This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft File: wlxF_6SjEkYMAP_t4y1NxB_S988.mft (raw, json) Hash identifier: 7y9+IZPqxnWFNsrIRgn9Mfy34jVYopF+Zk6tCC1xO1s= Subject key identifier: E2:39:E4:F9:DC:7A:D9:83:8D:99:34:CF:1A:3F:90:FC:2B:60:58:39 Authority key identifier: C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF Certificate issuer: /CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Certificate serial: 019B2CFDA0B0EE37AF1A927B1E9094A90DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft Manifest number: 02 Signing time: Wed 17 Dec 2025 15:46:17 +0000 Manifest this update: Wed 17 Dec 2025 15:46:17 +0000 Manifest next update: Thu 18 Dec 2025 15:46:17 +0000 Files and hashes: 1: Xsy2oYgPGqda5js6z_t6zsg9nQw.roa (hash: a/ZpgfhLjFQ8tj0iRSFzFmybLSdeguZMKCjQwN9tD98=) 2: wlxF_6SjEkYMAP_t4y1NxB_S988.crl (hash: wr9VbGhjpYYud7EhWctsbMIQFQvm+ORTS/xNJXOi3Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 15:46:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:fd:a0:b0:ee:37:af:1a:92:7b:1e:90:94:a9:0d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25c45ffa4a312460c00ffede32d4dc41fd2f7cf Validity Not Before: Dec 17 15:46:17 2025 GMT Not After : Dec 18 15:46:17 2025 GMT Subject: CN=e239e4f9dc7ad9838d9934cf1a3f90fc2b605839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:25:b3:a0:64:70:48:64:d3:3a:f7:48:8a: 42:b0:3c:23:19:6a:b0:4b:78:ed:6f:16:5b:76:8b: 42:5b:c6:3c:79:9c:92:31:08:c0:7a:12:dc:6b:51: 81:df:54:22:5b:8d:48:04:99:c5:51:98:2f:e0:9d: 82:a4:36:e2:cd:96:98:d0:7a:8e:54:ce:da:7f:1e: 81:36:0f:fd:89:5f:e1:f2:9e:7f:45:11:d1:ec:af: f2:26:26:d3:39:16:b0:cf:94:f1:f2:fa:46:36:43: ca:eb:34:45:5e:ea:d9:34:a8:0c:c9:76:44:9c:5b: ea:74:97:a0:68:9f:cf:50:96:78:51:83:00:53:20: 53:f0:d4:be:6e:32:24:c7:51:61:90:87:f1:ac:5c: ec:cf:9b:70:85:86:fb:d3:fd:df:a1:54:66:3c:5e: 99:d2:6d:2e:79:11:1a:f2:db:0d:75:0a:26:6a:e3: cd:16:f4:c3:38:0f:f0:b1:d4:79:fa:42:a9:e4:1c: 94:ae:3a:86:e6:aa:f8:4e:fa:05:41:1d:a0:bd:27: dd:2f:d5:26:2c:dd:0f:2c:a5:8f:c5:e1:63:52:d1: 74:63:d3:b3:17:82:69:1f:25:e2:4f:12:38:fc:c3: e7:0b:48:00:88:43:b0:e3:b0:4f:de:64:ef:83:07: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:39:E4:F9:DC:7A:D9:83:8D:99:34:CF:1A:3F:90:FC:2B:60:58:39 X509v3 Authority Key Identifier: keyid:C2:5C:45:FF:A4:A3:12:46:0C:00:FF:ED:E3:2D:4D:C4:1F:D2:F7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlxF_6SjEkYMAP_t4y1NxB_S988.