This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft File: WrK6mr-B1s-AM83N68jfj34iwow.mft (raw, json) Hash identifier: nA75y+1RCdkBpoKEIq4wiUOvgQVNvftVLxh0eeBIUoE= Subject key identifier: BD:52:89:2B:11:05:91:68:F8:52:68:EB:30:02:46:51:3E:63:2F:95 Authority key identifier: 5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C Certificate issuer: /CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c Certificate serial: 019B35D771DEF8CE1F19BDF2448A014D019B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft Manifest number: 0434 Signing time: Fri 19 Dec 2025 09:01:10 +0000 Manifest this update: Fri 19 Dec 2025 09:01:10 +0000 Manifest next update: Sat 20 Dec 2025 09:01:10 +0000 Files and hashes: 1: HfvQGv3fkx8EbAZWjLyDRRI_Z8o.roa (hash: L6g/T7YHsTiEPnLp25ze+rccMiIRyJAPI1nh81w0wDo=) 2: WrK6mr-B1s-AM83N68jfj34iwow.crl (hash: TUubzqYNLFNW2gvxu6tbzaORtRERHBUjj+adiZMxL40=) 3: x4NMd_GpZKC3wjvt7UJp4kwmNNg.roa (hash: KiYRpe0+Ri1YnwEQ5QKwXeajhvNgmP7QYMIxZrED/ns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:71:de:f8:ce:1f:19:bd:f2:44:8a:01:4d:01:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ab2ba9abf81d6cf8033cdcdebc8df8f7e22c28c Validity Not Before: Dec 19 09:01:10 2025 GMT Not After : Dec 20 09:01:10 2025 GMT Subject: CN=bd52892b11059168f85268eb300246513e632f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:5b:b5:af:bd:03:f8:aa:c9:ec:af:4b:cf: 76:e6:77:3b:db:86:71:eb:a3:a6:29:17:5c:f0:c4: 62:0e:57:47:89:a4:e9:7e:dd:19:be:ad:ac:da:1f: bf:cd:71:41:8f:bb:27:ab:98:3e:b6:61:f6:fd:11: 2d:1e:a4:16:14:9f:79:73:d6:bb:21:f2:ff:80:4d: 52:36:a6:9e:8c:74:bd:c5:99:b9:44:8f:4a:ef:57: 43:76:bb:31:c1:2b:a6:a6:52:e0:05:8b:dd:b4:e5: ce:7f:a6:70:c9:66:30:a7:90:e5:72:93:83:70:5a: c4:16:e7:11:bd:0a:ef:5c:1e:e9:03:93:4a:be:da: df:27:b1:95:9b:6e:25:c2:53:51:b6:80:01:e7:93: 67:c5:94:21:ab:99:c7:0a:5a:5c:33:68:81:a0:1b: 70:ac:33:9b:b5:1a:b0:b4:67:95:13:fc:c9:19:79: 67:46:c8:a2:94:78:8c:ee:e4:95:4c:91:2f:f4:26: 89:57:02:e5:a0:35:bb:54:d3:7f:9b:ec:8d:17:db: 50:88:ec:3d:2c:78:75:b6:58:02:b0:0b:2e:c3:82: db:dc:da:e0:7f:78:66:ef:75:00:41:eb:4a:6d:9c: cc:eb:40:fb:c5:fb:d8:53:dc:65:79:f3:09:d3:f7: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:52:89:2B:11:05:91:68:F8:52:68:EB:30:02:46:51:3E:63:2F:95 X509v3 Authority Key Identifier: