This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft File: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json) Hash identifier: LEysDnG3pXoO6snWPsudk+JHs2JS4yPtT6ZxyUWmgP4= Subject key identifier: AC:34:C1:F8:5F:F9:E5:16:77:B2:27:5B:0F:BD:6B:F2:9B:30:9D:BB Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46 Certificate issuer: /CN=5a0e488bb09d2873d662e2846a2288a425ded946 Certificate serial: 019AF31C0974F6E7AD9EFEF4D25EC6FB32C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft Manifest number: 0378 Signing time: Sat 06 Dec 2025 10:01:32 +0000 Manifest this update: Sat 06 Dec 2025 10:01:32 +0000 Manifest next update: Sun 07 Dec 2025 10:01:32 +0000 Files and hashes: 1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: jbHUB1g3J6jaPDjipNIUD8JTBULvoB6ce7aWpZ85MQY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:09:74:f6:e7:ad:9e:fe:f4:d2:5e:c6:fb:32:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946 Validity Not Before: Dec 6 10:01:32 2025 GMT Not After : Dec 7 10:01:32 2025 GMT Subject: CN=ac34c1f85ff9e51677b2275b0fbd6bf29b309dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:80:d5:e5:f0:8d:64:92:01:e8:30:e8:25:b0: 36:30:eb:37:32:56:d9:25:77:f4:24:38:e7:88:61: 15:c8:7e:7b:71:2e:49:37:73:f5:f2:4d:2f:d1:de: ab:8b:6f:4a:34:25:5c:d1:26:c6:05:fe:fb:09:c9: 38:ae:29:98:ea:4f:38:7f:68:ac:c4:b3:f5:c3:c2: 40:de:bc:97:b7:9b:d3:f7:98:e4:55:75:be:b1:7f: 52:3d:46:c8:4d:a5:5f:00:4d:b7:38:cc:c7:9e:5d: 19:65:df:53:9a:d4:bb:1e:d9:02:9e:d1:ed:3f:be: cc:c5:f2:77:d2:95:16:ab:73:81:86:f7:7a:f7:e9: ef:36:46:37:a7:80:ad:15:df:0d:3e:4b:05:73:36: 16:5d:35:2b:fd:20:41:d0:f2:2c:cb:ff:88:b3:a0: 4d:f9:d8:a0:48:0d:7d:e1:c7:10:4c:ce:56:de:67: 3c:33:c0:a4:62:7f:1d:53:01:d9:76:d2:7f:05:fe: 84:0f:a7:44:30:08:c7:fd:ea:33:cc:cb:e3:2e:2a: 00:ff:34:d3:ff:37:94:8b:12:f3:be:73:76:0c:7b: a0:69:7e:ee:bc:b0:c8:ed:d4:c7:57:4e:e5:fd:ad: 6f:96:3b:99:ad:62:e5:f1:ba:fd:9c:13:0c:fe:ed: 3c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:34:C1:F8:5F:F9:E5:16:77:B2:27:5B:0F:BD:6B:F2:9B:30:9D:BB X509v3 Authority Key Identifier: keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:72:2b:72:a9:c5:0d:46:c9:84:77:7d:d5:24:82:4e:47:8d: af:3c:ab:aa:d7:db:3d:bf:05:dc:48:b8:0f:9a:ae:89:61:33: 93:03:0b:c3:ba:72:86:fb:d0:37:fa:f2:cb:7e:ef:2f:a9:d5: 3b:3e:13:0b:5d:5a:ec:eb:6d:e7:cd:fb:b6:7f:d3:05:2f:05: cd:60:87:c9:d2:b2:36:e6:5d:68:fa:f6:e7:00:ea:82:16:23: 7e:3b:fa:97:f8:1c:26:e4:0c:07:9c:2d:4e:c3:2d:86:9e:43: 6b:67:44:05:44:22:90:4b:68:43:a3:55:eb:9e:d5:a8:ab:78: 60:2b:17:2e:f9:04:89:c7:3e:49:8b:aa:f0:80:12:c4:19:b0: ef:aa:98:b4:31:bb:c0:1c:59:79:6f:6f:06:a3:f0:59:61:73: bb:35:d7:e1:49:30:14:d2:26:9e:4e:e4:77:f5:72:ce:68:ef: c3:c9:3d:78:16:dd:0b:62:8a:43:c7:6d:96:00:0a:3d:34:d4: c3:23:52:c1:8d:89:3b:05:a8:06:7a:28:58:32:f0:e5:b3:43: 69:98:c4:82:51:da:22:46:40:23:2a:b0:49:c1:aa:ab:0a:09: 5a:27:04:b2:44:9f:8a:e0:be:c1:07:7e:57:55:41:12:58:13: e5:a4:2f:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHAl09uetnv700l7G+zLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMGU0ODhiYjA5ZDI4NzNkNjYyZTI4NDZhMjI4OGE0MjVk ZWQ5NDYwHhcNMjUxMjA2MTAwMTMyWhcNMjUxMjA3MTAwMTMyWjAzMTEwLwYDVQQD EyhhYzM0YzFmODVmZjllNTE2NzdiMjI3NWIwZmJkNmJmMjliMzA5ZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoDV5fCNZJIB6DDoJbA2MOs3MlbZ JXf0JDjniGEVyH57cS5JN3P18k0v0d6ri29KNCVc0SbGBf77Cck4rimY6k84f2is xLP1w8JA3ryXt5vT95jkVXW+sX9SPUbITaVfAE23OMzHnl0ZZd9TmtS7HtkCntHt P77MxfJ30pUWq3OBhvd69+nvNkY3p4CtFd8NPksFczYWXTUr/SBB0PIsy/+Is6BN +digSA194ccQTM5W3mc8M8CkYn8dUwHZdtJ/Bf6ED6dEMAjH/eozzMvjLioA/zTT /zeUixLzvnN2DHugaX7uvLDI7dTHV07l/a1vljuZrWLl8br9nBMM/u08GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw0wfhf+eUWd7InWw+9a/KbMJ27MB8GA1UdIwQY MBaAFFoOSIuwnShz1mLihGoiiKQl3tlGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAt MWY1OWJjNzI4N2NkLzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8xMWNjMmEtYWQ2Ni00ZDJhLTllMzAtMWY1OWJjNzI4N2Nk LzEvV2c1SWk3Q2RLSFBXWXVLRWFpS0lwQ1hlMlVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXIrcqnF DUbJhHd91SSCTkeNrzyrqtfbPb8F3Ei4D5quiWEzkwMLw7pyhvvQN/ryy37vL6nV Oz4TC11a7Ott5837tn/TBS8FzWCHydKyNuZdaPr25wDqghYjfjv6l/gcJuQMB5wt TsMthp5Da2dEBUQikEtoQ6NV657VqKt4YCsXLvkEicc+SYuq8IASxBmw76qYtDG7 wBxZeW9vBqPwWWFzuzXX4UkwFNImnk7kd/Vyzmjvw8k9eBbdC2KKQ8dtlgAKPTTU wyNSwY2JOwWoBnooWDLw5bNDaZjEglHaIkZAIyqwScGqqwoJWicEskSfiuC+wQd+ V1VBElgT5aQv5w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:24:41 2025 by rpki-client