This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft File: WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json) Hash identifier: Fy0angp3kZjQMZSXWyWRPh73W0wcKH9KThNkpMrvAdg= Subject key identifier: 5D:7F:46:11:71:8C:3B:EA:6F:2B:98:74:DE:A6:6D:45:5D:CB:C1:54 Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Certificate serial: 019B59775BB96D781A8C7DEE26CCCD7538A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft Manifest number: 07FB Signing time: Fri 26 Dec 2025 07:02:32 +0000 Manifest this update: Fri 26 Dec 2025 07:02:32 +0000 Manifest next update: Sat 27 Dec 2025 07:02:32 +0000 Files and hashes: 1: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: NJiOZ61bHTv/vPIgj+3UctQr1F6M4JhtR4fUev0FtpA=) 2: s5QSQwev5CqksmjM0AaoSdiOZEY.roa (hash: r2aK748rLgMwkpT8AEvF91wvzX74j/vxHw/8YYI08JI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:5b:b9:6d:78:1a:8c:7d:ee:26:cc:cd:75:38:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Validity Not Before: Dec 26 07:02:32 2025 GMT Not After : Dec 27 07:02:32 2025 GMT Subject: CN=5d7f4611718c3bea6f2b9874dea66d455dcbc154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:48:01:35:99:07:f4:8c:b2:c7:55:7f:2f: 31:df:72:7f:5a:24:63:9b:54:a4:dd:10:a6:2f:0a: 10:fb:8f:e3:d9:c0:fc:a8:d0:f7:18:01:e5:9b:da: 80:bb:fb:82:bf:b6:e8:e7:d4:05:9c:52:bc:2f:cc: 39:4a:61:3c:14:a6:54:84:e7:8f:fd:6d:44:b2:fe: 5d:77:f4:a8:67:32:40:66:3f:f6:51:a0:45:11:58: d8:6c:85:d4:e4:c2:94:3e:78:16:39:ac:8c:23:88: f1:19:f5:54:04:4d:01:86:f8:fd:8f:49:22:96:4e: f2:9a:18:50:d8:73:37:b6:97:3b:6d:86:7a:6e:58: ca:0c:7f:c6:23:ac:1f:35:1f:11:f5:aa:74:51:dd: 67:47:b4:e5:68:36:04:85:35:7b:07:13:00:ce:d5: a8:2b:2e:37:25:42:c9:0e:9a:db:7b:3a:15:48:fb: 06:88:e1:7a:ea:61:ae:1a:fc:67:4d:59:7c:4a:ec: cc:ce:a8:c0:e4:cf:2c:a4:0b:1f:f9:f1:f4:cc:7b: 13:1e:0b:d4:7c:be:9c:2f:5f:74:83:30:66:26:52: 22:f6:50:21:0b:80:9f:4a:0f:ab:76:4c:9e:d4:67: 30:d5:83:c0:09:0c:fd:e6:3a:ec:c5:bb:3c:19:cc: 3e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7F:46:11:71:8C:3B:EA:6F:2B:98:74:DE:A6:6D:45:5D:CB:C1:54 X509v3 Authority Key Identifier: keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:2b:6d:12:ea:99:0b:c1:cf:40:f0:66:52:10:f6:9b:90:a2: ff:1f:73:88:56:fa:74:95:19:6e:65:e7:00:13:36:cc:b5:09: 1f:42:17:b5:32:7e:3c:ff:95:04:35:6c:57:5a:b3:07:89:7d: 69:ff:d2:75:1f:51:70:0c:f9:49:7f:07:b9:08:e2:e1:1f:35: b5:e8:cd:4c:fb:88:2f:3e:fb:33:f8:96:27:7d:76:52:1f:fb: 32:8e:d1:7b:93:db:0d:08:ca:83:0e:e6:1e:6c:9b:94:9c:62: 66:34:66:2a:a0:01:89:03:f6:94:17:59:72:c4:64:97:83:0f: f6:da:c4:1f:52:8f:33:a1:76:48:d9:b8:da:16:08:83:03:29: c6:f2:c2:ee:67:2f:51:bf:12:76:3d:b4:22:82:98:5b:e9:b4: 10:11:72:91:92:03:7a:62:30:19:dc:6a:27:2a:3a:b4:f0:3b: af:91:d2:3d:7b:8b:94:a5:03:df:74:fe:07:7b:73:66:1e:cc: c2:74:3c:a7:0c:b2:ec:9d:9d:b8:fd:6b:09:c9:eb:51:af:0d: 89:50:f3:45:57:47:4d:d9:46:50:a6:a5:c7:88:b3:ec:4f:1c: 4b:d1:0c:91:09:09:1b:ce:7a:00:ae:9a:4c:40:e3:fa:b8:1f: 7f:db:f3:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1u5bXgajH3uJszNdTioMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NmQ0MDBmYWE1MjY5MDk5Y2M3YjFjN2EwM2NlNjlkODM5 MWYyMWEwHhcNMjUxMjI2MDcwMjMyWhcNMjUxMjI3MDcwMjMyWjAzMTEwLwYDVQQD Eyg1ZDdmNDYxMTcxOGMzYmVhNmYyYjk4NzRkZWE2NmQ0NTVkY2JjMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicRIATWZB/SMssdVfy8x33J/WiRj m1Sk3RCmLwoQ+4/j2cD8qND3GAHlm9qAu/uCv7bo59QFnFK8L8w5SmE8FKZUhOeP /W1Esv5dd/SoZzJAZj/2UaBFEVjYbIXU5MKUPngWOayMI4jxGfVUBE0Bhvj9j0ki lk7ymhhQ2HM3tpc7bYZ6bljKDH/GI6wfNR8R9ap0Ud1nR7TlaDYEhTV7BxMAztWo Ky43JULJDprbezoVSPsGiOF66mGuGvxnTVl8SuzMzqjA5M8spAsf+fH0zHsTHgvU fL6cL190gzBmJlIi9lAhC4CfSg+rdkye1Gcw1YPACQz95jrsxbs8Gcw+0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1/RhFxjDvqbyuYdN6mbUVdy8FUMB8GA1UdIwQY MBaAFFltQA+qUmkJnMexx6A85p2DkfIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUt YzI4N2RiOTM0OTEyLzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUtYzI4N2RiOTM0OTEy LzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnyttEuqZ C8HPQPBmUhD2m5Ci/x9ziFb6dJUZbmXnABM2zLUJH0IXtTJ+PP+VBDVsV1qzB4l9 af/SdR9RcAz5SX8HuQji4R81tejNTPuILz77M/iWJ312Uh/7Mo7Re5PbDQjKgw7m HmyblJxiZjRmKqABiQP2lBdZcsRkl4MP9trEH1KPM6F2SNm42hYIgwMpxvLC7mcv Ub8Sdj20IoKYW+m0EBFykZIDemIwGdxqJyo6tPA7r5HSPXuLlKUD33T+B3tzZh7M wnQ8pwyy7J2duP1rCcnrUa8NiVDzRVdHTdlGUKalx4iz7E8cS9EMkQkJG856AK6a TEDj+rgff9vzMw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:08 2025 by rpki-client