This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft File: wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json) Hash identifier: HFX6zzjd7knWS490MCGtcZfNLbj5Bl8fDtV6JS0ytas= Subject key identifier: 45:A4:8A:72:98:8D:AD:E7:C2:08:88:D3:D1:3C:8E:9D:08:5D:42:58 Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77 Certificate issuer: /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77 Certificate serial: 019AF3C00793AF5EF569C3475A23965843A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft Manifest number: 0DE6 Signing time: Sat 06 Dec 2025 13:00:39 +0000 Manifest this update: Sat 06 Dec 2025 13:00:39 +0000 Manifest next update: Sun 07 Dec 2025 13:00:39 +0000 Files and hashes: 1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=) 2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: mPU2kHie8ivozOznlYncrWrOac5M+UP7jzn9Exsfg2c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:07:93:af:5e:f5:69:c3:47:5a:23:96:58:43:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77 Validity Not Before: Dec 6 13:00:39 2025 GMT Not After : Dec 7 13:00:39 2025 GMT Subject: CN=45a48a72988dade7c20888d3d13c8e9d085d4258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:8c:1d:b1:59:70:0b:f7:2c:f2:f2:b5:2f: 44:90:f9:52:57:48:c7:0e:11:bc:6f:b1:de:75:10: a6:65:74:d7:0a:06:2a:f2:67:a9:84:a5:1e:f4:7d: 5b:68:6f:0e:cc:f7:67:dc:c9:b0:59:77:87:08:6b: 18:d3:19:14:94:ef:02:0c:5e:f9:7d:e1:c6:cc:bc: 68:6e:6b:7e:2d:47:9e:8b:55:31:8d:4a:c7:e5:1c: 52:13:1e:48:7f:2a:73:85:3f:aa:ae:a7:6f:6a:6b: 09:e0:5c:89:98:3b:cb:bb:51:88:ed:99:cb:e3:78: fc:ef:36:1a:3a:95:08:ce:cb:44:3b:95:c1:b1:2b: 04:f4:f0:5d:3c:66:72:ae:32:a0:e8:b1:12:79:2c: ec:ca:29:3c:12:cd:fc:2a:24:eb:73:0c:64:a9:62: a4:f2:e2:f5:0d:c7:a4:b5:3f:45:39:c7:3e:6c:af: 83:5b:3b:bb:ec:38:7b:8c:04:6f:86:4a:93:3d:cb: 4c:79:3a:ca:fe:f6:fe:ef:48:12:14:8a:c9:50:6a: 8c:a8:57:17:53:ff:b4:ee:e9:bc:70:03:bd:a8:4a: 15:e6:15:34:e6:85:c0:55:b9:e8:28:05:9b:1b:53: 47:5f:20:ed:d1:4f:1c:48:b8:e9:5d:c8:2b:1b:50: dc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A4:8A:72:98:8D:AD:E7:C2:08:88:D3:D1:3C:8E:9D:08:5D:42:58 X509v3 Authority Key Identifier: keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:fc:e7:a3:4f:11:fb:a0:8c:b9:75:3a:79:b2:cb:00:cd:84: 7c:5a:59:e2:6d:46:88:93:77:8d:24:8d:4d:7c:1b:7e:e1:72: 2d:5b:c0:f6:c6:e2:a1:f3:f2:7d:f9:e0:94:9e:7f:a8:a9:fb: 29:a5:16:bd:9d:46:a2:bf:a5:2d:4c:1f:5b:b7:b3:7d:d1:00: 4b:67:46:fd:5a:90:96:e8:d7:57:ec:ec:53:fe:9a:18:a9:a0: 49:17:6c:db:e6:93:f6:39:ea:00:dc:0a:42:e2:0b:6c:fb:35: 94:1f:49:6c:82:40:70:c1:36:7f:72:0e:b1:81:a3:1f:ce:0a: ac:18:fd:81:74:3c:c1:ee:7a:21:07:24:50:7b:52:8c:db:2b: 9d:24:ee:74:65:c1:9f:7f:fe:27:60:eb:e1:35:fe:4b:89:35: d9:a3:a7:78:4d:42:76:fb:b5:dd:ff:01:7a:ec:4c:18:62:25: 41:d7:ea:6c:28:13:2d:96:cd:58:16:a5:2b:86:73:08:7f:5a: 85:8f:35:89:67:05:c3:74:9a:fa:bd:fa:2d:41:2b:f3:af:20: f9:c9:36:81:7c:14:7a:c1:8c:e7:cc:62:9c:dc:2c:c7:00:98: 80:b5:9a:58:e8:7b:ca:97:60:b6:e2:28:be:80:0f:be:ca:2e: f2:f7:f5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwAeTr171acNHWiOWWEOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNTIzM2FmNGJhNTkxMTlkNmZmMTk0ZDdjZDg2NjUwODRh NmVlNzcwHhcNMjUxMjA2MTMwMDM5WhcNMjUxMjA3MTMwMDM5WjAzMTEwLwYDVQQD Eyg0NWE0OGE3Mjk4OGRhZGU3YzIwODg4ZDNkMTNjOGU5ZDA4NWQ0MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9yMHbFZcAv3LPLytS9EkPlSV0jH DhG8b7HedRCmZXTXCgYq8mephKUe9H1baG8OzPdn3MmwWXeHCGsY0xkUlO8CDF75 feHGzLxobmt+LUeei1UxjUrH5RxSEx5IfypzhT+qrqdvamsJ4FyJmDvLu1GI7ZnL 43j87zYaOpUIzstEO5XBsSsE9PBdPGZyrjKg6LESeSzsyik8Es38KiTrcwxkqWKk 8uL1DcektT9FOcc+bK+DWzu77Dh7jARvhkqTPctMeTrK/vb+70gSFIrJUGqMqFcX U/+07um8cAO9qEoV5hU05oXAVbnoKAWbG1NHXyDt0U8cSLjpXcgrG1Dc/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWkinKYja3nwgiI09E8jp0IXUJYMB8GA1UdIwQY MBaAFMFSM69LpZEZ1v8ZTXzYZlCEpu53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMt NGI3ZjM3NWVjZDA2LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMtNGI3ZjM3NWVjZDA2 LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/zno08R +6CMuXU6ebLLAM2EfFpZ4m1GiJN3jSSNTXwbfuFyLVvA9sbiofPyffnglJ5/qKn7 KaUWvZ1Gor+lLUwfW7ezfdEAS2dG/VqQlujXV+zsU/6aGKmgSRds2+aT9jnqANwK QuILbPs1lB9JbIJAcME2f3IOsYGjH84KrBj9gXQ8we56IQckUHtSjNsrnSTudGXB n3/+J2Dr4TX+S4k12aOneE1Cdvu13f8BeuxMGGIlQdfqbCgTLZbNWBalK4ZzCH9a hY81iWcFw3Sa+r36LUEr868g+ck2gXwUesGM58xinNwsxwCYgLWaWOh7ypdgtuIo voAPvsou8vf19w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:18 2025 by rpki-client