This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft File: WsswiUYeH1-JhLd0LIm7aPG4jBI.mft (raw, json) Hash identifier: OmmUvY3zSZCK/OqHRmsELBE9v7VA/Z8NO1HIeCCZQ8k= Subject key identifier: 32:F7:59:8F:32:BE:05:46:DB:6F:FA:9B:48:A3:F5:14:74:2C:69:19 Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12 Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12 Certificate serial: 019AF31C8C66CEAE4E498135CEF65DB2C077 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 10:02:05 +0000 Manifest this update: Sat 06 Dec 2025 10:02:05 +0000 Manifest next update: Sun 07 Dec 2025 10:02:05 +0000 Files and hashes: 1: WsswiUYeH1-JhLd0LIm7aPG4jBI.crl (hash: JQV9pkVg4V10aeCm+xTVEnMFq1db7ZcynmAC7FAAKz8=) 2: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (hash: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:8c:66:ce:ae:4e:49:81:35:ce:f6:5d:b2:c0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12 Validity Not Before: Dec 6 10:02:05 2025 GMT Not After : Dec 7 10:02:05 2025 GMT Subject: CN=32f7598f32be0546db6ffa9b48a3f514742c6919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:f0:44:aa:e2:93:42:21:af:a3:f1:c7:91: aa:ff:85:30:ad:d0:4a:98:08:a0:aa:a4:ae:a0:9c: 04:33:1b:fe:bc:07:ff:da:0f:e9:f2:94:c2:7e:ff: 5d:59:67:d4:9f:09:be:80:a3:a5:b8:2a:dd:19:09: 58:1a:14:70:a5:e9:d8:f1:a3:e3:aa:69:d1:f6:35: 43:21:3f:9a:5e:6f:a9:07:fc:b9:ef:38:82:3a:7e: 83:bf:cb:c8:d3:5b:cd:8f:5d:a1:9e:3f:03:6b:2e: 33:c4:38:a3:51:11:ea:51:96:ff:1f:d6:af:da:4a: 01:64:51:4b:7c:a1:16:4f:1b:ab:81:0d:df:66:8c: b6:fe:15:e4:fc:b7:b6:e6:14:7a:41:26:fb:68:62: db:c6:48:45:01:43:13:2e:a8:79:10:fe:0e:e4:ee: 20:19:de:af:a6:01:26:15:22:1b:8b:3f:c7:cc:f2: 78:77:d6:f4:31:81:5d:75:98:b2:18:68:56:b1:7e: db:04:a7:f4:8a:a5:45:47:45:8e:3f:d4:6d:2d:44: a6:3b:cc:86:5b:40:8f:05:7b:a0:75:41:75:44:bb: 59:b3:eb:6d:ea:19:67:4e:bf:70:9e:c6:cc:c2:64: 31:4f:6c:60:92:05:aa:74:6b:e8:e4:48:1e:3d:83: 79:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F7:59:8F:32:BE:05:46:DB:6F:FA:9B:48:A3:F5:14:74:2C:69:19 X509v3 Authority Key Identifier: keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e9:67:71:15:be:94:f3:7b:0c:7e:8d:96:63:ca:ab:a8:c2: cd:7d:42:1c:c0:e4:9d:44:f4:e5:bb:b3:40:bc:9c:dc:ee:31: d4:06:a0:aa:ad:e5:33:46:7e:72:31:51:6e:35:67:c9:86:2b: 7c:b7:9b:3f:b2:8c:2c:28:15:0b:64:33:59:b5:1c:7f:07:b4: 4f:9b:1b:b7:c2:7e:db:de:b0:1b:95:4e:1d:62:89:78:e2:97: 62:99:02:80:78:30:96:05:a6:6d:19:06:cd:c5:c7:98:c6:48: 40:56:31:5f:99:70:be:68:b0:7f:5f:e0:39:be:1b:55:f3:29: da:b5:2b:04:b2:1c:52:2d:02:06:f9:82:36:f8:59:d7:a1:25: be:e0:02:35:3b:db:2a:0b:b3:07:db:0c:40:65:be:d5:a8:43: 38:64:50:7a:83:ab:73:ff:d9:c4:7f:b4:40:8c:cd:3b:a7:8c: 2c:8a:0f:24:a1:4f:1f:1d:99:f2:e2:41:6a:04:90:16:45:93: 6c:c1:cf:25:b2:77:36:5f:e5:c3:e0:0e:35:f2:25:a5:38:7a: 33:2e:0c:70:11:47:83:d5:3a:a5:2c:ae:61:ff:a1:3d:40:95: b6:0a:8e:3e:ab:5b:59:10:71:5c:d1:1e:e2:3c:78:53:20:2a: e8:5b:45:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIxmzq5OSYE1zvZdssB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi ODhjMTIwHhcNMjUxMjA2MTAwMjA1WhcNMjUxMjA3MTAwMjA1WjAzMTEwLwYDVQQD EygzMmY3NTk4ZjMyYmUwNTQ2ZGI2ZmZhOWI0OGEzZjUxNDc0MmM2OTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpDwRKrik0Ihr6Pxx5Gq/4UwrdBK mAigqqSuoJwEMxv+vAf/2g/p8pTCfv9dWWfUnwm+gKOluCrdGQlYGhRwpenY8aPj qmnR9jVDIT+aXm+pB/y57ziCOn6Dv8vI01vNj12hnj8Day4zxDijURHqUZb/H9av 2koBZFFLfKEWTxurgQ3fZoy2/hXk/Le25hR6QSb7aGLbxkhFAUMTLqh5EP4O5O4g Gd6vpgEmFSIbiz/HzPJ4d9b0MYFddZiyGGhWsX7bBKf0iqVFR0WOP9RtLUSmO8yG W0CPBXugdUF1RLtZs+tt6hlnTr9wnsbMwmQxT2xgkgWqdGvo5EgePYN5LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL3WY8yvgVG22/6m0ij9RR0LGkZMB8GA1UdIwQY MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt YWM1MzZiMmFiNGY4LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4 LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOlncRW+ lPN7DH6NlmPKq6jCzX1CHMDknUT05buzQLyc3O4x1Aagqq3lM0Z+cjFRbjVnyYYr fLebP7KMLCgVC2QzWbUcfwe0T5sbt8J+296wG5VOHWKJeOKXYpkCgHgwlgWmbRkG zcXHmMZIQFYxX5lwvmiwf1/gOb4bVfMp2rUrBLIcUi0CBvmCNvhZ16ElvuACNTvb KguzB9sMQGW+1ahDOGRQeoOrc//ZxH+0QIzNO6eMLIoPJKFPHx2Z8uJBagSQFkWT bMHPJbJ3Nl/lw+AONfIlpTh6My4McBFHg9U6pSyuYf+hPUCVtgqOPqtbWRBxXNEe 4jx4UyAq6FtF8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:02:06 2025 by rpki-client