This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json) Hash identifier: Ncdpf6Osu2bkqb/jonEDwhgc9lhAofQq8vRbkYiPqXQ= Subject key identifier: EE:65:63:63:24:FF:BA:02:A3:56:A3:C4:0F:BE:FA:2B:D6:D9:93:8A Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11 Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11 Certificate serial: 019B0EC9915D1BA80FB89F3139344643821C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft Manifest number: 04D9 Signing time: Thu 11 Dec 2025 19:00:49 +0000 Manifest this update: Thu 11 Dec 2025 19:00:49 +0000 Manifest next update: Fri 12 Dec 2025 19:00:49 +0000 Files and hashes: 1: 42R2lijOQVfdsdzNrv0Z2vRUmkg.roa (hash: UQwQltW8Fzy4ppc7tQ1/N7xDTvj6DuRNwJcbzfolfVY=) 2: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: /KphalJpUOFv3Hq2YCFFKokhUc9WCzKFDAfu0NhH/2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:91:5d:1b:a8:0f:b8:9f:31:39:34:46:43:82:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11 Validity Not Before: Dec 11 19:00:49 2025 GMT Not After : Dec 12 19:00:49 2025 GMT Subject: CN=ee65636324ffba02a356a3c40fbefa2bd6d9938a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a5:31:90:50:49:f4:e0:8a:cb:0c:77:30:93: 85:d7:4b:6e:d5:3b:78:2d:e7:3a:3c:bd:40:bb:44: 01:d7:57:5a:5c:09:e8:c3:69:53:17:59:01:aa:6b: ac:ed:f8:9a:9f:91:99:12:3d:d6:25:14:13:70:2a: d9:89:4f:6f:bc:66:2c:15:84:86:0c:b0:73:2a:4a: a0:36:4b:8d:6c:89:81:87:92:b5:15:a2:75:26:32: c2:7e:99:5f:f5:da:9b:0b:6a:be:c4:a3:74:2e:bc: ac:4c:e2:9b:90:c3:20:06:df:e6:16:ae:5a:ee:02: 3c:52:e8:d3:8f:06:95:bc:4a:6c:ad:0b:55:fc:14: 2d:67:50:ec:c6:e7:16:b0:1d:a5:53:bb:3f:82:00: 62:e7:bd:0d:0f:03:5f:5e:df:cb:2a:15:83:c4:0f: 54:f8:5f:39:2f:ac:5a:c3:80:b9:43:37:00:a0:41: 62:2c:10:7f:62:f2:da:35:5d:b2:c2:3b:00:df:25: 59:e2:6e:5d:61:f0:89:9a:6a:bf:a8:c1:49:a8:29: c9:d5:4a:25:43:ad:07:e7:20:fb:75:da:4f:c7:0a: 19:6c:b7:50:7e:e5:80:e9:95:a1:e0:8f:a3:64:f1: 9f:ce:68:22:e5:ae:07:c9:51:0a:c3:2e:02:9c:74: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:63:63:24:FF:BA:02:A3:56:A3:C4:0F:BE:FA:2B:D6:D9:93:8A X509v3 Authority Key Identifier: keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:c2:c8:12:df:71:81:93:ae:c8:25:c5:4e:f1:9e:a1:97:5a: b6:c5:f8:65:d0:aa:46:a1:66:30:74:ee:9e:4c:17:0a:e1:d9: 39:61:fe:39:8b:43:47:d4:59:1b:36:ee:6a:f6:ca:4a:9c:fb: 3c:65:22:7d:26:6d:6a:91:29:72:2c:fb:59:49:29:b5:74:b0: d5:fa:27:ab:bd:f8:d6:ed:07:f4:6a:42:c5:79:35:fc:97:bd: 78:4c:43:b6:7a:01:1b:2b:45:7b:cf:8d:8d:6b:85:24:b4:a1: 47:45:21:42:5b:36:49:77:a2:87:18:f5:44:4c:de:9b:4b:9b: 37:80:45:f5:cb:c8:7f:37:c7:89:8d:85:64:93:dc:a9:75:8c: 66:aa:1c:66:ae:65:23:6c:00:56:1a:7b:e4:80:c7:6d:dd:b9: b9:95:9d:67:6e:64:45:14:3b:ef:c6:a5:07:68:80:8a:2f:8f: 38:5b:d9:6a:25:be:d2:2b:ff:c2:1b:32:6a:f1:f2:6c:36:e4: c8:32:75:18:57:37:b2:2f:fe:bd:49:6f:73:c9:e2:49:3a:25: 3d:c1:fb:a8:9c:f1:f1:61:ed:99:8d:fe:e5:ca:56:d3:3b:f3: d3:01:f2:92:74:91:0c:1f:b8:e7:1d:c8:66:8e:cd:a2:15:29: 2d:d4:30:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyZFdG6gPuJ8xOTRGQ4IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MGRkZGI1MTE2MDNlNDFjMmI3YWJiYTNkMjQ5ZDVlZjVl ZDRkMTEwHhcNMjUxMjExMTkwMDQ5WhcNMjUxMjEyMTkwMDQ5WjAzMTEwLwYDVQQD EyhlZTY1NjM2MzI0ZmZiYTAyYTM1NmEzYzQwZmJlZmEyYmQ2ZDk5MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraUxkFBJ9OCKywx3MJOF10tu1Tt4 Lec6PL1Au0QB11daXAnow2lTF1kBqmus7fian5GZEj3WJRQTcCrZiU9vvGYsFYSG DLBzKkqgNkuNbImBh5K1FaJ1JjLCfplf9dqbC2q+xKN0LrysTOKbkMMgBt/mFq5a 7gI8UujTjwaVvEpsrQtV/BQtZ1DsxucWsB2lU7s/ggBi570NDwNfXt/LKhWDxA9U +F85L6xaw4C5QzcAoEFiLBB/YvLaNV2ywjsA3yVZ4m5dYfCJmmq/qMFJqCnJ1Uol Q60H5yD7ddpPxwoZbLdQfuWA6ZWh4I+jZPGfzmgi5a4HyVEKwy4CnHTWSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5lY2Mk/7oCo1ajxA+++ivW2ZOKMB8GA1UdIwQY MBaAFFgN3bURYD5Bwreruj0knV717U0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGIt M2NkNDE3YWVlOWNlLzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGItM2NkNDE3YWVlOWNl LzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwMLIEt9x gZOuyCXFTvGeoZdatsX4ZdCqRqFmMHTunkwXCuHZOWH+OYtDR9RZGzbuavbKSpz7 PGUifSZtapEpciz7WUkptXSw1fonq7341u0H9GpCxXk1/Je9eExDtnoBGytFe8+N jWuFJLShR0UhQls2SXeihxj1REzem0ubN4BF9cvIfzfHiY2FZJPcqXWMZqocZq5l I2wAVhp75IDHbd25uZWdZ25kRRQ778alB2iAii+POFvZaiW+0iv/whsyavHybDbk yDJ1GFc3si/+vUlvc8niSTolPcH7qJzx8WHtmY3+5cpW0zvz0wHyknSRDB+45x3I Zo7NohUpLdQwIg== -----END CERTIFICATE-----Generated at Fri Dec 12 02:50:01 2025 by rpki-client