This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
File: WtlDpBzifnt7z9_2monD4zfqY7U.mft (raw, json)
Hash identifier: RWRk+jH71ZzVAVxvUdw568gH27N/bXydNZNLvixMWHs=
Subject key identifier: 05:7C:40:52:9A:DC:C8:A1:F9:54:9F:B2:68:12:69:45:B3:F8:51:11
Authority key identifier: 5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
Certificate issuer: /CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Certificate serial: 019AF2E434D9AB4C458917338C0D1F7CB772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
Manifest number: 0970
Signing time: Sat 06 Dec 2025 09:00:33 +0000
Manifest this update: Sat 06 Dec 2025 09:00:33 +0000
Manifest next update: Sun 07 Dec 2025 09:00:33 +0000
Files and hashes: 1: CrZg-KF8Q9A22OHJJHctF4UJ8vA.roa (hash: TgN9LzFg5B6mAl/H8RLYxQOgYmdpxQcOV4fT/DnUDn0=)
2: SQ2_vb8pZ2pKG_CAnGQ99aAzhXc.roa (hash: BeWy+dlaJycBkNeRNkXcy0pfdCOJIP2bN9zt/qAhbUY=)
3: WtlDpBzifnt7z9_2monD4zfqY7U.crl (hash: BAtwjmahEu4kNoFw84ajbdDuG9hhnjUfT4m5p/OI/xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f2:e4:34:d9:ab:4c:45:89:17:33:8c:0d:1f:7c:b7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad943a41ce27e7b7bcfdff69a89c3e337ea63b5
Validity
Not Before: Dec 6 09:00:33 2025 GMT
Not After : Dec 7 09:00:33 2025 GMT
Subject: CN=057c40529adcc8a1f9549fb268126945b3f85111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:68:51:e1:0c:64:e9:53:fa:78:7d:a9:98:
7c:dc:e2:36:89:b1:b0:ff:10:d3:39:9f:b9:00:80:
7f:b6:e8:9d:1d:af:b2:4a:49:47:24:7e:6e:c8:a4:
96:eb:f5:28:41:1e:17:6d:e8:0a:86:45:7f:1b:19:
10:53:3f:48:30:ad:45:6e:11:0e:24:1d:b6:4e:0b:
dd:37:4d:ec:c3:17:57:d7:7b:60:5b:23:30:87:b5:
00:10:a3:06:12:52:c8:e5:20:9c:60:21:e1:4e:97:
7e:69:8b:b0:52:10:15:f1:43:a8:21:2e:8c:87:4f:
80:10:fd:b7:e9:34:bf:60:34:5a:62:90:8b:09:02:
78:af:ae:99:71:0b:0f:d3:0a:0c:22:0f:23:d4:e0:
63:d0:5e:c4:11:6b:e3:7d:51:b9:17:82:50:6b:87:
e2:c8:c8:e4:a1:4a:64:2f:e5:5d:42:c6:7e:6c:3a:
b6:eb:f1:6c:60:bb:29:f5:43:59:ae:e5:89:bf:21:
d3:fa:1f:48:d4:76:ba:7f:30:3a:69:f9:9b:56:9f:
b1:5b:78:0d:52:74:a0:92:1a:81:d9:93:3f:7f:a1:
f1:09:4b:3e:1f:80:34:c5:c5:51:3d:1a:dd:5b:62:
32:95:41:dc:9b:70:6b:ce:f1:ea:8d:7c:e8:68:10:
68:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7C:40:52:9A:DC:C8:A1:F9:54:9F:B2:68:12:69:45:B3:F8:51:11
X509v3 Authority Key Identifier:
