This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft File: Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json) Hash identifier: cLolvlMdR6gq8UDSsqfe7JMrEPGbN3Jnt/Pi2GU5TzA= Subject key identifier: 50:3F:AE:8C:16:27:19:95:70:9D:E8:D2:96:48:96:0A:07:2D:F7:0D Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8 Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8 Certificate serial: 019B0E934E4AA31605570B4C22AE1DFC676E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft Manifest number: 1772 Signing time: Thu 11 Dec 2025 18:01:33 +0000 Manifest this update: Thu 11 Dec 2025 18:01:33 +0000 Manifest next update: Fri 12 Dec 2025 18:01:33 +0000 Files and hashes: 1: 1-hXj5YRn-WVx35eduoI7efVZjNc.roa (hash: g7NKwujdPr7Nz8jyHPpB050pI0MnKX60Je4aNLZ7Vwc=) 2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: VfZ2zvErkQ82IU6eQ+X2oEm2r8CynfG+BjBK3Hnoci4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:4e:4a:a3:16:05:57:0b:4c:22:ae:1d:fc:67:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8 Validity Not Before: Dec 11 18:01:33 2025 GMT Not After : Dec 12 18:01:33 2025 GMT Subject: CN=503fae8c16271995709de8d29648960a072df70d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:da:37:69:11:48:4c:ea:f1:3d:b2:31:a4:0b: 29:95:af:98:ba:af:37:f3:b0:71:ac:11:c6:8b:ce: 31:e5:47:53:cd:69:e1:db:b2:42:a9:cc:6d:03:b0: 20:a4:3b:80:a0:bc:ac:a1:d6:1d:bc:56:e0:0d:48: d1:37:f0:63:56:48:e6:22:55:15:97:da:38:a8:24: e5:e6:53:ea:92:e0:b3:94:e0:1b:50:52:cf:b7:10: df:e5:bf:4b:b2:e1:1c:73:48:cb:32:66:39:4a:89: 13:26:e2:8b:e8:52:35:a2:f8:ba:37:b3:d4:43:71: 32:92:a4:05:a3:c0:bf:cd:f3:3b:0e:dd:f6:c5:eb: 7a:65:1d:6c:e8:7a:99:01:28:05:2b:ba:c9:b5:2e: 8b:46:dc:70:ad:1f:ae:33:66:e3:99:c4:c5:d1:f0: 4c:f5:a5:24:bc:02:5f:52:4e:77:cf:aa:f0:d2:98: 00:0d:cc:a5:db:2e:7f:89:d6:48:4b:4a:de:c7:5b: fc:38:0b:a8:fb:fd:2f:e6:5e:28:62:a3:81:b8:6f: fa:c6:fc:b2:76:55:67:20:ca:39:fd:a2:38:82:64: a4:76:f6:75:2e:45:d3:e9:56:bc:33:96:9e:b6:a3: b4:5d:f8:bc:6d:65:5e:57:62:94:77:12:d9:82:fe: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3F:AE:8C:16:27:19:95:70:9D:E8:D2:96:48:96:0A:07:2D:F7:0D X509v3 Authority Key Identifier: keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:39:bb:e5:ed:af:02:97:d5:ae:a8:bf:20:13:02:7a:fd:71: b3:92:a4:42:91:3a:b3:e2:b4:39:1b:5c:de:60:78:12:b0:46: d7:04:19:c2:f9:57:95:5b:06:e8:38:55:ee:9a:d6:77:cb:d2: 22:1e:cb:09:9b:23:0b:ca:05:32:88:ac:c3:1c:dd:7d:7d:29: 3f:6c:3f:bc:d6:f5:c4:a2:54:0f:22:e7:13:96:17:48:dd:0d: a8:65:35:24:3d:10:09:35:d6:08:f7:a7:4a:96:10:95:a0:27: 35:c0:49:7b:54:1a:fd:89:9e:3b:ef:1b:29:bb:38:0a:03:67: 91:51:8f:eb:1c:c3:76:6a:19:4d:a7:44:8d:76:e4:02:18:11: e7:1b:4a:93:ad:5b:36:6d:a8:66:2f:83:6c:c9:69:76:6c:1e: 2b:67:d5:16:5e:d7:f3:b0:be:2d:30:25:80:e3:e1:ea:1e:82: 44:8f:f5:14:e0:96:f3:d9:96:8b:0e:bb:ec:14:ac:d7:78:b3: 36:8b:ed:f6:82:08:d5:54:70:0b:e8:41:d4:7c:67:46:4f:47: f5:3a:5b:6b:6c:59:42:43:e4:90:0c:b6:e0:2e:4a:ca:8d:31: a2:bd:ac:9f:f1:2a:f2:3d:f2:4e:b7:cc:b9:f6:a6:d7:72:5b: 13:ec:51:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk05KoxYFVwtMIq4d/GduMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWY3NzRlYzljMjczMDI2ZWIxMTdlNDhlNzNmZWY0Mjg4 ZGRlYzgwHhcNMjUxMjExMTgwMTMzWhcNMjUxMjEyMTgwMTMzWjAzMTEwLwYDVQQD Eyg1MDNmYWU4YzE2MjcxOTk1NzA5ZGU4ZDI5NjQ4OTYwYTA3MmRmNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsto3aRFITOrxPbIxpAspla+Yuq83 87BxrBHGi84x5UdTzWnh27JCqcxtA7AgpDuAoLysodYdvFbgDUjRN/BjVkjmIlUV l9o4qCTl5lPqkuCzlOAbUFLPtxDf5b9LsuEcc0jLMmY5SokTJuKL6FI1ovi6N7PU Q3EykqQFo8C/zfM7Dt32xet6ZR1s6HqZASgFK7rJtS6LRtxwrR+uM2bjmcTF0fBM 9aUkvAJfUk53z6rw0pgADcyl2y5/idZIS0rex1v8OAuo+/0v5l4oYqOBuG/6xvyy dlVnIMo5/aI4gmSkdvZ1LkXT6Va8M5aetqO0Xfi8bWVeV2KUdxLZgv6rxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA/rowWJxmVcJ3o0pZIlgoHLfcNMB8GA1UdIwQY MBaAFFqvd07JwnMCbrEX5I5z/vQojd7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzIt MzM2NDQwNTllODY2LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzItMzM2NDQwNTllODY2 LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjm75e2v ApfVrqi/IBMCev1xs5KkQpE6s+K0ORtc3mB4ErBG1wQZwvlXlVsG6DhV7prWd8vS Ih7LCZsjC8oFMoiswxzdfX0pP2w/vNb1xKJUDyLnE5YXSN0NqGU1JD0QCTXWCPen SpYQlaAnNcBJe1Qa/YmeO+8bKbs4CgNnkVGP6xzDdmoZTadEjXbkAhgR5xtKk61b Nm2oZi+DbMlpdmweK2fVFl7X87C+LTAlgOPh6h6CRI/1FOCW89mWiw677BSs13iz Novt9oII1VRwC+hB1HxnRk9H9Tpba2xZQkPkkAy24C5Kyo0xor2sn/Eq8j3yTrfM ufam13JbE+xRBw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:04:13 2025 by rpki-client