This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft File: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft (raw, json) Hash identifier: DklWIxH//zOfD+XAcmwnNqvOwL8qYQnwNHKTTbefQKQ= Subject key identifier: A9:50:E1:A1:45:8E:61:A9:AE:5E:70:F5:7C:7F:38:28:F1:D0:54:5A Authority key identifier: 58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B Certificate issuer: /CN=582ac3589fc539ab852690f85d9f3f7f234ec39b Certificate serial: 019B1CBC06942D35CEFFFEF81FDF7F680368 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft Manifest number: 0A01 Signing time: Sun 14 Dec 2025 12:00:42 +0000 Manifest this update: Sun 14 Dec 2025 12:00:42 +0000 Manifest next update: Mon 15 Dec 2025 12:00:42 +0000 Files and hashes: 1: PkwWwJkvXsUEh6Cv0L7IgIGfFS8.roa (hash: ldaxlOWxdPdxsizqAkQ8NMKwi+hD26UCyicpS3F4O+A=) 2: WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl (hash: eaSI+QtAKPsz2lX0XSxL8VpqvQER+yY/WVn/Qut9bYY=) 3: zlPIwjDPqeKD3uFdmxv9hznl_LA.roa (hash: sBzI0OQdYuCXwCE1xwy5akb2HUt9JvXsMA0Ia8KRcEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 12:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:06:94:2d:35:ce:ff:fe:f8:1f:df:7f:68:03:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582ac3589fc539ab852690f85d9f3f7f234ec39b Validity Not Before: Dec 14 12:00:42 2025 GMT Not After : Dec 15 12:00:42 2025 GMT Subject: CN=a950e1a1458e61a9ae5e70f57c7f3828f1d0545a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:ed:a0:56:93:38:56:d7:30:e0:1a:0d:58: 86:b6:4f:6a:bc:bc:cd:f1:56:f9:1b:39:2d:04:e2: 0d:ec:c5:a9:5c:7d:ea:16:57:d8:40:ef:64:7e:fe: 1d:88:49:f1:85:a8:57:9f:f9:bb:b1:19:f1:72:ca: 5c:b5:eb:76:8b:70:ea:74:bd:33:0b:3f:e9:ee:6a: 86:9d:2d:f9:30:cb:f0:45:92:b5:30:0f:0b:85:25: 64:43:c4:c5:61:21:26:aa:1b:ab:83:b3:44:24:bb: c6:0e:ea:da:af:aa:87:bc:aa:b8:79:18:4e:e5:6f: 70:74:d1:7c:dd:42:78:80:f2:41:03:b1:19:6d:48: 88:69:c0:7c:7d:31:ae:90:24:07:5c:72:1a:1f:78: c0:14:e8:e2:23:d4:21:b2:61:2c:a6:bb:8b:52:0f: c9:97:01:d7:42:fe:a1:70:8d:f1:6a:f8:5e:69:c3: 17:38:a6:12:08:0e:14:a2:c9:28:d6:3e:7e:9e:f4: ad:95:c9:ad:59:fe:b3:07:af:a3:e0:ed:5d:31:f0: 50:07:61:be:5e:0c:2b:3d:c9:0a:75:b2:c4:e0:49: c0:03:fa:60:15:3e:78:26:57:65:12:7e:58:83:b5: a0:5c:75:10:f7:e2:c1:4e:57:c5:35:fa:91:7f:79: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:50:E1:A1:45:8E:61:A9:AE:5E:70:F5:7C:7F:38:28:F1:D0:54:5A X509v3 Authority Key Identifier: