This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft File: WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json) Hash identifier: bJUAGcAbVAsZpRLsMClXtrsLhy8+vin5CRtAfx7iEuM= Subject key identifier: 95:6E:42:74:C0:A1:FB:AB:F7:08:0F:3A:CF:AB:55:23:42:87:AE:97 Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Certificate serial: 019B0F6E67ABAE5726617D38FADBFA7885BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft Manifest number: 0B59 Signing time: Thu 11 Dec 2025 22:00:52 +0000 Manifest this update: Thu 11 Dec 2025 22:00:52 +0000 Manifest next update: Fri 12 Dec 2025 22:00:52 +0000 Files and hashes: 1: DTuRKBc5DWAml25DkyA602e9E2c.roa (hash: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=) 2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: yfw3F1SoyIWhbEfTjFG/lDg23mKxI4xO28zFLKXsyU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:6e:67:ab:ae:57:26:61:7d:38:fa:db:fa:78:85:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Validity Not Before: Dec 11 22:00:52 2025 GMT Not After : Dec 12 22:00:52 2025 GMT Subject: CN=956e4274c0a1fbabf7080f3acfab55234287ae97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5d:9b:1c:21:33:75:de:6d:d0:a6:64:cd:10: 78:eb:fb:01:e3:40:9b:e0:9f:75:68:ac:69:36:68: 08:0f:85:2b:32:52:35:e4:03:d1:ad:55:74:4f:12: 76:51:87:ce:7a:2f:9e:d6:25:c4:66:c2:6d:b0:8d: f0:32:af:ce:fa:61:11:c7:2c:d2:f5:0f:53:14:ce: 27:f3:bc:fd:31:44:dc:78:2f:27:17:5e:57:ed:68: 2f:f2:d8:9e:88:21:d5:44:9d:d4:bf:28:80:bf:9e: cc:c7:03:83:bd:ee:7d:76:43:db:5b:8e:cf:d0:e9: a9:9a:2f:02:9e:19:ed:f4:b9:99:15:54:13:dc:20: da:cb:66:3b:22:67:76:3d:c6:09:03:68:31:27:77: 40:20:f3:4e:99:63:0c:eb:86:01:66:8f:50:54:d6: e5:e6:8b:0d:d2:72:ad:e4:4a:83:92:9f:a3:32:8c: 8f:e3:be:dd:95:f0:c1:a4:ae:f2:a0:22:9c:6b:7e: 14:b4:61:6c:dc:b1:f2:f4:ff:47:c2:57:24:46:5b: e7:48:8d:aa:fa:d5:c7:21:92:5e:13:98:1b:9d:e3: 45:4a:6e:a6:19:25:c1:0a:f3:6d:2c:bf:b9:d7:c6: 77:98:8a:8e:92:ea:4c:f4:da:e1:fa:f9:e0:b7:1b: cf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:42:74:C0:A1:FB:AB:F7:08:0F:3A:CF:AB:55:23:42:87:AE:97 X509v3 Authority Key Identifier: keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e8:ef:4f:97:ad:02:b4:c8:d0:84:c0:5c:93:c1:8e:17:95: 8e:68:2a:50:09:ed:96:38:8a:99:58:7f:14:df:ce:21:ec:39: e3:70:8e:9b:de:c6:af:41:c1:4b:07:05:e9:33:73:e2:de:16: 80:98:82:b7:cd:1f:93:8e:f6:f3:0e:09:c0:b8:f7:89:93:dd: f9:78:91:e5:d2:05:a3:91:64:3c:72:8b:d9:5f:65:d3:82:ff: 98:38:27:06:b3:10:15:8f:00:61:e5:06:30:16:83:be:36:9e: 46:64:ee:2b:da:3d:74:ba:a8:32:53:62:40:58:f2:32:8e:b3: 33:b3:a3:c9:09:03:94:00:d5:ba:7e:31:ff:c0:e6:65:5d:02: 19:88:39:5a:9b:60:76:12:4a:ed:bd:25:43:99:de:8c:29:05: 62:38:4f:ce:11:e0:7c:5c:18:87:98:fc:9b:10:a4:04:a9:90: 11:02:c7:ce:ce:ba:36:0e:81:77:4e:06:fd:38:5c:28:da:94: 27:0e:88:c1:40:fb:6e:cd:9b:30:56:a7:04:85:0a:e5:77:d9: c0:4c:cc:a3:a2:6c:00:88:c8:9a:81:e7:6d:cb:4f:fe:8f:61: f2:33:ed:06:29:8f:6c:00:f7:ee:12:65:04:97:45:e5:ad:de: d3:b7:07:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPbmerrlcmYX04+tv6eIW+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm MDNjYmMwHhcNMjUxMjExMjIwMDUyWhcNMjUxMjEyMjIwMDUyWjAzMTEwLwYDVQQD Eyg5NTZlNDI3NGMwYTFmYmFiZjcwODBmM2FjZmFiNTUyMzQyODdhZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l2bHCEzdd5t0KZkzRB46/sB40Cb 4J91aKxpNmgID4UrMlI15APRrVV0TxJ2UYfOei+e1iXEZsJtsI3wMq/O+mERxyzS 9Q9TFM4n87z9MUTceC8nF15X7Wgv8tieiCHVRJ3UvyiAv57MxwODve59dkPbW47P 0Ompmi8Cnhnt9LmZFVQT3CDay2Y7Imd2PcYJA2gxJ3dAIPNOmWMM64YBZo9QVNbl 5osN0nKt5EqDkp+jMoyP477dlfDBpK7yoCKca34UtGFs3LHy9P9HwlckRlvnSI2q +tXHIZJeE5gbneNFSm6mGSXBCvNtLL+518Z3mIqOkupM9Nrh+vngtxvPXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVuQnTAofur9wgPOs+rVSNCh66XMB8GA1UdIwQY MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et OTY2NmVkZWVlMWUzLzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXejvT5et ArTI0ITAXJPBjheVjmgqUAntljiKmVh/FN/OIew543COm97Gr0HBSwcF6TNz4t4W gJiCt80fk4728w4JwLj3iZPd+XiR5dIFo5FkPHKL2V9l04L/mDgnBrMQFY8AYeUG MBaDvjaeRmTuK9o9dLqoMlNiQFjyMo6zM7OjyQkDlADVun4x/8DmZV0CGYg5Wptg dhJK7b0lQ5nejCkFYjhPzhHgfFwYh5j8mxCkBKmQEQLHzs66Ng6Bd04G/ThcKNqU Jw6IwUD7bs2bMFanBIUK5XfZwEzMo6JsAIjImoHnbctP/o9h8jPtBimPbAD37hJl BJdF5a3e07cHUA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:20:50 2025 by rpki-client