This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft File: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft (raw, json) Hash identifier: mFHkBipFi55m1H+yyvlMSo2fOM8LapaCHsbVkd4SqYw= Subject key identifier: B0:46:69:96:5C:74:EA:08:11:E6:F2:15:AF:03:C4:B7:65:72:B5:A1 Authority key identifier: 5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF Certificate issuer: /CN=5a5d45654fa597d3522eda168839193ebe782eef Certificate serial: 019AF31C3E925FC5A34B5A5E3890CA834521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft Manifest number: 09A3 Signing time: Sat 06 Dec 2025 10:01:45 +0000 Manifest this update: Sat 06 Dec 2025 10:01:45 +0000 Manifest next update: Sun 07 Dec 2025 10:01:45 +0000 Files and hashes: 1: 9VRbY37PKRH0-UJUOvI3sW7GRqg.roa (hash: JnDLn69G2OWz5ad5UI+dtO7s/dZ3uGdaBQeH20/IDXs=) 2: Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl (hash: fjMXw1mjiQf8tc5HO8E8xtNYA5lhZn+wCwAUubunbAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:3e:92:5f:c5:a3:4b:5a:5e:38:90:ca:83:45:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a5d45654fa597d3522eda168839193ebe782eef Validity Not Before: Dec 6 10:01:45 2025 GMT Not After : Dec 7 10:01:45 2025 GMT Subject: CN=b04669965c74ea0811e6f215af03c4b76572b5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:b8:ed:cf:6e:97:8a:6c:7b:e3:af:46:a2: 3e:af:eb:a6:59:04:c3:a5:92:47:a1:66:10:70:f1: 2e:92:70:da:82:d7:30:e5:11:fc:53:58:e0:1b:82: b6:91:45:3f:de:e7:39:cc:50:0e:a7:40:92:ae:e6: 18:30:c8:2c:c4:0c:f9:bb:ec:ad:1d:24:3e:97:8c: e3:89:71:21:bf:98:85:16:98:38:1b:4c:2d:fb:c0: 7f:77:97:42:da:4c:93:e4:dc:38:3f:ff:5b:56:b6: ce:83:30:82:f6:45:d4:e0:2b:45:b8:0a:78:8f:3d: 7b:25:f3:1f:12:5e:c1:7f:e0:2a:5f:e3:6f:50:29: d7:19:36:e6:3e:00:fd:e1:2a:9c:67:b9:0b:0b:c6: be:85:a9:0e:4f:65:3d:4e:be:d4:b0:ef:56:ef:7f: 02:6a:62:e6:2a:33:94:46:98:27:bd:f1:22:ce:22: ed:14:03:46:be:a1:d1:2b:f0:e2:0c:9e:2c:de:06: 4b:04:ad:ae:2b:0e:ff:b0:49:53:c1:c4:50:c2:27: b1:1e:b9:2b:2f:00:b5:f9:76:c2:aa:af:39:a3:c0: a0:37:47:3a:64:3d:5c:c8:6c:c7:bf:7a:a1:90:7b: 67:64:4e:41:3a:42:da:9c:fd:cd:97:ee:9d:97:f5: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:46:69:96:5C:74:EA:08:11:E6:F2:15:AF:03:C4:B7:65:72:B5:A1 X509v3 Authority Key Identifier: keyid:5A:5D:45:65:4F:A5:97:D3:52:2E:DA:16:88:39:19:3E:BE:78:2E:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dd00c1-728a-4abb-8cc2-c9640d250afc/1/Wl1FZU-ll9NSLtoWiDkZPr54Lu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:4c:26:36:fa:59:c3:60:34:9d:09:03:51:a5:d9:e6:50:8b: