This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft File: wZtaLEnhxkinDHCK4b3kC2RMeAI.mft (raw, json) Hash identifier: E7GVhmWauqNyMov+bvQ5TMooGKJt/1qsLH4bcj0gk44= Subject key identifier: 03:FB:65:86:DB:9B:53:19:16:43:8D:08:68:B8:9C:B9:FF:D8:6F:84 Authority key identifier: C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02 Certificate issuer: /CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802 Certificate serial: 019B2DE6CF2CD361F2453F4F1FC09DDC9C32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 20:00:59 +0000 Manifest this update: Wed 17 Dec 2025 20:00:59 +0000 Manifest next update: Thu 18 Dec 2025 20:00:59 +0000 Files and hashes: 1: ifWK_iN7Ay8QBp6l-CCna4Qxy8Y.roa (hash: a8BYVN01+QzzRYrawK1TfdRTG9b4FCkotHQL9E9gZ7Q=) 2: wZtaLEnhxkinDHCK4b3kC2RMeAI.crl (hash: byKXnuffEKFp6rJiByI8cM4yDo009KM8OvpRZ5dQWpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 20:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:e6:cf:2c:d3:61:f2:45:3f:4f:1f:c0:9d:dc:9c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c19b5a2c49e1c648a70c708ae1bde40b644c7802 Validity Not Before: Dec 17 20:00:59 2025 GMT Not After : Dec 18 20:00:59 2025 GMT Subject: CN=03fb6586db9b531916438d0868b89cb9ffd86f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5c:87:80:23:b2:3c:3b:5e:f6:82:f6:18:98: 8c:d1:92:c9:47:c7:28:fc:bf:f0:10:7e:11:f5:1f: 87:d0:64:04:5e:01:27:b9:e3:c6:be:53:97:17:f8: 27:54:8f:20:59:b9:ea:96:bd:9a:13:bf:c0:d1:85: 9f:45:ee:ce:b0:af:50:1b:10:4b:7a:a9:6a:0c:e6: 41:09:7e:8f:b9:3f:80:47:3b:01:06:44:8d:e2:c5: ad:9d:83:ab:5a:41:7e:c5:fa:d5:a5:00:29:1e:79: 3b:66:2e:1a:65:c1:2d:d1:64:b3:e0:a4:dc:bb:de: 7a:1c:56:b9:97:29:7e:03:4e:8e:0e:29:a4:63:bd: d2:f1:00:cc:0f:80:d1:f9:2a:5b:47:bd:89:6f:d9: 9a:65:12:65:4f:29:19:ca:19:b1:7d:48:dd:a1:a6: fa:53:95:d4:57:51:26:3d:b4:d9:1e:69:e6:54:6b: 29:56:39:4a:7e:51:fb:34:c5:ea:3d:e9:c0:07:b2: f8:43:51:7e:47:3d:e5:a2:59:ba:e6:46:69:4f:db: a7:a4:bb:89:04:2e:cf:c0:a7:a1:21:9b:98:0c:25: 1c:64:bc:9f:71:06:17:b8:85:30:66:9e:ef:ae:d1: de:0f:9e:46:9b:f7:fb:bd:6b:81:29:c5:3c:26:68: 6f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FB:65:86:DB:9B:53:19:16:43:8D:08:68:B8:9C:B9:FF:D8:6F:84 X509v3 Authority Key Identifier: keyid:C1:9B:5A:2C:49:E1:C6:48:A7:0C:70:8A:E1:BD:E4:0B:64:4C:78:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZtaLEnhxkinDHCK4b3kC2RMeAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/035e8a-70e3-487b-a04d-3d461dade4a9/1/wZtaLEnhxkinDHCK4b3kC2RMeAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:61:ce:36:da:61:4a:0f:c0:a2:63:6f:58:fc:d5:3c:40:4e: 