This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft File: WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json) Hash identifier: Pz1uWaJasAhN4Ap/qqitd6Zx6V4TKzuY2jR418LPUiI= Subject key identifier: 3D:C1:B8:70:08:5A:55:B0:97:D4:B4:A3:B3:B5:1A:67:B8:8C:89:74 Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8 Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8 Certificate serial: 019AF051A653BDFD30C3B96A1F3F82C0C8F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 21:01:14 +0000 Manifest this update: Fri 05 Dec 2025 21:01:14 +0000 Manifest next update: Sat 06 Dec 2025 21:01:14 +0000 Files and hashes: 1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: LhniwbW2/81ZJVC7hAaoeWDBTsjCo543i946PO9De2I=) 2: vt15ABy3zJP47x5DikC4lY7LNe4.roa (hash: IdpTO09MEQGHcGdgBzndMJHenkqW9uYtr/gnL2zPkrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:a6:53:bd:fd:30:c3:b9:6a:1f:3f:82:c0:c8:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8 Validity Not Before: Dec 5 21:01:14 2025 GMT Not After : Dec 6 21:01:14 2025 GMT Subject: CN=3dc1b870085a55b097d4b4a3b3b51a67b88c8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:16:a2:7e:3b:b4:21:42:35:71:25:de:8a: 12:53:59:bc:bb:39:dd:2f:10:72:5c:26:15:fd:99: ff:e0:bc:0d:a3:e5:c7:b7:e1:3f:d0:c2:61:31:72: 43:da:37:f3:72:cc:39:cc:a7:6e:ab:98:8f:36:95: 6f:01:0a:f8:0c:d7:d0:90:8f:84:93:38:cb:03:cf: d2:22:a9:39:9d:96:3b:7c:58:16:7b:24:cb:c7:b2: 42:aa:4a:be:09:c9:89:cc:1c:ce:58:b3:1b:d7:33: 31:48:20:ca:a5:74:37:8b:c6:c7:ac:9f:4d:e1:6c: d9:c8:5f:b4:27:eb:d3:45:57:89:96:a1:3f:98:88: 11:11:80:8b:20:2a:91:d4:9d:b2:4a:3f:62:99:97: b7:91:a7:10:03:58:af:43:ee:1a:2c:36:2f:c3:bb: d2:25:26:92:4a:90:39:50:bf:86:f1:c5:59:6c:39: ba:3f:08:58:e9:f5:11:ae:d9:45:33:0f:a8:2d:68: 85:20:ba:fb:04:b4:e7:23:00:ee:1b:c2:e9:df:0d: b9:03:d2:31:73:3f:52:96:56:be:1f:20:0e:21:4a: fb:bc:3a:68:a2:e2:91:dc:96:76:e7:36:64:64:f7: 3d:5f:37:52:7b:fc:ff:a2:5b:f7:1d:0c:99:4e:61: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C1:B8:70:08:5A:55:B0:97:D4:B4:A3:B3:B5:1A:67:B8:8C:89:74 X509v3 Authority Key Identifier: keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1a:d8:fe:cb:47:7f:11:40:3f:68:ab:e2:05:2e:13:89:ce: 6d:cb:2d:04:6b:bd:2a:d6:fd:cb:00:4b:53:db:64:53:75:01: fd:b8:c2:59:c2:bb:f8:ac:ce:9f:9e:30:02:04:dc:16:4f:19: 29:a0:a5:ec:40:dd:bc:40:2f:0b:85:b8:0a:11:34:c8:18:55: d5:1a:5d:d6:60:52:e3:69:84:09:30:29:de:a3:85:ab:eb:fd: 6d:7c:c9:49:9e:c0:79:b9:76:0e:60:9d:78:70:5b:64:cf:cb: df:28:b7:e9:55:f7:90:ed:00:11:ab:bf:f4:ae:df:a9:6f:ea: 06:62:0c:c6:c8:a0:55:a3:97:72:10:d1:84:11:f7:dc:db:de: 08:23:b3:9d:2d:83:ab:db:ea:5d:4a:dc:e8:47:27:49:dc:33: 46:eb:bf:d0:b5:f2:40:c3:fa:3e:50:5e:78:c1:e0:0e:c5:96: 9d:ad:3a:76:19:0c:b7:7b:89:8d:03:18:a9:a0:cd:87:9e:5d: ee:d7:0f:8e:30:05:8a:1b:cc:9c:71:b9:12:f6:ef:15:2c:1c: 76:8e:7b:48:20:72:01:3b:9e:83:e9:6b:f4:57:c1:6c:fd:a0: 20:e2:70:a4:45:88:c0:cc:2d:65:ca:41:52:6f:d1:c9:9c:18: 70:9a:ae:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUaZTvf0ww7lqHz+CwMj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5 YTRiYzgwHhcNMjUxMjA1MjEwMTE0WhcNMjUxMjA2MjEwMTE0WjAzMTEwLwYDVQQD EygzZGMxYjg3MDA4NWE1NWIwOTdkNGI0YTNiM2I1MWE2N2I4OGM4OTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww0Won47tCFCNXEl3ooSU1m8uznd LxByXCYV/Zn/4LwNo+XHt+E/0MJhMXJD2jfzcsw5zKduq5iPNpVvAQr4DNfQkI+E kzjLA8/SIqk5nZY7fFgWeyTLx7JCqkq+CcmJzBzOWLMb1zMxSCDKpXQ3i8bHrJ9N 4WzZyF+0J+vTRVeJlqE/mIgREYCLICqR1J2ySj9imZe3kacQA1ivQ+4aLDYvw7vS JSaSSpA5UL+G8cVZbDm6PwhY6fURrtlFMw+oLWiFILr7BLTnIwDuG8Lp3w25A9Ix cz9Slla+HyAOIUr7vDpoouKR3JZ25zZkZPc9XzdSe/z/olv3HQyZTmE+AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3BuHAIWlWwl9S0o7O1Gme4jIl0MB8GA1UdIwQY MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1 LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBrY/stH fxFAP2ir4gUuE4nObcstBGu9Ktb9ywBLU9tkU3UB/bjCWcK7+KzOn54wAgTcFk8Z KaCl7EDdvEAvC4W4ChE0yBhV1Rpd1mBS42mECTAp3qOFq+v9bXzJSZ7Aebl2DmCd eHBbZM/L3yi36VX3kO0AEau/9K7fqW/qBmIMxsigVaOXchDRhBH33NveCCOznS2D q9vqXUrc6EcnSdwzRuu/0LXyQMP6PlBeeMHgDsWWna06dhkMt3uJjQMYqaDNh55d 7tcPjjAFihvMnHG5EvbvFSwcdo57SCByATueg+lr9FfBbP2gIOJwpEWIwMwtZcpB Um/RyZwYcJquMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:18 2025 by rpki-client