This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft File: WtikTa0xXyHqmS_G4QSCxB7N_PU.mft (raw, json) Hash identifier: g2esNfR2R8l008KLFvZyC/BJDFb4Zx0szpok466Z1hY= Subject key identifier: E2:C4:C3:64:DF:91:FB:E1:90:F3:11:3E:75:D9:B7:D9:8E:C5:60:94 Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 Certificate issuer: /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5 Certificate serial: 019AF31C55831956EEA6E473D96C3C0CC9EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft Manifest number: 0C5F Signing time: Sat 06 Dec 2025 10:01:51 +0000 Manifest this update: Sat 06 Dec 2025 10:01:51 +0000 Manifest next update: Sun 07 Dec 2025 10:01:51 +0000 Files and hashes: 1: WtikTa0xXyHqmS_G4QSCxB7N_PU.crl (hash: Cq8IBwxtpjwNzoJMzXT+/XUeoVLI0B1lk7EtUi9H3Zw=) 2: msxG7fVlnDAYePROmUZc_iRkDYE.roa (hash: HIW6BTQ/XoS8mnCW6YgbllIH/uwqHf+PyB7dx5BzoNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:55:83:19:56:ee:a6:e4:73:d9:6c:3c:0c:c9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5 Validity Not Before: Dec 6 10:01:51 2025 GMT Not After : Dec 7 10:01:51 2025 GMT Subject: CN=e2c4c364df91fbe190f3113e75d9b7d98ec56094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:ed:62:f7:b8:5a:e1:6a:de:5c:2a:6a:e6: 36:a1:12:52:e1:2e:8a:bc:7f:13:83:30:87:db:62: 02:7b:bc:44:e5:1b:dc:24:82:67:e0:e0:aa:39:ef: 58:3e:6b:2c:e6:5b:cb:bf:aa:8f:67:25:b1:b9:d3: a4:e7:b9:9d:0f:be:dd:33:f0:2a:2f:ab:cd:df:df: 5b:75:af:b0:59:4e:af:4c:57:aa:30:30:f0:05:fb: 2d:ad:7d:a9:2c:14:8c:f3:21:2f:9f:cd:2d:11:f3: 4b:8c:b7:d3:c4:da:39:90:09:aa:aa:51:5c:b3:c4: 5b:23:bb:96:1b:b1:04:8e:d0:6c:d5:96:1d:ea:9e: d6:a6:9c:07:75:42:2c:39:83:b0:4f:f8:d8:f9:85: 89:6a:56:5d:0a:6c:0b:f7:ea:2f:fd:41:e2:dd:ca: 30:17:7b:66:04:b4:6b:50:fa:b6:7d:bd:26:b3:44: 03:f1:82:d6:ca:76:6e:2b:0f:fa:97:c4:a9:79:38: 36:62:67:86:fd:dc:c5:90:7f:ae:21:5a:ed:f8:cc: b8:3c:9f:50:1a:5e:e3:f5:2c:96:36:52:50:7d:a6: 72:b6:96:f6:cb:d9:9d:d4:0a:e5:e5:5c:e0:1e:46: 2a:fc:a0:4d:ec:89:5e:d6:a7:18:23:96:2e:e2:ad: 6f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C4:C3:64:DF:91:FB:E1:90:F3:11:3E:75:D9:B7:D9:8E:C5:60:94 X509v3 Authority Key Identifier: keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:db:ca:e8:fb:0c:42:a0:32:65:25:c1:76:73:db:2d:9b:91: 57:f1:44:ca:7c:70:e6:45:dd:ed:54:76:7d:4a:5f:f2:58:88: 9e:57:ae:4e:f1:b0:e7:2f:2c:d0:a8:07:68:9d:71:1d:fe:86: fd:05:53:a4:c0:e4:a2:dd:fd:86:2d:78:67:87:49:bc:dc:67: b6:55:d5:a8:cd:2e:5e:87:e2:47:4e:cc:c1:7f:87:32:92:7f: 54:3f:cc:25:10:27:0f:29:31:9b:03:50:04:e0:e3:e4:cf:a0: b0:a9:54:f3:ec:dd:ba:e8:b0:ac:71:4d:95:da:85:3f:f5:17: 46:7d:23:ce:b9:3f:b7:1b:7d:1c:66:00:dc:fb:5e:87:59:d5: 2b:0f:31:02:11:bd:16:58:31:22:1a:9c:8e:01:7e:0f:6f:67: 4b:ac:c5:d3:53:ad:03:62:df:64:f6:23:48:bb:7a:10:6f:7d: b1:bd:d4:2d:af:e6:41:17:8c:7b:50:fe:e5:a3:5b:47:ed:68: dd:13:0c:75:67:60:0f:cd:29:68:f6:04:4a:4c:31:f2:1d:c4: a6:68:84:f1:db:a0:9f:cc:78:99:97:74:a0:a4:30:de:43:03: 3d:a0:e9:fd:30:bb:53:72:ab:2e:c3:d3:a9:cb:43:cf:28:4e: ac:01:eb:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFWDGVbupuRz2Ww8DMnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDhhNDRkYWQzMTVmMjFlYTk5MmZjNmUxMDQ4MmM0MWVj ZGZjZjUwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD EyhlMmM0YzM2NGRmOTFmYmUxOTBmMzExM2U3NWQ5YjdkOThlYzU2MDk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0jtYve4WuFq3lwqauY2oRJS4S6K vH8TgzCH22ICe7xE5RvcJIJn4OCqOe9YPmss5lvLv6qPZyWxudOk57mdD77dM/Aq L6vN399bda+wWU6vTFeqMDDwBfstrX2pLBSM8yEvn80tEfNLjLfTxNo5kAmqqlFc s8RbI7uWG7EEjtBs1ZYd6p7WppwHdUIsOYOwT/jY+YWJalZdCmwL9+ov/UHi3cow F3tmBLRrUPq2fb0ms0QD8YLWynZuKw/6l8SpeTg2YmeG/dzFkH+uIVrt+My4PJ9Q Gl7j9SyWNlJQfaZytpb2y9md1Arl5VzgHkYq/KBN7Ile1qcYI5Yu4q1v4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOLEw2TfkfvhkPMRPnXZt9mOxWCUMB8GA1UdIwQY MBaAFFrYpE2tMV8h6pkvxuEEgsQezfz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84M2Y4MTgtMTljMC00NzAyLTgzZTUt ZDk1NjM2YTdhNjY0LzEvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84M2Y4MTgtMTljMC00NzAyLTgzZTUtZDk1NjM2YTdhNjY0 LzEvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9vK6PsM QqAyZSXBdnPbLZuRV/FEynxw5kXd7VR2fUpf8liInleuTvGw5y8s0KgHaJ1xHf6G /QVTpMDkot39hi14Z4dJvNxntlXVqM0uXofiR07MwX+HMpJ/VD/MJRAnDykxmwNQ BODj5M+gsKlU8+zduuiwrHFNldqFP/UXRn0jzrk/txt9HGYA3Pteh1nVKw8xAhG9 FlgxIhqcjgF+D29nS6zF01OtA2LfZPYjSLt6EG99sb3ULa/mQReMe1D+5aNbR+1o 3RMMdWdgD80paPYESkwx8h3EpmiE8dugn8x4mZd0oKQw3kMDPaDp/TC7U3KrLsPT qctDzyhOrAHr4A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:48 2025 by rpki-client