This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft File: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft (raw, json) Hash identifier: LUL4btxpTN11MQcKZQa3Q0hRiZQEYguzlldv3ztJ9g0= Subject key identifier: 18:8E:8A:59:CC:01:68:B6:D1:89:1F:04:24:34:C0:9A:B6:91:27:3D Authority key identifier: C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C Certificate issuer: /CN=c334a35abfa82d549e490704d68bbe658005d63c Certificate serial: 019B35A0D48684778F7C3E859EE2B90B8AF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 08:01:31 +0000 Manifest this update: Fri 19 Dec 2025 08:01:31 +0000 Manifest next update: Sat 20 Dec 2025 08:01:31 +0000 Files and hashes: 1: A5e1ajK6VG8bsSgi6vHK9FVhkA0.roa (hash: DwfexPS0q4iJHOaKGcYE+MnhBqtqidrsPJZ1x03qAag=) 2: FZT_BTCcPvUDg2WMebmfcMFfqlk.roa (hash: 9tnNWNBi7xBlzEQuuTA6YbXDIlQAtmVWyk/P9qheXMo=) 3: XOd2oE1ewhF-ZbAEMdaVC12jAfE.roa (hash: Qb1mjfUYvzsw4HemAT0H4CHevsLBTYDDvuwnqPNJ06Q=) 4: ukTsh__PD-e49THfmeczO06Ewzg.roa (hash: 2pxpwWB8nzVKK5ZFAoaYU/qGI9s7E3tcdxUF1upjgL8=) 5: wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl (hash: 1p50d96mIMM0kFVs4L+W6GMx8f1+xZtBGz4UTc74eCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:d4:86:84:77:8f:7c:3e:85:9e:e2:b9:0b:8a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c334a35abfa82d549e490704d68bbe658005d63c Validity Not Before: Dec 19 08:01:31 2025 GMT Not After : Dec 20 08:01:31 2025 GMT Subject: CN=188e8a59cc0168b6d1891f042434c09ab691273d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:77:e4:11:8e:21:63:38:4d:2e:2f:ac:cf: c6:73:e5:07:f7:39:72:47:0a:62:2d:7c:af:fb:30: ad:12:d5:da:e9:3b:5f:7b:68:b9:7f:2b:69:17:78: ae:cb:25:b8:dc:e5:9b:34:25:23:cb:d4:01:86:d3: 93:e4:be:61:c9:97:1e:d6:31:9c:79:3b:15:f0:93: 7f:56:07:c8:3e:b2:b2:4a:71:65:93:7e:c8:73:a1: 6f:e6:79:c3:18:5e:3d:18:2b:8b:81:fd:ea:97:0d: 59:b3:88:fd:34:61:22:4d:43:f3:a7:69:84:2f:89: 1c:20:a8:f2:d8:7b:4d:b9:0a:4e:f3:ad:65:f1:af: 9a:3d:2f:69:1d:65:ad:b1:40:5e:c7:93:77:61:f3: 80:63:aa:e1:04:7b:a9:5e:f4:e0:cb:1b:93:c9:08: 11:97:33:44:ab:fc:06:15:77:c7:d1:70:25:b9:cc: fe:23:10:f6:5c:9e:74:f7:ab:33:2d:7d:bb:e1:88: 44:c3:3a:ab:e2:9c:a1:8f:59:17:25:ab:38:85:92: 4b:fa:57:b1:8d:54:ae:f0:5f:ef:74:45:7a:8a:b6: d0:bb:07:d8:f2:a0:c1:96:2a:02:1f:70:95:35:d5: dc:85:02:6e:c0:43:35:40:82:14:74:fb:8b:4d:69: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8E:8A:59:CC:01:68:B6:D1:89:1F:04:24:34:C0:9A:B6:91:27:3D X509v3 Authority Key Identifier: