This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json) Hash identifier: 5oOOc53W/dVy6D7qflC+4Bu6HZP/o6RxXaM5lqE4rcE= Subject key identifier: DA:42:E1:74:7C:84:89:7F:06:11:A1:18:66:94:84:3D:F8:6E:80:91 Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46 Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946 Certificate serial: 019B3E6D97F660259F21D00FB0643757929D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft Manifest number: 039F Signing time: Sun 21 Dec 2025 01:02:08 +0000 Manifest this update: Sun 21 Dec 2025 01:02:08 +0000 Manifest next update: Mon 22 Dec 2025 01:02:08 +0000 Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: jG+Gm+HTjLUOYSZVKAk032tsbkFXG2vCWfBdhfy1LLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:97:f6:60:25:9f:21:d0:0f:b0:64:37:57:92:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946 Validity Not Before: Dec 21 01:02:08 2025 GMT Not After : Dec 22 01:02:08 2025 GMT Subject: CN=da42e1747c84897f0611a1186694843df86e8091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:55:86:30:7f:cd:7e:16:fd:f9:9b:73:13: df:68:07:51:08:97:4a:43:88:7c:3d:85:b2:a0:a7: da:7e:ae:f1:00:d0:ea:da:3e:17:94:a8:1c:be:64: 44:e4:af:e7:b4:5f:95:1b:7b:0e:d4:de:66:30:00: 4e:f6:25:1a:9d:b3:f7:5c:17:78:d7:46:d7:e1:b1: 44:c0:3f:7e:59:d1:99:71:b5:b2:e3:12:36:5f:e2: a7:91:5d:91:7b:6c:af:3f:19:20:f7:b0:66:9b:b9: f9:cf:fa:be:57:11:ac:6e:1b:94:e3:64:55:0a:f5: ec:c7:57:1f:7d:21:b4:f7:26:89:fa:9a:f4:77:69: fa:bc:58:4e:df:82:8c:3c:b7:1f:2c:7b:5d:cd:32: 78:a3:40:07:be:e0:1a:a6:66:1d:7b:d5:6d:3a:6b: 34:7d:d6:23:6d:35:54:55:d4:99:89:f0:ad:b3:32: 0c:e4:62:f3:70:e8:93:e0:de:82:95:bc:58:b6:04: 72:56:1f:68:77:6e:a4:fe:8c:d8:ae:48:bd:6e:91: 5b:c1:80:a5:e5:07:39:d8:11:10:d3:fe:a3:f1:c2: 1a:d9:f7:26:36:12:f2:e1:3e:cb:c3:da:ef:3f:8c: 31:8b:d0:f5:63:86:63:b5:90:ca:d1:84:b9:4c:99: c5:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:42:E1:74:7C:84:89:7F:06:11:A1:18:66:94:84:3D:F8:6E:80:91 X509v3 Authority Key Identifier: keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:81:a7:a6:f9:b1:ea:7d:51:aa:03:1b:f2:2c:34:e9:33:9d: dd:5e:f7:99:a8:71:e1:f3:83:14:cb:d8:80:76:6f:4d:cd:4c: 10:3f:fe:50:ce:c3:ea:e1:c4:b2:3a:d9:0e:ce:4b:62:24:c7: af:46:2f:64:e5:35:8d:cf:9d:50:06:5d:76:a0:f9:1a:4b:4b: d4:18:06:72:ea:26:74:a3:40:83:03:33:f7:5e:e0:f1:e1:7d: 06:2d:5a:8b:3e:32:e5:64:af:32:31:83:06:f5:8a:30:84:da: 5a:7a:86:6e:8c:04:c3:0e:e2:f3:02:32:26:81:37:2d:ec:b6: f1:8b:73:b4:08:c4:f8:0b:ca:4d:23:d2:db:87:e7:35:84:2b: 0d:a4:5a:c6:0c:6d:f7:7b:bb:8f:c4:d0:a7:33:d2:a9:50:7a: 51:39:c7:02:dd:c5:aa:27:d1:f4:ee:b8:18:0c:55:3e:44:b5: f0:e7:d2:75:7b:73:fe:f8:24:0b:d6:5e:0d:64:c2:19:92:41: d1:eb:2f:a2:63:2c:18:b4:f6:cd:04:d1:79:77:55:33:a2:2c: 83:b8:ee:cc:15:28:cc:30:5a:05:5f:53:3e:46:ff:ea:f2:24: 5a:de:d4:37:5b:a0:e6:85:ff:a5:22:f9:19:f5:8a:fc:e5:69: 00:bf:19:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZf2YCWfIdAPsGQ3V5KdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMGU0ODhiYjA5ZDI4NzNkNjYyZTI4NDZhMjI4OGE0MjVk ZWQ5NDYwHhcNMjUxMjIxMDEwMjA4WhcNMjUxMjIyMDEwMjA4WjAzMTEwLwYDVQQD EyhkYTQyZTE3NDdjODQ4OTdmMDYxMWExMTg2Njk0ODQzZGY4NmU4MDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJhVhjB/zX4W/fmbcxPfaAdRCJdK Q4h8PYWyoKfafq7xANDq2j4XlKgcvmRE5K/ntF+VG3sO1N5mMABO9iUanbP3XBd4 10bX4bFEwD9+WdGZcbWy4xI2X+KnkV2Re2yvPxkg97Bmm7n5z/q+VxGsbhuU42RV CvXsx1cffSG09yaJ+pr0d2n6vFhO34KMPLcfLHtdzTJ4o0AHvuAapmYde9VtOms0 fdYjbTVUVdSZifCtszIM5GLzcOiT4N6ClbxYtgRyVh9od26k/ozYrki9bpFbwYCl 5Qc52BEQ0/6j8cIa2fcmNhLy4T7Lw9rvP4wxi9D1Y4ZjtZDK0YS5TJnFlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpC4XR8hIl/BhGhGGaUhD34boCRMB8GA1UdIwQY MBaAFFoOSIuwnShz1mLihGoiiKQl3tlGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAt MWY1OWJjNzI4N2NkLzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAtMWY1OWJjNzI4N2Nk LzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4Gnpvmx 6n1RqgMb8iw06TOd3V73mahx4fODFMvYgHZvTc1MED/+UM7D6uHEsjrZDs5LYiTH r0YvZOU1jc+dUAZddqD5GktL1BgGcuomdKNAgwMz917g8eF9Bi1aiz4y5WSvMjGD BvWKMITaWnqGbowEww7i8wIyJoE3Ley28YtztAjE+AvKTSPS24fnNYQrDaRaxgxt 93u7j8TQpzPSqVB6UTnHAt3FqifR9O64GAxVPkS18OfSdXtz/vgkC9ZeDWTCGZJB 0esvomMsGLT2zQTReXdVM6Isg7juzBUozDBaBV9TPkb/6vIkWt7UN1ug5oX/pSL5 GfWK/OVpAL8ZNQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:22:27 2025 by rpki-client