This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft File: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json) Hash identifier: HG40P0NlFMXDK048hlKydmlgNgVM5vzbHN1h+D2msE0= Subject key identifier: 6A:6C:F7:11:CE:6E:87:07:8E:73:50:93:71:AF:6A:74:8B:C9:55:16 Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 Certificate issuer: /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Certificate serial: 019AF19BA6CFAADEA2289EFA657310405A00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft Manifest number: 15FF Signing time: Sat 06 Dec 2025 03:01:41 +0000 Manifest this update: Sat 06 Dec 2025 03:01:41 +0000 Manifest next update: Sun 07 Dec 2025 03:01:41 +0000 Files and hashes: 1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=) 2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: 7EqIL2LoHP/4rXZJkJH+YTHSvnflDTx2Tvav8waJxm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a6:cf:aa:de:a2:28:9e:fa:65:73:10:40:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4 Validity Not Before: Dec 6 03:01:41 2025 GMT Not After : Dec 7 03:01:41 2025 GMT Subject: CN=6a6cf711ce6e87078e73509371af6a748bc95516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:97:ba:d6:1b:21:a7:78:14:48:d4:b0:47:99: 2b:ef:c6:53:b1:89:05:fb:3e:09:57:79:43:12:cc: fd:67:46:ec:33:70:36:07:1a:b4:ec:0f:b0:ca:f7: a2:14:ae:8b:45:9a:7f:b9:ab:a8:02:11:cf:7c:1b: 3d:fb:3a:fe:2c:6f:55:51:8a:83:7f:f5:4c:d2:cd: 16:88:62:66:2d:78:d6:2e:3a:13:28:00:3c:76:38: b2:95:77:98:41:f2:02:53:cd:bb:dd:47:11:d5:61: ab:39:82:c5:e2:ce:17:3f:16:7f:9e:1f:4a:57:19: 4d:a8:68:2f:79:61:f3:e0:b4:06:82:e7:fb:04:cf: 9f:fa:c2:4e:6f:35:a1:70:c9:8a:9b:53:9d:60:11: 30:e7:ca:9b:fb:6c:ca:a4:6d:3a:80:21:15:81:56: 2b:62:07:e4:c2:56:6e:53:f9:ba:53:66:37:e8:c6: cd:a3:4c:fb:69:f0:6b:17:64:0b:10:44:42:5d:01: 0f:44:30:1c:f1:61:1a:f5:7f:a6:74:50:b2:9a:a4: 25:37:d6:82:1a:00:e5:68:a5:30:2e:e7:68:bd:3a: 90:eb:e4:fa:40:5a:0c:bb:f2:c5:9c:2a:b3:ea:6a: 24:a1:69:27:bc:c4:43:88:0f:20:64:8a:ae:86:24: 4c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6C:F7:11:CE:6E:87:07:8E:73:50:93:71:AF:6A:74:8B:C9:55:16 X509v3 Authority Key Identifier: keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d6:5b:e2:17:55:9e:cc:34:9d:cc:21:ae:e9:07:03:25:e6: 41:a2:b4:47:5b:89:06:9c:6b:ac:37:f7:ca:52:03:c7:76:73: c0:41:8b:61:1b:fd:06:f6:d9:db:3d:ae:b0:c1:b0:a5:eb:76: 85:82:16:3a:52:82:a2:04:6b:52:bd:ae:5a:da:71:a9:51:0f: 20:06:65:eb:47:1b:ec:64:30:70:52:88:54:7a:c0:d2:ec:6c: a3:7f:57:04:3f:44:fe:9b:ee:96:62:9a:17:7a:4b:3c:30:91: 5b:6e:f4:9b:2f:a3:ee:f9:38:1c:8e:39:a0:1e:81:31:81:4e: c7:c9:7b:75:23:33:3c:af:a3:ee:a9:e3:dd:e2:6a:4a:60:24: f3:0b:6e:2f:ce:19:fa:16:02:99:ca:3f:f4:7c:ca:09:77:d7: c6:ce:b8:23:ba:1d:10:89:eb:dd:f4:35:05:19:ca:9c:1c:43: 39:2a:4a:bc:3d:db:c6:66:74:f7:61:60:3a:05:d2:81:dc:2d: 03:03:74:55:b7:6f:22:e9:3a:c9:29:7f:ce:ef:95:c8:d9:72: 6f:81:a1:6f:48:0d:6e:7e:ba:22:88:b3:ee:40:8d:f3:e9:84: 20:73:5a:52:12:82:5f:4a:2c:2c:d4:ad:d7:68:80:16:02:f7: c8:28:7b:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6bPqt6iKJ76ZXMQQFoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl MGUzZTQwHhcNMjUxMjA2MDMwMTQxWhcNMjUxMjA3MDMwMTQxWjAzMTEwLwYDVQQD Eyg2YTZjZjcxMWNlNmU4NzA3OGU3MzUwOTM3MWFmNmE3NDhiYzk1NTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipe61hshp3gUSNSwR5kr78ZTsYkF +z4JV3lDEsz9Z0bsM3A2Bxq07A+wyveiFK6LRZp/uauoAhHPfBs9+zr+LG9VUYqD f/VM0s0WiGJmLXjWLjoTKAA8djiylXeYQfICU8273UcR1WGrOYLF4s4XPxZ/nh9K VxlNqGgveWHz4LQGguf7BM+f+sJObzWhcMmKm1OdYBEw58qb+2zKpG06gCEVgVYr YgfkwlZuU/m6U2Y36MbNo0z7afBrF2QLEERCXQEPRDAc8WEa9X+mdFCymqQlN9aC GgDlaKUwLudovTqQ6+T6QFoMu/LFnCqz6mokoWknvMRDiA8gZIquhiRMZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGps9xHObocHjnNQk3GvanSLyVUWMB8GA1UdIwQY MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2 LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtZb4hdV nsw0ncwhrukHAyXmQaK0R1uJBpxrrDf3ylIDx3ZzwEGLYRv9BvbZ2z2usMGwpet2 hYIWOlKCogRrUr2uWtpxqVEPIAZl60cb7GQwcFKIVHrA0uxso39XBD9E/pvulmKa F3pLPDCRW270my+j7vk4HI45oB6BMYFOx8l7dSMzPK+j7qnj3eJqSmAk8wtuL84Z +hYCmco/9HzKCXfXxs64I7odEInr3fQ1BRnKnBxDOSpKvD3bxmZ092FgOgXSgdwt AwN0VbdvIuk6ySl/zu+VyNlyb4Ghb0gNbn66Ioiz7kCN8+mEIHNaUhKCX0osLNSt 12iAFgL3yCh74A== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:01 2025 by rpki-client