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a4bf23-6511-4493-98f0-7019bdbb1177/1/wlxF_6SjEkYMAP_t4y1NxB_S988.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:a1:04:bc:69:0e:52:84:ff:cc:26:28:02:fe:c5:d3:86:54: 07:cc:7e:e3:a4:2e:3a:51:07:a5:e0:66:80:86:9c:ac:73:1f: 72:24:6c:d3:88:4c:73:ae:5b:41:6c:36:89:58:9e:44:fd:18: b5:cf:4f:9b:a3:61:d6:79:c2:47:e8:72:e6:78:64:27:5b:e8: 8a:c8:8c:5f:c7:1e:2c:50:fc:f8:b5:d2:a6:bd:bd:ed:b3:b3: bc:a6:5e:88:5b:c4:ad:f5:9b:1b:6b:2c:0f:95:87:26:d3:56: fe:cd:ac:ee:f7:ac:0d:f8:79:45:a8:0a:74:be:a7:36:bc:4f: 71:d2:b7:b9:f4:82:f7:8c:78:f1:11:3f:39:b1:02:91:7c:b3: 5a:03:7c:7c:f7:1d:69:33:09:8b:4c:20:07:00:eb:ed:ea:01: cb:39:02:a2:61:ff:89:ce:02:5e:ad:46:10:6d:02:ad:a2:6e: 9f:57:16:55:b6:3c:0b:e3:c5:5e:3c:1b:5b:69:17:2c:02:3d: 51:ec:2a:47:3b:a9:b5:d4:51:d5:d7:96:6c:e3:63:75:b6:e6: 59:01:d3:98:68:cb:90:fb:f0:8c:fa:a2:28:ae:04:52:39:b1: f2:14:ff:44:9b:29:92:3c:82:9d:1f:b9:ee:12:97:96:5d:28: 67:e2:f2:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZss/aCw7jevGpJ7HpCUqQ3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWM0NWZmYTRhMzEyNDYwYzAwZmZlZGUzMmQ0ZGM0MWZk MmY3Y2YwHhcNMjUxMjE3MTU0NjE3WhcNMjUxMjE4MTU0NjE3WjAzMTEwLwYDVQQD EyhlMjM5ZTRmOWRjN2FkOTgzOGQ5OTM0Y2YxYTNmOTBmYzJiNjA1ODM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW4ls6BkcEhk0zr3SIpCsDwjGWqw S3jtbxZbdotCW8Y8eZySMQjAehLca1GB31QiW41IBJnFUZgv4J2CpDbizZaY0HqO VM7afx6BNg/9iV/h8p5/RRHR7K/yJibTORawz5Tx8vpGNkPK6zRFXurZNKgMyXZE nFvqdJegaJ/PUJZ4UYMAUyBT8NS+bjIkx1FhkIfxrFzsz5twhYb70/3foVRmPF6Z 0m0ueREa8tsNdQomauPNFvTDOA/wsdR5+kKp5ByUrjqG5qr4TvoFQR2gvSfdL9Um LN0PLKWPxeFjUtF0Y9OzF4JpHyXiTxI4/MPnC0gAiEOw47BP3mTvgwd76QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOI55PncetmDjZk0zxo/kPwrYFg5MB8GA1UdIwQY MBaAFMJcRf+koxJGDAD/7eMtTcQf0vfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAt NzAxOWJkYmIxMTc3LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9hNGJmMjMtNjUxMS00NDkzLTk4ZjAtNzAxOWJkYmIxMTc3 LzEvd2x4Rl82U2pFa1lNQVBfdDR5MU54Ql9TOTg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaEEvGkO UoT/zCYoAv7F04ZUB8x+46QuOlEHpeBmgIacrHMfciRs04hMc65bQWw2iVieRP0Y tc9Pm6Nh1nnCR+hy5nhkJ1voisiMX8ceLFD8+LXSpr297bOzvKZeiFvErfWbG2ss D5WHJtNW/s2s7vesDfh5RagKdL6nNrxPcdK3ufSC94x48RE/ObECkXyzWgN8fPcd aTMJi0wgBwDr7eoByzkComH/ic4CXq1GEG0CraJun1cWVbY8C+PFXjwbW2kXLAI9 UewqRzuptdRR1deWbONjdbbmWQHTmGjLkPvwjPqiKK4EUjmx8hT/RJspkjyCnR+5 7hKXll0oZ+LyjA== -----END CERTIFICATE-----Generated at Wed Dec 17 21:52:11 2025 by rpki-client