This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft File: WqKpJUebz8vBloipUqJDAfTnaDk.mft (raw, json) Hash identifier: o2GbGmWdTg9y/gpTbe8gSQS+ROK2qKZb+xeQ5jVoi8E= Subject key identifier: 02:42:21:30:BD:10:10:B7:38:8B:E7:8E:4D:49:4D:1D:C7:C3:F2:10 Authority key identifier: 5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39 Certificate issuer: /CN=5aa2a925479bcfcbc19688a952a24301f4e76839 Certificate serial: 019B1B0490BE2D2D8444BE578A16AFB83946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft Manifest number: 08CE Signing time: Sun 14 Dec 2025 04:00:42 +0000 Manifest this update: Sun 14 Dec 2025 04:00:42 +0000 Manifest next update: Mon 15 Dec 2025 04:00:42 +0000 Files and hashes: 1: WqKpJUebz8vBloipUqJDAfTnaDk.crl (hash: AplXsv8LpzsNvst9Fujb4AxDHTzyC3fJ6gRctZ9Osvg=) 2: jYQY-U25B3NSBy3Axt-DvgoJjdQ.roa (hash: zP4WnXpWxsW1++MaE9e5/n5ALBQb36qRJjvWEAaaUiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:04:90:be:2d:2d:84:44:be:57:8a:16:af:b8:39:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa2a925479bcfcbc19688a952a24301f4e76839 Validity Not Before: Dec 14 04:00:42 2025 GMT Not After : Dec 15 04:00:42 2025 GMT Subject: CN=02422130bd1010b7388be78e4d494d1dc7c3f210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:cc:6e:e8:8c:da:66:08:f6:43:17:a4:78: 1f:8e:65:0b:e4:e5:82:1e:ac:34:b2:29:12:ac:31: 51:d0:6d:d2:59:35:2f:e4:45:f9:3e:80:28:d7:4c: 7c:33:db:02:14:ae:34:1d:f4:29:5f:2f:83:ff:e0: 79:c0:94:6c:71:d5:bc:29:1e:11:a4:d9:65:90:23: ee:c8:f0:79:50:b7:7c:dd:32:96:a6:00:d6:5c:64: c4:dc:eb:ad:1f:1c:66:68:72:45:62:62:65:42:88: d4:b5:5c:bd:c0:f8:f0:59:de:4b:e0:91:b2:44:bf: 1a:e4:18:f1:8c:a6:83:83:40:6b:fa:59:fd:09:24: a5:7c:a0:0c:66:85:02:f1:32:28:7c:fc:83:6f:2d: cd:24:b5:1d:c8:80:01:b4:73:29:ab:69:06:12:c5: 79:07:9f:4f:37:6d:20:25:34:01:97:b5:22:f3:88: 12:63:27:63:12:04:aa:01:db:08:36:a5:62:0c:e5: 4f:43:11:c6:d5:af:9b:63:a4:3b:c5:40:a7:93:82: 94:58:15:fb:41:ff:bb:5f:63:b8:bc:32:b1:2d:ee: 40:c2:be:7c:9d:10:3a:0f:d5:61:8b:1a:d0:33:98: 71:c7:96:6b:79:7c:f7:c5:cb:fc:92:ea:2f:78:45: d5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:21:30:BD:10:10:B7:38:8B:E7:8E:4D:49:4D:1D:C7:C3:F2:10 X509v3 Authority Key Identifier: keyid:5A:A2:A9:25:47:9B:CF:CB:C1:96:88:A9:52:A2:43:01:F4:E7:68:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqKpJUebz8vBloipUqJDAfTnaDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0a030f-abb5-4e37-96a3-b4f120122922/1/WqKpJUebz8vBloipUqJDAfTnaDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a9:df:7f:3b:d3:58:ce:85:55:74:e7:c8:5d:02:06:6b:39: 