This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json) Hash identifier: +Omd/Pku7lthmCAMjb7aUp8JPpZQqPAlpKhozlKDipo= Subject key identifier: 5D:7F:0C:08:34:10:34:CC:DB:2C:AF:F7:16:25:1E:C7:04:E4:6E:96 Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Certificate serial: 019AF50A94D61699C9D30A29D3B35F69FB31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft Manifest number: 0A79 Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=) 2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: 1AiHRQJ38l0iJalKcylyVyt3wHmlABqhML53GGLM9Rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:94:d6:16:99:c9:d3:0a:29:d3:b3:5f:69:fb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=5d7f0c08341034ccdb2caff716251ec704e46e96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:09:c1:5d:d2:26:ed:42:11:b7:35:6b:23: 37:f1:76:66:a8:3a:7b:32:b7:29:7c:1c:b4:6c:6e: 2c:d3:f7:3e:41:97:10:ce:4c:d0:6c:6a:47:d0:d4: 04:56:9b:7c:5b:95:7f:61:4b:0f:c1:75:0b:31:4a: ba:46:97:86:cf:1a:5b:aa:20:d5:1b:83:8a:2c:55: 64:0e:2e:0f:17:35:9e:ae:b3:aa:e3:a6:aa:93:f3: 42:8d:3d:5a:e1:08:7b:c7:40:fe:34:7d:b5:09:9a: 53:1a:2b:45:2d:82:29:f7:e9:d5:2b:c1:b5:88:15: 5c:bf:02:ed:31:d9:3f:df:1b:be:2e:1a:4a:a7:a7: 3f:53:63:f6:93:1d:d7:40:47:f1:ca:e5:64:f1:6b: f5:42:cf:7b:55:5a:ac:36:21:9a:56:df:d0:f3:d6: b1:95:34:bb:31:f6:bd:67:f6:51:71:40:f0:f8:54: 9c:7e:e3:3f:7f:70:be:63:34:56:d0:9e:32:78:a9: d6:eb:38:35:d4:97:d6:b6:d5:76:01:3e:75:b4:0c: af:b6:c2:7a:c2:7e:85:a9:7a:14:90:e9:b4:36:a2: e5:3c:14:07:15:15:bd:45:4f:7e:31:af:5b:cb:88: 72:c4:6b:ec:99:6b:8f:8d:47:68:a8:82:f1:ea:16: 3a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7F:0C:08:34:10:34:CC:DB:2C:AF:F7:16:25:1E:C7:04:E4:6E:96 X509v3 Authority Key Identifier: keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:66:74:5b:5a:6e:2c:64:5e:85:8f:49:64:7b:32:9a:f4:a9: 97:a3:15:4c:81:4b:cc:a0:74:ac:b4:c6:41:03:ca:e0:60:ae: 45:c9:c2:52:d3:d3:0d:69:20:a6:4f:ec:d5:bd:68:0d:9f:6d: ee:de:44:29:d2:21:e1:6d:75:14:77:7d:13:81:c9:3e:b2:49: be:b6:cf:c4:50:4e:18:8f:d2:2f:63:f0:f1:74:55:fc:ce:09: f0:69:ab:be:ef:c3:12:a1:18:6c:8d:05:69:bb:9a:b3:35:ad: 5a:5b:aa:a8:d7:f2:d3:b5:11:cc:54:f6:2f:d6:af:24:85:46: 04:6c:4d:d0:e2:a5:2f:41:0a:bc:dc:67:21:89:25:6d:91:14: b1:0c:fb:39:16:8a:34:20:24:aa:f9:a1:61:97:68:47:99:a2: 23:a5:3d:10:48:dc:22:43:30:2c:7d:42:9d:21:e6:42:22:ac: c7:fe:30:b4:1d:54:ba:2b:85:14:03:ac:b7:17:4b:ff:3f:f0: 02:81:4e:fa:78:5f:9f:4e:43:56:dd:4b:b9:f0:90:b1:b8:08: 81:4e:b4:5a:0b:5b:d5:6b:33:37:17:8d:9b:be:34:19:9a:b1: 99:cb:6f:2d:65:eb:f6:e0:38:70:84:7d:e6:a0:b1:8a:2d:13: 1e:ed:32:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpTWFpnJ0wop07NfafsxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1 ZmMyNWMwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD Eyg1ZDdmMGMwODM0MTAzNGNjZGIyY2FmZjcxNjI1MWVjNzA0ZTQ2ZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwu0JwV3SJu1CEbc1ayM38XZmqDp7 MrcpfBy0bG4s0/c+QZcQzkzQbGpH0NQEVpt8W5V/YUsPwXULMUq6RpeGzxpbqiDV G4OKLFVkDi4PFzWerrOq46aqk/NCjT1a4Qh7x0D+NH21CZpTGitFLYIp9+nVK8G1 iBVcvwLtMdk/3xu+LhpKp6c/U2P2kx3XQEfxyuVk8Wv1Qs97VVqsNiGaVt/Q89ax lTS7Mfa9Z/ZRcUDw+FScfuM/f3C+YzRW0J4yeKnW6zg11JfWttV2AT51tAyvtsJ6 wn6FqXoUkOm0NqLlPBQHFRW9RU9+Ma9by4hyxGvsmWuPjUdoqILx6hY6uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1/DAg0EDTM2yyv9xYlHscE5G6WMB8GA1UdIwQY MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt NTkxOTkzMzFlZTA5LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5 LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2Z0W1pu LGRehY9JZHsymvSpl6MVTIFLzKB0rLTGQQPK4GCuRcnCUtPTDWkgpk/s1b1oDZ9t 7t5EKdIh4W11FHd9E4HJPrJJvrbPxFBOGI/SL2Pw8XRV/M4J8Gmrvu/DEqEYbI0F abuaszWtWluqqNfy07URzFT2L9avJIVGBGxN0OKlL0EKvNxnIYklbZEUsQz7ORaK NCAkqvmhYZdoR5miI6U9EEjcIkMwLH1CnSHmQiKsx/4wtB1UuiuFFAOstxdL/z/w AoFO+nhfn05DVt1LufCQsbgIgU60Wgtb1WszNxeNm740GZqxmctvLWXr9uA4cIR9 5qCxii0THu0yAw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:14 2025 by rpki-client