This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft File: wmxJkkbYEuUuy6e39V4m7a71NG4.mft (raw, json) Hash identifier: dTeN4WVAvHKuosn4yp8cN2FFZ107PTmJPEGULiPuhkE= Subject key identifier: 0F:5E:CA:4C:13:D2:63:15:1D:78:D7:D1:AE:EF:77:50:7A:E7:29:F8 Authority key identifier: C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E Certificate issuer: /CN=c26c499246d812e52ecba7b7f55e26edaef5346e Certificate serial: 019AF540FDE9A90DD9CCEC920D24EC2062F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft Manifest number: 0A47 Signing time: Sat 06 Dec 2025 20:01:08 +0000 Manifest this update: Sat 06 Dec 2025 20:01:08 +0000 Manifest next update: Sun 07 Dec 2025 20:01:08 +0000 Files and hashes: 1: NKEmc1Gm_NQD7CT6Cn1w4jdoBhU.roa (hash: vtLkjXKXNNQtUub74+UwuR4CERXIYE5j4Tti0GLdQIg=) 2: wmxJkkbYEuUuy6e39V4m7a71NG4.crl (hash: TupXfkEMCeLaAYkfDOHyWgUxQv3j06yTW14+aP4cllc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:fd:e9:a9:0d:d9:cc:ec:92:0d:24:ec:20:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c26c499246d812e52ecba7b7f55e26edaef5346e Validity Not Before: Dec 6 20:01:08 2025 GMT Not After : Dec 7 20:01:08 2025 GMT Subject: CN=0f5eca4c13d263151d78d7d1aeef77507ae729f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:55:d1:8f:b0:c5:71:72:8b:86:e4:82:8c: d5:c3:43:3b:69:28:6a:d0:56:e1:f5:e9:9f:40:37: 92:f4:07:04:5f:25:e9:e8:a6:e5:54:9c:c4:8f:11: e0:30:f9:4a:2f:12:66:94:c1:ae:1a:e4:1a:eb:9e: 44:a8:6b:03:2e:bb:5d:55:49:db:63:de:78:f0:e6: 67:93:95:84:b1:16:df:11:7b:90:ad:37:cb:75:59: 3b:76:58:6f:69:1a:0c:96:ef:63:e5:da:08:ff:65: d9:06:ef:26:7d:bc:a0:df:9f:c7:b2:9d:80:06:93: 50:6b:59:a7:a8:82:0e:b2:0d:cd:0c:68:ce:70:4b: 22:95:03:f8:a5:ec:41:00:43:60:d6:dc:0b:63:47: 8d:39:30:27:19:82:6a:e0:d3:87:59:74:ce:36:30: 79:a2:84:75:b2:31:93:0c:d8:c5:4f:2b:b0:97:34: 21:c1:dd:36:60:74:40:2c:dc:e7:97:00:82:2b:aa: 78:f6:bf:89:18:24:4c:41:7d:a3:f2:4b:0a:92:ce: db:66:79:5c:21:0e:00:24:77:80:b2:f1:fe:8a:73: ef:d1:d9:55:90:ff:1b:b5:58:29:73:16:2b:02:b1: 7e:45:e5:4c:bc:35:4d:c9:c3:a7:26:f3:a3:43:a5: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5E:CA:4C:13:D2:63:15:1D:78:D7:D1:AE:EF:77:50:7A:E7:29:F8 X509v3 Authority Key Identifier: keyid:C2:6C:49:92:46:D8:12:E5:2E:CB:A7:B7:F5:5E:26:ED:AE:F5:34:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmxJkkbYEuUuy6e39V4m7a71NG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e795a2-1400-493e-8058-487da9354a65/1/wmxJkkbYEuUuy6e39V4m7a71NG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f8:29:b5:65:37:b8:5c:5f:97:6a:51:bd:6e:3f:f6:e6:f7: