This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft File: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft (raw, json) Hash identifier: wHZY/UDFH/HstODoc5LTR6T5RY/l0uIlZGq9IM5OzDg= Subject key identifier: C9:C3:9B:A2:21:77:E5:4F:12:8E:68:7C:30:09:3B:E0:A6:A6:DD:1C Authority key identifier: 59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E Certificate issuer: /CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Certificate serial: 019B32D7D229B83412170B8C7D87CAA3A800 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft Manifest number: 02E0 Signing time: Thu 18 Dec 2025 19:02:43 +0000 Manifest this update: Thu 18 Dec 2025 19:02:43 +0000 Manifest next update: Fri 19 Dec 2025 19:02:43 +0000 Files and hashes: 1: O2Pnp2xiRD6R4iT3wVRhdJLNeu0.roa (hash: Yn5cJiKHr0OGQWImfyXWk4ihqiwMLF8Xm0w3Bpt+rdg=) 2: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl (hash: fEuumwIzIxEXcHDenBv7sqKgZPF07FEe3Cn28aaVKRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:d2:29:b8:34:12:17:0b:8c:7d:87:ca:a3:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Validity Not Before: Dec 18 19:02:43 2025 GMT Not After : Dec 19 19:02:43 2025 GMT Subject: CN=c9c39ba22177e54f128e687c30093be0a6a6dd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c5:5d:82:0c:eb:1f:08:b1:e0:bc:05:49:c8: 38:ef:46:30:aa:be:dd:c3:56:4c:68:d4:3b:8a:91: a1:0b:6a:af:63:8f:ab:2a:a3:c1:46:bb:1a:8f:52: 87:b8:d8:c7:4f:a2:60:ad:f3:25:81:84:e9:6e:7f: 6a:7f:07:1e:c7:1a:cb:1b:26:60:cd:bb:62:8b:9f: 17:be:29:7c:30:ff:e4:6a:06:cd:da:62:a9:16:ce: bd:98:2c:c1:ce:45:a3:4c:bf:9d:53:66:eb:74:11: e6:33:c9:14:03:d6:9c:e5:b8:2c:99:58:b6:b1:a2: 9f:60:19:69:be:42:d4:c3:ac:30:0b:ee:dd:f4:04: 70:c8:ce:c7:94:22:ee:69:26:62:88:54:cb:fb:35: b6:43:f9:10:03:40:06:3a:21:64:ce:f2:56:91:0b: 97:9a:c3:4e:4e:7c:80:ee:24:54:29:6a:09:5b:0b: e2:dc:94:45:0c:22:04:bb:8d:d4:75:f1:12:ec:00: 08:17:f2:d6:00:a8:7e:85:79:1f:f4:85:10:10:57: 59:c3:8a:57:0d:85:ce:02:e6:e8:6a:bf:42:ba:60: 45:52:2a:e2:7a:28:21:65:a0:b6:d0:5d:d0:bb:4d: ae:ab:4b:9c:2d:73:58:05:67:1e:69:35:81:30:99: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C3:9B:A2:21:77:E5:4F:12:8E:68:7C:30:09:3B:E0:A6:A6:DD:1C X509v3 Authority Key Identifier: keyid:59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ec:65:01:9f:97:6c:bc:86:74:b3:55:e6:c7:eb:e9:c2:5e: 62:62:7d:c9:94:99:5d:8d:b1:4e:c6:ed:20:f2:de:2c:f1:e2: 66:52:b1:86:a8:b3:d5:e3:e6:39:ea:83:9d:6f:81:3c:f4:d0: eb:e1:f7:bc:ff:34:31:32:11:75:da:cb:4f:d1:96:3c:01:8e: 55:e6:9b:a7:f1:86:ff:c0:a6:83:15:2b:d1:0b:62:79:a6:3d: 13:97:b6:5c:50:5d:fd:0d:03:82:4d:53:4c:b3:0b:19:be:61: 80:eb:4d:95:4a:6c:61:dd:b2:bf:ae:c7:65:e9:e7:ea:51:f0: 56:ce:c0:c4:80:b6:bc:12:2d:f6:c0:2a:b5:fa:4d:db:25:02: 1b:52:1e:83:ff:34:bb:67:21:39:73:e1:14:8b:5e:0f:58:97: a6:6f:75:bf:0f:af:39:81:a5:ab:96:2f:dd:b8:cb:20:6d:fe: 8b:30:f9:75:b3:7c:dd:c4:05:7a:5b:13:2a:3a:e8:df:0c:6e: 06:81:a2:b0:48:9d:c1:09:1e:ef:4e:d1:93:dd:71:82:82:a7: 80:be:e5:ae:df:d3:6c:bc:ca:8e:b9:da:f4:c2:ee:f9:8b:8a: bc:86:65:4c:32:af:de:77:81:4d:1e:aa:20:db:a0:25:d1:cc: 1b:4f:7d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy19IpuDQSFwuMfYfKo6gAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MzkyZjkxZjQzYTY3ZjUwYWE3OWEwMTE2ZWFhNGRlOWJk NzM1MWUwHhcNMjUxMjE4MTkwMjQzWhcNMjUxMjE5MTkwMjQzWjAzMTEwLwYDVQQD EyhjOWMzOWJhMjIxNzdlNTRmMTI4ZTY4N2MzMDA5M2JlMGE2YTZkZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMVdggzrHwix4LwFScg470Ywqr7d w1ZMaNQ7ipGhC2qvY4+rKqPBRrsaj1KHuNjHT6JgrfMlgYTpbn9qfwcexxrLGyZg zbtii58Xvil8MP/kagbN2mKpFs69mCzBzkWjTL+dU2brdBHmM8kUA9ac5bgsmVi2 saKfYBlpvkLUw6wwC+7d9ARwyM7HlCLuaSZiiFTL+zW2Q/kQA0AGOiFkzvJWkQuX msNOTnyA7iRUKWoJWwvi3JRFDCIEu43UdfES7AAIF/LWAKh+hXkf9IUQEFdZw4pX DYXOAuboar9CumBFUirieighZaC20F3Qu02uq0ucLXNYBWceaTWBMJnjMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnDm6Ihd+VPEo5ofDAJO+Cmpt0cMB8GA1UdIwQY MBaAFFk5L5H0Omf1CqeaARbqpN6b1zUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUt NDQ3Y2ZjYjVlNjg4LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUtNDQ3Y2ZjYjVlNjg4 LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuxlAZ+X bLyGdLNV5sfr6cJeYmJ9yZSZXY2xTsbtIPLeLPHiZlKxhqiz1ePmOeqDnW+BPPTQ 6+H3vP80MTIRddrLT9GWPAGOVeabp/GG/8CmgxUr0QtieaY9E5e2XFBd/Q0Dgk1T TLMLGb5hgOtNlUpsYd2yv67HZenn6lHwVs7AxIC2vBIt9sAqtfpN2yUCG1Ieg/80 u2chOXPhFIteD1iXpm91vw+vOYGlq5Yv3bjLIG3+izD5dbN83cQFelsTKjro3wxu BoGisEidwQke707Rk91xgoKngL7lrt/TbLzKjrna9MLu+YuKvIZlTDKv3neBTR6q INugJdHMG0995A== -----END CERTIFICATE-----Generated at Fri Dec 19 04:54:41 2025 by rpki-client