This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json) Hash identifier: 2KbPnUVUdxCMcEh/8nju39q2q5Tdv3zydSVmeVqCDrI= Subject key identifier: CF:64:98:91:B0:C0:6B:D5:11:04:71:CA:E7:12:16:6C:D6:13:72:3A Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e Certificate serial: 019B194D5D9B1D666F0641B58D633A84EE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft Manifest number: 0BD8 Signing time: Sat 13 Dec 2025 20:00:59 +0000 Manifest this update: Sat 13 Dec 2025 20:00:59 +0000 Manifest next update: Sun 14 Dec 2025 20:00:59 +0000 Files and hashes: 1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: Hw0ZLWvGs71vMUw+rWeGs3arrCpdFuUBsfJlNA2pXxQ=) 2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:5d:9b:1d:66:6f:06:41:b5:8d:63:3a:84:ee:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e Validity Not Before: Dec 13 20:00:59 2025 GMT Not After : Dec 14 20:00:59 2025 GMT Subject: CN=cf649891b0c06bd5110471cae712166cd613723a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d3:d7:ab:dd:bb:1f:40:7d:e1:4b:5c:a3:85: 91:11:13:6c:1c:b7:d7:30:15:a9:0f:3a:ba:e4:67: b9:91:25:ed:a0:b3:90:d6:4b:58:ea:b4:35:b4:15: 86:56:26:53:c8:ff:c1:0f:0d:ec:d9:84:c8:b0:c0: e2:91:ff:27:9c:e9:77:af:b8:86:a0:11:50:45:d9: 13:06:ff:a3:75:2e:b2:33:cd:8c:5a:f7:08:46:ba: 46:bc:5e:e1:ce:73:fc:b3:ff:55:1c:0e:9b:0a:86: 38:3d:02:c3:16:f4:d1:88:7f:a2:33:c1:93:0a:b7: 8c:bf:db:70:31:16:70:0d:b3:fa:50:3b:fc:bf:2b: d6:d8:59:2e:ef:a2:ed:16:75:d5:b8:01:04:18:36: ca:6e:7f:0e:e2:08:10:3f:36:b5:69:81:3e:6e:8a: 15:81:ee:8d:e3:1a:be:19:d5:02:4d:3d:1a:07:b6: 22:52:c4:1a:a2:0a:9e:26:82:49:89:28:57:21:85: de:a7:9b:3c:e7:70:ad:43:dc:6d:3c:ad:dd:1a:32: b7:7f:05:20:d9:e6:2b:fe:27:7f:82:b9:6e:f8:9e: 57:d2:48:bb:c8:3a:17:fc:56:3f:78:9d:2b:ee:a7: 7d:03:f4:99:7d:c4:39:1b:e8:41:9f:3c:e5:ea:e1: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:64:98:91:B0:C0:6B:D5:11:04:71:CA:E7:12:16:6C:D6:13:72:3A X509v3 Authority Key Identifier: keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:30:d1:72:d4:7d:df:ab:eb:a5:48:a5:ab:4b:7a:d9:30:91: 5f:08:34:e2:91:e5:6d:7b:f3:1d:36:3c:b8:96:0d:86:00:1e: b6:fa:75:6f:d0:ca:eb:2f:bf:56:58:6d:f1:60:38:94:30:c3: dd:88:09:18:90:08:52:b5:d8:f6:c8:ad:47:24:87:d6:41:5b: 96:ea:26:f3:bb:1a:c6:f7:8f:6b:b1:9f:9d:53:9e:8f:c0:3a: d2:8b:ce:9c:69:3f:d9:17:a8:b7:9b:a1:5e:69:32:76:36:2d: 1e:fd:c6:8f:d5:22:8e:35:80:4a:42:fe:2c:44:8f:81:ff:1d: 4a:9d:6b:24:ba:6b:be:d7:0b:56:44:b5:b6:f5:fd:2c:ea:87: 9f:44:40:e7:b8:19:4a:99:91:5a:e1:55:7f:66:1e:c4:62:26: e6:bd:7e:c8:72:e3:90:71:c1:4d:80:73:79:d3:e4:46:40:30: e9:b1:d1:1b:65:50:31:53:26:44:5c:0e:c9:b5:40:b0:c9:59: 31:5c:fc:d5:16:0a:ca:8e:38:04:a6:63:76:aa:ac:65:91:ec: c6:dd:0d:b6:6b:40:37:e6:40:bc:87:73:7e:07:97:5d:a7:0d: 29:cc:d9:16:14:cc:f9:fc:55:32:dd:fa:3a:21:8d:40:a5:d2: f2:b5:82:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTV2bHWZvBkG1jWM6hO59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTM4ZTNkYjc3NjQwYmVhZGYxZGE1YjE1MTk0YjkzODRh MTQ0NGUwHhcNMjUxMjEzMjAwMDU5WhcNMjUxMjE0MjAwMDU5WjAzMTEwLwYDVQQD EyhjZjY0OTg5MWIwYzA2YmQ1MTEwNDcxY2FlNzEyMTY2Y2Q2MTM3MjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9PXq927H0B94Utco4WRERNsHLfX MBWpDzq65Ge5kSXtoLOQ1ktY6rQ1tBWGViZTyP/BDw3s2YTIsMDikf8nnOl3r7iG oBFQRdkTBv+jdS6yM82MWvcIRrpGvF7hznP8s/9VHA6bCoY4PQLDFvTRiH+iM8GT CreMv9twMRZwDbP6UDv8vyvW2Fku76LtFnXVuAEEGDbKbn8O4ggQPza1aYE+booV ge6N4xq+GdUCTT0aB7YiUsQaogqeJoJJiShXIYXep5s853CtQ9xtPK3dGjK3fwUg 2eYr/id/grlu+J5X0ki7yDoX/FY/eJ0r7qd9A/SZfcQ5G+hBnzzl6uEWcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9kmJGwwGvVEQRxyucSFmzWE3I6MB8GA1UdIwQY MBaAFFkTjj23dkC+rfHaWxUZS5OEoUROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDkt N2E0ZTMzNDBhNDkxLzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDktN2E0ZTMzNDBhNDkx LzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzDRctR9 36vrpUilq0t62TCRXwg04pHlbXvzHTY8uJYNhgAetvp1b9DK6y+/Vlht8WA4lDDD 3YgJGJAIUrXY9sitRySH1kFbluom87saxvePa7GfnVOej8A60ovOnGk/2Reot5uh XmkydjYtHv3Gj9UijjWASkL+LESPgf8dSp1rJLprvtcLVkS1tvX9LOqHn0RA57gZ SpmRWuFVf2YexGIm5r1+yHLjkHHBTYBzedPkRkAw6bHRG2VQMVMmRFwOybVAsMlZ MVz81RYKyo44BKZjdqqsZZHsxt0NtmtAN+ZAvIdzfgeXXacNKczZFhTM+fxVMt36 OiGNQKXS8rWCJg== -----END CERTIFICATE-----Generated at Sun Dec 14 01:53:05 2025 by rpki-client