3e:e4:5a:8a:71:0a:85:3d:50:de:3d:c3:2f:7e:c8:46:c9:24: 6c:c4:22:4f:8f:22:ba:bb:e3:6e:5f:1b:de:71:12:80:3f:cf: eb:c8:c8:dd:0f:63:7e:a8:9f:ea:2a:66:9c:2b:64:6f:56:57: 36:b2:f0:7c:e4:3d:da:78:74:7a:9b:eb:54:c0:47:41:a5:10: 77:03:32:bb:07:15:71:75:a1:0f:eb:ce:74:6b:4a:f3:b2:5c: da:82:f5:b3:6d:0a:db:f5:9b:0e:60:79:fa:8f:70:55:5a:f6: 4a:92:63:ef:c6:a8:a3:b8:c2:e3:25:d0:95:08:06:1e:a5:d4: 3f:9b:06:9a:03:d6:40:50:cf:a4:0f:66:d9:1f:a9:8f:7f:13: f7:ec:ed:c7:4f:eb:08:ce:e5:a9:06:da:8c:7d:f8:6b:26:50: 34:ec:af:24:e5:1e:c4:a9:8b:91:89:b2:36:e3:63:91:33:d6: 09:0e:f3:fb:3b:07:ae:80:47:f8:b5:71:9d:01:57:c2:eb:af: cc:51:df:81:3c:37:31:cc:10:c5:1f:41:03:84:45:3c:60:07: ae:d1:02:89:18:b0:f2:31:0d:76:08:6e:8a:9f:c0:7c:82:f1: 4a:3c:33:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZst5s8s02HyRT9PH8Cd3JwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOWI1YTJjNDllMWM2NDhhNzBjNzA4YWUxYmRlNDBiNjQ0 Yzc4MDIwHhcNMjUxMjE3MjAwMDU5WhcNMjUxMjE4MjAwMDU5WjAzMTEwLwYDVQQD EygwM2ZiNjU4NmRiOWI1MzE5MTY0MzhkMDg2OGI4OWNiOWZmZDg2Zjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFyHgCOyPDte9oL2GJiM0ZLJR8co /L/wEH4R9R+H0GQEXgEnuePGvlOXF/gnVI8gWbnqlr2aE7/A0YWfRe7OsK9QGxBL eqlqDOZBCX6PuT+ARzsBBkSN4sWtnYOrWkF+xfrVpQApHnk7Zi4aZcEt0WSz4KTc u956HFa5lyl+A06ODimkY73S8QDMD4DR+SpbR72Jb9maZRJlTykZyhmxfUjdoab6 U5XUV1EmPbTZHmnmVGspVjlKflH7NMXqPenAB7L4Q1F+Rz3lolm65kZpT9unpLuJ BC7PwKehIZuYDCUcZLyfcQYXuIUwZp7vrtHeD55Gm/f7vWuBKcU8JmhvTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP7ZYbbm1MZFkONCGi4nLn/2G+EMB8GA1UdIwQY MBaAFMGbWixJ4cZIpwxwiuG95AtkTHgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQt M2Q0NjFkYWRlNGE5LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8wMzVlOGEtNzBlMy00ODdiLWEwNGQtM2Q0NjFkYWRlNGE5 LzEvd1p0YUxFbmh4a2luREhDSzRiM2tDMlJNZUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGHONtph Sg/AomNvWPzVPEBOPuRainEKhT1Q3j3DL37IRskkbMQiT48iurvjbl8b3nESgD/P 68jI3Q9jfqif6ipmnCtkb1ZXNrLwfOQ92nh0epvrVMBHQaUQdwMyuwcVcXWhD+vO dGtK87Jc2oL1s20K2/WbDmB5+o9wVVr2SpJj78aoo7jC4yXQlQgGHqXUP5sGmgPW QFDPpA9m2R+pj38T9+ztx0/rCM7lqQbajH34ayZQNOyvJOUexKmLkYmyNuNjkTPW CQ7z+zsHroBH+LVxnQFXwuuvzFHfgTw3McwQxR9BA4RFPGAHrtECiRiw8jENdghu ip/AfILxSjwz2g== -----END CERTIFICATE-----Generated at Thu Dec 18 06:17:41 2025 by rpki-client