This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json) Hash identifier: Wq9YuTu5uf933Kll2GMEaTpz4Yi5Z/aV+EpVJP8FglM= Subject key identifier: E5:96:3E:19:7A:63:CA:B5:DE:BD:18:C7:C4:51:59:2A:FF:BA:A9:7F Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16 Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16 Certificate serial: 019AF2099DBAEDAF951BF7EBEE7B82C8488B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft Manifest number: 1384 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=) 2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: stO6stUbYUMjyJDafHJU3H3KKkDhKGvfba7YxKA918o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9d:ba:ed:af:95:1b:f7:eb:ee:7b:82:c8:48:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=e5963e197a63cab5debd18c7c451592affbaa97f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:eb:f9:95:95:ac:86:9f:3a:4f:74:a9:ae:59: f0:a3:67:06:0e:82:1c:47:89:5d:4e:38:6f:92:cc: d5:56:f3:4e:c0:30:30:3a:48:a9:a6:46:b9:b9:df: 46:a8:18:a4:23:f9:6a:2d:08:d5:03:6b:f9:49:1c: 67:eb:1f:78:4a:cf:af:3b:9b:d6:f2:6b:f1:ad:6e: 24:ea:79:b6:ca:21:d7:cb:2c:f3:1b:93:b0:07:5e: 0c:4b:7e:be:83:2f:0a:c1:76:64:40:e7:ef:70:92: 8d:75:68:88:90:42:a3:c2:a5:2d:86:35:18:6d:bf: 8c:a8:ed:35:e4:e8:85:b9:49:bf:6e:df:f9:78:d2: 0b:ab:98:c7:cc:4d:be:ca:68:13:80:0b:0d:2d:06: 7a:1f:61:87:bd:e5:27:52:e9:6d:d6:3d:90:2c:80: 72:3a:91:26:e6:a4:96:f7:8f:d8:08:fa:41:98:d1: 78:48:18:e9:93:31:c2:6b:69:bc:90:87:6b:c2:84: 15:76:b4:6e:e2:7c:76:44:2c:3c:24:3f:52:d3:5e: 67:b8:72:c9:cf:0b:22:6e:7c:43:95:29:52:1d:24: 3f:7b:4b:ce:e7:c3:4b:79:8b:4e:4e:a3:6e:7e:85: 6f:88:2e:d7:b1:9c:46:02:dc:4c:75:b4:8e:d8:66: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:96:3E:19:7A:63:CA:B5:DE:BD:18:C7:C4:51:59:2A:FF:BA:A9:7F X509v3 Authority Key Identifier: keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:13:a8:f2:c6:29:d5:3a:bc:77:ec:0d:93:ca:07:25:48:40: 33:f6:04:8b:37:b1:7c:44:25:0a:d7:dc:65:0a:d8:5f:11:23: 6f:89:a4:c2:c6:02:e6:50:aa:b1:c0:e5:44:fc:c8:2f:fd:b2: 47:e1:c2:a7:44:eb:ac:ba:10:6f:66:de:37:90:a4:f1:36:df: 95:7f:c2:d2:cb:a1:dc:5e:58:36:05:07:32:e7:9d:b5:e6:89: 68:e3:5e:29:92:aa:42:3f:d4:81:81:44:8e:cf:25:bc:ec:c2: a7:41:8c:fb:79:57:af:46:26:a9:e1:14:43:07:85:ad:d9:6a: 10:a6:60:d2:b8:08:e5:a5:ba:b4:05:cf:58:05:02:b9:e8:db: e2:28:4e:db:06:46:8f:56:0a:85:5f:7d:ba:ad:68:e8:e9:e6: 43:74:13:fa:8a:46:b2:80:70:d0:1d:aa:bd:57:3a:c7:de:26: b7:ff:0b:e2:e7:71:f9:75:4b:79:c0:71:1e:46:86:b7:fb:5a: 51:01:a6:f5:96:36:45:d6:eb:04:b8:a1:e3:2b:58:51:b3:43: d2:8c:01:cc:19:06:fc:cd:c5:7c:ec:92:8a:cc:bc:c9:af:b4: 7c:4d:b5:88:98:e7:10:a7:9e:91:bf:82:cc:40:72:97:17:52: b9:31:9a:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ267a+VG/fr7nuCyEiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMDg5N2MxZGJkNjA2OTI5MTM3ZTY3MmJhZDBjMWY2N2U2 MzdkMTYwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EyhlNTk2M2UxOTdhNjNjYWI1ZGViZDE4YzdjNDUxNTkyYWZmYmFhOTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArev5lZWshp86T3Sprlnwo2cGDoIc R4ldTjhvkszVVvNOwDAwOkippka5ud9GqBikI/lqLQjVA2v5SRxn6x94Ss+vO5vW 8mvxrW4k6nm2yiHXyyzzG5OwB14MS36+gy8KwXZkQOfvcJKNdWiIkEKjwqUthjUY bb+MqO015OiFuUm/bt/5eNILq5jHzE2+ymgTgAsNLQZ6H2GHveUnUult1j2QLIBy OpEm5qSW94/YCPpBmNF4SBjpkzHCa2m8kIdrwoQVdrRu4nx2RCw8JD9S015nuHLJ zwsibnxDlSlSHSQ/e0vO58NLeYtOTqNufoVviC7XsZxGAtxMdbSO2GZvfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOWWPhl6Y8q13r0Yx8RRWSr/uql/MB8GA1UdIwQY MBaAFMIIl8Hb1gaSkTfmcrrQwfZ+Y30WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQt YzkxYmY1MDEwNGI5LzEvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQtYzkxYmY1MDEwNGI5 LzEvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWROo8sYp 1Tq8d+wNk8oHJUhAM/YEizexfEQlCtfcZQrYXxEjb4mkwsYC5lCqscDlRPzIL/2y R+HCp0TrrLoQb2beN5Ck8TbflX/C0suh3F5YNgUHMuedteaJaONeKZKqQj/UgYFE js8lvOzCp0GM+3lXr0YmqeEUQweFrdlqEKZg0rgI5aW6tAXPWAUCuejb4ihO2wZG j1YKhV99uq1o6OnmQ3QT+opGsoBw0B2qvVc6x94mt/8L4udx+XVLecBxHkaGt/ta UQGm9ZY2RdbrBLih4ytYUbND0owBzBkG/M3FfOySisy8ya+0fE21iJjnEKeekb+C zEBylxdSuTGaww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:28 2025 by rpki-client