS8ga R6ib/C+rE0rdNw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:58:59 2025 by rpki-client