This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft File: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft (raw, json) Hash identifier: tvgM0br7A7jDti3MH3LIecHIRL6T/g1cyEcM4WBo/a8= Subject key identifier: 5E:17:74:A2:1F:EC:59:99:25:5D:74:2F:49:DA:5B:E7:F7:CB:BA:7B Authority key identifier: 5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C Certificate issuer: /CN=5aae19678aa37525512229a94e7890147183273c Certificate serial: 019B48F08D77509EBF1737F851E11DE4A55C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft Manifest number: 1763 Signing time: Tue 23 Dec 2025 02:01:22 +0000 Manifest this update: Tue 23 Dec 2025 02:01:22 +0000 Manifest next update: Wed 24 Dec 2025 02:01:22 +0000 Files and hashes: 1: 0ehbELwlxIROAJUXnHI7q0hHZvU.roa (hash: I3OhyXjmUaPoDinsu8stBnr83W6cuJYkPeqcRDRwksw=) 2: Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl (hash: AByg1KtIkJb8Fo0xo/dpFPg98zZuDm0xOXPh5QPfUQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:f0:8d:77:50:9e:bf:17:37:f8:51:e1:1d:e4:a5:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aae19678aa37525512229a94e7890147183273c Validity Not Before: Dec 23 02:01:22 2025 GMT Not After : Dec 24 02:01:22 2025 GMT Subject: CN=5e1774a21fec5999255d742f49da5be7f7cbba7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:27:7d:70:c1:7c:8a:ec:f4:48:5c:4e:44: 7c:5b:48:be:1c:db:ba:06:2d:26:a4:61:b4:c1:b8: 82:98:32:7e:4e:cd:65:2d:40:a7:fa:f8:56:b9:6f: c2:1a:45:b1:85:ee:0c:c7:4e:df:91:f0:22:86:39: 41:1e:42:ce:32:3a:aa:af:cb:2d:d5:68:21:22:69: 51:6b:70:f0:cc:d3:c7:94:95:1e:ec:27:f2:35:7b: 18:92:e9:da:07:d1:67:7f:02:8f:69:83:29:c7:8b: eb:0a:01:2b:75:48:f5:81:cf:a9:8e:08:06:84:93: 87:39:07:0e:1d:e8:49:38:28:db:b1:52:23:0b:26: 3b:86:fd:2d:90:c9:22:59:cf:ff:b6:0e:c5:70:22: b2:e7:58:62:aa:9a:40:b7:8b:89:a6:47:93:37:a6: 2c:dd:81:94:b5:06:11:1e:dd:b3:34:47:bb:2f:22: c2:fc:c9:3d:7b:58:bb:43:0e:d3:b5:d9:32:0a:72: aa:c9:8b:e6:2c:73:f5:4a:02:d7:cd:d1:6b:09:54: fb:65:89:5a:8a:9e:f8:46:fa:2f:2f:22:65:17:ac: da:fe:5d:c0:64:3f:ff:11:fc:ea:72:1c:ac:44:9e: 3e:2a:d1:aa:62:68:a1:80:94:7d:a5:91:c1:e4:86: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:17:74:A2:1F:EC:59:99:25:5D:74:2F:49:DA:5B:E7:F7:CB:BA:7B X509v3 Authority Key Identifier: keyid:5A:AE:19:67:8A:A3:75:25:51:22:29:A9:4E:78:90:14:71:83:27:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8a90d9-948a-46c2-977a-643f02daeb9e/1/Wq4ZZ4qjdSVRIimpTniQFHGDJzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fb:71:82:bc:bc:33:40:3d:a9:fa:32:c8:d7:fa:91:46:2c: 