keyid:5A:B2:BA:9A:BF:81:D6:CF:80:33:CD:CD:EB:C8:DF:8F:7E:22:C2:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrK6mr-B1s-AM83N68jfj34iwow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a608c5-496d-499e-af41-6dfbbde52dea/1/WrK6mr-B1s-AM83N68jfj34iwow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3f:8a:92:5d:22:b5:65:7d:8b:5b:1c:fa:cc:e6:f1:a6:ab: 16:f1:32:cc:a2:a1:b0:9a:2e:e5:cb:11:cb:28:db:01:f3:fc: f3:52:88:96:80:31:9f:7f:fe:cf:e7:e2:2b:4d:c1:ee:8c:c2: d1:47:d9:5d:03:22:9c:79:74:5b:40:34:82:08:fb:dc:62:20: 4a:da:e0:52:3e:49:4a:3e:a9:c2:58:d2:f8:53:aa:16:33:41: fa:1d:5f:9a:19:58:0b:a9:d9:80:b7:5f:a8:1d:82:53:f0:69: 80:73:9d:19:5a:87:da:82:de:6f:ef:80:86:fd:55:da:85:0f: 42:77:8d:d1:15:ce:05:fa:ca:d0:4c:d1:79:da:0f:29:b0:d8: c1:e6:f8:92:d1:c4:0c:73:bb:2d:68:f3:51:9a:4d:80:39:08: 42:c0:f4:c0:7f:0e:9a:54:c5:e5:01:26:44:f5:c1:05:8d:b3: cd:32:a7:ea:0d:09:23:48:7c:6a:5a:1e:0c:35:b0:59:99:4d: 63:91:88:ff:f9:f5:e9:6a:b9:5f:89:13:a6:cc:c2:d8:ad:15: ad:2d:27:e6:5a:ba:f1:a6:72:69:56:91:5c:c7:4d:ab:7a:24: 2f:34:31:0e:d8:63:c4:6b:d6:8b:bd:2c:af:b3:bc:a1:99:67: 1f:79:ba:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs113He+M4fGb3yRIoBTQGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYjJiYTlhYmY4MWQ2Y2Y4MDMzY2RjZGViYzhkZjhmN2Uy MmMyOGMwHhcNMjUxMjE5MDkwMTEwWhcNMjUxMjIwMDkwMTEwWjAzMTEwLwYDVQQD EyhiZDUyODkyYjExMDU5MTY4Zjg1MjY4ZWIzMDAyNDY1MTNlNjMyZjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvlbta+9A/iqyeyvS8925nc724Zx 66OmKRdc8MRiDldHiaTpft0Zvq2s2h+/zXFBj7snq5g+tmH2/REtHqQWFJ95c9a7 IfL/gE1SNqaejHS9xZm5RI9K71dDdrsxwSumplLgBYvdtOXOf6ZwyWYwp5DlcpOD cFrEFucRvQrvXB7pA5NKvtrfJ7GVm24lwlNRtoAB55NnxZQhq5nHClpcM2iBoBtw rDObtRqwtGeVE/zJGXlnRsiilHiM7uSVTJEv9CaJVwLloDW7VNN/m+yNF9tQiOw9 LHh1tlgCsAsuw4Lb3Nrgf3hm73UAQetKbZzM60D7xfvYU9xlefMJ0/cdkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1SiSsRBZFo+FJo6zACRlE+Yy+VMB8GA1UdIwQY MBaAFFqyupq/gdbPgDPNzevI349+IsKMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEt NmRmYmJkZTUyZGVhLzEvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9hNjA4YzUtNDk2ZC00OTllLWFmNDEtNmRmYmJkZTUyZGVh LzEvV3JLNm1yLUIxcy1BTTgzTjY4amZqMzRpd293LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz+Kkl0i tWV9i1sc+szm8aarFvEyzKKhsJou5csRyyjbAfP881KIloAxn3/+z+fiK03B7ozC 0UfZXQMinHl0W0A0ggj73GIgStrgUj5JSj6pwljS+FOqFjNB+h1fmhlYC6nZgLdf qB2CU/BpgHOdGVqH2oLeb++Ahv1V2oUPQneN0RXOBfrK0EzRedoPKbDYweb4ktHE DHO7LWjzUZpNgDkIQsD0wH8OmlTF5QEmRPXBBY2zzTKn6g0JI0h8aloeDDWwWZlN Y5GI//n16Wq5X4kTpszC2K0VrS0n5lq68aZyaVaRXMdNq3okLzQxDthjxGvWi70s r7O8oZlnH3m6tA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:09:16 2025 by rpki-client