This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json) Hash identifier: 7ze9BsMeDnsWma+3uwfQw+PqefYRSmq3KpoPA5KkNRs= Subject key identifier: 7F:4B:DA:7C:E2:CE:93:18:30:94:DC:C3:5B:C4:28:EE:D6:B4:68:72 Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a Certificate serial: 019B1A29C9C63727B527F230D482807899FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft Manifest number: 04D9 Signing time: Sun 14 Dec 2025 00:01:44 +0000 Manifest this update: Sun 14 Dec 2025 00:01:44 +0000 Manifest next update: Mon 15 Dec 2025 00:01:44 +0000 Files and hashes: 1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=) 2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: wRDMOz3qihvk2grCOHTAy6G67CBoKRa2jSCa63v8miU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 00:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:29:c9:c6:37:27:b5:27:f2:30:d4:82:80:78:99:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591338a61f6a0f548420a9392037f4811749508a Validity Not Before: Dec 14 00:01:44 2025 GMT Not After : Dec 15 00:01:44 2025 GMT Subject: CN=7f4bda7ce2ce93183094dcc35bc428eed6b46872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ed:0b:e5:24:17:a8:16:c8:11:3c:b0:69:62: be:b6:b4:43:0d:fc:65:0f:83:77:db:1e:8a:22:d9: 9a:c9:e1:d0:ad:e4:f0:10:6e:85:8a:42:ba:e7:b0: f8:7a:a9:55:c6:b3:69:8b:2c:04:50:06:f3:46:fa: c4:3d:28:b3:90:b1:bf:3e:06:7d:f3:ac:4d:66:70: 54:8c:f3:90:d3:97:f7:b4:f2:72:f2:34:48:12:9f: 9e:cd:ff:71:57:36:48:e3:70:6f:8a:c7:04:a6:d0: 5f:91:67:3d:76:f1:43:7d:90:c0:68:3a:56:63:cb: 87:74:8d:65:69:d1:92:a0:44:7a:8a:b3:b2:b4:45: 6f:76:a5:43:cc:b2:75:92:3e:f7:a4:62:ea:b3:49: 89:c1:f2:17:97:02:fb:ac:5a:16:3a:38:dd:1d:7e: 72:32:ed:85:63:87:4e:12:6a:40:25:07:66:37:91: 24:f0:ea:01:94:03:eb:32:2a:b6:cf:43:e3:72:cf: 50:bf:24:09:88:9e:19:14:39:7e:6b:67:89:e0:3c: 77:1f:59:71:dc:32:f9:57:24:a3:6c:bc:cc:d3:7d: 6c:6c:29:a8:23:9c:5c:f5:c1:d1:ec:9e:9d:6f:ab: f4:96:c1:e0:29:7a:3a:bc:d2:43:d0:6f:47:31:da: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4B:DA:7C:E2:CE:93:18:30:94:DC:C3:5B:C4:28:EE:D6:B4:68:72 X509v3 Authority Key Identifier: keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:fa:f5:4d:a9:19:42:27:e6:46:e6:a0:7f:0a:f8:1a:13:f9: 87:cb:a9:61:58:c2:9b:c3:da:3d:a7:c8:15:0a:f1:9b:8d:79: 83:c7:a2:d6:c7:23:f4:65:a5:f9:58:d6:d8:1a:6f:5f:3c:a3: 3a:14:3a:8b:dc:5d:37:22:5c:a8:1c:82:44:53:39:b0:1b:73: 46:ee:ca:a9:a7:23:89:89:32:48:11:38:f6:fe:9e:ca:f4:f2: 4d:db:34:27:1c:0f:91:d7:f4:6d:0b:c1:ab:98:59:d5:54:23: a3:75:74:a5:c1:85:6b:14:d5:50:cc:48:1a:38:a5:c1:df:17: ac:b3:d7:5d:5a:7f:f0:92:97:f3:d9:8e:a3:c7:74:75:66:9d: 6d:e4:3d:bc:e0:b1:20:28:11:77:ba:50:de:cf:b6:59:06:5e: a9:51:98:4b:1b:ae:22:70:e7:94:4a:4e:41:6f:4f:da:4e:57: ae:9e:ea:46:91:de:11:ef:c0:81:5f:d1:f3:21:7e:84:a0:71: ce:7c:80:37:ec:1a:50:00:d9:3f:f6:82:bf:62:b5:14:7e:1b: 8f:7c:37:d0:c9:c4:bb:e2:9f:f8:f5:84:7e:d3:82:50:d0:1c: a1:08:ea:52:18:5d:ae:78:9b:ab:82:92:85:22:51:00:af:72: a1:ae:6c:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKcnGNye1J/Iw1IKAeJn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTMzOGE2MWY2YTBmNTQ4NDIwYTkzOTIwMzdmNDgxMTc0 OTUwOGEwHhcNMjUxMjE0MDAwMTQ0WhcNMjUxMjE1MDAwMTQ0WjAzMTEwLwYDVQQD Eyg3ZjRiZGE3Y2UyY2U5MzE4MzA5NGRjYzM1YmM0MjhlZWQ2YjQ2ODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu0L5SQXqBbIETywaWK+trRDDfxl D4N32x6KItmayeHQreTwEG6FikK657D4eqlVxrNpiywEUAbzRvrEPSizkLG/PgZ9 86xNZnBUjPOQ05f3tPJy8jRIEp+ezf9xVzZI43BviscEptBfkWc9dvFDfZDAaDpW Y8uHdI1ladGSoER6irOytEVvdqVDzLJ1kj73pGLqs0mJwfIXlwL7rFoWOjjdHX5y Mu2FY4dOEmpAJQdmN5Ek8OoBlAPrMiq2z0Pjcs9QvyQJiJ4ZFDl+a2eJ4Dx3H1lx 3DL5VySjbLzM031sbCmoI5xc9cHR7J6db6v0lsHgKXo6vNJD0G9HMdrcowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9L2nzizpMYMJTcw1vEKO7WtGhyMB8GA1UdIwQY MBaAFFkTOKYfag9UhCCpOSA39IEXSVCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEt MTg5NDBjYjM3MmJkLzEvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEtMTg5NDBjYjM3MmJk LzEvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/r1TakZ QifmRuagfwr4GhP5h8upYVjCm8PaPafIFQrxm415g8ei1scj9GWl+VjW2BpvXzyj OhQ6i9xdNyJcqByCRFM5sBtzRu7KqacjiYkySBE49v6eyvTyTds0JxwPkdf0bQvB q5hZ1VQjo3V0pcGFaxTVUMxIGjilwd8XrLPXXVp/8JKX89mOo8d0dWadbeQ9vOCx ICgRd7pQ3s+2WQZeqVGYSxuuInDnlEpOQW9P2k5Xrp7qRpHeEe/AgV/R8yF+hKBx znyAN+waUADZP/aCv2K1FH4bj3w30MnEu+Kf+PWEftOCUNAcoQjqUhhdrnibq4KS hSJRAK9yoa5spw== -----END CERTIFICATE-----Generated at Sun Dec 14 07:46:25 2025 by rpki-client