This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json) Hash identifier: r1XplPsKeX5H1Hhg7AotWEOSkbjyWP/GoCmeNk8qvWw= Subject key identifier: E5:8F:10:4C:68:14:6A:D4:B2:D4:FB:5A:09:CA:8B:A5:35:30:58:3D Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc Certificate serial: 019AF2090EF3EC3BD4031493B5054FF3BAAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft Manifest number: 0A32 Signing time: Sat 06 Dec 2025 05:01:11 +0000 Manifest this update: Sat 06 Dec 2025 05:01:11 +0000 Manifest next update: Sun 07 Dec 2025 05:01:11 +0000 Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: qF0gUYpaG75EJrpwlnnWPYRhGWVYpgDfXiOPnhbiuLM=) 2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:0e:f3:ec:3b:d4:03:14:93:b5:05:4f:f3:ba:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc Validity Not Before: Dec 6 05:01:11 2025 GMT Not After : Dec 7 05:01:11 2025 GMT Subject: CN=e58f104c68146ad4b2d4fb5a09ca8ba53530583d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:38:eb:ad:60:0f:ee:fe:b5:a2:5a:f3:a2:21: 6c:1f:56:e0:9e:18:44:26:ab:75:b9:52:01:7b:f5: a6:e9:ab:21:79:57:df:53:fc:72:5f:37:e6:47:b3: e0:e4:9a:74:1b:ac:ff:ef:da:12:66:f7:fb:bc:0e: b4:0f:a1:d3:c1:5e:0b:9d:11:51:70:6d:de:71:07: c4:12:a6:d8:8a:a9:57:1f:54:7a:ed:0f:b7:80:f5: bb:8e:07:01:7e:9d:08:73:b3:2d:04:cf:de:94:e3: c8:4c:74:31:33:46:c5:0c:aa:79:66:9a:f6:d5:1e: 5a:fe:72:61:ca:f2:46:23:7e:3f:93:25:48:f6:94: d9:c6:fa:4f:e1:12:64:f1:6f:6f:d1:20:5d:f9:35: 8c:09:1d:ca:93:4f:c3:fb:8b:c0:a0:6e:2f:53:1c: 22:9b:7f:f7:53:b3:e7:e1:e5:31:50:85:f9:b0:7b: 27:7a:c8:74:c2:8d:f2:c8:fa:94:1a:45:ae:c9:64: 17:c0:e9:10:49:21:a3:96:6b:74:c1:04:6d:87:61: cd:e4:45:5e:96:15:05:b5:36:af:98:15:de:67:c3: 06:78:3d:fc:58:31:b1:d5:44:b1:f6:ce:02:34:8b: f4:62:63:99:1d:4b:c4:c2:37:56:c0:c3:e7:1b:66: 7e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:8F:10:4C:68:14:6A:D4:B2:D4:FB:5A:09:CA:8B:A5:35:30:58:3D X509v3 Authority Key Identifier: keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:89:35:0e:41:67:94:ad:a1:7a:bd:ae:07:0c:2a:90:5b:81: ac:7b:d2:ad:59:06:f7:e9:bf:58:40:3e:5b:1f:9d:90:17:0f: 68:73:0d:7f:37:8e:f8:6f:02:12:03:13:30:fe:cc:bb:8e:ea: 1e:26:3b:02:14:ed:1e:90:e4:7b:f9:bf:05:ad:7a:bd:d8:3d: 78:95:67:47:10:43:cf:d9:eb:ec:76:40:11:21:35:35:1a:36: 04:6d:77:af:96:d7:7b:c0:7f:78:32:16:48:33:f9:78:d9:28: 28:2f:ce:6f:5f:cb:2a:4b:7e:4d:43:21:3c:b2:b0:8d:c9:7b: 16:74:65:2b:be:4b:f8:e6:6c:6d:11:15:47:6c:7e:77:1c:85: 3d:a2:a2:ce:d9:6f:9e:90:e7:c7:67:c5:b2:22:5c:d8:d9:ef: a3:b3:f4:0e:7c:01:a9:49:6c:fa:46:91:51:8e:d6:97:fa:61: 42:34:fa:3c:81:20:3b:6e:2c:6c:b3:d4:dd:6e:cf:aa:e8:cf: 28:67:d1:9a:28:d5:f5:ab:f1:95:4c:f3:28:89:d6:30:48:17: 18:70:69:af:af:cf:4a:56:ae:67:be:ae:d0:c4:72:64:93:01: af:91:99:56:bb:e6:1a:10:01:a9:f3:49:97:19:fd:12:61:e4: 0f:90:5d:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQ7z7DvUAxSTtQVP87qtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDJjYTgxYjlmMGE5NzEzYjA5OTY4N2RjODE1NTFjNDVl M2Y4ZmMwHhcNMjUxMjA2MDUwMTExWhcNMjUxMjA3MDUwMTExWjAzMTEwLwYDVQQD EyhlNThmMTA0YzY4MTQ2YWQ0YjJkNGZiNWEwOWNhOGJhNTM1MzA1ODNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDjrrWAP7v61olrzoiFsH1bgnhhE Jqt1uVIBe/Wm6asheVffU/xyXzfmR7Pg5Jp0G6z/79oSZvf7vA60D6HTwV4LnRFR cG3ecQfEEqbYiqlXH1R67Q+3gPW7jgcBfp0Ic7MtBM/elOPITHQxM0bFDKp5Zpr2 1R5a/nJhyvJGI34/kyVI9pTZxvpP4RJk8W9v0SBd+TWMCR3Kk0/D+4vAoG4vUxwi m3/3U7Pn4eUxUIX5sHsnesh0wo3yyPqUGkWuyWQXwOkQSSGjlmt0wQRth2HN5EVe lhUFtTavmBXeZ8MGeD38WDGx1USx9s4CNIv0YmOZHUvEwjdWwMPnG2Z+RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWPEExoFGrUstT7WgnKi6U1MFg9MB8GA1UdIwQY MBaAFFoCyoG58KlxOwmWh9yBVRxF4/j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2Mt NDU5ZGRjNjMxYmNjLzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2MtNDU5ZGRjNjMxYmNj LzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvok1DkFn lK2her2uBwwqkFuBrHvSrVkG9+m/WEA+Wx+dkBcPaHMNfzeO+G8CEgMTMP7Mu47q HiY7AhTtHpDke/m/Ba16vdg9eJVnRxBDz9nr7HZAESE1NRo2BG13r5bXe8B/eDIW SDP5eNkoKC/Ob1/LKkt+TUMhPLKwjcl7FnRlK75L+OZsbREVR2x+dxyFPaKiztlv npDnx2fFsiJc2Nnvo7P0DnwBqUls+kaRUY7Wl/phQjT6PIEgO24sbLPU3W7PqujP KGfRmijV9avxlUzzKInWMEgXGHBpr6/PSlauZ76u0MRyZJMBr5GZVrvmGhABqfNJ lxn9EmHkD5Bd5A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:02 2025 by rpki-client