This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft File: WqtKKPwphT3SPHa9Hi94zpmZoVo.mft (raw, json) Hash identifier: 0XcQTljM3RKZMnspXvBMt4/pLpjTFFhPwUyziUEs7+Q= Subject key identifier: 3D:1D:07:0A:A3:A7:D5:D7:5B:E3:A2:F6:57:9C:E3:6E:CC:16:C4:63 Authority key identifier: 5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A Certificate issuer: /CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a Certificate serial: 019B5BD1D6319109B9EF9014855C06E4C376 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft Manifest number: 0120 Signing time: Fri 26 Dec 2025 18:00:36 +0000 Manifest this update: Fri 26 Dec 2025 18:00:36 +0000 Manifest next update: Sat 27 Dec 2025 18:00:36 +0000 Files and hashes: 1: WqtKKPwphT3SPHa9Hi94zpmZoVo.crl (hash: sa5CxBPbTH7fKDRBrgpretmgN9S5qVQfn+n00AJ/1TM=) 2: n3BgyUulT02071hYFOzA1unhxoM.roa (hash: BPb0g/1bWdgtULRInakuHMpgQ/U61gydQ46sGmWxZGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:d6:31:91:09:b9:ef:90:14:85:5c:06:e4:c3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aab4a28fc29853dd23c76bd1e2f78ce9999a15a Validity Not Before: Dec 26 18:00:36 2025 GMT Not After : Dec 27 18:00:36 2025 GMT Subject: CN=3d1d070aa3a7d5d75be3a2f6579ce36ecc16c463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cd:fb:2c:11:a3:7f:0a:86:53:78:59:7d:af: 60:85:fd:c2:13:f3:79:18:e3:77:3d:b6:8d:d1:95: 9b:09:77:d2:9c:f7:60:9d:a2:92:1c:34:84:dc:f3: 17:b9:a3:26:3c:3d:53:cf:db:8b:e8:28:bc:05:07: 19:6e:71:bd:e7:2b:a0:bf:c0:75:73:a5:31:a0:d2: 70:dc:7d:0d:7f:ce:d9:89:1d:2a:55:22:c8:00:e9: a1:d9:b7:21:11:c7:d4:a9:6c:f9:0a:dc:9f:a3:c5: c4:24:87:ee:3a:31:1e:d8:a5:a9:09:3e:51:09:27: 9b:6b:a0:4c:80:14:fe:93:d9:f3:c3:06:4c:d3:71: fb:a6:5d:6b:83:35:90:66:54:fd:6d:b0:2c:15:91: ed:d5:83:ce:a3:43:96:9c:b7:c6:83:be:2c:9c:d4: 8c:da:5e:d2:26:fa:7d:bc:45:51:1e:11:cc:3f:a0: aa:7d:28:46:9c:6c:46:96:10:3a:02:cb:5a:f7:04: 67:cb:59:db:23:94:ca:b6:26:d4:2e:c2:b2:68:8a: 1a:00:77:2f:dc:75:7c:42:39:62:0f:e7:28:92:a3: d7:be:0d:85:ca:07:86:ff:2c:49:21:70:25:24:9a: 9a:46:c6:08:8b:40:f4:8a:c4:7c:66:de:91:35:8f: 38:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1D:07:0A:A3:A7:D5:D7:5B:E3:A2:F6:57:9C:E3:6E:CC:16:C4:63 X509v3 Authority Key Identifier: keyid:5A:AB:4A:28:FC:29:85:3D:D2:3C:76:BD:1E:2F:78:CE:99:99:A1:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqtKKPwphT3SPHa9Hi94zpmZoVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ff001-26da-4bef-b1fb-83cac4b22233/1/WqtKKPwphT3SPHa9Hi94zpmZoVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:9d:3a:56:60:b4:47:67:e3:12:7c:f8:f9:df:cf:9b:cf:2e: