This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft File: wlEKilJdybHsCxVg0JCmQmjULsQ.mft (raw, json) Hash identifier: gd5aw+FhAkSjmjijdVvKDv7mBFD8K1xkEad7nxxckbQ= Subject key identifier: 1A:5D:CF:BB:EB:B9:37:26:FF:9C:21:DA:29:EE:61:E8:4E:30:AA:23 Authority key identifier: C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4 Certificate issuer: /CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4 Certificate serial: 019AF464F6B3CBC654BC89A18DF62690D912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft Manifest number: 170D Signing time: Sat 06 Dec 2025 16:00:48 +0000 Manifest this update: Sat 06 Dec 2025 16:00:48 +0000 Manifest next update: Sun 07 Dec 2025 16:00:48 +0000 Files and hashes: 1: FaPK4dABXX1JUG-DgodpiiYFyXk.roa (hash: 8EnGZIA4ScfpCaGufhHcnmIDRY1lMTTgXZqEJ9E7v2g=) 2: bYeYVYEdCXCzK3hGWezO0ZNHveg.roa (hash: UaiyZMeOYv/TRvUCkbZ9PcMP5ygVyQhx0p+DkQtZkYA=) 3: wlEKilJdybHsCxVg0JCmQmjULsQ.crl (hash: KqRh+bs3ffym2i77HxkGUdG9tVUfjeZDfy43gAQxycU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f6:b3:cb:c6:54:bc:89:a1:8d:f6:26:90:d9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2510a8a525dc9b1ec0b1560d090a64268d42ec4 Validity Not Before: Dec 6 16:00:48 2025 GMT Not After : Dec 7 16:00:48 2025 GMT Subject: CN=1a5dcfbbebb93726ff9c21da29ee61e84e30aa23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:ad:a8:ca:f1:a6:ba:c6:4a:67:48:52:80: 4a:ac:a4:42:52:bf:1a:20:b1:08:c5:b5:39:af:08: 12:2c:c4:cd:af:11:d5:ae:09:b4:5d:a9:0d:b0:84: 03:bb:4f:0f:8e:52:14:13:b8:7d:2d:63:02:44:5a: 2f:3c:c3:7b:82:f7:ab:d3:8d:34:07:c5:0a:fe:9b: 8e:09:07:29:7d:d0:02:bb:3d:ec:fc:88:fb:1b:e8: 9c:1d:2b:4f:2b:1d:e8:ad:53:e6:64:a0:fc:de:62: 39:14:13:ef:d6:0d:c7:0e:f1:53:6c:1f:6b:2f:4d: 7d:1d:c5:d3:5f:fd:9e:15:f7:03:56:3d:51:3c:81: 3c:84:b1:5f:48:b1:74:8a:02:c1:26:8d:56:ff:89: ab:ab:72:a1:7f:ac:ab:a5:1d:ec:69:fd:66:09:9a: 07:91:4a:8c:07:59:19:f9:9d:a8:e7:c2:9f:12:4a: f8:82:37:85:cb:fc:76:28:38:9d:9f:c5:19:1d:63: 10:08:a6:90:e8:15:57:5a:b3:fc:29:81:34:53:d1: 43:4c:a9:44:46:e5:83:53:23:ea:ed:21:7a:65:28: 34:37:09:0e:3e:0c:aa:ce:19:d2:31:e2:cc:89:79: c1:5f:c4:54:79:4d:0a:c8:6b:9a:b3:91:aa:e0:06: 11:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5D:CF:BB:EB:B9:37:26:FF:9C:21:DA:29:EE:61:E8:4E:30:AA:23 X509v3 Authority Key Identifier: