This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft File: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft (raw, json) Hash identifier: zK84waFu5usxc+LTG7oF6QHgcAQeiDrfgUGyRGuGog4= Subject key identifier: 14:CF:D9:40:E7:B2:EE:00:3B:59:5A:E1:9F:3C:2A:D4:36:49:5C:72 Authority key identifier: C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 Certificate issuer: /CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Certificate serial: 019AF31C4A4CFA5ED76EC0EE2283B44992AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:48 +0000 Manifest this update: Sat 06 Dec 2025 10:01:48 +0000 Manifest next update: Sun 07 Dec 2025 10:01:48 +0000 Files and hashes: 1: ktQ5-W9g4zZMeAt0G3_-eOcvNXg.roa (hash: PaRvSHJJoV4+LaWhDX1LkioRDCgsWXMWP6C+HnWRO88=) 2: wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl (hash: V5wyR6p06t+0cXV1P3jS3xOTtk/wnX1Sh96YNapj3Hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:4a:4c:fa:5e:d7:6e:c0:ee:22:83:b4:49:92:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20e52dab06da4175b45c777961f4ea39b9307b7 Validity Not Before: Dec 6 10:01:48 2025 GMT Not After : Dec 7 10:01:48 2025 GMT Subject: CN=14cfd940e7b2ee003b595ae19f3c2ad436495c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:59:7f:6c:88:67:07:b4:cb:74:1f:f2:67: b0:36:1e:f3:b8:dc:18:21:92:41:a0:40:f7:8c:6e: 02:62:ab:e9:29:f5:09:e1:21:b6:1f:b5:34:4d:1c: 67:8a:05:77:9c:bd:b8:96:82:c7:28:24:0a:55:6d: e3:02:f5:20:12:70:52:86:77:22:8f:22:10:78:67: cf:93:b1:e3:20:9b:de:a2:a0:cc:38:a0:44:c5:57: 62:67:f2:08:af:a0:8d:ad:c5:41:76:91:f1:75:10: ec:56:dd:84:ae:3a:65:fb:59:64:4e:43:06:ae:4d: 8c:da:d1:15:e6:46:59:94:86:cd:49:db:47:08:48: a4:45:b7:0d:3c:51:b1:c5:ef:c8:72:5b:db:70:47: 3d:58:2c:d5:74:06:aa:79:ea:91:f0:07:4f:85:f0: cb:a2:71:ad:69:fd:ab:00:b4:d2:a7:35:76:9a:02: a0:3e:25:0d:ec:40:be:3f:18:64:39:71:ee:85:e7: a2:fb:d5:b3:c8:8f:a9:ca:d0:05:3e:20:b8:46:71: fd:1b:e0:bb:2b:13:94:5c:6b:83:95:1c:7c:9d:23: c7:9e:6f:56:9b:c6:94:b4:c0:a4:11:d8:17:cf:4b: a1:99:f8:c7:d2:f3:d1:c6:71:96:e2:b0:f1:78:54: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:D9:40:E7:B2:EE:00:3B:59:5A:E1:9F:3C:2A:D4:36:49:5C:72 X509v3 Authority Key Identifier: keyid:C2:0E:52:DA:B0:6D:A4:17:5B:45:C7:77:96:1F:4E:A3:9B:93:07:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fe5094-f188-47f6-b945-e4c7180730cb/1/wg5S2rBtpBdbRcd3lh9Oo5uTB7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4e:65:42:81:2a:bc:f6:52:4f:60:cc:bc:f5:5f:22:e8:b6: 36:1e:42:18:88:cf:af:dd:09:37:a9:d9:79:4b:07:4c:44:8f: 6d:ae:08:05:5f:5e:71:9e:1d:3f:ef:3f:44:26:dd:2c:e7:30: 1b:ba:c8:2a:ed:45:b9:be:b2:b6:59:9b:01:9d:ff:4a:d8:95: f0:2d:7e:44:7d:24:fe:b6:f0:df:54:0d:61:90:fd:27:3d:39: c6:3d:e4:4e:40:89:e1:4b:32:52:d2:15:30:f0:70:7c:93:2e: a0:4c:13:fe:85:7d:5b:92:37:4d:6b:e6:d2:b8:67:f6:ee:2a: 0e:5c:fd:a6:b0:3a:d3:83:31:ce:0c:07:4a:2f:34:1e:1d:2b: d5:f1:6b:7d:bd:f5:d4:aa:b7:3c:fd:12:a1:4b:5c:70:c9:f2: 13:51:e8:ba:e0:29:ea:df:df:1f:08:c9:50:58:79:9d:75:49: 80:86:0d:44:50:83:1f:c8:3e:21:9a:f5:80:f7:ce:77:b6:49: 40:94:0f:06:45:12:11:53:d5:b2:ec:73:86:ed:0e:0f:04:3b: 47:d5:48:fd:77:36:9c:a4:8f:2b:6f:79:6d:d0:e5:f7:81:5c: fe:88:92:58:25:0a:96:79:d3:99:e2:5a:b4:bf:64:ed:9f:dc: ce:f6:b1:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEpM+l7XbsDuIoO0SZKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMGU1MmRhYjA2ZGE0MTc1YjQ1Yzc3Nzk2MWY0ZWEzOWI5 MzA3YjcwHhcNMjUxMjA2MTAwMTQ4WhcNMjUxMjA3MTAwMTQ4WjAzMTEwLwYDVQQD EygxNGNmZDk0MGU3YjJlZTAwM2I1OTVhZTE5ZjNjMmFkNDM2NDk1YzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEdZf2yIZwe0y3Qf8mewNh7zuNwY IZJBoED3jG4CYqvpKfUJ4SG2H7U0TRxnigV3nL24loLHKCQKVW3jAvUgEnBShnci jyIQeGfPk7HjIJveoqDMOKBExVdiZ/IIr6CNrcVBdpHxdRDsVt2Erjpl+1lkTkMG rk2M2tEV5kZZlIbNSdtHCEikRbcNPFGxxe/IclvbcEc9WCzVdAaqeeqR8AdPhfDL onGtaf2rALTSpzV2mgKgPiUN7EC+PxhkOXHuheei+9WzyI+pytAFPiC4RnH9G+C7 KxOUXGuDlRx8nSPHnm9Wm8aUtMCkEdgXz0uhmfjH0vPRxnGW4rDxeFS+pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTP2UDnsu4AO1la4Z88KtQ2SVxyMB8GA1UdIwQY MBaAFMIOUtqwbaQXW0XHd5YfTqObkwe3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUt ZTRjNzE4MDczMGNiLzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mZTUwOTQtZjE4OC00N2Y2LWI5NDUtZTRjNzE4MDczMGNi LzEvd2c1UzJyQnRwQmRiUmNkM2xoOU9vNXVUQjdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHE5lQoEq vPZST2DMvPVfIui2Nh5CGIjPr90JN6nZeUsHTESPba4IBV9ecZ4dP+8/RCbdLOcw G7rIKu1Fub6ytlmbAZ3/StiV8C1+RH0k/rbw31QNYZD9Jz05xj3kTkCJ4UsyUtIV MPBwfJMuoEwT/oV9W5I3TWvm0rhn9u4qDlz9prA604MxzgwHSi80Hh0r1fFrfb31 1Kq3PP0SoUtccMnyE1HouuAp6t/fHwjJUFh5nXVJgIYNRFCDH8g+IZr1gPfOd7ZJ QJQPBkUSEVPVsuxzhu0ODwQ7R9VI/Xc2nKSPK295bdDl94Fc/oiSWCUKlnnTmeJa tL9k7Z/czvaxtA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:56:15 2025 by rpki-client