This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json) Hash identifier: syog1tKaSb6JIyT8BTCeXTu792n8/hmkfps45IuKXpk= Subject key identifier: 4F:AE:A8:B2:87:38:84:8F:0D:F1:A6:35:91:07:2C:F5:86:43:87:6F Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e Certificate serial: 019B2C2F94B31260F425D16058769F853E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft Manifest number: 10D3 Signing time: Wed 17 Dec 2025 12:01:14 +0000 Manifest this update: Wed 17 Dec 2025 12:01:14 +0000 Manifest next update: Thu 18 Dec 2025 12:01:14 +0000 Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: TyjR6ISYEfPAphef7PAT7p094ksYxqPJnw6KRnV/kTM=) 2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:94:b3:12:60:f4:25:d1:60:58:76:9f:85:3e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e Validity Not Before: Dec 17 12:01:14 2025 GMT Not After : Dec 18 12:01:14 2025 GMT Subject: CN=4faea8b28738848f0df1a63591072cf58643876f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:84:4d:a6:2c:8a:2c:62:f9:40:47:32:80: 5a:1f:cb:eb:4e:e3:96:08:cd:ed:d3:1a:0e:1f:cd: a8:9e:a4:16:50:28:55:85:ab:7b:93:85:70:ed:0e: 6c:99:b8:90:58:9b:e7:76:51:fc:40:3d:60:31:ad: 40:33:c1:10:04:e8:e3:75:41:ee:ff:b7:36:fe:5a: 62:ca:2e:2b:81:80:c0:2f:ea:dc:cb:04:6d:38:2b: cf:25:a1:ae:cc:f5:e2:ec:f5:f7:dc:bf:37:0e:e4: 9f:46:a8:3f:e8:ce:27:8e:a9:be:30:48:1a:38:87: fe:5d:09:77:4f:3f:62:c7:59:95:35:fb:4f:bc:5a: 4f:7e:24:84:f3:ba:79:6c:97:28:c8:3c:00:18:76: dc:ce:f9:99:3b:79:46:b1:0e:18:98:04:51:4c:33: 1e:44:2e:3c:f7:27:33:a9:a2:e5:8e:bb:d0:4f:89: 00:36:92:a1:6b:f5:ee:09:16:36:4b:c6:0d:50:5c: 7f:b1:40:86:f2:57:bd:ed:9c:70:38:bf:b4:f0:e2: 3d:c8:a9:c5:c8:a8:57:a6:b9:2d:7a:00:68:40:74: 33:fa:a6:f1:21:2c:ad:6a:02:b0:e5:eb:f8:6b:7d: 76:9f:44:0d:38:59:ab:70:d3:bf:ce:a5:e9:23:8f: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AE:A8:B2:87:38:84:8F:0D:F1:A6:35:91:07:2C:F5:86:43:87:6F X509v3 Authority Key Identifier: keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:38:f2:e9:7a:e0:a2:f1:b1:f5:15:4f:88:85:d9:b7:eb:32: 1a:dd:79:12:e0:c7:e7:a0:a6:70:b2:12:90:e8:f3:df:13:e8: c6:62:1f:4f:d5:0b:8f:4e:66:dc:e1:b8:74:e0:ee:3f:c4:ea: df:89:01:d7:4c:ec:93:53:c5:6a:9a:cc:02:a9:24:a5:7b:2f: 42:ff:8a:35:4b:6a:af:a8:e1:b3:e3:ac:f9:73:c9:35:94:1b: a5:0c:a2:f7:9c:57:e5:60:02:af:d8:93:43:63:4d:50:c0:a3: 4d:fe:7c:14:41:d8:23:28:73:fe:6d:65:69:7d:1d:9a:d8:53: 42:8c:7a:9f:3a:00:f8:7c:e3:e0:89:fe:f4:80:bc:9b:17:d9: ce:db:99:0d:22:90:9b:91:12:a5:7d:c8:ce:31:9f:9a:73:7b: fa:e8:99:22:4e:51:db:25:14:c5:7d:c2:ec:4d:67:4b:0f:90: 1b:67:97:d3:8a:9b:4f:86:9c:ba:2b:d0:6b:90:17:ee:bc:e9: 4d:2c:60:6e:4e:d1:54:a9:52:8e:fc:64:57:b7:56:54:c5:53: 1b:17:40:a9:a0:e6:ba:2f:b6:92:82:01:58:9d:8b:7e:cf:0b: d5:26:22:e6:df:e4:74:59:28:15:3b:f3:a3:31:23:f7:7b:78: ca:c5:f1:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL5SzEmD0JdFgWHafhT4rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ1ZDlhMWEyMjQxNjgzM2RlNTlhNWU2MTlkMTIwOTZk MDk2OWUwHhcNMjUxMjE3MTIwMTE0WhcNMjUxMjE4MTIwMTE0WjAzMTEwLwYDVQQD Eyg0ZmFlYThiMjg3Mzg4NDhmMGRmMWE2MzU5MTA3MmNmNTg2NDM4NzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJWETaYsiixi+UBHMoBaH8vrTuOW CM3t0xoOH82onqQWUChVhat7k4Vw7Q5smbiQWJvndlH8QD1gMa1AM8EQBOjjdUHu /7c2/lpiyi4rgYDAL+rcywRtOCvPJaGuzPXi7PX33L83DuSfRqg/6M4njqm+MEga OIf+XQl3Tz9ix1mVNftPvFpPfiSE87p5bJcoyDwAGHbczvmZO3lGsQ4YmARRTDMe RC489yczqaLljrvQT4kANpKha/XuCRY2S8YNUFx/sUCG8le97ZxwOL+08OI9yKnF yKhXprktegBoQHQz+qbxISytagKw5ev4a312n0QNOFmrcNO/zqXpI4/xWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+uqLKHOISPDfGmNZEHLPWGQ4dvMB8GA1UdIwQY MBaAFFrEXZoaIkFoM95ZpeYZ0SCW0JaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMt M2EwMDMxMzVhYWQxLzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMtM2EwMDMxMzVhYWQx LzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTjy6Xrg ovGx9RVPiIXZt+syGt15EuDH56CmcLISkOjz3xPoxmIfT9ULj05m3OG4dODuP8Tq 34kB10zsk1PFaprMAqkkpXsvQv+KNUtqr6jhs+Os+XPJNZQbpQyi95xX5WACr9iT Q2NNUMCjTf58FEHYIyhz/m1laX0dmthTQox6nzoA+Hzj4In+9IC8mxfZztuZDSKQ m5ESpX3IzjGfmnN7+uiZIk5R2yUUxX3C7E1nSw+QG2eX04qbT4acuivQa5AX7rzp TSxgbk7RVKlSjvxkV7dWVMVTGxdAqaDmui+2koIBWJ2Lfs8L1SYi5t/kdFkoFTvz ozEj93t4ysXxWg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:31:55 2025 by rpki-client