This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json) Hash identifier: FTidakEJfHCCUSyNKqJGT23fuT8siEA7Wd1fk+Ikx/I= Subject key identifier: 14:BF:27:FA:B9:A5:42:BC:13:10:23:DC:15:5D:E6:58:E6:2B:F2:32 Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a Certificate serial: 019B1E05DCAE37E57F55BC1CD869A134EA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft Manifest number: 04DB Signing time: Sun 14 Dec 2025 18:00:59 +0000 Manifest this update: Sun 14 Dec 2025 18:00:59 +0000 Manifest next update: Mon 15 Dec 2025 18:00:59 +0000 Files and hashes: 1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=) 2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: XJirhLE3E32KxLK/jc78HCVZG7S1D9XucdrTnwmTC84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:dc:ae:37:e5:7f:55:bc:1c:d8:69:a1:34:ea:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591338a61f6a0f548420a9392037f4811749508a Validity Not Before: Dec 14 18:00:59 2025 GMT Not After : Dec 15 18:00:59 2025 GMT Subject: CN=14bf27fab9a542bc131023dc155de658e62bf232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:6c:8c:ce:21:82:28:ec:a1:fe:be:a8:36: f7:53:1a:d5:db:94:40:2f:27:39:b3:bd:ae:10:b8: 7b:03:d3:48:e3:68:6e:6f:49:2c:43:a7:e6:a2:aa: 3e:cc:62:05:00:e0:c0:d5:23:ba:c9:d6:4d:a5:81: 77:06:30:f6:05:91:e3:29:02:5f:c4:ad:b4:5e:d2: fd:21:45:a3:ba:db:99:fa:17:65:95:96:55:a2:c1: cd:36:98:63:7e:52:42:73:e5:84:7d:59:dc:6f:1d: 0d:af:99:4f:64:11:bd:72:0a:02:54:e5:db:33:9b: b8:1f:52:51:ae:73:3b:b7:29:92:d4:74:9f:0b:85: 5c:7e:c0:ff:ba:4e:fd:21:44:d7:ab:4d:4e:42:9d: bb:c9:d3:d4:24:d5:62:46:2a:1b:8b:59:90:81:8b: 23:10:25:0e:0c:6d:59:a7:67:aa:62:78:d1:7e:81: d6:dc:8e:f9:34:8f:8f:07:22:37:ca:d1:63:07:7c: 6d:71:83:83:df:51:f8:d8:1b:82:84:fa:99:3f:3c: 53:90:6d:a9:c4:af:5d:6b:e8:38:4f:f8:6b:c3:81: b6:4b:4c:78:b9:e9:ef:59:ae:ae:e2:37:21:05:d9: 2b:5b:81:b9:f8:c0:8b:f3:f7:a0:e0:fe:8c:b8:cc: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BF:27:FA:B9:A5:42:BC:13:10:23:DC:15:5D:E6:58:E6:2B:F2:32 X509v3 Authority Key Identifier: keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a0:ff:97:11:3f:67:0d:10:44:72:b7:ad:df:d6:07:cb:d4: 1a:53:55:15:95:d7:87:37:8b:dd:79:54:e0:c1:5e:ca:f3:19: 1d:05:1e:24:62:e9:b9:81:0a:d3:78:ec:db:2b:c8:ae:b7:7a: 18:27:00:ae:b7:0f:09:86:ff:7d:8b:85:30:72:44:1c:f2:cb: 46:40:30:69:c8:8a:ab:57:59:8e:22:37:a3:6a:c1:9d:6a:ed: 70:91:6c:a0:5b:fb:3a:70:a3:86:b9:fa:c4:ca:c9:13:f1:1b: 8e:bd:4e:ea:b0:29:b0:34:7f:2c:0a:7f:8b:c3:92:90:44:bb: ac:a9:c4:9d:ee:ce:16:df:59:42:8e:4d:f6:54:81:e2:2a:53: 36:6d:b2:a7:29:27:74:5c:e9:18:61:07:4d:26:6b:17:ca:d8: 9b:13:af:22:42:ca:d6:4c:f9:e8:75:a6:8c:f2:10:dd:0d:91: 2f:5a:21:b0:34:09:03:7b:2b:fa:34:bb:33:ee:29:ea:e1:0b: 7f:d5:38:d1:d3:85:93:2a:9a:eb:59:39:bf:f1:94:69:8c:02: 17:71:5f:14:0f:8c:d4:00:b2:3e:a9:00:90:34:90:0d:22:80: 4f:ca:25:73:4e:90:18:50:b9:ee:b1:d5:ce:d0:74:5c:24:28: 78:64:db:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBdyuN+V/Vbwc2GmhNOokMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTMzOGE2MWY2YTBmNTQ4NDIwYTkzOTIwMzdmNDgxMTc0 OTUwOGEwHhcNMjUxMjE0MTgwMDU5WhcNMjUxMjE1MTgwMDU5WjAzMTEwLwYDVQQD EygxNGJmMjdmYWI5YTU0MmJjMTMxMDIzZGMxNTVkZTY1OGU2MmJmMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo5sjM4hgijsof6+qDb3UxrV25RA Lyc5s72uELh7A9NI42hub0ksQ6fmoqo+zGIFAODA1SO6ydZNpYF3BjD2BZHjKQJf xK20XtL9IUWjutuZ+hdllZZVosHNNphjflJCc+WEfVncbx0Nr5lPZBG9cgoCVOXb M5u4H1JRrnM7tymS1HSfC4VcfsD/uk79IUTXq01OQp27ydPUJNViRiobi1mQgYsj ECUODG1Zp2eqYnjRfoHW3I75NI+PByI3ytFjB3xtcYOD31H42BuChPqZPzxTkG2p xK9da+g4T/hrw4G2S0x4uenvWa6u4jchBdkrW4G5+MCL8/eg4P6MuMxZewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBS/J/q5pUK8ExAj3BVd5ljmK/IyMB8GA1UdIwQY MBaAFFkTOKYfag9UhCCpOSA39IEXSVCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEt MTg5NDBjYjM3MmJkLzEvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEtMTg5NDBjYjM3MmJk LzEvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXqD/lxE/ Zw0QRHK3rd/WB8vUGlNVFZXXhzeL3XlU4MFeyvMZHQUeJGLpuYEK03js2yvIrrd6 GCcArrcPCYb/fYuFMHJEHPLLRkAwaciKq1dZjiI3o2rBnWrtcJFsoFv7OnCjhrn6 xMrJE/Ebjr1O6rApsDR/LAp/i8OSkES7rKnEne7OFt9ZQo5N9lSB4ipTNm2ypykn dFzpGGEHTSZrF8rYmxOvIkLK1kz56HWmjPIQ3Q2RL1ohsDQJA3sr+jS7M+4p6uEL f9U40dOFkyqa61k5v/GUaYwCF3FfFA+M1ACyPqkAkDSQDSKAT8olc06QGFC57rHV ztB0XCQoeGTbqg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:52:14 2025 by rpki-client