This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft File: WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json) Hash identifier: 4fpQ5j3FK8wjkCSc627ldUfkJSqwEQWW7lrIR6BEEN8= Subject key identifier: B8:2A:6E:73:D3:FB:31:F9:1D:1A:2E:BE:AA:3D:9E:17:C2:2D:B7:A7 Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D Certificate issuer: /CN=5a93259014f5b764847072c3734ecb528072218d Certificate serial: 019AF27718E18145F3AA6C04DB2D8EECD346 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: 4YhjxQBsmZXCqHW+OFmb+vrWwFvnCihywH36w5B7VOA=) 2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:18:e1:81:45:f3:aa:6c:04:db:2d:8e:ec:d3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a93259014f5b764847072c3734ecb528072218d Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=b82a6e73d3fb31f91d1a2ebeaa3d9e17c22db7a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:62:a1:f9:b3:30:76:3f:36:67:33:a7:fc:f1: fa:c8:33:9b:43:43:04:4e:15:d5:c6:11:bd:ae:c0: 4a:66:a0:b6:f8:6f:fa:4a:22:59:5c:1d:14:5e:65: 03:87:37:c6:00:2b:6e:66:c0:fd:be:2e:80:64:f0: 2e:cc:78:97:68:ab:1e:76:78:8c:2b:57:c1:e0:07: 75:e0:0a:b9:0c:b6:69:47:64:db:26:bf:c0:11:2b: 8d:cc:8c:76:f7:5d:88:95:8e:f0:f1:27:e7:4d:43: 11:4e:04:2c:75:5a:6d:db:a5:fd:3a:d8:5a:a0:3f: f0:ef:be:a4:61:f1:bc:2b:8f:e6:e0:47:36:95:9c: e9:b1:54:aa:3b:7c:7f:98:1f:3e:fa:e4:5d:ae:10: c2:dc:dd:d5:af:3e:36:c0:d7:b6:9f:80:3c:5c:3a: ce:a4:aa:bc:4c:0f:ae:08:97:b9:5c:df:0c:66:a5: 57:22:f2:c6:91:db:1d:14:7d:12:04:1e:82:dd:e5: a8:c6:80:4f:98:a0:18:32:93:b5:cb:92:4b:bd:97: 5d:99:e3:f5:c6:2b:fd:49:bb:3b:59:c2:8e:97:7e: 27:cc:35:86:fe:cc:e4:f2:be:ca:b3:bb:4b:a2:82: 78:bf:e9:f6:67:43:e4:47:eb:d7:fd:7b:32:45:a8: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2A:6E:73:D3:FB:31:F9:1D:1A:2E:BE:AA:3D:9E:17:C2:2D:B7:A7 X509v3 Authority Key Identifier: keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:50:88:75:ae:92:f6:0d:83:3e:3a:50:6f:43:dc:f0:00:1c: 0c:be:6b:b1:cf:04:a2:69:e1:94:41:6d:2d:4b:d4:b0:d1:f8: a0:ce:7f:21:58:59:da:fa:c7:94:d7:9f:33:12:7a:48:0a:38: 56:44:67:be:29:4e:83:e0:e2:22:de:5a:e1:62:3c:77:f3:06: be:36:bc:7e:64:a7:b5:8f:fe:94:a4:ae:a5:ce:07:f0:e4:a0: c1:37:5c:a8:1f:59:30:eb:e6:1b:ac:ab:7a:39:d1:6d:94:15: 27:30:c8:3f:74:52:73:c1:1d:f3:e9:cd:98:b5:fe:cb:72:35: d5:3a:6f:4a:13:86:25:81:a8:45:d0:49:4f:54:fe:e3:70:06: d6:5f:8e:df:77:3a:2f:80:f2:80:cf:3e:29:c9:68:64:45:70: 13:cc:e5:ab:ce:0a:80:c0:2f:b5:fb:8b:52:63:a9:18:aa:63: 7f:88:f6:2b:11:15:d2:74:bd:d7:06:fa:da:f0:f9:d6:61:3e: fa:ad:98:0f:79:1c:ca:00:bf:25:07:cb:7b:9b:46:b6:15:55: c8:5a:53:a3:58:78:b1:8b:b6:52:53:8e:88:57:03:d5:87:55: 5b:9e:51:ca:fa:f9:ce:06:3a:f7:b3:2e:8c:e6:fd:78:8c:ae: 5f:34:84:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxjhgUXzqmwE2y2O7NNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTMyNTkwMTRmNWI3NjQ4NDcwNzJjMzczNGVjYjUyODA3 MjIxOGQwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD EyhiODJhNmU3M2QzZmIzMWY5MWQxYTJlYmVhYTNkOWUxN2MyMmRiN2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mKh+bMwdj82ZzOn/PH6yDObQ0ME ThXVxhG9rsBKZqC2+G/6SiJZXB0UXmUDhzfGACtuZsD9vi6AZPAuzHiXaKsedniM K1fB4Ad14Aq5DLZpR2TbJr/AESuNzIx2912IlY7w8SfnTUMRTgQsdVpt26X9Otha oD/w776kYfG8K4/m4Ec2lZzpsVSqO3x/mB8++uRdrhDC3N3Vrz42wNe2n4A8XDrO pKq8TA+uCJe5XN8MZqVXIvLGkdsdFH0SBB6C3eWoxoBPmKAYMpO1y5JLvZddmeP1 xiv9Sbs7WcKOl34nzDWG/szk8r7Ks7tLooJ4v+n2Z0PkR+vX/XsyRagj/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgqbnPT+zH5HRouvqo9nhfCLbenMB8GA1UdIwQY MBaAFFqTJZAU9bdkhHByw3NOy1KAciGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BNbGtCVDF0MlNFY0hMRGMwN0xVb0J5SVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lOGQ0YzUtNWQxMS00ZDc5LTgyZWQt ODNmNjg1MmJmOTU4LzEvV3BNbGtCVDF0MlNFY0hMRGMwN0xVb0J5SVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lOGQ0YzUtNWQxMS00ZDc5LTgyZWQtODNmNjg1MmJmOTU4 LzEvV3BNbGtCVDF0MlNFY0hMRGMwN0xVb0J5SVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlCIda6S 9g2DPjpQb0Pc8AAcDL5rsc8EomnhlEFtLUvUsNH4oM5/IVhZ2vrHlNefMxJ6SAo4 VkRnvilOg+DiIt5a4WI8d/MGvja8fmSntY/+lKSupc4H8OSgwTdcqB9ZMOvmG6yr ejnRbZQVJzDIP3RSc8Ed8+nNmLX+y3I11TpvShOGJYGoRdBJT1T+43AG1l+O33c6 L4DygM8+KcloZEVwE8zlq84KgMAvtfuLUmOpGKpjf4j2KxEV0nS91wb62vD51mE+ +q2YD3kcygC/JQfLe5tGthVVyFpTo1h4sYu2UlOOiFcD1YdVW55Ryvr5zgY697Mu jOb9eIyuXzSE8g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:19 2025 by rpki-client