This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft File: WZp0D0vDCiwEzcszRK8Nai0FpIE.mft (raw, json) Hash identifier: WyWNIG4DeTYvPJ6/m+7eiMnT0APY+3ZMV4e6WMKrWLo= Subject key identifier: 51:9B:98:91:A8:08:90:63:CF:F4:29:70:AD:8F:29:09:BA:D6:5E:CC Authority key identifier: 59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81 Certificate issuer: /CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481 Certificate serial: 019B4A71BAB448419FB9B69A154DE87FDC48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft Manifest number: 0C0F Signing time: Tue 23 Dec 2025 09:02:05 +0000 Manifest this update: Tue 23 Dec 2025 09:02:05 +0000 Manifest next update: Wed 24 Dec 2025 09:02:05 +0000 Files and hashes: 1: WZp0D0vDCiwEzcszRK8Nai0FpIE.crl (hash: ZO0cwFIl20wdAAL5/kUgcQoaJqi9pTwWFlxt71FS7tY=) 2: ozGik-9_sBnUMoYXrZRViJEmIeY.roa (hash: 3AnFoieE3CjYtQiFDGskoD5Nyb6r911fFXwGIZ9/+iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:ba:b4:48:41:9f:b9:b6:9a:15:4d:e8:7f:dc:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=599a740f4bc30a2c04cdcb3344af0d6a2d05a481 Validity Not Before: Dec 23 09:02:05 2025 GMT Not After : Dec 24 09:02:05 2025 GMT Subject: CN=519b9891a8089063cff42970ad8f2909bad65ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ae:69:54:52:d2:72:d0:0a:24:c0:1b:a6:1a: 2d:25:4d:81:ac:35:0e:0c:82:0c:f8:f7:6f:6e:cb: 2a:c1:3d:10:9a:ee:27:b9:a1:9c:2a:a9:74:bb:32: 06:79:06:62:f4:86:2d:9f:7b:bd:a8:94:5d:a7:e0: 80:9b:a8:df:b9:57:44:4d:8d:cb:88:57:83:c4:eb: cf:6a:44:4e:8c:de:f2:0a:a3:92:c2:4d:31:10:14: 86:5f:11:b2:92:43:67:42:75:ff:44:48:bb:b7:ac: 70:e9:3f:e6:c6:b2:fe:27:eb:c6:4c:6a:df:1c:bf: 8a:72:77:f4:8e:77:0c:cc:eb:f8:ea:f1:59:0d:a0: 1a:c6:1d:c2:67:75:97:cf:22:d3:7f:f6:9b:51:37: cf:5b:fe:e1:38:9e:a9:1a:52:8f:ac:c7:bb:be:4e: 80:50:41:69:48:80:f8:b7:e0:89:8f:06:ec:57:44: 98:48:17:f0:b6:c8:32:4d:83:d2:c0:e3:b4:71:7c: e1:a0:cc:26:08:82:07:47:24:d0:f2:0e:0a:60:80: b9:a7:a9:e8:59:cd:ba:fa:1f:4b:e1:24:b5:67:43: 02:33:54:ce:80:85:53:63:b2:0f:fc:66:45:b4:ff: 32:3e:09:27:a3:7c:59:7c:33:69:95:4c:28:45:4f: c3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9B:98:91:A8:08:90:63:CF:F4:29:70:AD:8F:29:09:BA:D6:5E:CC X509v3 Authority Key Identifier: keyid:59:9A:74:0F:4B:C3:0A:2C:04:CD:CB:33:44:AF:0D:6A:2D:05:A4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZp0D0vDCiwEzcszRK8Nai0FpIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/36e3cb-477e-4f5e-bd56-9102c3c05138/1/WZp0D0vDCiwEzcszRK8Nai0FpIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:4d:61:7c:09:13:4c:85:a0:88:d2:01:7b:8e:c8:b2:84:85: 