This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft File: Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft (raw, json) Hash identifier: 66qnzOu3tvrX+6flI8FCwDvXbQ0sfrhJizcsqqW1+nI= Subject key identifier: 7E:6E:5E:D4:41:9C:4F:40:DB:21:FB:49:B5:3F:22:55:8F:28:D3:44 Authority key identifier: 5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B Certificate issuer: /CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b Certificate serial: 019AF19B2089F5E4A43654026B5CABC286F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 03:01:06 +0000 Manifest this update: Sat 06 Dec 2025 03:01:06 +0000 Manifest next update: Sun 07 Dec 2025 03:01:06 +0000 Files and hashes: 1: Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl (hash: oEKd7MCPMlxRNaJQeJI8+MEWY+K6bW4GCOXYUOhdohw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:20:89:f5:e4:a4:36:54:02:6b:5c:ab:c2:86:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b Validity Not Before: Dec 6 03:01:06 2025 GMT Not After : Dec 7 03:01:06 2025 GMT Subject: CN=7e6e5ed4419c4f40db21fb49b53f22558f28d344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:28:0d:1f:a9:86:9d:f0:39:95:a1:41:5a:0c: fd:30:bd:8c:b5:1e:89:da:70:55:63:fe:cf:81:bd: 04:75:f6:ec:18:dd:30:9e:0d:ba:d9:e0:8a:94:6b: e6:c3:ff:e9:f2:12:ae:7a:3c:f6:29:71:0c:b4:04: 07:4b:b6:33:87:4d:c8:21:1d:61:5b:c6:05:79:9b: fb:e7:d6:47:04:ff:33:c6:cb:fd:ea:0e:69:13:51: 71:e8:07:c9:f1:f6:4c:08:bd:45:7a:53:15:66:06: b7:19:7e:32:f5:f3:22:38:96:79:ec:9e:03:5a:28: ca:bc:0f:96:01:34:a1:e9:20:20:a6:ca:7b:b9:34: 3e:4d:3d:ad:ca:f7:a8:ba:f9:6b:d7:ad:4b:32:1c: fd:55:91:d3:f9:09:e0:39:c3:3b:62:97:f6:81:53: ba:d0:22:f0:eb:2c:7d:5a:49:0a:1f:b1:af:2c:f1: 09:d8:95:ac:00:22:32:ca:ae:c6:9e:59:68:99:0a: 31:b0:84:4c:cf:61:80:f3:88:bd:99:fe:86:ee:57: 5f:fd:0a:cd:b6:0b:60:e3:be:b7:6c:c5:91:51:4d: 0f:78:3c:8b:6d:38:bb:76:cd:14:60:29:5e:75:e4: 1c:bf:8e:43:92:05:24:20:1c:c6:08:9f:b8:1e:b8: 15:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6E:5E:D4:41:9C:4F:40:DB:21:FB:49:B5:3F:22:55:8F:28:D3:44 X509v3 Authority Key Identifier: keyid:5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:39:5c:c3:d3:23:91:14:c7:45:da:0a:36:5e:3a:97:7c:cf: 35:91:dc:65:91:da:1b:0c:a3:5b:d1:74:d1:eb:e4:ba:af:fd: a0:d5:f2:bd:04:bb:76:68:44:fa:57:b3:2e:32:cc:9d:0e:59: ee:09:c3:0b:9e:61:f3:77:1b:b2:43:f1:3d:46:a3:03:08:73: f9:5b:91:9b:9a:41:a4:3e:e9:f1:1a:e9:63:81:43:00:8a:a2: 54:66:26:dd:89:ce:e3:e7:61:b2:0a:4d:64:e8:ee:92:68:e6: 5b:88:a5:69:c3:33:d1:e5:ad:9d:4f:64:a6:ec:bc:2b:c5:83: c8:4c:15:eb:d8:0e:52:a5:15:81:f7:0c:ae:51:dc:64:a7:ae: 6b:47:8d:9c:24:67:8f:49:25:a3:7f:d8:7f:5a:10:7c:d5:28: 80:db:15:77:60:22:91:b8:43:4a:dc:33:71:be:4a:69:d8:90: bc:4d:8d:c4:82:8f:f7:9c:e1:d4:c7:8c:06:04:52:22:9f:78: 9c:da:30:7a:84:e9:39:d9:8b:1f:23:b5:8b:9a:60:02:c6:c5: 7c:43:f8:8f:52:ff:e4:5b:28:7f:6f:3b:65:d0:49:00:bd:51: df:f6:50:a5:9b:f8:2e:fe:db:3a:f5:4a:db:4e:c7:85:84:4e: ad:67:25:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmyCJ9eSkNlQCa1yrwob3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOWY4Y2MyNmFiZDM5ZmIzZWQ4NDM5NTk1Njc2N2E4MjZm OTRkNWIwHhcNMjUxMjA2MDMwMTA2WhcNMjUxMjA3MDMwMTA2WjAzMTEwLwYDVQQD Eyg3ZTZlNWVkNDQxOWM0ZjQwZGIyMWZiNDliNTNmMjI1NThmMjhkMzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhigNH6mGnfA5laFBWgz9ML2MtR6J 2nBVY/7Pgb0EdfbsGN0wng262eCKlGvmw//p8hKuejz2KXEMtAQHS7Yzh03IIR1h W8YFeZv759ZHBP8zxsv96g5pE1Fx6AfJ8fZMCL1FelMVZga3GX4y9fMiOJZ57J4D WijKvA+WATSh6SAgpsp7uTQ+TT2tyveouvlr161LMhz9VZHT+QngOcM7Ypf2gVO6 0CLw6yx9WkkKH7GvLPEJ2JWsACIyyq7GnllomQoxsIRMz2GA84i9mf6G7ldf/QrN tgtg4763bMWRUU0PeDyLbTi7ds0UYCledeQcv45DkgUkIBzGCJ+4HrgVfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5uXtRBnE9A2yH7SbU/IlWPKNNEMB8GA1UdIwQY MBaAFFqfjMJqvTn7PthDlZVnZ6gm+U1bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3AtTXdtcTlPZnMtMkVPVmxXZG5xQ2I1VFZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS80NmIyYTktODFkZC00MGI1LTg4OWYt ZDA3YzYwMDAxYzU1LzEvV3AtTXdtcTlPZnMtMkVPVmxXZG5xQ2I1VFZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS80NmIyYTktODFkZC00MGI1LTg4OWYtZDA3YzYwMDAxYzU1 LzEvV3AtTXdtcTlPZnMtMkVPVmxXZG5xQ2I1VFZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzlcw9Mj kRTHRdoKNl46l3zPNZHcZZHaGwyjW9F00evkuq/9oNXyvQS7dmhE+lezLjLMnQ5Z 7gnDC55h83cbskPxPUajAwhz+VuRm5pBpD7p8RrpY4FDAIqiVGYm3YnO4+dhsgpN ZOjukmjmW4ilacMz0eWtnU9kpuy8K8WDyEwV69gOUqUVgfcMrlHcZKeua0eNnCRn j0klo3/Yf1oQfNUogNsVd2AikbhDStwzcb5KadiQvE2NxIKP95zh1MeMBgRSIp94 nNoweoTpOdmLHyO1i5pgAsbFfEP4j1L/5Fsof287ZdBJAL1R3/ZQpZv4Lv7bOvVK 207HhYROrWcllQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:20:35 2025 by rpki-client