keyid:5A:D9:43:A4:1C:E2:7E:7B:7B:CF:DF:F6:9A:89:C3:E3:37:EA:63:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtlDpBzifnt7z9_2monD4zfqY7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/21b7ce-2ec6-479e-8a4d-84f90593913c/1/WtlDpBzifnt7z9_2monD4zfqY7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:54:de:9b:85:e9:40:7d:b6:78:f9:c9:c2:6e:83:a4:cc:1e:
2e:ca:a5:70:35:0b:d0:06:01:81:b4:d3:51:5a:a4:92:b5:c7:
6a:c1:f0:ee:cf:fa:cf:76:06:73:d4:62:bd:06:90:b6:ca:cc:
11:cf:1c:6e:d9:47:98:b5:dc:70:b3:cf:f4:5c:6b:e7:67:7e:
c1:e8:fa:f0:3b:a4:cc:18:e1:5a:51:eb:ca:02:50:3a:b4:56:
15:66:e9:47:60:0e:c7:f9:ae:1b:f8:f9:13:41:44:68:96:44:
90:29:76:97:91:3d:ee:90:08:d1:8e:3d:58:37:f3:36:f6:83:
3f:d4:c1:26:7e:09:da:99:75:65:df:c8:46:ff:6b:b0:c5:bb:
c6:88:f6:8c:43:63:cc:b4:ee:48:ba:e8:22:6e:dd:2a:23:9b:
2e:31:3c:ac:80:42:83:d0:a9:4e:7b:48:87:ee:e4:a2:a6:cf:
48:d8:a7:35:42:b6:7d:4b:4a:8b:ec:1d:0c:da:ca:d3:c0:af:
33:42:83:26:56:e0:48:ce:88:e0:87:2f:aa:e5:1b:cb:80:46:
f8:7d:68:d4:1e:6a:8a:34:8a:f8:5d:11:5d:be:e3:12:7e:e2:
33:f8:ee:05:ab:9d:87:ae:b5:97:2d:ba:36:3d:40:6a:95:f1:
dd:57:d7:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZry5DTZq0xFiRczjA0ffLdyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDk0M2E0MWNlMjdlN2I3YmNmZGZmNjlhODljM2UzMzdl
YTYzYjUwHhcNMjUxMjA2MDkwMDMzWhcNMjUxMjA3MDkwMDMzWjAzMTEwLwYDVQQD
EygwNTdjNDA1MjlhZGNjOGExZjk1NDlmYjI2ODEyNjk0NWIzZjg1MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHloUeEMZOlT+nh9qZh83OI2ibGw
/xDTOZ+5AIB/tuidHa+ySklHJH5uyKSW6/UoQR4XbegKhkV/GxkQUz9IMK1FbhEO
JB22TgvdN03swxdX13tgWyMwh7UAEKMGElLI5SCcYCHhTpd+aYuwUhAV8UOoIS6M
h0+AEP236TS/YDRaYpCLCQJ4r66ZcQsP0woMIg8j1OBj0F7EEWvjfVG5F4JQa4fi
yMjkoUpkL+VdQsZ+bDq26/FsYLsp9UNZruWJvyHT+h9I1Ha6fzA6afmbVp+xW3gN
UnSgkhqB2ZM/f6HxCUs+H4A0xcVRPRrdW2IylUHcm3BrzvHqjXzoaBBoVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAV8QFKa3Mih+VSfsmgSaUWz+FERMB8GA1UdIwQY
MBaAFFrZQ6Qc4n57e8/f9pqJw+M36mO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQt
ODRmOTA1OTM5MTNjLzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yMWI3Y2UtMmVjNi00NzllLThhNGQtODRmOTA1OTM5MTNj
LzEvV3RsRHBCemlmbnQ3ejlfMm1vbkQ0emZxWTdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZFTem4Xp
QH22ePnJwm6DpMweLsqlcDUL0AYBgbTTUVqkkrXHasHw7s/6z3YGc9RivQaQtsrM
Ec8cbtlHmLXccLPP9Fxr52d+wej68DukzBjhWlHrygJQOrRWFWbpR2AOx/muG/j5
E0FEaJZEkCl2l5E97pAI0Y49WDfzNvaDP9TBJn4J2pl1Zd/IRv9rsMW7xoj2jENj
zLTuSLroIm7dKiObLjE8rIBCg9CpTntIh+7koqbPSNinNUK2fUtKi+wdDNrK08Cv
M0KDJlbgSM6I4IcvquUby4BG+H1o1B5qijSK+F0RXb7jEn7iM/juBaudh661ly26
Nj1AapXx3VfXMg==
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:54:39 2025 by rpki-client