This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json) Hash identifier: jcgZvMDImiUO7LM4eJWFjFOrH7/vfs8En4393PqpAT8= Subject key identifier: E6:8D:BF:D6:C0:24:04:E2:B8:59:10:F9:44:49:8A:DB:6A:A5:F0:6E Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba Certificate serial: 019AF2AD90DF1174C8D1A22CB791C5665CF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 08:00:52 +0000 Manifest this update: Sat 06 Dec 2025 08:00:52 +0000 Manifest next update: Sun 07 Dec 2025 08:00:52 +0000 Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: 6jiazIG/kdQ5HbFbWOdOjimsKzG5oFd1GbYKHGZkpLI=) 2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:90:df:11:74:c8:d1:a2:2c:b7:91:c5:66:5c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba Validity Not Before: Dec 6 08:00:52 2025 GMT Not After : Dec 7 08:00:52 2025 GMT Subject: CN=e68dbfd6c02404e2b85910f944498adb6aa5f06e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:24:48:30:1b:51:ab:b9:ca:25:ef:6f:d1: 73:e5:b3:87:5b:c2:96:ed:53:30:61:38:0e:c8:27: 3a:3f:16:cb:60:3c:51:bc:b4:d2:3f:cb:d6:21:be: 1b:e0:f6:7b:f7:ef:b9:fb:c4:08:71:1c:eb:37:0a: 3f:62:3e:a7:df:31:9e:eb:53:e8:a8:fe:83:11:9d: d8:cc:97:98:21:98:1a:eb:73:7e:97:e9:ee:94:34: ee:2d:d6:18:97:45:31:bf:d6:ef:ff:3a:a9:25:8b: 89:7c:5d:de:6b:0d:ac:bb:5e:d4:04:e6:d7:93:0d: f8:e0:be:ea:b0:9d:44:4f:3c:d0:ef:7c:a9:f0:8a: aa:58:af:d1:ae:11:79:96:27:d4:c4:83:70:ed:40: fd:85:55:53:ca:e5:ce:63:47:f2:51:b2:93:8d:a1: 99:b5:65:80:43:25:bb:7d:75:3b:b8:bf:d6:5f:83: 23:1a:f7:48:0c:ef:11:52:1d:e1:77:78:f2:b7:3d: 12:a1:a6:71:a7:74:9a:c5:9d:ec:37:ac:e7:aa:e5: db:35:c9:38:28:88:f3:7f:88:6d:11:c6:5f:b2:43: 7f:28:b5:3a:84:dc:96:b5:77:e0:90:f1:46:aa:61: 84:07:53:06:ea:80:78:17:47:22:5f:47:3a:19:96: 4f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8D:BF:D6:C0:24:04:E2:B8:59:10:F9:44:49:8A:DB:6A:A5:F0:6E X509v3 Authority Key Identifier: keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b6:f1:e8:60:1c:b4:34:8c:4c:0d:f1:ad:53:76:ec:35:4a: 4c:73:cd:56:f4:88:c0:f8:6b:c5:68:27:59:ac:07:74:5f:68: e8:3e:9c:75:74:fb:0c:5e:14:16:78:3b:90:61:64:97:e3:7e: 56:b3:2d:c9:0b:36:9b:5d:2d:1d:6e:c6:06:2e:4c:8e:6b:10: 28:9b:89:43:8a:1f:05:79:2f:ab:f6:30:0d:6d:7f:1f:94:a8: 37:8d:a2:fb:41:a3:04:f0:01:b2:b8:5c:d1:c9:a1:38:4a:67: 6e:cc:4e:c2:fa:75:43:0f:3e:5c:e9:0a:15:7d:e4:5a:25:24: 8a:25:7c:a0:f8:26:62:f0:0e:1d:9a:31:c6:95:53:4c:71:bb: e8:94:b8:3e:a8:69:6f:51:a2:4e:24:36:d6:79:30:fb:f4:11: 7f:08:26:25:47:14:6d:7f:a6:23:ca:67:d5:29:ef:47:23:dd: 7e:db:d6:4e:20:bc:5c:24:f9:8d:18:f4:3c:4c:ef:06:8a:5b: 25:28:80:1d:86:09:39:74:b2:8e:9c:9f:9f:c5:79:41:95:64: 54:3f:fc:f3:0b:cd:2e:b4:18:aa:52:26:eb:ba:f6:1b:99:6a: c7:42:cb:83:0b:0f:ac:de:5b:97:fd:bf:86:91:cd:3a:dd:79: 38:ca:a4:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZDfEXTI0aIst5HFZlz0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjE1NzliODc1ZTNlMDkzZDQ3MzI1Yjk3MzVlZGJmZTc4 MDlmYmEwHhcNMjUxMjA2MDgwMDUyWhcNMjUxMjA3MDgwMDUyWjAzMTEwLwYDVQQD EyhlNjhkYmZkNmMwMjQwNGUyYjg1OTEwZjk0NDQ5OGFkYjZhYTVmMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogwkSDAbUau5yiXvb9Fz5bOHW8KW 7VMwYTgOyCc6PxbLYDxRvLTSP8vWIb4b4PZ79++5+8QIcRzrNwo/Yj6n3zGe61Po qP6DEZ3YzJeYIZga63N+l+nulDTuLdYYl0Uxv9bv/zqpJYuJfF3eaw2su17UBObX kw344L7qsJ1ETzzQ73yp8IqqWK/RrhF5lifUxINw7UD9hVVTyuXOY0fyUbKTjaGZ tWWAQyW7fXU7uL/WX4MjGvdIDO8RUh3hd3jytz0SoaZxp3SaxZ3sN6znquXbNck4 KIjzf4htEcZfskN/KLU6hNyWtXfgkPFGqmGEB1MG6oB4F0ciX0c6GZZPVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaNv9bAJATiuFkQ+URJittqpfBuMB8GA1UdIwQY MBaAFFhhV5uHXj4JPUcyW5c17b/ngJ+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQt ZjUzMzYzMjdiODgxLzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQtZjUzMzYzMjdiODgx LzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebbx6GAc tDSMTA3xrVN27DVKTHPNVvSIwPhrxWgnWawHdF9o6D6cdXT7DF4UFng7kGFkl+N+ VrMtyQs2m10tHW7GBi5MjmsQKJuJQ4ofBXkvq/YwDW1/H5SoN42i+0GjBPABsrhc 0cmhOEpnbsxOwvp1Qw8+XOkKFX3kWiUkiiV8oPgmYvAOHZoxxpVTTHG76JS4Pqhp b1GiTiQ21nkw+/QRfwgmJUcUbX+mI8pn1SnvRyPdftvWTiC8XCT5jRj0PEzvBopb JSiAHYYJOXSyjpyfn8V5QZVkVD/88wvNLrQYqlIm67r2G5lqx0LLgwsPrN5bl/2/ hpHNOt15OMqkJg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:09:43 2025 by rpki-client