keyid:C3:34:A3:5A:BF:A8:2D:54:9E:49:07:04:D6:8B:BE:65:80:05:D6:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/39b08d-eb01-43b0-b56c-273884b53c6e/1/wzSjWr-oLVSeSQcE1ou-ZYAF1jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d8:37:a0:74:20:8b:d7:53:ee:7c:3b:61:44:7e:56:44:23: 4f:7f:34:25:08:62:d3:09:b0:8d:91:70:2c:52:16:6d:b9:54: 36:d5:72:5a:8f:fd:d3:3e:1c:38:67:3a:32:33:60:54:09:39: 10:00:8e:d1:4f:0c:00:bf:b7:7d:71:11:e4:08:aa:13:13:6f: ee:3d:67:47:1c:ac:bb:12:f1:37:a3:51:45:ec:bc:f4:96:5a: fa:8e:c8:bc:8f:20:bf:dd:2a:29:ef:6b:80:3e:cc:aa:cb:3e: 5d:02:41:5d:47:f8:56:01:8d:89:8e:4a:ff:79:a6:13:65:dd: 8c:f1:b2:4c:cf:6c:31:77:ca:39:47:f9:9d:b4:5f:d0:02:2f: d2:d9:4e:64:2b:10:c3:9b:0a:9b:92:cb:1a:25:86:4b:00:81: 5f:75:1a:43:af:7f:1a:8d:4a:bd:fd:9d:e5:9c:d4:6b:91:b6: 92:47:b5:88:b6:67:8f:43:15:3b:57:c8:aa:ab:0d:a3:75:e1: b1:c6:7a:0f:36:db:70:9c:1a:d0:fe:bb:df:bb:00:bb:7c:31: a6:65:b1:ae:a0:07:5c:cd:ad:42:d4:06:bf:48:26:16:27:62: ce:a2:6d:a1:a6:cf:6c:85:e1:22:03:c2:de:5b:53:fb:28:6b: b6:d6:59:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oNSGhHePfD6FnuK5C4r0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzRhMzVhYmZhODJkNTQ5ZTQ5MDcwNGQ2OGJiZTY1ODAw NWQ2M2MwHhcNMjUxMjE5MDgwMTMxWhcNMjUxMjIwMDgwMTMxWjAzMTEwLwYDVQQD EygxODhlOGE1OWNjMDE2OGI2ZDE4OTFmMDQyNDM0YzA5YWI2OTEyNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5x35BGOIWM4TS4vrM/Gc+UH9zly RwpiLXyv+zCtEtXa6Ttfe2i5fytpF3iuyyW43OWbNCUjy9QBhtOT5L5hyZce1jGc eTsV8JN/VgfIPrKySnFlk37Ic6Fv5nnDGF49GCuLgf3qlw1Zs4j9NGEiTUPzp2mE L4kcIKjy2HtNuQpO861l8a+aPS9pHWWtsUBex5N3YfOAY6rhBHupXvTgyxuTyQgR lzNEq/wGFXfH0XAlucz+IxD2XJ5096szLX274YhEwzqr4pyhj1kXJas4hZJL+lex jVSu8F/vdEV6irbQuwfY8qDBlioCH3CVNdXchQJuwEM1QIIUdPuLTWlb5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiOilnMAWi20YkfBCQ0wJq2kSc9MB8GA1UdIwQY MBaAFMM0o1q/qC1UnkkHBNaLvmWABdY8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMt MjczODg0YjUzYzZlLzEvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8zOWIwOGQtZWIwMS00M2IwLWI1NmMtMjczODg0YjUzYzZl LzEvd3pTaldyLW9MVlNlU1FjRTFvdS1aWUFGMWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtg3oHQg i9dT7nw7YUR+VkQjT380JQhi0wmwjZFwLFIWbblUNtVyWo/90z4cOGc6MjNgVAk5 EACO0U8MAL+3fXER5AiqExNv7j1nRxysuxLxN6NRRey89JZa+o7IvI8gv90qKe9r gD7Mqss+XQJBXUf4VgGNiY5K/3mmE2XdjPGyTM9sMXfKOUf5nbRf0AIv0tlOZCsQ w5sKm5LLGiWGSwCBX3UaQ69/Go1Kvf2d5ZzUa5G2kke1iLZnj0MVO1fIqqsNo3Xh scZ6DzbbcJwa0P6737sAu3wxpmWxrqAHXM2tQtQGv0gmFidizqJtoabPbIXhIgPC 3ltT+yhrttZZjg== -----END CERTIFICATE-----Generated at Fri Dec 19 16:38:50 2025 by rpki-client