This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft File: Wva8LaPCxkKxSuEpwb__JnhS1vw.mft (raw, json) Hash identifier: 3WbHrHCjPDJqwm6cdYLqyTk0pmPP+KINMhLSRbvaxig= Subject key identifier: 0F:51:41:06:50:28:F9:05:42:75:F0:B0:21:43:E9:50:26:39:9D:A6 Authority key identifier: 5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC Certificate issuer: /CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Certificate serial: 019AF163FCBB3E093D2CE096EA60FAB6A4FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft Manifest number: 0186 Signing time: Sat 06 Dec 2025 02:00:53 +0000 Manifest this update: Sat 06 Dec 2025 02:00:53 +0000 Manifest next update: Sun 07 Dec 2025 02:00:53 +0000 Files and hashes: 1: 6kuYBzw429hTfcmzLy4TgFrJKDQ.roa (hash: v8D/cGNdDOxEWcCfZs7ngYEeBNL4fY/mcOnmBbmdr7k=) 2: Wva8LaPCxkKxSuEpwb__JnhS1vw.crl (hash: PagwH1ZNDeHUbyt1BoIyirrc68+OGZDHPXghI3tJkmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:fc:bb:3e:09:3d:2c:e0:96:ea:60:fa:b6:a4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc Validity Not Before: Dec 6 02:00:53 2025 GMT Not After : Dec 7 02:00:53 2025 GMT Subject: CN=0f5141065028f9054275f0b02143e95026399da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f7:9e:27:de:ad:89:ff:4f:08:bf:18:4a:23: e3:e5:d6:c6:57:af:a5:76:49:68:91:e3:22:9a:32: dc:98:c1:b7:25:46:e9:7f:84:9c:1f:19:8d:64:08: 13:e6:20:9d:1c:b5:7c:e2:95:b8:f1:38:4a:a4:51: 38:71:a9:b3:32:c9:c8:cf:f3:1d:f6:ab:5c:b3:df: 3e:51:54:c2:3f:70:71:1e:46:1b:c7:05:62:ce:5f: 4c:73:7a:8c:82:1c:35:17:6f:14:e9:43:91:73:b9: 41:45:8b:3c:fd:bf:4e:84:73:12:7a:28:5e:21:93: db:10:ba:6e:1b:96:a6:87:22:47:0c:66:ac:bb:4b: 21:0f:4a:d0:fc:37:c2:80:c7:45:be:0f:e7:8d:df: 99:b1:85:2a:39:3d:18:ad:a6:ee:eb:10:6c:33:3d: c0:72:c5:9e:07:b8:cb:6b:8c:86:5c:ab:96:d8:79: 7c:9f:80:16:a3:83:34:b6:c9:4d:fb:06:d7:91:c6: d2:e9:08:86:7d:d5:14:a8:91:93:a8:40:30:d5:a4: 32:c2:8f:bd:1c:f0:7e:cf:ab:b5:6d:c7:6d:ad:a4: 8c:52:8f:b3:3a:a4:cb:f9:25:c8:9e:55:b3:cb:b4: 76:f3:89:c3:a2:d7:b3:7f:f6:4b:c5:86:e5:4d:38: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:41:06:50:28:F9:05:42:75:F0:B0:21:43:E9:50:26:39:9D:A6 X509v3 Authority Key Identifier: keyid:5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:32:32:28:31:71:e1:67:32:f5:2c:bc:80:15:f6:77:d8:0d: 78:38:84:2b:1e:e0:50:0d:b1:30:53:b3:a5:10:72:4e:a2:64: 08:68:83:49:2f:02:dc:88:00:62:6d:4a:13:1b:a6:98:c8:f2: dc:81:88:92:ed:70:40:89:ff:da:3c:1c:7a:fa:a5:11:c6:61: b0:44:1f:dc:24:d9:5f:17:1b:45:f2:5b:30:23:78:6f:e6:81: 46:66:96:b6:7b:6e:9a:cf:4f:18:1f:87:21:b0:c9:b6:25:35: 5d:b6:d5:75:0a:95:dc:49:87:63:75:f4:b5:d4:85:1d:2f:69: 00:d7:22:49:dd:e0:4e:9c:51:24:d7:ac:54:4b:39:c0:2c:81: 07:b1:cf:2b:ef:ba:75:11:07:b7:35:36:14:a6:b8:38:79:f0: 39:e4:bf:e1:de:0d:8f:95:65:1a:43:f5:c7:b3:f5:de:62:58: 14:80:a7:87:2b:01:fa:c1:05:bc:6d:c2:bb:d1:47:d6:87:fc: 2a:5f:01:22:39:a1:d2:11:54:3b:3d:cc:4c:f9:ff:c7:32:f9: a1:99:e4:ff:f7:4d:97:6b:e5:48:af:22:3d:82:d8:7c:c3:1e: dc:9a:62:58:f6:6b:bf:26:c1:2e:d3:5d:87:29:26:38:0a:5a: 9d:95:98:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/y7Pgk9LOCW6mD6tqT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZjZiYzJkYTNjMmM2NDJiMTRhZTEyOWMxYmZmZjI2Nzg1 MmQ2ZmMwHhcNMjUxMjA2MDIwMDUzWhcNMjUxMjA3MDIwMDUzWjAzMTEwLwYDVQQD EygwZjUxNDEwNjUwMjhmOTA1NDI3NWYwYjAyMTQzZTk1MDI2Mzk5ZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/eeJ96tif9PCL8YSiPj5dbGV6+l dklokeMimjLcmMG3JUbpf4ScHxmNZAgT5iCdHLV84pW48ThKpFE4camzMsnIz/Md 9qtcs98+UVTCP3BxHkYbxwVizl9Mc3qMghw1F28U6UORc7lBRYs8/b9OhHMSeihe IZPbELpuG5amhyJHDGasu0shD0rQ/DfCgMdFvg/njd+ZsYUqOT0Yrabu6xBsMz3A csWeB7jLa4yGXKuW2Hl8n4AWo4M0tslN+wbXkcbS6QiGfdUUqJGTqEAw1aQywo+9 HPB+z6u1bcdtraSMUo+zOqTL+SXInlWzy7R284nDotezf/ZLxYblTTibnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9RQQZQKPkFQnXwsCFD6VAmOZ2mMB8GA1UdIwQY MBaAFFr2vC2jwsZCsUrhKcG//yZ4Utb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTkt OWFkYWE0YjJiMTk2LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTktOWFkYWE0YjJiMTk2 LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTIyKDFx 4Wcy9Sy8gBX2d9gNeDiEKx7gUA2xMFOzpRByTqJkCGiDSS8C3IgAYm1KExummMjy 3IGIku1wQIn/2jwcevqlEcZhsEQf3CTZXxcbRfJbMCN4b+aBRmaWtntums9PGB+H IbDJtiU1XbbVdQqV3EmHY3X0tdSFHS9pANciSd3gTpxRJNesVEs5wCyBB7HPK++6 dREHtzU2FKa4OHnwOeS/4d4Nj5VlGkP1x7P13mJYFICnhysB+sEFvG3Cu9FH1of8 Kl8BIjmh0hFUOz3MTPn/xzL5oZnk//dNl2vlSK8iPYLYfMMe3JpiWPZrvybBLtNd hykmOApanZWYZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:32 2025 by rpki-client