60:4f:03:ce:ab:ed:18:a9:d3:e1:3f:4e:a7:7e:de:5e:4f:77: f6:b7:28:e6:6d:bb:01:5d:56:4b:17:a4:d4:22:96:a8:9b:a3: f3:9d:b9:61:c5:4b:06:02:b4:2c:fb:3b:f7:57:54:73:5c:d0: 98:19:a5:7d:51:98:73:10:98:b9:4d:d2:2f:51:f4:f3:21:02: 3d:45:f8:c9:75:4b:ee:65:69:fe:ba:4b:71:b3:6e:35:0e:fc: 43:f3:81:eb:68:4f:76:be:f9:f4:70:91:3e:65:6d:af:3a:e0: eb:29:28:5b:ec:56:46:64:cf:8f:19:2d:53:a3:cf:f9:fd:ba: a4:90:99:c8:61:5b:70:37:a6:ee:76:c5:21:8a:45:a4:7e:72: 02:29:20:a6:c8:8a:44:50:70:2e:58:a6:51:df:f7:37:df:a8: 1d:15:d6:30:5b:f2:f4:7b:86:d6:9d:4a:e9:2d:fb:1e:98:93: a4:05:28:40:dc:9f:20:e7:04:61:8c:c8:d1:2a:98:8d:31:78: 69:6c:30:33:1a:47:4c:9f:03:c8:9a:2a:90:af:08:b8:81:88: d3:97:37:c1:bc:d9:c9:8d:49:2e:66:a1:4f:d1:40:8a:c5:ad: d0:89:eb:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcbq0SEGfubaaFU3of9xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5OWE3NDBmNGJjMzBhMmMwNGNkY2IzMzQ0YWYwZDZhMmQw NWE0ODEwHhcNMjUxMjIzMDkwMjA1WhcNMjUxMjI0MDkwMjA1WjAzMTEwLwYDVQQD Eyg1MTliOTg5MWE4MDg5MDYzY2ZmNDI5NzBhZDhmMjkwOWJhZDY1ZWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx65pVFLSctAKJMAbphotJU2BrDUO DIIM+PdvbssqwT0Qmu4nuaGcKql0uzIGeQZi9IYtn3u9qJRdp+CAm6jfuVdETY3L iFeDxOvPakROjN7yCqOSwk0xEBSGXxGykkNnQnX/REi7t6xw6T/mxrL+J+vGTGrf HL+Kcnf0jncMzOv46vFZDaAaxh3CZ3WXzyLTf/abUTfPW/7hOJ6pGlKPrMe7vk6A UEFpSID4t+CJjwbsV0SYSBfwtsgyTYPSwOO0cXzhoMwmCIIHRyTQ8g4KYIC5p6no Wc26+h9L4SS1Z0MCM1TOgIVTY7IP/GZFtP8yPgkno3xZfDNplUwoRU/DpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGbmJGoCJBjz/QpcK2PKQm61l7MMB8GA1UdIwQY MBaAFFmadA9LwwosBM3LM0SvDWotBaSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYt OTEwMmMzYzA1MTM4LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8zNmUzY2ItNDc3ZS00ZjVlLWJkNTYtOTEwMmMzYzA1MTM4 LzEvV1pwMEQwdkRDaXdFemNzelJLOE5haTBGcElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO01hfAkT TIWgiNIBe47IsoSFYE8DzqvtGKnT4T9Op37eXk939rco5m27AV1WSxek1CKWqJuj 8525YcVLBgK0LPs791dUc1zQmBmlfVGYcxCYuU3SL1H08yECPUX4yXVL7mVp/rpL cbNuNQ78Q/OB62hPdr759HCRPmVtrzrg6ykoW+xWRmTPjxktU6PP+f26pJCZyGFb cDem7nbFIYpFpH5yAikgpsiKRFBwLlimUd/3N9+oHRXWMFvy9HuG1p1K6S37HpiT pAUoQNyfIOcEYYzI0SqYjTF4aWwwMxpHTJ8DyJoqkK8IuIGI05c3wbzZyY1JLmah T9FAisWt0InrjA== -----END CERTIFICATE-----Generated at Tue Dec 23 10:59:43 2025 by rpki-client