This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft File: wgBqzAX53EUeoNROhyfbRwuSh5Q.mft (raw, json) Hash identifier: 9QyNobDTjJTs+vT3IUCMfvNeNCk2adNyySxVrm4zUsI= Subject key identifier: 46:94:47:F8:93:15:50:EB:B6:71:5A:2A:13:B7:EF:92:FF:C0:08:A1 Authority key identifier: C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94 Certificate issuer: /CN=c2006acc05f9dc451ea0d44e8727db470b928794 Certificate serial: 019B5ABF3EF623912439DF10ED1241F4AE69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft Manifest number: 90 Signing time: Fri 26 Dec 2025 13:00:41 +0000 Manifest this update: Fri 26 Dec 2025 13:00:41 +0000 Manifest next update: Sat 27 Dec 2025 13:00:41 +0000 Files and hashes: 1: 3hz5ahXW_cZwqkugxIaH-nqOVCg.roa (hash: nyivPGE2o7vY4ANffkjrKsm1M5UAi4P4q6Wm8KRHgq8=) 2: wgBqzAX53EUeoNROhyfbRwuSh5Q.crl (hash: Ce0Equ7kqsPEL6XJ4tj6CqxHuw7Ex6105g4MbXLS8p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:3e:f6:23:91:24:39:df:10:ed:12:41:f4:ae:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2006acc05f9dc451ea0d44e8727db470b928794 Validity Not Before: Dec 26 13:00:41 2025 GMT Not After : Dec 27 13:00:41 2025 GMT Subject: CN=469447f8931550ebb6715a2a13b7ef92ffc008a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:01:13:8e:df:f6:d7:f7:3d:0d:53:18:ab: c8:ee:d2:26:be:5f:33:0a:45:c9:7f:27:96:4f:c8: 4e:ce:78:64:fe:c2:18:ce:d4:55:72:6f:20:b9:e2: 88:75:5f:3a:ad:61:00:9b:f1:51:76:bd:a1:ba:8d: 6f:da:42:af:0d:87:dd:34:7e:c4:f4:5b:1b:2a:ec: 7f:d5:b1:ef:af:cb:30:c3:34:87:60:be:64:5d:a9: 1b:53:4e:bf:07:79:39:15:36:f3:c3:1f:c6:ed:d0: 18:67:60:f0:2c:8f:b5:fb:bb:af:7d:85:dd:70:be: fa:8e:b6:c9:65:9a:ba:3f:56:7e:df:e2:b2:56:40: 36:e9:18:97:4c:1e:e6:e0:f2:8e:81:f7:86:6a:c4: af:33:a8:43:f6:58:e8:91:5a:87:2d:b8:ad:6a:9f: b3:92:5a:a9:36:54:ce:e0:2e:3f:eb:da:12:8b:bf: 78:ee:32:2c:99:60:17:62:9f:81:8d:3e:ea:c8:be: 85:10:9c:56:be:e3:9c:af:e1:8b:00:6f:42:ef:50: 19:c5:b6:cc:ae:bd:01:5c:f7:55:35:77:9c:08:aa: ac:67:4d:49:7e:50:d2:6a:39:d4:02:ee:db:72:ba: 60:da:a4:19:83:f0:50:78:7c:f8:12:0b:90:ef:31: ed:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:94:47:F8:93:15:50:EB:B6:71:5A:2A:13:B7:EF:92:FF:C0:08:A1 X509v3 Authority Key Identifier: keyid:C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:5a:8e:10:b9:17:82:d0:cc:97:e3:ff:a0:d0:71:57:61:4f: 32:e6:37:14:27:6e:8c:35:22:ee:cc:18:b9:ec:9f:ee:fc:63: 05:64:d4:b9:b9:30:92:02:ed:0e:4b:29:71:72:01:66:a4:13: 0b:2f:e3:8e:2a:83:e8:52:17:0c:4c:6d:51:10:2c:ec:42:64: bc:dd:28:80:2e:8d:af:c9:02:fb:53:5c:28:e8:41:9f:92:26: 26:4b:c2:db:22:dd:8e:ea:b8:3e:02:0f:09:b6:d2:c0:d4:2d: 17:4a:e3:8d:74:f0:c1:98:5c:83:df:2c:ee:c8:a7:60:32:c5: 5c:a0:3d:5e:41:52:3a:dc:cb:e7:87:28:2c:04:26:af:6d:f3: 8e:16:0f:12:17:c7:b4:a4:fc:07:fa:a1:18:8f:58:c5:e6:89: 1d:b7:2d:50:a5:fe:1f:cc:ef:76:8b:03:81:12:01:f7:e1:f6: 6d:85:a4:36:29:b0:b0:bc:7d:06:7f:49:e9:c5:48:e8:b5:2d: 00:40:1e:de:db:7e:b4:54:90:2c:4a:e7:70:d4:fd:29:b4:fd: f3:42:84:08:4a:b6:c0:6b:b7:66:1d:3b:d8:87:89:7d:f1:31: 68:b5:41:f3:5d:12:2b:8e:19:ad:ac:ff:fb:6f:61:ca:ca:49: b6:84:6e:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavz72I5EkOd8Q7RJB9K5pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMDA2YWNjMDVmOWRjNDUxZWEwZDQ0ZTg3MjdkYjQ3MGI5 Mjg3OTQwHhcNMjUxMjI2MTMwMDQxWhcNMjUxMjI3MTMwMDQxWjAzMTEwLwYDVQQD Eyg0Njk0NDdmODkzMTU1MGViYjY3MTVhMmExM2I3ZWY5MmZmYzAwOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzsBE47f9tf3PQ1TGKvI7tImvl8z CkXJfyeWT8hOznhk/sIYztRVcm8gueKIdV86rWEAm/FRdr2huo1v2kKvDYfdNH7E 9FsbKux/1bHvr8swwzSHYL5kXakbU06/B3k5FTbzwx/G7dAYZ2DwLI+1+7uvfYXd cL76jrbJZZq6P1Z+3+KyVkA26RiXTB7m4PKOgfeGasSvM6hD9ljokVqHLbitap+z klqpNlTO4C4/69oSi7947jIsmWAXYp+BjT7qyL6FEJxWvuOcr+GLAG9C71AZxbbM rr0BXPdVNXecCKqsZ01JflDSajnUAu7bcrpg2qQZg/BQeHz4EguQ7zHtoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaUR/iTFVDrtnFaKhO375L/wAihMB8GA1UdIwQY MBaAFMIAaswF+dxFHqDUTocn20cLkoeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yM2I3MmYtOWRlNC00NzA2LThlMzIt Zjk5MWY5MDA5MGM2LzEvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yM2I3MmYtOWRlNC00NzA2LThlMzItZjk5MWY5MDA5MGM2 LzEvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1qOELkX gtDMl+P/oNBxV2FPMuY3FCdujDUi7swYueyf7vxjBWTUubkwkgLtDkspcXIBZqQT Cy/jjiqD6FIXDExtURAs7EJkvN0ogC6Nr8kC+1NcKOhBn5ImJkvC2yLdjuq4PgIP CbbSwNQtF0rjjXTwwZhcg98s7sinYDLFXKA9XkFSOtzL54coLAQmr23zjhYPEhfH tKT8B/qhGI9YxeaJHbctUKX+H8zvdosDgRIB9+H2bYWkNimwsLx9Bn9J6cVI6LUt AEAe3tt+tFSQLErncNT9KbT980KECEq2wGu3Zh072IeJffExaLVB810SK44Zraz/ +29hyspJtoRuOA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:58:07 2025 by rpki-client