This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json) Hash identifier: ZaLvfKaKDGfXR3wxC1k0TUMX8dWaUmEXexmz39NC0n0= Subject key identifier: C6:EC:13:FC:22:0C:BC:67:0E:9D:95:16:3C:DF:2C:AC:FB:A1:F5:AD Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae Certificate serial: 019B12DCF079FA5EFB0C6B6C545F6D10640D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft Manifest number: 0FE1 Signing time: Fri 12 Dec 2025 14:00:27 +0000 Manifest this update: Fri 12 Dec 2025 14:00:27 +0000 Manifest next update: Sat 13 Dec 2025 14:00:27 +0000 Files and hashes: 1: D9VtpqQ5QcOE8_3AAGv6AbSncPk.roa (hash: 45VJpPEdefwyDmmpbMXwZdBXiJtpSM2szrEhn6hGnnw=) 2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: HlGs27mTfYNT/cOYtY6sOPazmw/q/iv2Nv9DvqB6oro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 14:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:dc:f0:79:fa:5e:fb:0c:6b:6c:54:5f:6d:10:64:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae Validity Not Before: Dec 12 14:00:27 2025 GMT Not After : Dec 13 14:00:27 2025 GMT Subject: CN=c6ec13fc220cbc670e9d95163cdf2cacfba1f5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:80:b7:93:d0:ad:70:d6:81:1a:5d:5d:d7:ce: 4e:63:3c:4c:0e:23:55:38:c5:39:8f:7f:7a:ca:a6: 7d:61:2d:14:81:41:b5:d1:67:75:b7:1e:50:1c:18: 3f:73:4a:cf:e8:b8:c4:f5:f4:45:5c:60:32:21:1b: ef:8c:54:31:e2:4f:49:ac:c5:cd:55:e2:3e:71:6a: 7f:ca:66:f9:31:ce:af:f8:6c:25:d7:33:0f:7b:b1: 12:5e:c7:58:a8:ff:b3:2f:07:c5:86:9f:9f:e6:02: 02:cf:af:bb:41:e4:df:76:d4:a7:ab:8d:cc:5c:b5: 43:e8:ac:21:b8:1b:99:70:09:5a:f7:e5:19:48:00: 94:b3:4b:8e:fc:a5:45:f8:b9:68:08:e1:9d:fa:93: 63:68:b9:cc:11:fd:f2:87:b3:f0:d3:84:8c:e6:4f: 87:2d:95:75:98:14:c3:72:24:75:3f:ff:5e:e2:46: c7:01:c7:4b:de:d6:1e:47:7a:09:0c:9f:a8:36:53: bd:8a:39:be:38:bd:94:74:1a:ae:6e:53:5a:87:37: dc:9a:a8:37:ec:d1:08:64:43:29:d0:29:b4:71:cd: 8d:1e:91:f5:43:11:ba:c1:2d:26:80:89:01:6b:d3: f2:ee:05:2f:83:ed:a9:2f:2d:33:f7:f0:88:04:d5: e1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:EC:13:FC:22:0C:BC:67:0E:9D:95:16:3C:DF:2C:AC:FB:A1:F5:AD X509v3 Authority Key Identifier: keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:62:d4:66:5d:b5:12:2f:53:50:df:7b:ab:88:a5:a5:c4:9f: bf:01:74:d5:62:9d:30:31:71:b9:e5:47:c4:7e:d8:d0:e1:af: 69:ef:10:e1:41:82:16:dc:02:1b:5b:c7:74:bf:0c:c3:3b:87: 3f:4a:41:b2:70:27:8d:ea:53:c9:ad:d7:4b:b1:66:08:df:3b: 6d:87:4d:80:11:8c:33:f9:5a:94:46:b1:7a:56:dd:08:ad:9a: 3a:71:07:7f:bd:a7:b9:a1:a8:7d:29:ed:49:a7:5f:61:f3:e2: 68:11:f6:77:84:a3:3a:4e:9f:7c:03:47:09:04:68:36:3d:62: df:24:66:93:ac:2f:04:12:51:e2:2a:20:c3:f5:02:41:98:b9: 4b:fb:04:68:03:af:ff:f8:b4:6b:70:9a:09:cc:53:b7:d2:8b: 79:5a:6e:69:eb:21:fc:11:8e:88:dc:53:04:ba:f1:fc:21:80: 4d:f0:e1:61:d2:67:fb:a5:8a:66:86:78:39:e9:3a:29:af:3a: 84:af:8c:be:fa:73:60:4b:ef:70:c9:02:29:2d:0c:51:35:27: 8b:e0:25:d9:1f:26:bb:c9:c7:cb:24:b3:f4:d1:b2:c2:4d:86: 4c:e9:21:96:22:11:31:b2:58:ef:07:ae:13:8a:4b:9b:14:fc: c4:80:c9:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsS3PB5+l77DGtsVF9tEGQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMGFhOTY4MmM2ODNhOWMxYjk1Y2U5Njc2ZDUxYjIwZDM5 ZmQyYWUwHhcNMjUxMjEyMTQwMDI3WhcNMjUxMjEzMTQwMDI3WjAzMTEwLwYDVQQD EyhjNmVjMTNmYzIyMGNiYzY3MGU5ZDk1MTYzY2RmMmNhY2ZiYTFmNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYC3k9CtcNaBGl1d185OYzxMDiNV OMU5j396yqZ9YS0UgUG10Wd1tx5QHBg/c0rP6LjE9fRFXGAyIRvvjFQx4k9JrMXN VeI+cWp/ymb5Mc6v+Gwl1zMPe7ESXsdYqP+zLwfFhp+f5gICz6+7QeTfdtSnq43M XLVD6KwhuBuZcAla9+UZSACUs0uO/KVF+LloCOGd+pNjaLnMEf3yh7Pw04SM5k+H LZV1mBTDciR1P/9e4kbHAcdL3tYeR3oJDJ+oNlO9ijm+OL2UdBqublNahzfcmqg3 7NEIZEMp0Cm0cc2NHpH1QxG6wS0mgIkBa9Py7gUvg+2pLy0z9/CIBNXhNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbsE/wiDLxnDp2VFjzfLKz7ofWtMB8GA1UdIwQY MBaAFFoKqWgsaDqcG5XOlnbVGyDTn9KuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjkt NmVlZDUyOTY4YjFjLzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjktNmVlZDUyOTY4YjFj LzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADWLUZl21 Ei9TUN97q4ilpcSfvwF01WKdMDFxueVHxH7Y0OGvae8Q4UGCFtwCG1vHdL8MwzuH P0pBsnAnjepTya3XS7FmCN87bYdNgBGMM/lalEaxelbdCK2aOnEHf72nuaGofSnt SadfYfPiaBH2d4SjOk6ffANHCQRoNj1i3yRmk6wvBBJR4iogw/UCQZi5S/sEaAOv //i0a3CaCcxTt9KLeVpuaesh/BGOiNxTBLrx/CGATfDhYdJn+6WKZoZ4Oek6Ka86 hK+MvvpzYEvvcMkCKS0MUTUni+Al2R8mu8nHyySz9NGywk2GTOkhliIRMbJY7weu E4pLmxT8xIDJ2g== -----END CERTIFICATE-----Generated at Fri Dec 12 19:04:45 2025 by rpki-client