This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft File: WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json) Hash identifier: e0G0DTUrN5AAPyLTYpsTphD6k1l7WJxDXpfM+vtMRJ8= Subject key identifier: A6:B5:BF:54:19:75:8A:6F:77:58:E0:2A:D5:23:6D:BB:4E:B0:A7:56 Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59 Certificate issuer: /CN=5941a406fdffee25938496be5ac9a53e1bb9c659 Certificate serial: 019AF31D34DF430E78C00553BF532804567C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft Manifest number: 040F Signing time: Sat 06 Dec 2025 10:02:48 +0000 Manifest this update: Sat 06 Dec 2025 10:02:48 +0000 Manifest next update: Sun 07 Dec 2025 10:02:48 +0000 Files and hashes: 1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=) 2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: T5Ae9yg0dfbqad4mRqZVw91R3bFH5C5PYVb4LM3jZGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:34:df:43:0e:78:c0:05:53:bf:53:28:04:56:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659 Validity Not Before: Dec 6 10:02:48 2025 GMT Not After : Dec 7 10:02:48 2025 GMT Subject: CN=a6b5bf5419758a6f7758e02ad5236dbb4eb0a756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:46:3f:e7:87:4d:82:95:b6:57:1b:c1:95: 9d:aa:e6:0e:eb:b6:b2:97:d4:0b:bc:b6:e8:1d:4f: 4f:cf:6d:ac:09:ae:b8:a0:5b:15:3e:be:af:a6:84: 83:ae:88:5e:21:24:4e:ff:ea:69:63:68:98:9a:8e: 0a:38:ad:12:33:69:de:53:bb:1c:6e:a9:96:f1:e2: 61:3f:a9:15:24:02:70:9a:77:51:91:6a:71:03:9e: fb:76:88:42:76:b9:d5:ad:67:c0:af:c6:34:3d:8f: e5:de:cc:00:1e:92:23:e1:22:ad:a8:bd:43:ea:2e: 1c:e5:cc:da:11:e1:b2:5a:f2:f1:06:07:77:cc:48: b9:fd:f6:1a:52:99:a3:1c:e9:ab:16:86:73:e6:8a: c0:d5:50:4b:d6:58:28:65:9c:c4:1b:a2:23:50:ed: a4:3c:93:4f:11:31:97:84:77:f7:4f:8c:8d:1b:20: 8f:81:3c:6d:df:5e:fb:7d:34:cc:84:59:32:4a:e2: b6:f2:29:49:42:d1:02:a7:24:52:33:b2:6d:25:83: e7:ba:20:b3:14:df:7e:8e:48:88:8a:7e:44:3b:b8: ad:11:38:b1:28:6b:35:3d:65:ab:c1:8b:cf:af:4c: c0:78:38:ed:35:36:57:17:ee:92:cc:ca:01:80:01: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B5:BF:54:19:75:8A:6F:77:58:E0:2A:D5:23:6D:BB:4E:B0:A7:56 X509v3 Authority Key Identifier: keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:5a:60:73:22:63:1e:8b:b5:ea:a2:08:42:99:ea:b8:24:23: 03:64:48:6c:7e:44:53:e6:d9:9a:d1:58:e1:0f:94:bb:ea:fc: 00:0d:0d:6d:27:50:6f:93:9e:4b:05:77:9a:0e:8e:44:d4:bc: 0f:7e:54:87:85:b9:c8:7a:b9:a2:18:b1:b8:0b:83:9d:6c:86: 75:28:55:8b:38:9d:23:d4:f6:9b:f8:a1:3c:90:0b:7c:3e:4f: 9a:cd:3d:65:b4:08:35:be:4a:b6:08:9b:60:62:f1:86:e3:32: 9f:f2:49:ae:b0:38:66:a8:b8:e1:23:5e:4b:e2:75:9e:a3:86: 18:1c:af:51:d7:24:d1:16:54:06:d3:f0:50:36:9a:58:f8:ea: 60:6b:c2:9f:53:eb:8a:3b:e0:73:6b:2c:19:0a:aa:40:c9:1a: a2:f2:1f:67:5b:83:5b:06:be:8e:a8:27:a2:59:74:c5:5a:86: cf:45:42:ee:f7:d7:30:d0:3d:b8:19:bf:54:bc:bd:36:2d:27: 4d:85:a3:2c:76:9a:c5:99:ff:0c:89:4e:cf:6b:8b:74:3e:18: 9f:fe:34:b3:53:bd:70:29:e4:e9:d6:38:2e:87:78:9c:5b:db: f7:95:4d:30:73:96:8f:fb:92:05:89:3a:0d:2b:09:16:7d:01: 0c:f9:5d:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHTTfQw54wAVTv1MoBFZ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDFhNDA2ZmRmZmVlMjU5Mzg0OTZiZTVhYzlhNTNlMWJi OWM2NTkwHhcNMjUxMjA2MTAwMjQ4WhcNMjUxMjA3MTAwMjQ4WjAzMTEwLwYDVQQD EyhhNmI1YmY1NDE5NzU4YTZmNzc1OGUwMmFkNTIzNmRiYjRlYjBhNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBJGP+eHTYKVtlcbwZWdquYO67ay l9QLvLboHU9Pz22sCa64oFsVPr6vpoSDroheISRO/+ppY2iYmo4KOK0SM2neU7sc bqmW8eJhP6kVJAJwmndRkWpxA577dohCdrnVrWfAr8Y0PY/l3swAHpIj4SKtqL1D 6i4c5czaEeGyWvLxBgd3zEi5/fYaUpmjHOmrFoZz5orA1VBL1lgoZZzEG6IjUO2k PJNPETGXhHf3T4yNGyCPgTxt3177fTTMhFkySuK28ilJQtECpyRSM7JtJYPnuiCz FN9+jkiIin5EO7itETixKGs1PWWrwYvPr0zAeDjtNTZXF+6SzMoBgAG/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKa1v1QZdYpvd1jgKtUjbbtOsKdWMB8GA1UdIwQY MBaAFFlBpAb9/+4lk4SWvlrJpT4bucZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUt OWI0ZmZkMDhlMDQ4LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUtOWI0ZmZkMDhlMDQ4 LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFpgcyJj Hou16qIIQpnquCQjA2RIbH5EU+bZmtFY4Q+Uu+r8AA0NbSdQb5OeSwV3mg6ORNS8 D35Uh4W5yHq5ohixuAuDnWyGdShVizidI9T2m/ihPJALfD5Pms09ZbQINb5Ktgib YGLxhuMyn/JJrrA4Zqi44SNeS+J1nqOGGByvUdck0RZUBtPwUDaaWPjqYGvCn1Pr ijvgc2ssGQqqQMkaovIfZ1uDWwa+jqgnoll0xVqGz0VC7vfXMNA9uBm/VLy9Ni0n TYWjLHaaxZn/DIlOz2uLdD4Yn/40s1O9cCnk6dY4Lod4nFvb95VNMHOWj/uSBYk6 DSsJFn0BDPldEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:36 2025 by rpki-client