This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft File: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json) Hash identifier: AFzzGciDi4qcCzg0wQkzyd0VBzca+wUPywCtdmYuDd4= Subject key identifier: 14:07:7C:AA:85:B4:62:44:E9:0C:F1:6B:4E:85:6E:E2:5D:54:36:3B Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 Certificate issuer: /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Certificate serial: 019AF0BF612D467AAFB6A5081B1F592B59DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft Manifest number: 0F59 Signing time: Fri 05 Dec 2025 23:01:05 +0000 Manifest this update: Fri 05 Dec 2025 23:01:05 +0000 Manifest next update: Sat 06 Dec 2025 23:01:05 +0000 Files and hashes: 1: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (hash: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=) 2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: DnO6ZpSWm2LDE6h445eTWWuH4QNvAENdcZ1cDQHxmjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:61:2d:46:7a:af:b6:a5:08:1b:1f:59:2b:59:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84 Validity Not Before: Dec 5 23:01:05 2025 GMT Not After : Dec 6 23:01:05 2025 GMT Subject: CN=14077caa85b46244e90cf16b4e856ee25d54363b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ed:1e:12:73:32:d9:f8:a3:7d:b7:5f:e6:68: 37:56:a2:0a:8a:7d:91:92:3a:a3:74:88:8c:6c:fd: 2c:28:ab:2f:fc:dd:41:25:b4:3c:14:36:fd:45:ee: 64:e9:3a:3d:eb:1c:9b:c4:45:d3:98:58:b4:44:b0: eb:22:66:92:dd:20:06:96:42:00:e2:ab:27:c1:79: 5f:e3:20:2a:00:14:0b:55:c0:ef:93:3d:33:71:49: 27:7c:b2:43:e7:ff:69:3d:62:e2:40:a1:38:ec:0b: 50:5d:2d:cf:e5:a9:9c:f5:c3:1d:66:a3:a1:91:8f: 35:a7:ff:99:45:e3:e0:30:e5:25:e1:29:26:f9:76: ef:e3:a6:9c:5c:b0:6a:c7:9a:12:d1:6f:51:63:e3: f6:94:c8:95:f0:29:f0:79:82:eb:25:1f:1d:17:6e: c9:3d:08:e0:d3:e7:f3:69:e1:47:37:83:24:d2:bd: 5f:c6:c7:7e:35:68:99:fb:de:85:db:1b:a0:62:6a: 4a:10:b4:6c:d5:2a:29:2d:d9:3e:7d:62:32:c4:11: 60:f0:c7:ef:05:62:9a:92:31:15:e1:5c:aa:e0:80: e9:97:a7:99:bd:66:53:bd:a7:2b:90:c2:1c:af:bf: cd:48:9f:ab:51:bd:3c:df:3c:20:c6:66:49:9e:36: 43:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:07:7C:AA:85:B4:62:44:E9:0C:F1:6B:4E:85:6E:E2:5D:54:36:3B X509v3 Authority Key Identifier: keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e1:13:d8:6e:11:3e:71:d8:f6:f1:d8:ad:6c:6f:8f:f8:ce: c5:e9:78:e4:fd:f6:e7:d6:5e:c0:98:77:75:22:91:58:42:9c: fe:c9:28:9c:c3:28:b9:b9:62:3c:19:86:48:c2:4d:e5:22:a8: fb:e0:de:7d:e5:d2:ae:be:91:26:ab:a5:07:c6:b2:05:2e:3b: 67:59:d1:9a:c2:e6:ce:28:be:10:ab:0e:85:d8:80:d0:36:63: 80:ff:ae:08:54:92:da:23:db:10:af:e3:df:77:8d:ab:f2:b9: f1:e6:db:23:66:5e:6f:83:c0:13:c1:d9:36:9b:12:00:8b:cd: ce:3b:a5:02:d5:92:4b:cb:eb:76:d8:74:33:6f:16:d8:77:fe: 12:fd:18:fe:53:40:bd:7b:52:22:ba:9a:88:03:82:1d:8c:84: fb:40:af:20:aa:68:e9:3a:ab:9d:65:3e:92:47:ea:9f:cb:ae: 21:84:0c:63:05:c8:a4:4d:1f:c8:a7:62:06:91:19:6a:3a:ea: 3c:64:83:71:03:d5:ef:d1:66:6f:95:d9:ea:fd:d4:6f:3e:e9: 91:99:d8:0b:b6:6e:9c:73:28:a7:85:24:3d:de:64:a1:7e:df: d6:ce:09:95:71:18:d2:dd:e4:56:a7:50:a2:be:46:65:f9:ea: 14:68:8f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv2EtRnqvtqUIGx9ZK1naMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzQ4NDU5MGNjZmYwOWEzZGQ1ZGQ4MDg1YmVlZGI0MmZj NGFkODQwHhcNMjUxMjA1MjMwMTA1WhcNMjUxMjA2MjMwMTA1WjAzMTEwLwYDVQQD EygxNDA3N2NhYTg1YjQ2MjQ0ZTkwY2YxNmI0ZTg1NmVlMjVkNTQzNjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO0eEnMy2fijfbdf5mg3VqIKin2R kjqjdIiMbP0sKKsv/N1BJbQ8FDb9Re5k6To96xybxEXTmFi0RLDrImaS3SAGlkIA 4qsnwXlf4yAqABQLVcDvkz0zcUknfLJD5/9pPWLiQKE47AtQXS3P5amc9cMdZqOh kY81p/+ZRePgMOUl4Skm+Xbv46acXLBqx5oS0W9RY+P2lMiV8CnweYLrJR8dF27J PQjg0+fzaeFHN4Mk0r1fxsd+NWiZ+96F2xugYmpKELRs1SopLdk+fWIyxBFg8Mfv BWKakjEV4Vyq4IDpl6eZvWZTvacrkMIcr7/NSJ+rUb083zwgxmZJnjZDbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQHfKqFtGJE6Qzxa06FbuJdVDY7MB8GA1UdIwQY MBaAFMM0hFkMz/CaPdXdgIW+7bQvxK2EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYt ZjY0N2M1MGMyMWE1LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iOGE1MGEtODZhMC00YmY0LThlZmYtZjY0N2M1MGMyMWE1 LzEvd3pTRVdRelA4Sm85MWQyQWhiN3R0Q19FcllRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeET2G4R PnHY9vHYrWxvj/jOxel45P3259ZewJh3dSKRWEKc/skonMMoubliPBmGSMJN5SKo ++DefeXSrr6RJqulB8ayBS47Z1nRmsLmzii+EKsOhdiA0DZjgP+uCFSS2iPbEK/j 33eNq/K58ebbI2Zeb4PAE8HZNpsSAIvNzjulAtWSS8vrdth0M28W2Hf+Ev0Y/lNA vXtSIrqaiAOCHYyE+0CvIKpo6TqrnWU+kkfqn8uuIYQMYwXIpE0fyKdiBpEZajrq PGSDcQPV79Fmb5XZ6v3Ubz7pkZnYC7ZunHMop4UkPd5koX7f1s4JlXEY0t3kVqdQ or5GZfnqFGiPOA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:01 2025 by rpki-client