This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json) Hash identifier: kUdx2MFgbVzEiQ+23W3SZEE0EcFC5qAPaApN/EcnwOc= Subject key identifier: 28:CA:85:E0:E0:2A:77:47:B7:10:FA:51:32:A9:9F:CD:A9:91:95:9B Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Certificate serial: 019B49953BE704E1719070441C7CDB2C28AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft Manifest number: 0F2E Signing time: Tue 23 Dec 2025 05:01:15 +0000 Manifest this update: Tue 23 Dec 2025 05:01:15 +0000 Manifest next update: Wed 24 Dec 2025 05:01:15 +0000 Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=) 2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: UbT51AXiZF4kbql1U8432mDMXXKq+c8z4q9YIIv1F9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:3b:e7:04:e1:71:90:70:44:1c:7c:db:2c:28:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Validity Not Before: Dec 23 05:01:15 2025 GMT Not After : Dec 24 05:01:15 2025 GMT Subject: CN=28ca85e0e02a7747b710fa5132a99fcda991959b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:f6:f2:e9:1f:15:cc:61:09:87:0c:8e:52: 41:03:de:71:7c:e5:52:e4:f7:14:1b:66:b6:54:36: be:8f:15:93:08:48:d4:36:b4:50:f3:aa:d3:79:d0: 35:c0:1d:f3:f3:a0:88:d9:d9:25:2a:a2:b1:8a:28: e5:7f:9f:1e:8c:18:6c:a9:8c:60:79:7a:11:90:92: 6d:1f:5d:a1:f2:78:59:e6:74:0b:24:77:f7:67:15: 83:ee:66:03:c1:12:a0:9e:dd:c9:8b:40:6a:06:d0: 46:d7:87:7f:be:36:a6:96:7f:48:34:b8:12:89:70: 24:a7:bf:c1:a0:b5:07:a4:b0:b2:19:ce:dd:35:80: 6d:b6:7e:1a:63:d9:bc:34:ed:59:b8:68:ee:1a:2e: 43:7d:ff:9b:69:7e:fa:a8:d3:ce:c2:76:fa:21:39: be:a1:77:f6:ea:fd:d0:b4:63:97:1e:05:4d:c2:e4: 3d:2c:b9:59:4d:88:68:52:f8:6f:ff:6c:bd:2f:87: 79:5b:ec:2d:0e:d3:60:11:cd:71:ab:44:7b:d2:4b: 94:ae:70:0f:ed:24:79:24:7b:01:5b:43:9b:f2:fa: ad:b2:95:78:3d:3c:9b:84:82:be:11:b1:bc:d9:3e: ee:1f:f9:d1:3a:cd:00:6f:0c:e3:ac:b9:be:44:34: 6b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CA:85:E0:E0:2A:77:47:B7:10:FA:51:32:A9:9F:CD:A9:91:95:9B X509v3 Authority Key Identifier: keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:80:49:b3:2d:27:ed:24:9d:fe:7c:da:21:e0:38:d8:98:a9: 62:cf:2b:d1:19:70:77:0c:ab:28:86:df:0a:c3:6f:a9:5c:f1: bc:64:cc:da:3b:8c:4a:53:3e:ad:ee:a1:a2:54:b2:b7:13:91: 39:5f:0b:cd:db:b4:bc:54:c5:c8:d5:c6:ad:5f:b1:b9:87:ae: 8d:7d:4e:75:e5:6e:2b:84:25:b6:da:25:08:d2:9a:a8:c2:0d: 45:fa:3a:b6:5a:15:f3:6e:98:e7:a2:e4:e1:67:c1:59:2e:7d: 35:33:02:8c:47:9d:69:89:ee:47:9f:27:05:2a:c0:6e:44:2a: a7:47:2a:e0:58:28:1c:49:57:80:cb:23:9b:ee:d9:7e:d2:57: 74:4e:f3:c7:af:1d:16:89:b7:d4:22:15:42:50:e1:d0:1a:04: e6:ad:09:b2:5d:d1:38:93:73:88:82:a0:ae:42:81:4c:01:40: ee:59:e4:af:53:4f:2d:9c:ec:f6:e7:aa:a3:4f:9d:78:46:60: 91:bc:99:c0:4e:ea:a9:62:60:0e:82:f2:06:f2:c6:35:bb:17: d3:08:93:7c:47:f4:d3:25:6a:1f:84:df:1a:2e:0b:c2:67:15: 31:41:ae:95:07:1d:5d:1d:75:b5:1f:38:c6:74:04:1f:53:9c: dc:63:16:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlTvnBOFxkHBEHHzbLCitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi ZDI1ZjAwHhcNMjUxMjIzMDUwMTE1WhcNMjUxMjI0MDUwMTE1WjAzMTEwLwYDVQQD EygyOGNhODVlMGUwMmE3NzQ3YjcxMGZhNTEzMmE5OWZjZGE5OTE5NTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKr28ukfFcxhCYcMjlJBA95xfOVS 5PcUG2a2VDa+jxWTCEjUNrRQ86rTedA1wB3z86CI2dklKqKxiijlf58ejBhsqYxg eXoRkJJtH12h8nhZ5nQLJHf3ZxWD7mYDwRKgnt3Ji0BqBtBG14d/vjamln9INLgS iXAkp7/BoLUHpLCyGc7dNYBttn4aY9m8NO1ZuGjuGi5Dff+baX76qNPOwnb6ITm+ oXf26v3QtGOXHgVNwuQ9LLlZTYhoUvhv/2y9L4d5W+wtDtNgEc1xq0R70kuUrnAP 7SR5JHsBW0Ob8vqtspV4PTybhIK+EbG82T7uH/nROs0AbwzjrLm+RDRr1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjKheDgKndHtxD6UTKpn82pkZWbMB8GA1UdIwQY MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt OGE5MjEwOTk4OWVmLzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEYBJsy0n 7SSd/nzaIeA42JipYs8r0RlwdwyrKIbfCsNvqVzxvGTM2juMSlM+re6holSytxOR OV8Lzdu0vFTFyNXGrV+xuYeujX1OdeVuK4QlttolCNKaqMINRfo6tloV826Y56Lk 4WfBWS59NTMCjEedaYnuR58nBSrAbkQqp0cq4FgoHElXgMsjm+7ZftJXdE7zx68d Fom31CIVQlDh0BoE5q0Jsl3ROJNziIKgrkKBTAFA7lnkr1NPLZzs9ueqo0+deEZg kbyZwE7qqWJgDoLyBvLGNbsX0wiTfEf00yVqH4TfGi4LwmcVMUGulQcdXR11tR84 xnQEH1Oc3GMWQg== -----END CERTIFICATE-----Generated at Tue Dec 23 11:22:10 2025 by rpki-client