keyid:58:2A:C3:58:9F:C5:39:AB:85:26:90:F8:5D:9F:3F:7F:23:4E:C3:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/0015d3-1b21-4e55-850b-674328d52bd7/1/WCrDWJ_FOauFJpD4XZ8_fyNOw5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:4c:35:9f:ac:37:78:b0:42:64:55:6b:97:70:47:0f:d3:3d: 64:4f:fd:9e:9d:39:52:f0:21:3d:8e:a9:c9:70:c6:f8:a3:73: db:94:3f:6c:e5:cf:b5:fc:43:dc:8b:1f:1c:a0:d5:be:35:2f: 91:8c:46:67:16:1b:6d:1a:df:62:c7:ad:aa:b0:b6:09:bd:0c: 5e:ed:3a:33:cb:4c:90:81:15:d2:c8:15:be:85:51:a9:65:15: 83:1a:0f:51:62:b4:37:a5:2c:9f:57:59:fb:14:6e:67:3c:79: 05:81:75:9b:16:73:31:21:13:3f:0e:5e:29:47:6d:dc:98:9d: 65:96:42:3f:84:b4:f1:7c:3f:60:42:64:ec:65:c8:38:78:80: df:ee:fb:fb:ba:0d:6f:47:f8:11:08:6c:8a:b0:0e:a5:5e:41: 58:95:9f:12:f9:53:29:e1:47:95:b2:eb:b5:21:1c:bd:c8:4c: ec:34:7f:5d:7b:8c:82:64:16:b8:de:ff:c6:56:e8:67:28:92: 38:b1:8a:1c:a7:31:2d:e5:ad:35:c1:1c:20:13:af:2a:bd:c6: 53:96:d6:67:d5:3f:25:12:be:a1:b7:2d:cd:ea:e9:7c:23:b8: d3:ac:fc:6e:a3:8b:11:8a:29:a1:f6:27:f1:3e:14:25:b4:26: 7c:8b:e5:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvAaULTXO//74H99/aANoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmFjMzU4OWZjNTM5YWI4NTI2OTBmODVkOWYzZjdmMjM0 ZWMzOWIwHhcNMjUxMjE0MTIwMDQyWhcNMjUxMjE1MTIwMDQyWjAzMTEwLwYDVQQD EyhhOTUwZTFhMTQ1OGU2MWE5YWU1ZTcwZjU3YzdmMzgyOGYxZDA1NDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzjtoFaTOFbXMOAaDViGtk9qvLzN 8Vb5GzktBOIN7MWpXH3qFlfYQO9kfv4diEnxhahXn/m7sRnxcspctet2i3DqdL0z Cz/p7mqGnS35MMvwRZK1MA8LhSVkQ8TFYSEmqhurg7NEJLvGDurar6qHvKq4eRhO 5W9wdNF83UJ4gPJBA7EZbUiIacB8fTGukCQHXHIaH3jAFOjiI9QhsmEspruLUg/J lwHXQv6hcI3xavheacMXOKYSCA4Uosko1j5+nvStlcmtWf6zB6+j4O1dMfBQB2G+ XgwrPckKdbLE4EnAA/pgFT54JldlEn5Yg7WgXHUQ9+LBTlfFNfqRf3kg9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlQ4aFFjmGprl5w9Xx/OCjx0FRaMB8GA1UdIwQY MBaAFFgqw1ifxTmrhSaQ+F2fP38jTsObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGIt Njc0MzI4ZDUyYmQ3LzEvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8wMDE1ZDMtMWIyMS00ZTU1LTg1MGItNjc0MzI4ZDUyYmQ3 LzEvV0NyRFdKX0ZPYXVGSnBENFhaOF9meU5PdzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUw1n6w3 eLBCZFVrl3BHD9M9ZE/9np05UvAhPY6pyXDG+KNz25Q/bOXPtfxD3IsfHKDVvjUv kYxGZxYbbRrfYsetqrC2Cb0MXu06M8tMkIEV0sgVvoVRqWUVgxoPUWK0N6Usn1dZ +xRuZzx5BYF1mxZzMSETPw5eKUdt3JidZZZCP4S08Xw/YEJk7GXIOHiA3+77+7oN b0f4EQhsirAOpV5BWJWfEvlTKeFHlbLrtSEcvchM7DR/XXuMgmQWuN7/xlboZyiS OLGKHKcxLeWtNcEcIBOvKr3GU5bWZ9U/JRK+obctzerpfCO406z8bqOLEYopofYn 8T4UJbQmfIvlOg== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:25 2025 by rpki-client