This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json) Hash identifier: xyVyiVmQqrCLa4DALsBDVwIeoV1TZQM+m1i18WLuWbw= Subject key identifier: FC:90:EA:9D:DB:48:B9:EB:68:A9:D9:EC:F2:00:15:EF:48:3C:C6:79 Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf Certificate serial: 019B202B49301AA496E19A0107F120AF305B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft Manifest number: 1271 Signing time: Mon 15 Dec 2025 04:01:06 +0000 Manifest this update: Mon 15 Dec 2025 04:01:06 +0000 Manifest next update: Tue 16 Dec 2025 04:01:06 +0000 Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: kaVZhxWhQkMm1jzLXld7K5Lw2QLq8NgxqkeP0gUZdAs=) 2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:49:30:1a:a4:96:e1:9a:01:07:f1:20:af:30:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf Validity Not Before: Dec 15 04:01:06 2025 GMT Not After : Dec 16 04:01:06 2025 GMT Subject: CN=fc90ea9ddb48b9eb68a9d9ecf20015ef483cc679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:91:af:a9:a1:cb:67:db:7e:65:ff:6a:ab: b2:9e:0b:6c:31:17:0c:38:da:17:87:c3:27:93:95: a8:f0:71:9e:57:4d:f7:d6:0e:ee:2d:c4:05:c6:b3: 7a:c0:82:fc:af:97:1a:72:3e:85:92:71:19:0c:71: da:2e:61:ec:df:6b:6d:3d:5f:e9:4a:e3:1d:b1:20: 6c:94:cf:6a:7a:09:a3:85:34:25:97:7c:6c:d7:2d: 2e:bd:dd:7f:91:77:2c:ed:38:80:b7:36:96:29:21: d2:e1:c9:a5:80:c7:02:6f:11:79:44:86:1b:d7:dd: aa:42:21:83:f3:e2:60:de:fb:d5:e8:d1:4a:c1:a7: f2:0f:6e:22:10:f1:ff:99:91:35:9d:2b:47:09:a0: ac:b5:9c:5f:23:be:3b:5c:e5:92:99:cd:43:f0:a8: 07:ea:b2:48:8c:d0:c7:56:0a:c6:24:55:75:28:62: 29:cc:23:92:41:1d:0c:20:97:a5:43:9a:d4:64:8f: 93:ad:d9:f1:78:4b:f4:7c:fc:cb:bd:19:b9:0b:8b: 9b:ed:20:46:63:e2:bc:17:31:7f:4e:0b:d5:18:cc: c1:37:cc:a1:03:93:bb:d6:f4:01:c4:d3:56:08:2c: f6:b1:37:e5:61:1b:17:a4:4d:b0:7d:2d:67:af:39: ea:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:90:EA:9D:DB:48:B9:EB:68:A9:D9:EC:F2:00:15:EF:48:3C:C6:79 X509v3 Authority Key Identifier: keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:24:6c:23:32:33:7a:8d:bc:33:2f:25:25:e4:c8:b7:fa:97: 4b:98:89:c3:33:da:f6:28:73:6f:a6:f3:3b:a1:ee:af:73:86: 49:24:6b:47:d4:a4:5e:ed:ca:cc:05:57:dc:4b:29:7d:e0:41: 87:3b:e6:b4:a0:3a:e4:61:b8:37:f2:81:df:59:eb:22:2f:d5: e4:c1:80:7c:d8:3e:69:b3:1c:5e:6c:02:9a:7f:1b:24:aa:25: 02:4f:7b:ef:d0:3b:56:b5:8b:50:02:c6:80:5b:6d:6a:40:42: e5:07:55:74:8a:5e:7f:c0:d4:4e:84:86:a3:64:38:3d:ae:48: 12:1b:c2:c4:ae:0b:67:28:e2:b5:c4:e6:95:1e:cc:e3:f8:9e: 38:77:bb:30:db:6c:2d:61:e5:4c:47:55:c1:7c:a7:3e:86:be: a8:1c:54:b0:21:00:5f:19:f3:6d:27:b6:f1:ff:7d:09:58:59: 05:30:c1:30:ec:75:50:dc:5b:2e:fd:5e:8c:2a:83:17:25:47: f4:29:26:ab:1e:80:11:bf:30:f5:1b:a5:c9:ba:77:05:51:2a: af:dd:83:30:ab:78:b1:a5:9d:b0:6f:30:14:a2:ad:48:a7:7c: c3:6b:25:4b:e4:bb:cf:54:af:db:8e:51:61:27:f5:f6:cf:2b: b7:27:45:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK0kwGqSW4ZoBB/EgrzBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNjExMDJlZDRkNjZkY2Q5NTJkZTAxMzA0ZTBhZmUxMzg0 ZDAwYmYwHhcNMjUxMjE1MDQwMTA2WhcNMjUxMjE2MDQwMTA2WjAzMTEwLwYDVQQD EyhmYzkwZWE5ZGRiNDhiOWViNjhhOWQ5ZWNmMjAwMTVlZjQ4M2NjNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT2Rr6mhy2fbfmX/aquyngtsMRcM ONoXh8Mnk5Wo8HGeV0331g7uLcQFxrN6wIL8r5cacj6FknEZDHHaLmHs32ttPV/p SuMdsSBslM9qegmjhTQll3xs1y0uvd1/kXcs7TiAtzaWKSHS4cmlgMcCbxF5RIYb 192qQiGD8+Jg3vvV6NFKwafyD24iEPH/mZE1nStHCaCstZxfI747XOWSmc1D8KgH 6rJIjNDHVgrGJFV1KGIpzCOSQR0MIJelQ5rUZI+TrdnxeEv0fPzLvRm5C4ub7SBG Y+K8FzF/TgvVGMzBN8yhA5O71vQBxNNWCCz2sTflYRsXpE2wfS1nrznqkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPyQ6p3bSLnraKnZ7PIAFe9IPMZ5MB8GA1UdIwQY MBaAFFphEC7U1m3NlS3gEwTgr+E4TQC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYt Mjg4YmQ2YjllMDkyLzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYtMjg4YmQ2YjllMDky LzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyRsIzIz eo28My8lJeTIt/qXS5iJwzPa9ihzb6bzO6Hur3OGSSRrR9SkXu3KzAVX3EspfeBB hzvmtKA65GG4N/KB31nrIi/V5MGAfNg+abMcXmwCmn8bJKolAk9779A7VrWLUALG gFttakBC5QdVdIpef8DUToSGo2Q4Pa5IEhvCxK4LZyjitcTmlR7M4/ieOHe7MNts LWHlTEdVwXynPoa+qBxUsCEAXxnzbSe28f99CVhZBTDBMOx1UNxbLv1ejCqDFyVH 9Ckmqx6AEb8w9Rulybp3BVEqr92DMKt4saWdsG8wFKKtSKd8w2slS+S7z1Sv245R YSf19s8rtydFaA== -----END CERTIFICATE-----Generated at Mon Dec 15 06:41:37 2025 by rpki-client