This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft File: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft (raw, json) Hash identifier: w9HDBADTVc4zi6neuK0sizF22s8FizFJUvHsVSL19P0= Subject key identifier: 4F:09:B0:F9:9E:23:B2:43:8A:99:C5:D2:6A:5C:A8:27:5B:33:21:30 Authority key identifier: 5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 Certificate issuer: /CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Certificate serial: 019B1916BD631E196C9C1CA94121A729B2BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft Manifest number: 0FA5 Signing time: Sat 13 Dec 2025 19:01:19 +0000 Manifest this update: Sat 13 Dec 2025 19:01:19 +0000 Manifest next update: Sun 14 Dec 2025 19:01:19 +0000 Files and hashes: 1: WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl (hash: LxC9dz2ShfnKG+3iMnze0OeonSjAFNaMrMd3XQ/w2Qk=) 2: sKACgvTr5E2KmqilEPnCMtDVWp0.roa (hash: GFqzFhApZWxNeYshDRfyRg5L0vTOIJdMwgZ8ZtOAg9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:bd:63:1e:19:6c:9c:1c:a9:41:21:a7:29:b2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa4e5710a46536bef2af36bf63f1940bc37bd42 Validity Not Before: Dec 13 19:01:19 2025 GMT Not After : Dec 14 19:01:19 2025 GMT Subject: CN=4f09b0f99e23b2438a99c5d26a5ca8275b332130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b7:a1:a9:6f:7a:b0:25:e6:d8:2d:ad:13:49: 2c:42:7b:d5:dc:0a:1f:da:23:27:8a:58:1d:79:8a: 3a:03:45:3b:ca:20:1f:c5:c1:6b:86:41:5c:99:06: 48:b1:e5:18:c3:4c:79:3f:19:f8:07:2a:c3:e3:1d: fc:1f:79:a9:d8:63:76:94:b0:d5:ae:f3:0d:ef:78: 45:f3:dc:6f:db:0b:5a:f9:e5:8c:a3:a2:a9:95:a3: b5:9a:42:b8:75:16:9a:14:78:5b:71:f2:63:c7:3e: b0:1d:83:8d:42:14:f7:e6:6f:cc:1a:5f:6d:eb:37: 52:3d:02:12:33:1c:70:b7:64:e0:63:fa:06:79:38: 95:09:98:db:d5:ff:00:22:11:78:bc:82:b4:5f:b7: c4:e1:ad:61:ad:8b:b4:7b:cc:7f:e8:d3:97:e0:3a: 3f:bc:cf:3f:6f:0f:2d:3a:ad:fd:3a:ba:6f:81:94: 95:ae:f9:85:25:7f:e3:54:07:8d:04:f4:a7:96:b6: 54:b4:0f:3a:75:0c:93:44:de:2b:97:9f:ac:2e:14: 75:cb:a2:87:6c:05:81:57:8f:15:97:bb:4f:7f:9d: 40:6d:e3:fd:7f:32:04:6d:80:47:67:65:52:e8:a3: 77:70:15:0f:88:cc:05:14:1b:4f:3b:10:3d:62:c3: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:09:B0:F9:9E:23:B2:43:8A:99:C5:D2:6A:5C:A8:27:5B:33:21:30 X509v3 Authority Key Identifier: keyid:5A:A4:E5:71:0A:46:53:6B:EF:2A:F3:6B:F6:3F:19:40:BC:37:BD:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1dd81c-665e-4b76-91fb-44dc52a19ce5/1/WqTlcQpGU2vvKvNr9j8ZQLw3vUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:39:ef:de:1a:41:0b:cd:97:b7:89:a9:1e:7b:2a:6d:54:f8: 