e2:a0:e2:62:7f:ce:7f:f2:7f:81:06:2f:16:07:b7:43:94:14: 63:88:47:9c:98:ce:af:ac:9d:cc:f1:2a:b5:43:e1:ef:ac:aa: af:d5:16:df:75:a0:f8:8a:21:91:f8:e2:e1:42:30:c5:1b:92: 04:4b:1b:fb:d3:78:cc:d9:32:55:0c:26:dd:d3:6e:67:a5:31: 7a:0c:3b:7c:9e:18:63:0e:ad:63:e6:9a:87:c1:a3:ab:4e:71: 0b:cb:68:b0:7c:76:74:86:a5:da:b3:7e:07:89:47:12:1e:ef: 75:6b:b0:e7:75:42:8d:e0:6b:d7:71:0f:93:ed:1b:e0:3d:9c: 38:a8:0a:f6:82:48:06:77:29:aa:e3:3f:bf:d6:6c:a8:b8:46: 5b:69:17:b2:be:b1:76:bf:ee:87:6c:1d:9e:49:f8:65:08:b0: 43:32:8b:43:28:23:fa:1e:04:16:5e:c2:81:5c:6f:58:88:c5: 05:22:45:a2:3b:ee:66:2a:fe:18:b9:13:91:46:22:9e:81:59: 88:93:d2:31:40:be:89:08:08:52:63:9b:9a:3b:19:9d:45:b1: be:93:ce:ad:5e:9a:ee:f4:e9:dd:83:d5:da:d7:cb:f7:a7:2f: 4f:d1:c4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHD6SX8WjS1peOJDKg0UhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNWQ0NTY1NGZhNTk3ZDM1MjJlZGExNjg4MzkxOTNlYmU3 ODJlZWYwHhcNMjUxMjA2MTAwMTQ1WhcNMjUxMjA3MTAwMTQ1WjAzMTEwLwYDVQQD EyhiMDQ2Njk5NjVjNzRlYTA4MTFlNmYyMTVhZjAzYzRiNzY1NzJiNWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllC47c9ul4pse+OvRqI+r+umWQTD pZJHoWYQcPEuknDagtcw5RH8U1jgG4K2kUU/3uc5zFAOp0CSruYYMMgsxAz5u+yt HSQ+l4zjiXEhv5iFFpg4G0wt+8B/d5dC2kyT5Nw4P/9bVrbOgzCC9kXU4CtFuAp4 jz17JfMfEl7Bf+AqX+NvUCnXGTbmPgD94SqcZ7kLC8a+hakOT2U9Tr7UsO9W738C amLmKjOURpgnvfEiziLtFANGvqHRK/DiDJ4s3gZLBK2uKw7/sElTwcRQwiexHrkr LwC1+XbCqq85o8CgN0c6ZD1cyGzHv3qhkHtnZE5BOkLanP3Nl+6dl/WC8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBGaZZcdOoIEebyFa8DxLdlcrWhMB8GA1UdIwQY MBaAFFpdRWVPpZfTUi7aFog5GT6+eC7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzIt Yzk2NDBkMjUwYWZjLzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9kZDAwYzEtNzI4YS00YWJiLThjYzItYzk2NDBkMjUwYWZj LzEvV2wxRlpVLWxsOU5TTHRvV2lEa1pQcjU0THU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAykwmNvpZ w2A0nQkDUaXZ5lCL4qDiYn/Of/J/gQYvFge3Q5QUY4hHnJjOr6ydzPEqtUPh76yq r9UW33Wg+Iohkfji4UIwxRuSBEsb+9N4zNkyVQwm3dNuZ6Uxegw7fJ4YYw6tY+aa h8Gjq05xC8tosHx2dIal2rN+B4lHEh7vdWuw53VCjeBr13EPk+0b4D2cOKgK9oJI BncpquM/v9ZsqLhGW2kXsr6xdr/uh2wdnkn4ZQiwQzKLQygj+h4EFl7CgVxvWIjF BSJFojvuZir+GLkTkUYinoFZiJPSMUC+iQgIUmObmjsZnUWxvpPOrV6a7vTp3YPV 2tfL96cvT9HEPw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:32 2025 by rpki-client