This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft File: WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json) Hash identifier: u40qv00p4/kQOHw6Y+j8LrAYvGyUILpgM+UjDynOt7c= Subject key identifier: 2B:D7:24:52:89:28:A9:16:64:DF:68:7B:53:F0:67:6A:21:E9:E9:FC Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0 Certificate issuer: /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0 Certificate serial: 019AF0887C40968E30EC3F607EC6BB425BD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft Manifest number: 1764 Signing time: Fri 05 Dec 2025 22:01:07 +0000 Manifest this update: Fri 05 Dec 2025 22:01:07 +0000 Manifest next update: Sat 06 Dec 2025 22:01:07 +0000 Files and hashes: 1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=) 2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: RcqPz6mc12AmiLYAw3KQ+Qn0bouzCwN+0e2Ktj79l8I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:7c:40:96:8e:30:ec:3f:60:7e:c6:bb:42:5b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0 Validity Not Before: Dec 5 22:01:07 2025 GMT Not After : Dec 6 22:01:07 2025 GMT Subject: CN=2bd724528928a91664df687b53f0676a21e9e9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f8:80:43:7e:af:ab:a7:93:ed:55:30:ff:c9: 3f:30:41:17:ea:a4:df:42:bb:18:cb:0c:86:70:ab: 27:d0:38:4c:63:a8:c9:d0:33:d8:57:4e:46:ed:36: 95:eb:82:7b:40:93:b3:c5:ff:1f:93:7b:bb:43:7f: a8:2b:29:44:69:ab:ab:3b:28:a5:a5:a6:72:a0:38: b2:e7:e1:80:72:90:ab:0b:f5:c2:d4:4a:59:fb:36: 04:03:15:40:24:48:7b:79:a1:65:8c:7a:a1:a3:ec: 2b:a1:28:a8:bb:6a:33:85:b1:a9:31:38:ad:45:8f: 4c:25:ad:9e:7e:9d:75:ce:e3:ff:9c:73:5d:54:e1: 49:20:80:2c:b9:4e:d4:ec:52:bb:a6:e4:39:08:1e: 2d:47:08:ab:5e:f4:17:2e:7d:f8:4d:f1:44:84:e8: 3d:6c:bb:cb:e6:85:90:4e:78:5b:68:73:24:41:02: ba:1d:74:d6:63:3b:da:b1:99:98:88:ea:4c:b2:79: 7e:f5:e1:34:ab:21:d1:ae:88:43:3a:15:42:9e:32: e7:53:89:d9:59:59:45:6e:f0:7d:f7:53:32:d8:d5: c6:9d:3c:78:b6:bd:5b:e9:bb:a1:39:58:77:7b:ca: 6e:e3:73:c1:b1:6a:59:c1:14:a7:ca:3c:4c:68:32: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D7:24:52:89:28:A9:16:64:DF:68:7B:53:F0:67:6A:21:E9:E9:FC X509v3 Authority Key Identifier: keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:7c:16:ef:ce:3d:e3:62:21:88:3a:57:ef:6a:98:11:68:18: ec:24:75:73:31:b9:19:3d:05:cb:f0:5e:3a:56:70:03:e9:39: d0:db:c4:f0:05:98:34:69:16:f3:5f:8d:74:18:1f:8f:19:c6: b8:4f:65:69:ca:0d:de:85:4b:01:c9:43:29:84:b3:ff:f1:df: ca:22:c3:ee:06:6a:db:9b:90:a8:80:4c:06:cd:fa:72:2b:b8: dd:bc:a8:f8:ac:9a:f1:b6:19:33:66:78:84:4f:fa:ed:e7:96: 01:ba:51:c4:bc:86:7a:8d:1b:39:b7:21:8e:51:0a:65:b5:11: 02:3e:a0:e8:5a:d2:8d:c7:f4:8d:19:b4:00:0c:89:3a:b5:a3: 9c:7a:85:16:e7:54:cc:a0:33:0c:18:e2:e9:38:c3:3f:de:7f: fa:09:0c:10:a2:44:05:ae:44:59:48:de:25:c9:13:35:b3:0e: 85:50:f5:77:07:e7:70:4c:03:8e:25:c1:d2:14:42:46:40:a1: 9d:30:ef:17:52:03:58:8a:38:94:f5:da:83:1f:6b:e1:88:f6: 20:02:12:ba:8c:e6:22:d2:2e:0a:f5:25:17:c0:c9:91:24:74: e7:30:63:37:b6:1f:c6:5d:a7:80:de:58:4c:11:19:37:84:d6: 3c:d1:4d:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHxAlo4w7D9gfsa7QlvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZjI2N2FhYWM5OWJmMGM5ZDFlOGU0MjlkZTAxY2NkM2Nj OTBlYzAwHhcNMjUxMjA1MjIwMTA3WhcNMjUxMjA2MjIwMTA3WjAzMTEwLwYDVQQD EygyYmQ3MjQ1Mjg5MjhhOTE2NjRkZjY4N2I1M2YwNjc2YTIxZTllOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/iAQ36vq6eT7VUw/8k/MEEX6qTf QrsYywyGcKsn0DhMY6jJ0DPYV05G7TaV64J7QJOzxf8fk3u7Q3+oKylEaaurOyil paZyoDiy5+GAcpCrC/XC1EpZ+zYEAxVAJEh7eaFljHqho+wroSiou2ozhbGpMTit RY9MJa2efp11zuP/nHNdVOFJIIAsuU7U7FK7puQ5CB4tRwirXvQXLn34TfFEhOg9 bLvL5oWQTnhbaHMkQQK6HXTWYzvasZmYiOpMsnl+9eE0qyHRrohDOhVCnjLnU4nZ WVlFbvB991My2NXGnTx4tr1b6buhOVh3e8pu43PBsWpZwRSnyjxMaDKFgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvXJFKJKKkWZN9oe1PwZ2oh6en8MB8GA1UdIwQY MBaAFFjyZ6qsmb8MnR6OQp3gHM08yQ7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTIt N2EzYjMxYmU3YjM4LzEvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9hNGZlOGUtNGI0ZC00YWM3LTlhOTItN2EzYjMxYmU3YjM4 LzEvV1BKbnFxeVp2d3lkSG81Q25lQWN6VHpKRHNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3wW7849 42IhiDpX72qYEWgY7CR1czG5GT0Fy/BeOlZwA+k50NvE8AWYNGkW81+NdBgfjxnG uE9lacoN3oVLAclDKYSz//HfyiLD7gZq25uQqIBMBs36ciu43byo+Kya8bYZM2Z4 hE/67eeWAbpRxLyGeo0bObchjlEKZbURAj6g6FrSjcf0jRm0AAyJOrWjnHqFFudU zKAzDBji6TjDP95/+gkMEKJEBa5EWUjeJckTNbMOhVD1dwfncEwDjiXB0hRCRkCh nTDvF1IDWIo4lPXagx9r4Yj2IAISuozmItIuCvUlF8DJkSR05zBjN7Yfxl2ngN5Y TBEZN4TWPNFNBA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:01:28 2025 by rpki-client