87:2e:14:5d:78:e1:7f:bb:62:2e:dd:f7:46:fd:c7:c7:31:0d: 02:9d:59:c8:17:74:d3:92:7f:14:c5:5a:bd:bf:54:5d:d6:eb: 18:9c:35:7e:a0:c3:6d:9f:0b:ae:92:b0:d7:8b:5b:f4:38:29: b1:e0:cb:df:ca:83:5b:c8:6a:86:4d:4b:37:7e:dd:8b:f2:5e: 3a:6b:b8:87:3a:a8:f6:dd:18:87:36:42:6b:06:12:7d:ed:aa: 16:d1:26:ab:04:3d:7f:b9:56:bf:cf:a9:44:c6:0a:1c:3f:1e: 0a:c2:b0:e1:73:ba:17:8b:04:5d:87:75:ab:2c:1f:72:54:9f: bc:aa:bd:fb:35:cb:bf:e9:73:93:71:aa:d2:89:36:7c:a1:0e: af:ef:f8:a7:46:3a:18:16:df:40:17:e5:d7:fd:5a:18:9c:e4: 20:19:2f:df:80:b3:9a:80:9e:54:ed:2a:b2:31:10:35:1b:a7: 00:4b:4f:db:c5:d6:b6:05:29:20:44:23:02:ad:32:b1:d3:85: d4:78:64:7e:88:cb:2c:f0:36:df:bf:fe:fb:82:1e:2b:9c:b7: f9:04:f2:45:c9:16:7e:ec:98:30:e3:6b:23:2b:75:96:28:05: ca:27:2f:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFr1jHhlsnBypQSGnKbK/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTRlNTcxMGE0NjUzNmJlZjJhZjM2YmY2M2YxOTQwYmMz N2JkNDIwHhcNMjUxMjEzMTkwMTE5WhcNMjUxMjE0MTkwMTE5WjAzMTEwLwYDVQQD Eyg0ZjA5YjBmOTllMjNiMjQzOGE5OWM1ZDI2YTVjYTgyNzViMzMyMTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rehqW96sCXm2C2tE0ksQnvV3Aof 2iMnilgdeYo6A0U7yiAfxcFrhkFcmQZIseUYw0x5Pxn4ByrD4x38H3mp2GN2lLDV rvMN73hF89xv2wta+eWMo6KplaO1mkK4dRaaFHhbcfJjxz6wHYONQhT35m/MGl9t 6zdSPQISMxxwt2TgY/oGeTiVCZjb1f8AIhF4vIK0X7fE4a1hrYu0e8x/6NOX4Do/ vM8/bw8tOq39OrpvgZSVrvmFJX/jVAeNBPSnlrZUtA86dQyTRN4rl5+sLhR1y6KH bAWBV48Vl7tPf51AbeP9fzIEbYBHZ2VS6KN3cBUPiMwFFBtPOxA9YsMZ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8JsPmeI7JDipnF0mpcqCdbMyEwMB8GA1UdIwQY MBaAFFqk5XEKRlNr7yrza/Y/GUC8N71CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmIt NDRkYzUyYTE5Y2U1LzEvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8xZGQ4MWMtNjY1ZS00Yjc2LTkxZmItNDRkYzUyYTE5Y2U1 LzEvV3FUbGNRcEdVMnZ2S3ZOcjlqOFpRTHczdlVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQznv3hpB C82Xt4mpHnsqbVT4hy4UXXjhf7tiLt33Rv3HxzENAp1ZyBd005J/FMVavb9UXdbr GJw1fqDDbZ8LrpKw14tb9DgpseDL38qDW8hqhk1LN37di/JeOmu4hzqo9t0YhzZC awYSfe2qFtEmqwQ9f7lWv8+pRMYKHD8eCsKw4XO6F4sEXYd1qywfclSfvKq9+zXL v+lzk3Gq0ok2fKEOr+/4p0Y6GBbfQBfl1/1aGJzkIBkv34CzmoCeVO0qsjEQNRun AEtP28XWtgUpIEQjAq0ysdOF1HhkfojLLPA237/++4IeK5y3+QTyRckWfuyYMONr Iyt1ligFyicvRA== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:32 2025 by rpki-client