This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File: wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier: wTCuhBkGjduXEcfFzGG4kkKrYTiHP4M5vgq5fiX8Klg=
Subject key identifier: 29:85:60:F9:06:42:A9:E4:32:88:DF:A7:4D:07:82:B9:78:C0:A5:2E
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer: /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial: 019AF12DE960F25A75A10BD699B255D145A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number: 175E
Signing time: Sat 06 Dec 2025 01:01:48 +0000
Manifest this update: Sat 06 Dec 2025 01:01:48 +0000
Manifest next update: Sun 07 Dec 2025 01:01:48 +0000
Files and hashes: 1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: e8lGXAwAKdnxIjSbaoKqu2S4nWktUIfW+fKXunGOOE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:e9:60:f2:5a:75:a1:0b:d6:99:b2:55:d1:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Validity
Not Before: Dec 6 01:01:48 2025 GMT
Not After : Dec 7 01:01:48 2025 GMT
Subject: CN=298560f90642a9e43288dfa74d0782b978c0a52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:4a:7f:2f:53:51:3b:22:dd:03:0d:db:40:
a3:79:ee:f7:1a:d4:66:61:79:4f:9c:4a:93:b5:c3:
fb:21:22:7e:a9:87:a2:d7:d8:55:c8:50:b0:d2:bf:
7f:8e:17:47:22:83:43:bc:a6:41:58:0d:c0:df:c8:
b2:22:c9:cc:31:6b:ef:94:19:14:96:40:57:6a:5c:
b4:c3:79:e2:db:45:03:3b:ed:b9:80:ec:83:30:5d:
68:f4:4c:cf:56:6b:24:2b:7d:ef:17:6e:ff:38:30:
48:ea:c1:6b:88:32:cd:2a:ac:6d:fd:2e:b4:a2:07:
0f:12:10:a1:4d:93:a2:d3:2d:94:03:b0:f0:d4:03:
59:2b:d2:fc:8f:04:8c:81:c4:04:89:84:46:c4:30:
73:e3:b0:1e:40:c9:f6:78:0c:a5:ee:58:b2:d6:98:
21:81:e8:cc:8f:78:0a:d2:7c:0c:6b:0e:d2:79:f1:
5e:96:35:92:c1:54:dc:27:5b:38:f3:7d:89:58:a7:
81:90:12:b0:2b:40:a3:fa:67:8e:95:8e:72:5c:d9:
34:c2:7a:76:37:f6:27:e1:1d:c8:48:96:88:9d:99:
5d:57:cb:97:4b:fe:1f:b4:01:46:d8:0a:cd:16:2c:
13:06:67:3a:db:b6:4a:cb:11:54:e1:cb:55:55:8f:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:85:60:F9:06:42:A9:E4:32:88:DF:A7:4D:07:82:B9:78:C0:A5:2E
X509v3 Authority Key Identifier:
keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:49:a5:20:59:5b:14:a3:9a:9e:8f:00:b1:1b:e3:29:23:9f:
bc:fd:8c:0a:5d:87:92:c3:94:29:8b:56:c6:10:ae:2e:6d:c1:
da:25:5d:e3:a4:c1:bc:1a:b4:7f:3e:a1:0c:ab:0d:67:72:6b:
34:56:5c:7c:88:0d:31:12:0f:f0:97:83:2b:2d:00:70:7c:cd:
f8:6a:47:45:4e:4b:06:20:81:d4:88:1d:41:f9:5c:5a:28:05:
ed:4e:a2:f5:2a:2c:25:1a:fa:fd:40:f1:cb:b7:d0:ad:e2:7b:
91:6a:2e:b1:0d:8e:6f:7d:06:02:d0:7a:6b:2f:5c:6b:46:fe:
3e:99:5b:bd:b0:4b:50:75:12:44:1f:b4:f2:27:f0:0a:bf:38:
44:d8:d1:6d:ce:08:46:2b:5f:71:5b:cc:67:80:0f:45:aa:9d:
2c:d5:30:2c:91:95:d3:14:3a:c4:fe:2a:f3:c3:7f:36:64:74:
7f:59:72:c7:f6:f9:6c:cb:ff:cf:ab:01:29:55:f8:6d:bb:40:
65:c8:62:08:66:f0:b9:b7:fe:a4:6a:5a:8a:8b:03:1e:9d:d5:
57:43:66:91:2d:a8:98:62:10:6f:9d:2b:dd:a9:61:f4:fe:8b:
f2:c4:89:95:8b:22:29:de:d8:ed:b1:d3:0b:58:f2:89:ec:a9:
0f:72:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:26:55 2025 by rpki-client