25:b7:c7:e7:71:e4:09:77:89:b1:4d:c2:be:24:bd:db:c5:43: 60:56:65:d7:57:7f:4b:f1:25:88:b9:8b:49:99:a3:25:81:cb: 6e:8c:7d:05:0c:33:0b:3c:7e:19:57:f2:28:24:54:f5:1c:d0: c7:ca:35:30:4a:64:6b:21:74:4d:0c:99:2f:0e:7a:26:c3:68: 63:53:d8:24:98:21:b2:8d:a2:23:ff:df:93:64:01:1e:0f:0f: f5:22:4d:85:d0:c2:8c:c7:bd:d5:83:5a:69:85:11:74:30:57: e3:4f:b5:73:d9:1b:ee:4f:2f:fa:69:7d:3e:a1:ed:4c:b2:4e: 02:8f:c6:72:67:e1:a8:24:55:d0:c8:05:aa:36:c3:54:b3:bb: fb:f3:5e:07:1b:36:14:c0:53:e3:41:47:19:f9:67:e5:41:22: bc:5d:1b:27:ec:ec:65:57:94:69:9b:da:1c:48:6d:6e:d6:56: 69:3c:68:6f:a2:bd:78:f9:d8:f1:8a:0e:c5:86:94:2f:c0:37: c3:a5:ed:cf:f4:da:0c:d6:a1:99:03:76:17:bc:68:70:f1:72: 57:c3:a1:cf:18:da:dd:26:e0:4c:eb:f2:45:a4:65:84:e0:33: 36:45:44:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtI8I13UJ6/Fzf4UeEd5KVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWUxOTY3OGFhMzc1MjU1MTIyMjlhOTRlNzg5MDE0NzE4 MzI3M2MwHhcNMjUxMjIzMDIwMTIyWhcNMjUxMjI0MDIwMTIyWjAzMTEwLwYDVQQD Eyg1ZTE3NzRhMjFmZWM1OTk5MjU1ZDc0MmY0OWRhNWJlN2Y3Y2JiYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWsnfXDBfIrs9EhcTkR8W0i+HNu6 Bi0mpGG0wbiCmDJ+Ts1lLUCn+vhWuW/CGkWxhe4Mx07fkfAihjlBHkLOMjqqr8st 1WghImlRa3DwzNPHlJUe7CfyNXsYkunaB9FnfwKPaYMpx4vrCgErdUj1gc+pjggG hJOHOQcOHehJOCjbsVIjCyY7hv0tkMkiWc//tg7FcCKy51hiqppAt4uJpkeTN6Ys 3YGUtQYRHt2zNEe7LyLC/Mk9e1i7Qw7TtdkyCnKqyYvmLHP1SgLXzdFrCVT7ZYla ip74RvovLyJlF6za/l3AZD//EfzqchysRJ4+KtGqYmihgJR9pZHB5IbkRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4XdKIf7FmZJV10L0naW+f3y7p7MB8GA1UdIwQY MBaAFFquGWeKo3UlUSIpqU54kBRxgyc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2Et NjQzZjAyZGFlYjllLzEvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84YTkwZDktOTQ4YS00NmMyLTk3N2EtNjQzZjAyZGFlYjll LzEvV3E0Wlo0cWpkU1ZSSWltcFRuaVFGSEdESnp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/txgry8 M0A9qfoyyNf6kUYsJbfH53HkCXeJsU3CviS928VDYFZl11d/S/EliLmLSZmjJYHL box9BQwzCzx+GVfyKCRU9RzQx8o1MEpkayF0TQyZLw56JsNoY1PYJJghso2iI//f k2QBHg8P9SJNhdDCjMe91YNaaYURdDBX40+1c9kb7k8v+ml9PqHtTLJOAo/Gcmfh qCRV0MgFqjbDVLO7+/NeBxs2FMBT40FHGfln5UEivF0bJ+zsZVeUaZvaHEhtbtZW aTxob6K9ePnY8YoOxYaUL8A3w6Xtz/TaDNahmQN2F7xocPFyV8Ohzxja3SbgTOvy RaRlhOAzNkVEUw== -----END CERTIFICATE-----Generated at Tue Dec 23 07:48:03 2025 by rpki-client