keyid:C2:51:0A:8A:52:5D:C9:B1:EC:0B:15:60:D0:90:A6:42:68:D4:2E:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlEKilJdybHsCxVg0JCmQmjULsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3ee969-98d1-481a-a487-9a895467da85/1/wlEKilJdybHsCxVg0JCmQmjULsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bf:88:41:76:c6:48:2c:a2:9b:61:3e:17:24:dc:8b:5f:77: 3a:3a:65:54:07:5e:4f:21:0d:46:c5:7f:34:31:3a:bc:d7:07: b7:0e:da:ad:cc:dd:9f:2f:d6:a5:82:98:8f:ff:de:af:e9:6d: a4:aa:67:57:75:c4:b4:11:11:b6:01:dd:41:ec:2a:53:cc:65: e7:56:f3:6f:a4:8e:5f:f8:de:87:87:33:e8:3c:87:88:c4:e3: 0a:46:da:76:e9:8f:fd:62:02:82:04:94:bf:c7:bf:9e:55:34: 00:ff:71:35:9b:a0:33:de:ca:2d:e6:bd:9c:f2:d5:b0:d2:11: 0d:7c:93:74:9f:6d:4e:ad:8f:21:5c:6b:89:77:0b:f7:36:c2: f4:35:2f:2a:cf:ed:17:ed:79:b9:ba:44:f1:76:d3:35:0f:86: ec:a9:70:8e:f5:ad:e1:ec:9d:89:c4:74:04:f1:d3:16:35:bf: 81:5c:16:08:26:92:c9:53:be:12:bd:5e:6c:5a:31:91:8b:39: e7:ab:79:52:e5:a9:59:2c:9c:cb:8a:da:b2:58:eb:b9:34:78: 40:94:46:aa:da:15:c5:57:2b:9e:e0:31:25:3c:9a:6a:07:54: a7:a0:9f:e4:b8:fa:f8:7c:66:58:7a:aa:be:2f:dc:57:5c:55: 92:1c:b3:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPazy8ZUvImhjfYmkNkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTEwYThhNTI1ZGM5YjFlYzBiMTU2MGQwOTBhNjQyNjhk NDJlYzQwHhcNMjUxMjA2MTYwMDQ4WhcNMjUxMjA3MTYwMDQ4WjAzMTEwLwYDVQQD EygxYTVkY2ZiYmViYjkzNzI2ZmY5YzIxZGEyOWVlNjFlODRlMzBhYTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz6tqMrxprrGSmdIUoBKrKRCUr8a ILEIxbU5rwgSLMTNrxHVrgm0XakNsIQDu08PjlIUE7h9LWMCRFovPMN7gver0400 B8UK/puOCQcpfdACuz3s/Ij7G+icHStPKx3orVPmZKD83mI5FBPv1g3HDvFTbB9r L019HcXTX/2eFfcDVj1RPIE8hLFfSLF0igLBJo1W/4mrq3Khf6yrpR3saf1mCZoH kUqMB1kZ+Z2o58KfEkr4gjeFy/x2KDidn8UZHWMQCKaQ6BVXWrP8KYE0U9FDTKlE RuWDUyPq7SF6ZSg0NwkOPgyqzhnSMeLMiXnBX8RUeU0KyGuas5Gq4AYR6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpdz7vruTcm/5wh2inuYehOMKojMB8GA1UdIwQY MBaAFMJRCopSXcmx7AsVYNCQpkJo1C7EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODct OWE4OTU0NjdkYTg1LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8zZWU5NjktOThkMS00ODFhLWE0ODctOWE4OTU0NjdkYTg1 LzEvd2xFS2lsSmR5YkhzQ3hWZzBKQ21RbWpVTHNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmr+IQXbG SCyim2E+FyTci193OjplVAdeTyENRsV/NDE6vNcHtw7arczdny/WpYKYj//er+lt pKpnV3XEtBERtgHdQewqU8xl51bzb6SOX/jeh4cz6DyHiMTjCkbadumP/WICggSU v8e/nlU0AP9xNZugM97KLea9nPLVsNIRDXyTdJ9tTq2PIVxriXcL9zbC9DUvKs/t F+15ubpE8XbTNQ+G7KlwjvWt4eydicR0BPHTFjW/gVwWCCaSyVO+Er1ebFoxkYs5 56t5UuWpWSycy4rasljruTR4QJRGqtoVxVcrnuAxJTyaagdUp6Cf5Lj6+HxmWHqq vi/cV1xVkhyzTg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:11 2025 by rpki-client