This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft File: WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json) Hash identifier: q02ZPIZS1BUIs62JzmHvXe5L5B6RIkunhcVVi7dg/E8= Subject key identifier: 5A:6E:64:AF:A8:8D:0F:58:79:38:07:AA:13:CE:62:2A:96:6C:4A:DC Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8 Certificate issuer: /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8 Certificate serial: 019AF49C2C8A839135A63BE30CBA52D507B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft Manifest number: 10AF Signing time: Sat 06 Dec 2025 17:01:06 +0000 Manifest this update: Sat 06 Dec 2025 17:01:06 +0000 Manifest next update: Sun 07 Dec 2025 17:01:06 +0000 Files and hashes: 1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: Px4MuXtWOvKxuhjIEXzvOIiALdBwcZIo8D1kwVKjv5o=) 2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2c:8a:83:91:35:a6:3b:e3:0c:ba:52:d5:07:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8 Validity Not Before: Dec 6 17:01:06 2025 GMT Not After : Dec 7 17:01:06 2025 GMT Subject: CN=5a6e64afa88d0f58793807aa13ce622a966c4adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a3:9b:8a:e1:ea:43:ea:f2:3b:55:b2:25:04: 77:5d:b4:79:fe:1d:68:66:41:70:0c:e0:f9:0f:68: 7c:08:33:bb:1d:9e:e0:0d:04:11:3e:7c:43:f9:eb: 8d:e1:c4:a0:46:a1:21:1c:fa:65:c9:a4:54:a1:3a: 09:02:c8:73:10:2e:14:f9:bd:56:28:e6:fc:28:61: c3:d0:1d:f0:16:bd:fe:82:24:9f:97:63:2d:cb:3e: a6:b6:0f:a8:0c:7a:1c:58:8b:64:a0:4a:a2:fe:9d: 0a:2a:4e:00:86:45:31:be:bd:4b:56:29:60:4d:64: c0:ae:11:27:45:9f:eb:0c:ee:b9:49:d5:ec:8d:dd: 18:90:e1:a1:24:a6:c2:10:2f:f6:13:ba:d6:fd:f0: a0:42:ab:34:5b:52:7d:de:94:f6:73:40:6b:08:4b: b8:44:0f:06:19:29:90:c4:76:aa:6e:ca:90:15:c7: a5:6a:7d:60:f5:21:15:9f:65:72:65:64:aa:7e:a1: d2:3c:b7:8d:a3:2f:2f:ee:25:9c:f9:43:83:f8:47: 2a:89:a6:e6:ef:5b:58:26:b0:c6:c0:19:2f:42:3d: d3:de:b5:7c:27:3e:42:b3:80:30:b4:e9:97:1f:a6: d6:4b:87:67:eb:23:40:08:6e:db:5e:4b:dd:16:14: 80:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6E:64:AF:A8:8D:0F:58:79:38:07:AA:13:CE:62:2A:96:6C:4A:DC X509v3 Authority Key Identifier: keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:02:77:f6:52:62:7d:21:65:a4:a9:a0:69:3d:d8:5f:78:59: 4f:6d:d1:b7:96:b0:15:4b:b3:31:3d:04:f2:3a:f8:f1:b8:fc: 92:61:2c:22:0e:00:52:55:66:2f:2c:70:9b:86:b9:4d:b9:f2: 4d:0b:4e:95:37:a7:4b:1a:3a:32:0e:40:f0:0d:36:6a:bc:20: 46:60:4d:a2:dd:b6:8b:d4:fa:de:be:85:59:a2:28:73:52:9b: 4f:60:45:20:34:9f:9b:3c:ef:77:c0:7d:d0:04:6a:db:a3:38: be:00:cc:91:50:d8:b0:ff:cb:cb:99:d1:2d:86:71:08:e2:29: c2:be:e4:e1:c5:5c:78:e7:ae:70:5f:b5:3a:89:68:64:3b:a1: d2:65:16:45:62:44:33:fe:a1:43:1b:29:21:98:7b:77:68:a2: f7:a0:b2:6c:f5:8a:06:74:d0:cc:cf:07:a1:39:fe:22:81:d2: 55:95:06:0e:be:bb:b7:c7:68:59:cf:d5:0e:40:f3:74:11:73: 09:2e:7c:61:3c:50:48:e0:bc:08:0e:de:22:f3:5a:26:82:58: 80:21:07:f8:12:75:ee:0e:d9:40:7d:59:b4:58:4d:ac:22:f7: 6f:52:2a:46:03:88:b4:43:c5:46:d5:ac:a5:14:55:e8:44:1a: 8e:07:c1:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCyKg5E1pjvjDLpS1Qe3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZGExMTU1NjM5OWUyOGZjNTVkYWIzYmEwNzg2OGZmNDkx YzZmYjgwHhcNMjUxMjA2MTcwMTA2WhcNMjUxMjA3MTcwMTA2WjAzMTEwLwYDVQQD Eyg1YTZlNjRhZmE4OGQwZjU4NzkzODA3YWExM2NlNjIyYTk2NmM0YWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6ObiuHqQ+ryO1WyJQR3XbR5/h1o ZkFwDOD5D2h8CDO7HZ7gDQQRPnxD+euN4cSgRqEhHPplyaRUoToJAshzEC4U+b1W KOb8KGHD0B3wFr3+giSfl2Mtyz6mtg+oDHocWItkoEqi/p0KKk4AhkUxvr1LVilg TWTArhEnRZ/rDO65SdXsjd0YkOGhJKbCEC/2E7rW/fCgQqs0W1J93pT2c0BrCEu4 RA8GGSmQxHaqbsqQFcelan1g9SEVn2VyZWSqfqHSPLeNoy8v7iWc+UOD+Ecqiabm 71tYJrDGwBkvQj3T3rV8Jz5Cs4AwtOmXH6bWS4dn6yNACG7bXkvdFhSAywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpuZK+ojQ9YeTgHqhPOYiqWbErcMB8GA1UdIwQY MBaAFFraEVVjmeKPxV2rO6B4aP9JHG+4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQt ODRhZmVhYWJiMzczLzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84MTIzNTctM2Q3MC00NjhlLWIwNDQtODRhZmVhYWJiMzcz LzEvV3RvUlZXT1o0b19GWGFzN29IaG9fMGtjYjdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQJ39lJi fSFlpKmgaT3YX3hZT23Rt5awFUuzMT0E8jr48bj8kmEsIg4AUlVmLyxwm4a5Tbny TQtOlTenSxo6Mg5A8A02arwgRmBNot22i9T63r6FWaIoc1KbT2BFIDSfmzzvd8B9 0ARq26M4vgDMkVDYsP/Ly5nRLYZxCOIpwr7k4cVceOeucF+1OoloZDuh0mUWRWJE M/6hQxspIZh7d2ii96CybPWKBnTQzM8HoTn+IoHSVZUGDr67t8doWc/VDkDzdBFz CS58YTxQSOC8CA7eIvNaJoJYgCEH+BJ17g7ZQH1ZtFhNrCL3b1IqRgOItEPFRtWs pRRV6EQajgfBHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:31 2025 by rpki-client