This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft File: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json) Hash identifier: 1Lf1mRN3Og0IhHao3SsgxuuG7vpvc+17Bk3NbFSMmZ8= Subject key identifier: 3B:6A:10:D1:DD:CE:8F:48:24:BA:31:25:DE:8F:B9:16:6F:76:23:45 Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 Certificate issuer: /CN=5b3358110dadf224e719914161731df5e56c4188 Certificate serial: 019AF3C03FDEF4DE922C9A45B6DE01270E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft Manifest number: 16D1 Signing time: Sat 06 Dec 2025 13:00:53 +0000 Manifest this update: Sat 06 Dec 2025 13:00:53 +0000 Manifest next update: Sun 07 Dec 2025 13:00:53 +0000 Files and hashes: 1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: WRFJU58IgcpT8ytaneN7g1OeZFakxhp23z2mC2MjB1g=) 2: p_8FvngKjmLITizbNldEoC6LGv4.roa (hash: N/fSzmwZu/FbuI0gwUdxFYVJzK7d4SGahDnYSUc+txs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3f:de:f4:de:92:2c:9a:45:b6:de:01:27:0e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b3358110dadf224e719914161731df5e56c4188 Validity Not Before: Dec 6 13:00:53 2025 GMT Not After : Dec 7 13:00:53 2025 GMT Subject: CN=3b6a10d1ddce8f4824ba3125de8fb9166f762345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a1:94:1d:88:68:7c:6f:d8:f9:a8:96:89:51: 37:31:d2:99:74:1e:6f:4b:01:ad:0c:bf:df:19:a2: 6c:72:0e:1d:c2:05:38:10:ed:c2:19:94:b0:23:fa: 98:c0:07:15:02:50:f0:9d:bf:2c:42:30:88:1e:97: ff:ee:8d:d9:de:40:65:c3:cf:54:60:d9:84:d2:d6: e4:6f:67:21:7c:0a:d5:21:da:59:2f:29:70:a8:cb: 87:56:ea:ae:7f:ad:c3:a9:71:33:ac:a5:55:0f:d1: fe:36:90:09:64:af:d7:e7:03:e0:c3:6d:70:2d:ac: 07:f9:c9:1b:1a:1f:6d:f6:7c:9d:90:7d:55:7a:51: a0:f2:36:67:35:0c:09:f0:65:6a:9d:60:5b:5e:23: 65:af:be:0b:8f:0d:3a:44:74:be:ba:df:77:90:50: 04:1d:c2:78:e6:1b:2d:28:bf:5d:ef:f7:2a:31:0a: 58:1d:9d:bc:34:71:3c:52:fd:d5:fa:f1:28:8e:14: c6:08:7f:92:be:1f:b9:75:c5:84:5d:49:25:f5:dd: 0e:e1:a0:7a:50:cc:4d:07:10:ca:c5:84:24:15:65: bf:6d:c4:fb:a8:ce:8f:44:8c:08:2a:15:c1:43:ec: 1d:9e:e1:41:37:8f:ef:35:ea:91:de:a3:db:d3:1c: 91:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6A:10:D1:DD:CE:8F:48:24:BA:31:25:DE:8F:B9:16:6F:76:23:45 X509v3 Authority Key Identifier: keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:c0:86:e5:9f:d9:34:63:66:07:45:2c:f1:e1:4c:d4:39:c0: dd:81:aa:4f:eb:b6:6d:69:46:8d:7f:7b:b3:65:4c:39:56:c5: 8c:5e:5e:cf:6c:80:ad:57:40:dd:db:6a:8e:da:4d:7a:df:63: cc:f1:63:85:cb:68:c1:9b:22:72:08:35:a9:f5:48:55:8c:18: 7c:9b:c0:7a:5c:79:5c:a2:ca:f8:19:3d:90:88:0b:cd:f8:cc: d5:ce:de:4d:81:d8:f8:b6:6f:e7:b2:4a:6c:77:f2:71:ac:82: 84:f5:8a:f6:6c:cb:4a:73:01:27:36:f5:44:48:7c:21:fb:17: db:04:52:91:96:8f:3f:32:63:53:d3:61:63:c2:a9:be:e9:88: 01:11:70:63:63:d5:8c:40:0a:4a:64:d0:9f:f1:4e:43:c2:74: fa:f3:d7:1e:b2:44:fe:f6:32:43:44:15:5c:e2:7d:7a:ed:a4: 80:98:57:23:c9:e0:b8:8d:07:b3:45:9c:01:70:7c:3e:ab:d0: d5:b1:cf:31:97:15:0b:35:63:09:62:ea:ab:c2:97:93:28:ef: f5:4c:35:af:1e:46:63:0f:60:df:d2:bd:c3:79:90:20:d8:01: d7:cf:6d:b1:15:dc:1b:77:1d:88:15:1a:87:9a:cc:da:9a:5f: 49:b3:58:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwD/e9N6SLJpFtt4BJw5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2 YzQxODgwHhcNMjUxMjA2MTMwMDUzWhcNMjUxMjA3MTMwMDUzWjAzMTEwLwYDVQQD EygzYjZhMTBkMWRkY2U4ZjQ4MjRiYTMxMjVkZThmYjkxNjZmNzYyMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqGUHYhofG/Y+aiWiVE3MdKZdB5v SwGtDL/fGaJscg4dwgU4EO3CGZSwI/qYwAcVAlDwnb8sQjCIHpf/7o3Z3kBlw89U YNmE0tbkb2chfArVIdpZLylwqMuHVuquf63DqXEzrKVVD9H+NpAJZK/X5wPgw21w LawH+ckbGh9t9nydkH1VelGg8jZnNQwJ8GVqnWBbXiNlr74Ljw06RHS+ut93kFAE HcJ45hstKL9d7/cqMQpYHZ28NHE8Uv3V+vEojhTGCH+Svh+5dcWEXUkl9d0O4aB6 UMxNBxDKxYQkFWW/bcT7qM6PRIwIKhXBQ+wdnuFBN4/vNeqR3qPb0xyRRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtqENHdzo9IJLoxJd6PuRZvdiNFMB8GA1UdIwQY MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8CG5Z/Z NGNmB0Us8eFM1DnA3YGqT+u2bWlGjX97s2VMOVbFjF5ez2yArVdA3dtqjtpNet9j zPFjhctowZsicgg1qfVIVYwYfJvAelx5XKLK+Bk9kIgLzfjM1c7eTYHY+LZv57JK bHfycayChPWK9mzLSnMBJzb1REh8IfsX2wRSkZaPPzJjU9NhY8KpvumIARFwY2PV jEAKSmTQn/FOQ8J0+vPXHrJE/vYyQ0QVXOJ9eu2kgJhXI8nguI0Hs0WcAXB8PqvQ 1bHPMZcVCzVjCWLqq8KXkyjv9Uw1rx5GYw9g39K9w3mQINgB189tsRXcG3cdiBUa h5rM2ppfSbNYyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:16 2025 by rpki-client