ac:94:d3:14:47:48:99:7e:85:b0:7a:fc:3e:1d:8c:22:d4:3b: 3b:85:12:cd:da:85:ba:a1:41:09:7e:f9:32:ba:41:c8:3c:97: f2:d4:62:75:a3:1d:5b:4d:c3:cf:9a:7e:71:31:ae:f9:3d:6b: cc:71:b0:f1:01:73:ec:e7:2f:c1:89:a5:e5:b3:e1:2c:20:2a: 6a:b6:88:98:99:21:ab:c5:21:57:6e:fc:4a:d3:8c:b3:97:e5: 19:17:d9:42:54:f2:c0:84:4d:3c:38:de:28:01:48:44:95:fc: ac:6f:00:f9:6f:7b:fd:13:77:6a:dd:21:bf:5f:77:e2:0a:1e: 55:38:55:b0:d0:14:a2:43:c8:55:f7:b8:55:47:37:e5:3d:fc: 44:ec:e2:14:11:14:dd:c1:a6:26:1d:c9:29:1b:d8:4f:9a:7e: e2:ae:99:d8:1a:51:e1:1a:6c:d0:ac:06:7d:42:19:a7:76:ad: 36:73:cf:45:9d:32:19:f7:3d:af:d4:77:c2:60:2e:56:a8:ad: 4c:4d:15:72:8b:3b:79:b7:e9:0a:9d:b2:27:78:a9:2a:55:34: 72:e0:5d:35:de:8f:1b:22:14:2b:a3:8d:8c:aa:4d:c6:0f:97: bc:02:a4:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0dYxkQm575AUhVwG5MN2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWI0YTI4ZmMyOTg1M2RkMjNjNzZiZDFlMmY3OGNlOTk5 OWExNWEwHhcNMjUxMjI2MTgwMDM2WhcNMjUxMjI3MTgwMDM2WjAzMTEwLwYDVQQD EygzZDFkMDcwYWEzYTdkNWQ3NWJlM2EyZjY1NzljZTM2ZWNjMTZjNDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2c37LBGjfwqGU3hZfa9ghf3CE/N5 GON3PbaN0ZWbCXfSnPdgnaKSHDSE3PMXuaMmPD1Tz9uL6Ci8BQcZbnG95yugv8B1 c6UxoNJw3H0Nf87ZiR0qVSLIAOmh2bchEcfUqWz5Ctyfo8XEJIfuOjEe2KWpCT5R CSeba6BMgBT+k9nzwwZM03H7pl1rgzWQZlT9bbAsFZHt1YPOo0OWnLfGg74snNSM 2l7SJvp9vEVRHhHMP6CqfShGnGxGlhA6Asta9wRny1nbI5TKtibULsKyaIoaAHcv 3HV8QjliD+cokqPXvg2FygeG/yxJIXAlJJqaRsYIi0D0isR8Zt6RNY84fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0dBwqjp9XXW+Oi9lec427MFsRjMB8GA1UdIwQY MBaAFFqrSij8KYU90jx2vR4veM6ZmaFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3F0S0tQd3BoVDNTUEhhOUhpOTR6cG1ab1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xZmYwMDEtMjZkYS00YmVmLWIxZmIt ODNjYWM0YjIyMjMzLzEvV3F0S0tQd3BoVDNTUEhhOUhpOTR6cG1ab1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC8xZmYwMDEtMjZkYS00YmVmLWIxZmItODNjYWM0YjIyMjMz LzEvV3F0S0tQd3BoVDNTUEhhOUhpOTR6cG1ab1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMp06VmC0 R2fjEnz4+d/Pm88urJTTFEdImX6FsHr8Ph2MItQ7O4USzdqFuqFBCX75MrpByDyX 8tRidaMdW03Dz5p+cTGu+T1rzHGw8QFz7OcvwYml5bPhLCAqaraImJkhq8UhV278 StOMs5flGRfZQlTywIRNPDjeKAFIRJX8rG8A+W97/RN3at0hv1934goeVThVsNAU okPIVfe4VUc35T38ROziFBEU3cGmJh3JKRvYT5p+4q6Z2BpR4Rps0KwGfUIZp3at NnPPRZ0yGfc9r9R3wmAuVqitTE0Vcos7ebfpCp2yJ3ipKlU0cuBdNd6PGyIUK6ON jKpNxg+XvAKk8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 23:03:16 2025 by rpki-client