This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json) Hash identifier: rtlLG7gieB9bbVDtDx3jWQMkvUysKOJs3Jhcs5Fvleg= Subject key identifier: D3:27:1D:37:02:36:CA:2D:74:CC:57:92:0F:A6:B4:6A:84:02:25:15 Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81 Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481 Certificate serial: 019AF577BE89C302D5B065252A3A2FD47413 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft Manifest number: 0BE3 Signing time: Sat 06 Dec 2025 21:00:56 +0000 Manifest this update: Sat 06 Dec 2025 21:00:56 +0000 Manifest next update: Sun 07 Dec 2025 21:00:56 +0000 Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: FrF3Fn5T5rs3UsMqUBPKLkLkswUJJESBOz6VvRNFYm8=) 2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:be:89:c3:02:d5:b0:65:25:2a:3a:2f:d4:74:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481 Validity Not Before: Dec 6 21:00:56 2025 GMT Not After : Dec 7 21:00:56 2025 GMT Subject: CN=d3271d370236ca2d74cc57920fa6b46a84022515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:93:5c:9d:f0:fc:01:f8:4d:24:80:55:69: 21:9d:b5:25:a7:2e:45:a9:f3:72:3a:50:46:33:4c: bc:8d:aa:9a:26:46:1c:96:32:60:33:00:f7:f7:3c: 57:5c:76:c7:d2:f2:8c:38:c3:f2:22:eb:c7:ca:99: 8b:1d:0b:48:0a:a4:79:2a:6e:11:0b:83:cb:37:82: 84:77:dd:51:b1:20:ea:89:5e:c8:77:e1:67:2d:2b: ff:9c:ca:e0:6e:d8:3a:5e:ee:e6:5e:a0:64:c3:7c: f4:72:aa:21:73:e8:e5:82:5c:af:4c:27:9c:4c:2d: 30:54:60:e2:ed:15:83:51:ca:f0:92:d1:05:b6:ec: 71:d5:7d:90:09:d5:c8:7c:75:66:87:84:18:22:05: 72:b3:06:d1:34:51:be:23:49:d7:71:d1:a8:4b:f1: 51:09:7a:f7:db:ed:77:85:43:09:ae:9f:23:5b:e6: 10:a2:2e:16:a2:fe:d4:d1:e1:cd:0e:8e:e1:bf:b1: 44:b2:99:31:02:e6:f3:6b:4a:ac:aa:56:0e:09:c7: e7:eb:ec:1c:29:c0:ad:7b:c5:ba:e1:fa:dd:92:4c: df:17:41:81:f9:5f:d0:22:af:46:0d:38:6c:86:71: 80:4e:19:de:a1:7d:48:b5:2d:a3:27:0f:9d:be:2a: 66:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:27:1D:37:02:36:CA:2D:74:CC:57:92:0F:A6:B4:6A:84:02:25:15 X509v3 Authority Key Identifier: keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d3:da:74:81:8c:a3:4d:15:8e:ca:e4:8b:58:60:87:dd:49: fa:cb:c9:a0:70:bb:96:50:a5:60:5d:49:84:b1:83:5c:f8:3b: 29:0b:40:e8:72:0a:e2:ed:60:3e:87:0c:41:53:0a:1f:11:e9: cf:86:af:c7:c4:d5:9d:ad:9f:b6:6a:0e:56:df:19:f4:94:17: 6b:98:cc:05:e5:ae:2f:e4:5d:57:63:54:22:87:87:7f:bf:ac: cf:51:81:74:b4:a4:8e:fa:8b:06:e6:5a:54:ea:20:2d:f3:11: af:07:d9:4b:0e:bf:83:6e:3c:4f:af:07:95:b0:ac:0f:75:af: c1:a3:ac:7a:1c:60:4b:ec:8a:ef:f0:f7:ef:f0:f8:e6:cb:93: 8f:94:cf:3d:ac:82:b7:d1:57:38:3a:09:97:2b:14:20:7c:6a: 50:6c:31:6b:9c:ad:cd:26:1d:ed:9a:cf:66:ee:ac:63:67:13: 6e:3a:50:0a:aa:9f:19:58:c3:47:3e:41:9d:84:4e:c2:3c:de: ad:01:f1:dc:e4:aa:e7:4b:89:71:df:9b:7b:82:2e:6d:87:f2: 5c:6a:60:74:63:74:56:5b:a5:c5:4b:83:8a:ca:4d:43:df:f6: cc:f4:7d:82:29:80:c0:c3:e4:65:33:80:85:f8:4a:17:2c:f7: b0:53:58:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d76JwwLVsGUlKjov1HQTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OWE3NDBmNGJjMzBhMmMwNGNkY2IzMzQ0YWYwZDZhMmQw NWE0ODEwHhcNMjUxMjA2MjEwMDU2WhcNMjUxMjA3MjEwMDU2WjAzMTEwLwYDVQQD EyhkMzI3MWQzNzAyMzZjYTJkNzRjYzU3OTIwZmE2YjQ2YTg0MDIyNTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfKTXJ3w/AH4TSSAVWkhnbUlpy5F qfNyOlBGM0y8jaqaJkYcljJgMwD39zxXXHbH0vKMOMPyIuvHypmLHQtICqR5Km4R C4PLN4KEd91RsSDqiV7Id+FnLSv/nMrgbtg6Xu7mXqBkw3z0cqohc+jlglyvTCec TC0wVGDi7RWDUcrwktEFtuxx1X2QCdXIfHVmh4QYIgVyswbRNFG+I0nXcdGoS/FR CXr32+13hUMJrp8jW+YQoi4Wov7U0eHNDo7hv7FEspkxAubza0qsqlYOCcfn6+wc KcCte8W64frdkkzfF0GB+V/QIq9GDThshnGAThneoX1ItS2jJw+dvipm6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMnHTcCNsotdMxXkg+mtGqEAiUVMB8GA1UdIwQY MBaAFFmadA9LwwosBM3LM0SvDWotBaSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYt OTEwMmMzYzA1MTM4LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYtOTEwMmMzYzA1MTM4 LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdPadIGM o00Vjsrki1hgh91J+svJoHC7llClYF1JhLGDXPg7KQtA6HIK4u1gPocMQVMKHxHp z4avx8TVna2ftmoOVt8Z9JQXa5jMBeWuL+RdV2NUIoeHf7+sz1GBdLSkjvqLBuZa VOogLfMRrwfZSw6/g248T68HlbCsD3WvwaOsehxgS+yK7/D37/D45suTj5TPPayC t9FXODoJlysUIHxqUGwxa5ytzSYd7ZrPZu6sY2cTbjpQCqqfGVjDRz5BnYROwjze rQHx3OSq50uJcd+be4IubYfyXGpgdGN0VlulxUuDispNQ9/2zPR9gimAwMPkZTOA hfhKFyz3sFNYVg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:38:14 2025 by rpki-client