bf:ff:6a:47:f3:a8:4b:5b:bf:81:81:e8:bc:a5:1c:ff:7e:c9: b5:7a:37:e6:a9:a3:35:74:9f:f5:1f:d0:8b:58:b6:d9:64:b6: 9b:49:c7:8c:92:50:1d:38:27:44:4e:03:87:1d:9f:f7:c0:cf: ab:0d:80:15:df:e8:7d:9f:f9:16:c4:c1:6e:00:69:ea:24:0c: 91:b9:f7:34:69:68:bc:05:1a:3b:58:ac:b4:4b:4a:4d:ee:5e: 5e:50:08:07:8b:4b:29:e9:31:e9:07:2d:b8:b0:fc:16:78:bc: 1c:0b:17:a0:99:1b:ab:1b:a9:3c:23:ba:25:3b:a1:f2:a4:13: 31:42:fb:cc:5c:bf:0f:c1:39:9a:73:5d:80:04:81:3e:4f:a4: 40:92:88:7a:b2:38:23:5a:c8:3d:aa:85:9f:f9:bc:21:a6:d5: b8:6c:72:cc:26:f4:43:ce:87:8e:17:78:4f:2f:31:ad:05:c7: 95:25:cd:a0:7e:1c:aa:9a:78:ba:33:a3:46:ee:df:0a:fd:1a: 1c:7e:7e:2d:67:3a:1e:98:05:97:40:6c:8d:82:86:3f:a6:21: 4e:ee:69:b5:ca:11:ae:a5:e2:61:7a:7b:ea:95:c4:e9:72:e6: 70:33:88:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QP3pqQ3ZzOySDSTsIGLwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNmM0OTkyNDZkODEyZTUyZWNiYTdiN2Y1NWUyNmVkYWVm NTM0NmUwHhcNMjUxMjA2MjAwMTA4WhcNMjUxMjA3MjAwMTA4WjAzMTEwLwYDVQQD EygwZjVlY2E0YzEzZDI2MzE1MWQ3OGQ3ZDFhZWVmNzc1MDdhZTcyOWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+5V0Y+wxXFyi4bkgozVw0M7aShq 0Fbh9emfQDeS9AcEXyXp6KblVJzEjxHgMPlKLxJmlMGuGuQa655EqGsDLrtdVUnb Y9548OZnk5WEsRbfEXuQrTfLdVk7dlhvaRoMlu9j5doI/2XZBu8mfbyg35/Hsp2A BpNQa1mnqIIOsg3NDGjOcEsilQP4pexBAENg1twLY0eNOTAnGYJq4NOHWXTONjB5 ooR1sjGTDNjFTyuwlzQhwd02YHRALNznlwCCK6p49r+JGCRMQX2j8ksKks7bZnlc IQ4AJHeAsvH+inPv0dlVkP8btVgpcxYrArF+ReVMvDVNycOnJvOjQ6WGRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9eykwT0mMVHXjX0a7vd1B65yn4MB8GA1UdIwQY MBaAFMJsSZJG2BLlLsunt/VeJu2u9TRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9lNzk1YTItMTQwMC00OTNlLTgwNTgt NDg3ZGE5MzU0YTY1LzEvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9lNzk1YTItMTQwMC00OTNlLTgwNTgtNDg3ZGE5MzU0YTY1 LzEvd214SmtrYllFdVV1eTZlMzlWNG03YTcxTkc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPgptWU3 uFxfl2pRvW4/9ub3v/9qR/OoS1u/gYHovKUc/37JtXo35qmjNXSf9R/Qi1i22WS2 m0nHjJJQHTgnRE4Dhx2f98DPqw2AFd/ofZ/5FsTBbgBp6iQMkbn3NGlovAUaO1is tEtKTe5eXlAIB4tLKekx6QctuLD8Fni8HAsXoJkbqxupPCO6JTuh8qQTMUL7zFy/ D8E5mnNdgASBPk+kQJKIerI4I1rIPaqFn/m8IabVuGxyzCb0Q86Hjhd4Ty8xrQXH lSXNoH4cqpp4ujOjRu7fCv0aHH5+LWc6HpgFl0BsjYKGP6YhTu5ptcoRrqXiYXp7 6pXE6XLmcDOICQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:15 2025 by rpki-client