This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json) Hash identifier: 7dEnm9qHV6Bzpq6L9q8H7TJ0jze4Ojg6yYmXqAgtLA0= Subject key identifier: 86:2A:5D:BB:AD:53:AD:E7:C7:70:CC:7A:95:95:B9:0B:24:1A:DC:B2 Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc Certificate serial: 019B5A517B892DC83F04DBB3F2AB6370EDCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft Manifest number: 0A68 Signing time: Fri 26 Dec 2025 11:00:48 +0000 Manifest this update: Fri 26 Dec 2025 11:00:48 +0000 Manifest next update: Sat 27 Dec 2025 11:00:48 +0000 Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: GBNp9bNfI+rXXZEWWnDCkXqlr1rDLQJwENBna/ew2tc=) 2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:7b:89:2d:c8:3f:04:db:b3:f2:ab:63:70:ed:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc Validity Not Before: Dec 26 11:00:48 2025 GMT Not After : Dec 27 11:00:48 2025 GMT Subject: CN=862a5dbbad53ade7c770cc7a9595b90b241adcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:99:cd:1d:98:ce:7d:dc:77:b5:af:14:e0:39: fd:15:ae:7c:4a:c5:d7:ce:bc:03:13:9c:f9:62:a5: ea:8a:df:df:44:04:2a:b3:e2:2f:ae:93:1b:da:a7: 0e:25:59:76:3c:57:9c:f1:b1:a5:c4:1d:dc:59:1d: f5:5f:18:64:dd:e8:2b:5b:35:9d:ba:66:3d:e0:fb: 19:49:d9:a0:7a:8a:d7:06:40:48:e2:d5:68:be:6d: 81:9c:40:f2:fb:1f:f2:2d:94:59:14:04:50:11:10: 53:0c:f3:47:7d:c3:e0:8c:5f:e4:36:18:94:55:8b: dc:bc:2d:05:b3:3f:aa:0c:70:bb:54:92:0a:91:c8: 07:af:14:b6:85:6a:82:12:dd:ee:db:63:f8:c4:b1: 4b:58:fa:33:2f:24:0e:08:b7:ba:48:29:46:03:f6: 81:33:b0:d2:bc:32:db:10:f8:87:2c:d8:be:6f:59: cc:dd:20:f0:99:45:aa:58:6c:19:55:3d:90:a3:a6: 53:0a:6a:fa:a2:0a:73:49:6d:76:f2:00:d7:57:ce: 46:24:ca:f7:60:6a:de:04:b4:9a:0c:da:ec:a7:b9: f9:62:00:d6:5e:6c:f2:fe:3c:4e:4c:27:fe:4d:b8: 7b:dd:25:b5:27:8b:71:fd:d2:1c:fa:d1:25:63:97: 12:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2A:5D:BB:AD:53:AD:E7:C7:70:CC:7A:95:95:B9:0B:24:1A:DC:B2 X509v3 Authority Key Identifier: keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:92:fb:15:90:fc:99:6d:ba:3f:7f:88:6e:fd:0e:6f:53:c9: 6b:df:f7:50:44:4c:37:2d:a3:9a:b7:99:cb:58:66:8f:45:51: 9c:52:81:5a:31:84:68:17:a4:cb:5f:b0:54:b9:1e:df:99:c7: 94:a5:06:2a:ed:e6:56:c5:8b:35:fd:4f:7f:bf:10:8b:58:2d: f3:0e:0e:28:3c:ca:12:ef:df:4e:95:84:98:48:17:b5:e1:d7: 7f:f9:90:e2:63:fb:87:87:fd:fb:d4:e8:6c:dc:0f:2a:ea:2c: b3:29:71:d0:93:67:3b:a4:06:f2:ee:6b:14:ba:a1:64:dd:e2: 24:cd:87:ad:bc:8b:8e:87:22:df:58:2f:79:2b:d7:70:ce:e8: 6c:1c:4e:5a:39:63:15:c9:76:57:26:52:0b:76:a5:58:6e:a8: 18:91:21:59:35:49:83:b2:03:3a:47:b9:b6:71:0e:3c:d7:1d: 83:14:f8:b5:fa:e3:76:c7:b9:16:6c:4c:6b:26:73:29:8a:fa: a0:83:69:9d:13:ec:2e:7b:2b:11:a1:df:62:7d:08:e7:19:5b: b9:6c:80:7c:78:f0:8d:39:9a:64:5a:70:5f:ac:06:1f:1c:d3: 5d:ec:ec:23:9f:54:8b:d7:ea:c2:a8:28:89:80:f8:40:70:e0: 6e:02:55:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUXuJLcg/BNuz8qtjcO3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDJjYTgxYjlmMGE5NzEzYjA5OTY4N2RjODE1NTFjNDVl M2Y4ZmMwHhcNMjUxMjI2MTEwMDQ4WhcNMjUxMjI3MTEwMDQ4WjAzMTEwLwYDVQQD Eyg4NjJhNWRiYmFkNTNhZGU3Yzc3MGNjN2E5NTk1YjkwYjI0MWFkY2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZnNHZjOfdx3ta8U4Dn9Fa58SsXX zrwDE5z5YqXqit/fRAQqs+IvrpMb2qcOJVl2PFec8bGlxB3cWR31Xxhk3egrWzWd umY94PsZSdmgeorXBkBI4tVovm2BnEDy+x/yLZRZFARQERBTDPNHfcPgjF/kNhiU VYvcvC0Fsz+qDHC7VJIKkcgHrxS2hWqCEt3u22P4xLFLWPozLyQOCLe6SClGA/aB M7DSvDLbEPiHLNi+b1nM3SDwmUWqWGwZVT2Qo6ZTCmr6ogpzSW128gDXV85GJMr3 YGreBLSaDNrsp7n5YgDWXmzy/jxOTCf+Tbh73SW1J4tx/dIc+tElY5cS8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYqXbutU63nx3DMepWVuQskGtyyMB8GA1UdIwQY MBaAFFoCyoG58KlxOwmWh9yBVRxF4/j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2Mt NDU5ZGRjNjMxYmNjLzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2MtNDU5ZGRjNjMxYmNj LzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZL7FZD8 mW26P3+Ibv0Ob1PJa9/3UERMNy2jmreZy1hmj0VRnFKBWjGEaBeky1+wVLke35nH lKUGKu3mVsWLNf1Pf78Qi1gt8w4OKDzKEu/fTpWEmEgXteHXf/mQ4mP7h4f9+9To bNwPKuossylx0JNnO6QG8u5rFLqhZN3iJM2HrbyLjoci31gveSvXcM7obBxOWjlj Fcl2VyZSC3alWG6oGJEhWTVJg7IDOke5tnEOPNcdgxT4tfrjdse5FmxMayZzKYr6 oINpnRPsLnsrEaHfYn0I5xlbuWyAfHjwjTmaZFpwX6wGHxzTXezsI59Ui9fqwqgo iYD4QHDgbgJV3Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:19 2025 by rpki-client