This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json) Hash identifier: 4K7SoJbtmwp50SGwcg30VOmKMNSZbdE0xWpeUs4G35s= Subject key identifier: 20:DE:58:93:46:B6:F3:87:A0:2B:47:8D:1B:4F:0A:7D:E7:31:27:E9 Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799 Certificate serial: 019B0FA6010BE410E782BA41399CF9D78B98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft Manifest number: 1771 Signing time: Thu 11 Dec 2025 23:01:36 +0000 Manifest this update: Thu 11 Dec 2025 23:01:36 +0000 Manifest next update: Fri 12 Dec 2025 23:01:36 +0000 Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=) 2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: ljAMe4EPKoHvECS6DbFaAlYMBa9Cf880M3QFU5QiiJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a6:01:0b:e4:10:e7:82:ba:41:39:9c:f9:d7:8b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799 Validity Not Before: Dec 11 23:01:36 2025 GMT Not After : Dec 12 23:01:36 2025 GMT Subject: CN=20de589346b6f387a02b478d1b4f0a7de73127e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:fc:b5:73:3c:2c:cc:84:aa:24:b4:53:73: f5:27:34:6c:ae:bf:66:d0:c6:de:f1:ef:47:4c:d1: 34:a6:51:f4:dc:bf:90:24:1a:e7:bc:a3:da:6a:35: ba:ce:ea:62:09:2f:10:5b:b9:3a:64:35:c3:e9:a1: ea:61:7c:b6:08:d8:db:15:af:34:e3:a5:3c:1b:f9: 38:6b:01:58:ab:83:06:11:20:e0:1d:10:a9:17:0f: 02:c2:09:ac:60:6a:3d:a6:c1:d5:eb:c0:e5:5a:6b: 76:61:67:9d:19:5c:0c:fb:41:a2:c3:b2:4d:c0:93: d3:f1:bb:9b:21:69:8f:56:ae:a8:29:e2:e9:8f:01: 44:d5:e4:cf:42:2b:d1:18:11:7f:d5:26:80:f8:bb: 12:4b:e0:09:1c:d7:44:2e:b3:d0:18:c3:17:5d:e7: cb:96:d6:68:b3:62:e7:00:89:d4:64:1d:3c:f7:75: ee:7e:81:75:50:ca:80:d5:04:15:ab:3f:92:50:b9: 51:b7:ae:aa:d2:cf:c7:c7:af:7b:e0:71:52:ee:85: 62:48:35:df:0f:aa:6c:77:75:d3:75:19:95:04:4a: b8:8e:c4:96:97:8c:26:2f:ec:f6:60:2a:21:4b:2f: fd:ba:e0:33:c7:a9:3c:b1:f5:ce:2f:0a:e3:00:10: 61:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DE:58:93:46:B6:F3:87:A0:2B:47:8D:1B:4F:0A:7D:E7:31:27:E9 X509v3 Authority Key Identifier: keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:aa:c8:51:44:fe:10:00:8b:ba:dc:ab:58:b3:08:9a:8c:6e: 7e:07:b2:77:3b:f5:33:b8:9c:ef:1c:d6:88:b7:d9:35:a3:a1: 91:a8:a8:1e:36:e5:4d:c5:92:0f:bc:81:25:2b:fc:4a:25:26: 83:08:ad:bd:f8:ab:ad:29:92:09:7e:fe:97:15:7b:9f:8f:ef: 99:06:b6:fd:91:97:45:d5:b7:12:d9:8c:51:b7:9b:7e:57:a0: 8c:c6:73:22:50:ff:56:3d:a1:a3:94:5f:fc:4f:07:98:49:ba: 86:04:45:bb:82:6a:90:35:fe:4d:30:23:f0:1e:ca:9e:f6:de: 72:76:8e:22:7b:55:5b:32:7b:98:53:3c:99:b6:0c:79:f1:5f: 6a:96:ce:68:0d:4f:e7:fb:49:49:ce:95:3a:56:14:96:32:ee: 94:93:15:53:c3:a5:24:3c:94:17:7a:48:d9:e1:97:26:20:07: 4b:b2:52:d1:9f:c3:f0:2b:b4:99:e1:b9:49:eb:ae:7f:17:6e: 71:3f:bd:4d:a7:97:80:81:95:1c:72:a3:fb:4c:84:93:4d:08: 0a:4e:46:84:9b:2e:13:79:64:59:88:86:f4:62:ec:b3:0a:c6: 85:36:6a:c0:6a:c7:f4:0c:05:ba:26:3f:83:7c:a4:62:35:09: a7:3d:b8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpgEL5BDngrpBOZz514uYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl NTA3OTkwHhcNMjUxMjExMjMwMTM2WhcNMjUxMjEyMjMwMTM2WjAzMTEwLwYDVQQD EygyMGRlNTg5MzQ2YjZmMzg3YTAyYjQ3OGQxYjRmMGE3ZGU3MzEyN2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3H8tXM8LMyEqiS0U3P1JzRsrr9m 0Mbe8e9HTNE0plH03L+QJBrnvKPaajW6zupiCS8QW7k6ZDXD6aHqYXy2CNjbFa80 46U8G/k4awFYq4MGESDgHRCpFw8CwgmsYGo9psHV68DlWmt2YWedGVwM+0Giw7JN wJPT8bubIWmPVq6oKeLpjwFE1eTPQivRGBF/1SaA+LsSS+AJHNdELrPQGMMXXefL ltZos2LnAInUZB0893XufoF1UMqA1QQVqz+SULlRt66q0s/Hx6974HFS7oViSDXf D6psd3XTdRmVBEq4jsSWl4wmL+z2YCohSy/9uuAzx6k8sfXOLwrjABBh7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDeWJNGtvOHoCtHjRtPCn3nMSfpMB8GA1UdIwQY MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6rIUUT+ EACLutyrWLMImoxufgeydzv1M7ic7xzWiLfZNaOhkaioHjblTcWSD7yBJSv8SiUm gwitvfirrSmSCX7+lxV7n4/vmQa2/ZGXRdW3EtmMUbebflegjMZzIlD/Vj2ho5Rf /E8HmEm6hgRFu4JqkDX+TTAj8B7KnvbecnaOIntVWzJ7mFM8mbYMefFfapbOaA1P 5/tJSc6VOlYUljLulJMVU8OlJDyUF3pI2eGXJiAHS7JS0Z/D8Cu0meG5Seuufxdu cT+9TaeXgIGVHHKj+0yEk00ICk5GhJsuE3lkWYiG9GLsswrGhTZqwGrH9AwFuiY/ g3ykYjUJpz24NQ== -----END CERTIFICATE-----Generated at Fri Dec 12 05:33:04 2025 by rpki-client