This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft File: wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json) Hash identifier: PxQL/zp+dn8yl06zkNZbKBImHVHPQS1OxACrbr+DJvA= Subject key identifier: F2:DF:46:26:0A:47:01:57:A4:2B:48:E1:CB:56:63:8B:25:8E:D3:4E Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E Certificate issuer: /CN=c26c499246d812e52ecba7b7f55e26edaef5346e Certificate serial: 019B50055858E7FE476F8FD28E86DE70FCE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft Manifest number: 0A76 Signing time: Wed 24 Dec 2025 11:01:25 +0000 Manifest this update: Wed 24 Dec 2025 11:01:25 +0000 Manifest next update: Thu 25 Dec 2025 11:01:25 +0000 Files and hashes: 1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=) 2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: rfxfTpzhBNOfzx7Di83dmusFPBAqo+oR0VpkKD/swXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:05:58:58:e7:fe:47:6f:8f:d2:8e:86:de:70:fc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e Validity Not Before: Dec 24 11:01:25 2025 GMT Not After : Dec 25 11:01:25 2025 GMT Subject: CN=f2df46260a470157a42b48e1cb56638b258ed34e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:a2:d1:b6:0f:94:44:40:45:bd:d1:2a:3f: 6a:20:3a:30:93:67:e3:8d:2f:c9:4e:98:5f:5b:1e: f5:b6:fa:24:58:e7:d3:b9:b5:8d:3c:69:62:76:e2: 4a:17:b7:cb:f9:8e:12:48:be:59:68:cc:5d:fe:9c: 56:b0:2b:ea:80:8b:df:d5:43:53:e5:8f:cf:fb:fd: 8e:b4:c6:10:ed:fb:25:af:e2:10:66:6f:79:16:4f: 03:7f:32:19:70:0f:f0:e0:52:01:99:08:68:ec:98: 45:be:38:22:65:e4:ec:95:4d:69:79:a7:e6:01:33: 35:f7:b3:36:ea:00:c3:2e:6e:90:2e:05:87:32:8a: 4c:1f:fa:1c:47:d7:66:dc:3a:1a:48:4d:27:5e:56: 4d:5e:e0:a5:a1:b4:a7:fb:85:47:3f:f7:87:60:12: 6f:19:df:1a:63:26:0f:ea:57:df:6f:a4:f6:92:32: 09:97:80:97:b8:3d:a6:81:af:0a:db:3c:ec:f0:25: 20:3b:77:74:10:47:09:a7:8d:83:15:75:1b:da:f7: 79:d5:d1:a9:a1:33:ad:60:13:44:11:42:e7:02:dd: 12:14:c3:58:d0:2a:12:f1:b1:26:b6:6e:48:a0:6c: ce:8c:76:ce:42:3a:14:58:f3:df:10:ac:8e:81:d5: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DF:46:26:0A:47:01:57:A4:2B:48:E1:CB:56:63:8B:25:8E:D3:4E X509v3 Authority Key Identifier: keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:43:ce:13:28:5f:41:0a:9b:93:8b:c7:9e:35:90:79:1b:15: 9c:46:0f:e6:15:b6:51:86:e0:62:f0:dd:29:9b:d6:72:4a:6c: a3:d6:bd:e5:92:dc:24:4f:80:f5:b2:38:7f:c2:b9:a0:99:7b: 54:1e:77:12:f5:48:e6:fd:ca:de:5c:57:48:85:68:41:43:a5: 95:a3:20:bb:12:4a:be:ad:b1:b8:d2:52:69:35:c6:ee:36:7b: 4e:6c:9f:3f:6d:ae:5e:28:e7:7b:e1:98:eb:9f:6c:c5:02:54: ec:d7:d4:83:a4:a2:ce:e4:e4:7a:8e:ca:08:0d:52:ab:d1:e0: ee:11:89:78:92:1c:86:25:fc:fe:71:f7:76:ae:96:d3:35:ca: 7a:00:70:91:36:79:10:40:cd:d1:7b:a8:f4:cc:22:96:88:49: 4f:c3:4e:f5:04:56:52:01:84:bf:a8:76:75:d5:e7:09:43:ea: 48:f2:ad:77:a4:d6:52:c7:59:83:22:91:20:38:2f:ed:65:1f: 4c:77:8e:38:60:4b:3c:0a:bf:6b:60:c7:f7:c2:bc:75:3a:f2: db:93:be:7b:69:6e:50:29:3b:76:63:3c:eb:80:7d:2d:bf:b9: e6:e6:f7:80:44:ac:1c:68:72:d3:d6:21:8d:98:22:da:34:49: f9:40:90:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQBVhY5/5Hb4/SjobecPzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNmM0OTkyNDZkODEyZTUyZWNiYTdiN2Y1NWUyNmVkYWVm NTM0NmUwHhcNMjUxMjI0MTEwMTI1WhcNMjUxMjI1MTEwMTI1WjAzMTEwLwYDVQQD EyhmMmRmNDYyNjBhNDcwMTU3YTQyYjQ4ZTFjYjU2NjM4YjI1OGVkMzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38ui0bYPlERARb3RKj9qIDowk2fj jS/JTphfWx71tvokWOfTubWNPGliduJKF7fL+Y4SSL5ZaMxd/pxWsCvqgIvf1UNT 5Y/P+/2OtMYQ7fslr+IQZm95Fk8DfzIZcA/w4FIBmQho7JhFvjgiZeTslU1peafm ATM197M26gDDLm6QLgWHMopMH/ocR9dm3DoaSE0nXlZNXuClobSn+4VHP/eHYBJv Gd8aYyYP6lffb6T2kjIJl4CXuD2mga8K2zzs8CUgO3d0EEcJp42DFXUb2vd51dGp oTOtYBNEEULnAt0SFMNY0CoS8bEmtm5IoGzOjHbOQjoUWPPfEKyOgdUfSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLfRiYKRwFXpCtI4ctWY4sljtNOMB8GA1UdIwQY MBaAFMJsSZJG2BLlLsunt/VeJu2u9TRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzk1YTItMTQwMC00OTNlLTgwNTgt NDg3ZGE5MzU0YTY1LzEvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzk1YTItMTQwMC00OTNlLTgwNTgtNDg3ZGE5MzU0YTY1 LzEvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUPOEyhf QQqbk4vHnjWQeRsVnEYP5hW2UYbgYvDdKZvWckpso9a95ZLcJE+A9bI4f8K5oJl7 VB53EvVI5v3K3lxXSIVoQUOllaMguxJKvq2xuNJSaTXG7jZ7TmyfP22uXijne+GY 659sxQJU7NfUg6SizuTkeo7KCA1Sq9Hg7hGJeJIchiX8/nH3dq6W0zXKegBwkTZ5 EEDN0Xuo9MwilohJT8NO9QRWUgGEv6h2ddXnCUPqSPKtd6TWUsdZgyKRIDgv7WUf THeOOGBLPAq/a2DH98K8dTry25O+e2luUCk7dmM864B9Lb+55ub3gESsHGhy09Yh jZgi2jRJ+UCQAw== -----END CERTIFICATE-----Generated at Wed Dec 24 20:21:50 2025 by rpki-client