This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft File: Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json) Hash identifier: ykI32LXi3VdAfTas9/hlGQ+46Kj+d1PGKhGYv96eXBE= Subject key identifier: 41:55:42:1D:7E:89:FB:CA:3F:5E:52:A5:29:57:D0:EA:2E:58:98:73 Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3 Certificate issuer: /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3 Certificate serial: 019AF1643D129B0E37D7A7AE22D88A3C49E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft Manifest number: 0525 Signing time: Sat 06 Dec 2025 02:01:09 +0000 Manifest this update: Sat 06 Dec 2025 02:01:09 +0000 Manifest next update: Sun 07 Dec 2025 02:01:09 +0000 Files and hashes: 1: HZBz5MrqBdAGlLzttgW8k7z_g5Y.roa (hash: vKALeCSvoIMsQY1cUM7A8I/fEETWOT998Li6zTAWX7w=) 2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: MZwi9MWtBzcb2PCN6B66H16yYgtokAz0wyD7aV7217A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:3d:12:9b:0e:37:d7:a7:ae:22:d8:8a:3c:49:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3 Validity Not Before: Dec 6 02:01:09 2025 GMT Not After : Dec 7 02:01:09 2025 GMT Subject: CN=4155421d7e89fbca3f5e52a52957d0ea2e589873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:26:b7:da:02:e0:a3:69:4d:00:0b:7a:ab:62: f6:ec:eb:ea:51:d9:9b:0b:70:c6:1b:66:75:de:5e: 91:b9:98:ef:bf:06:c7:c7:98:0d:cd:2f:c8:03:d2: 49:dc:e4:ad:1c:10:0d:ab:43:a7:b2:3d:c9:65:12: 92:1f:ea:34:0f:4d:86:eb:9b:2a:4e:b5:42:a4:f7: c5:97:70:fc:cd:ce:d8:88:48:e8:c5:1e:2d:80:1f: 40:d7:ce:f7:d3:df:34:31:1a:51:04:fe:52:b8:15: 47:bb:a6:bf:39:c3:6e:13:4b:e5:c8:b8:8c:b4:7b: e8:b1:d9:e6:36:36:d3:e7:4d:b2:e9:eb:57:a2:fe: 26:da:fe:07:18:34:95:5c:70:08:ee:37:e2:89:b8: 5e:f1:50:cb:8f:9d:22:83:4d:9b:d0:b1:86:ad:86: 1e:7a:4b:82:c5:ce:72:39:5b:d3:81:a0:24:68:1c: 1b:3b:24:5d:f2:42:78:7d:4e:f6:01:9b:4e:9d:93: c7:52:b7:22:86:70:1c:58:3d:0c:ef:3a:4d:fc:99: d4:04:a4:0e:ce:4a:dc:f4:47:a8:23:df:26:b9:44: 2a:24:bf:bd:f9:24:30:cd:1b:b6:9f:c0:80:7f:5c: 4a:c8:da:3f:22:f6:66:d4:5f:88:8d:a6:e5:ea:9b: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:55:42:1D:7E:89:FB:CA:3F:5E:52:A5:29:57:D0:EA:2E:58:98:73 X509v3 Authority Key Identifier: keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:5a:ad:45:aa:79:f9:5a:66:c7:25:f9:05:f5:e9:6a:5d:9e: 49:13:be:32:d0:cf:5d:b1:7f:9e:95:27:a7:10:11:fa:06:56: 10:7b:5d:d2:2b:8a:30:14:aa:6e:68:91:5a:86:84:86:81:dc: 35:7f:6c:26:c2:69:53:81:20:f0:5f:78:cc:66:41:c1:16:ac: 61:13:f9:2a:56:c5:ba:f9:41:26:85:fa:f4:96:45:ed:2d:c0: 9f:7e:49:04:c0:a9:31:e9:f1:32:03:36:5b:55:fb:26:e2:9f: ba:4e:ee:0f:7f:4e:83:89:e5:32:8d:b2:e3:c4:4b:d5:73:7e: d9:15:7a:17:da:89:5e:db:b8:e4:42:cd:5b:78:0a:0f:05:ee: bd:9e:1e:01:81:be:e6:59:c3:7b:12:5b:da:2d:e3:f6:db:f2: d7:4f:90:01:1d:bf:d0:30:6d:fb:64:79:a7:a7:8b:d2:a5:79: e3:93:93:46:7f:75:b9:ae:21:e7:c0:9f:3c:f7:34:41:de:98: a1:db:69:1e:93:2f:0c:57:69:53:b0:7c:89:19:50:6e:a3:4f: 1f:8e:82:13:02:5e:2d:63:7d:d7:b8:80:e6:e3:3f:7b:f8:a6: d1:0c:7b:2a:33:ff:e8:0c:36:f6:79:a4:ce:ec:0e:88:c1:72: 44:9c:4c:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZD0Smw4316euItiKPEnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDlmNWJlYjY5MzM0ODQ1NDFjZTU2MjgyYzk4OWVkNmU4 YmRiYTMwHhcNMjUxMjA2MDIwMTA5WhcNMjUxMjA3MDIwMTA5WjAzMTEwLwYDVQQD Eyg0MTU1NDIxZDdlODlmYmNhM2Y1ZTUyYTUyOTU3ZDBlYTJlNTg5ODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArya32gLgo2lNAAt6q2L27OvqUdmb C3DGG2Z13l6RuZjvvwbHx5gNzS/IA9JJ3OStHBANq0Onsj3JZRKSH+o0D02G65sq TrVCpPfFl3D8zc7YiEjoxR4tgB9A18730980MRpRBP5SuBVHu6a/OcNuE0vlyLiM tHvosdnmNjbT502y6etXov4m2v4HGDSVXHAI7jfiibhe8VDLj50ig02b0LGGrYYe ekuCxc5yOVvTgaAkaBwbOyRd8kJ4fU72AZtOnZPHUrcihnAcWD0M7zpN/JnUBKQO zkrc9EeoI98muUQqJL+9+SQwzRu2n8CAf1xKyNo/IvZm1F+Ijabl6pubtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFVQh1+ifvKP15SpSlX0OouWJhzMB8GA1UdIwQY MBaAFFrZ9b62kzSEVBzlYoLJie1ui9ujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUt NWFmODllNmNkMDU1LzEvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUtNWFmODllNmNkMDU1 LzEvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1qtRap5 +VpmxyX5BfXpal2eSRO+MtDPXbF/npUnpxAR+gZWEHtd0iuKMBSqbmiRWoaEhoHc NX9sJsJpU4Eg8F94zGZBwRasYRP5KlbFuvlBJoX69JZF7S3An35JBMCpMenxMgM2 W1X7JuKfuk7uD39Og4nlMo2y48RL1XN+2RV6F9qJXtu45ELNW3gKDwXuvZ4eAYG+ 5lnDexJb2i3j9tvy10+QAR2/0DBt+2R5p6eL0qV545OTRn91ua4h58CfPPc0Qd6Y odtpHpMvDFdpU7B8iRlQbqNPH46CEwJeLWN917iA5uM/e/im0Qx7KjP/6Aw29nmk zuwOiMFyRJxMvg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:11 2025 by rpki-client