3e:43:b9:dd:ed:af:be:4c:8d:a9:4e:58:29:b2:76:f6:1b:51: e4:77:09:2c:92:9e:d9:d2:8d:5b:a4:e3:c3:97:05:b1:f8:f4: 9a:70:0a:38:4d:65:12:cc:5f:24:8b:b3:f2:25:4c:fa:48:7c: ba:70:e1:55:18:2f:a6:80:d2:f7:ea:52:6d:10:8a:e0:5d:a7: 7f:20:a9:fc:ff:88:f6:26:c1:8b:e6:ab:da:c3:07:de:de:96: 8b:a5:46:47:53:df:b9:4b:fc:b3:57:40:00:45:d0:4f:d0:b3: 9a:c6:d5:54:aa:d4:bb:88:36:07:50:6f:4b:8e:a7:df:1f:f3: fb:10:3e:43:5a:4c:7a:be:88:bb:a1:5f:07:de:ca:c9:db:1f: d7:4e:e3:da:0f:15:bb:2b:df:e7:01:90:89:ce:94:52:81:a7: d8:c1:4c:c8:ec:84:4f:17:ed:11:92:6d:58:7d:d3:6e:eb:0e: 1f:38:47:01:04:d3:d7:c0:b5:93:3c:b3:f4:24:0e:96:10:2a: 1b:e9:46:66:7e:ca:33:6a:8a:06:4c:5e:84:f9:06:d7:82:61: 87:e4:e9:a4:f9:0c:5c:76:9f:f9:76:40:1b:f2:90:79:a1:ab: 8d:f9:78:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbBJC+LS2ERL5XihavuDlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTJhOTI1NDc5YmNmY2JjMTk2ODhhOTUyYTI0MzAxZjRl NzY4MzkwHhcNMjUxMjE0MDQwMDQyWhcNMjUxMjE1MDQwMDQyWjAzMTEwLwYDVQQD EygwMjQyMjEzMGJkMTAxMGI3Mzg4YmU3OGU0ZDQ5NGQxZGM3YzNmMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYDMbuiM2mYI9kMXpHgfjmUL5OWC Hqw0sikSrDFR0G3SWTUv5EX5PoAo10x8M9sCFK40HfQpXy+D/+B5wJRscdW8KR4R pNllkCPuyPB5ULd83TKWpgDWXGTE3OutHxxmaHJFYmJlQojUtVy9wPjwWd5L4JGy RL8a5BjxjKaDg0Br+ln9CSSlfKAMZoUC8TIofPyDby3NJLUdyIABtHMpq2kGEsV5 B59PN20gJTQBl7Ui84gSYydjEgSqAdsINqViDOVPQxHG1a+bY6Q7xUCnk4KUWBX7 Qf+7X2O4vDKxLe5Awr58nRA6D9VhixrQM5hxx5ZreXz3xcv8kuoveEXVpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJCITC9EBC3OIvnjk1JTR3Hw/IQMB8GA1UdIwQY MBaAFFqiqSVHm8/LwZaIqVKiQwH052g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FLcEpVZWJ6OHZCbG9pcFVxSkRBZlRuYURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8wYTAzMGYtYWJiNS00ZTM3LTk2YTMt YjRmMTIwMTIyOTIyLzEvV3FLcEpVZWJ6OHZCbG9pcFVxSkRBZlRuYURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8wYTAzMGYtYWJiNS00ZTM3LTk2YTMtYjRmMTIwMTIyOTIy LzEvV3FLcEpVZWJ6OHZCbG9pcFVxSkRBZlRuYURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOanffzvT WM6FVXTnyF0CBms5PkO53e2vvkyNqU5YKbJ29htR5HcJLJKe2dKNW6Tjw5cFsfj0 mnAKOE1lEsxfJIuz8iVM+kh8unDhVRgvpoDS9+pSbRCK4F2nfyCp/P+I9ibBi+ar 2sMH3t6Wi6VGR1PfuUv8s1dAAEXQT9CzmsbVVKrUu4g2B1BvS46n3x/z+xA+Q1pM er6Iu6FfB97Kydsf107j2g8Vuyvf5wGQic6UUoGn2MFMyOyETxftEZJtWH3TbusO HzhHAQTT18C1kzyz9CQOlhAqG+lGZn7KM2qKBkxehPkG14Jhh+TppPkMXHaf+XZA G/KQeaGrjfl4QA== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:20 2025 by rpki-client