This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft File: WkxPlqpaAsrag9S4jUnmpzq9JfA.mft (raw, json) Hash identifier: M1zddjUKZIQg5Hwgq5PIwRCa+hoe56e4nUWkBav6Hyw= Subject key identifier: 0F:49:51:BD:0C:2C:82:0F:CD:23:E4:9E:63:7B:BD:A4:59:40:78:12 Authority key identifier: 5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 Certificate issuer: /CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Certificate serial: 019AF49C29FA867ECE8621422B48057D4355 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft Manifest number: 0F02 Signing time: Sat 06 Dec 2025 17:01:06 +0000 Manifest this update: Sat 06 Dec 2025 17:01:06 +0000 Manifest next update: Sun 07 Dec 2025 17:01:06 +0000 Files and hashes: 1: Qlh9bFiBiZDJ7E4bJ6Qm7U8cfpk.roa (hash: 6OpDkd4to1irtWv8vpsm2jxisQw9dR70exo6gT09Ccs=) 2: WkxPlqpaAsrag9S4jUnmpzq9JfA.crl (hash: s5qlTQHJucNuI6bscwpYD5CMiU4vXPygJk6QhE/UFKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:29:fa:86:7e:ce:86:21:42:2b:48:05:7d:43:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4c4f96aa5a02cada83d4b88d49e6a73abd25f0 Validity Not Before: Dec 6 17:01:06 2025 GMT Not After : Dec 7 17:01:06 2025 GMT Subject: CN=0f4951bd0c2c820fcd23e49e637bbda459407812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:63:3a:7b:b5:53:2f:82:0a:45:56:4c:c9:74: 3a:e1:b1:b5:8c:31:05:b5:0f:57:68:23:a8:a5:b7: 8c:e1:db:4e:bf:8d:b3:d9:36:6f:6d:18:bf:25:aa: 12:6b:af:71:cc:29:49:09:f6:ca:c7:24:a5:8d:dc: 4b:7e:62:11:de:87:74:74:78:50:e3:8c:13:86:9e: 89:94:db:1d:6b:d6:01:31:d8:77:f3:06:9d:0b:ff: ef:6f:13:87:59:05:83:b7:8f:33:0a:7d:2f:c1:a3: 30:9e:97:9d:92:b7:09:39:80:2e:0d:ef:50:6b:38: 42:53:c7:11:10:74:82:51:6f:46:98:65:8c:93:b1: d9:18:43:b2:6a:78:d2:56:94:14:88:a3:c4:b6:4c: 88:89:1a:13:da:2c:ae:ce:31:da:7c:00:fc:b7:0b: ae:d5:c8:8d:12:ac:f3:1c:fa:b6:3b:6d:cb:9e:fd: 39:b5:58:3e:13:f5:4b:1e:18:e3:4b:fb:fc:51:79: ed:4d:5e:17:e8:ea:d0:05:48:0b:72:c1:44:b5:e1: 09:9f:f7:11:16:18:8b:a6:67:24:15:91:31:17:91: b0:b0:73:a2:f1:4d:f3:5f:1f:7d:9a:70:f5:ea:c1: b6:1f:85:ab:34:90:41:b5:f1:ac:7f:78:d2:8d:0a: 65:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:49:51:BD:0C:2C:82:0F:CD:23:E4:9E:63:7B:BD:A4:59:40:78:12 X509v3 Authority Key Identifier: keyid:5A:4C:4F:96:AA:5A:02:CA:DA:83:D4:B8:8D:49:E6:A7:3A:BD:25:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkxPlqpaAsrag9S4jUnmpzq9JfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d8187-2b54-4203-a023-8a92109989ef/1/WkxPlqpaAsrag9S4jUnmpzq9JfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:27:ed:e4:43:88:1a:fe:0f:81:09:03:0e:41:58:f4:d7:6a: 89:79:99:e7:a9:b2:33:db:be:9c:5f:a2:c0:aa:de:81:45:8e: 67:8f:bb:e5:22:dd:f6:25:a1:df:44:d7:5d:97:12:24:18:eb: 75:c0:59:6e:c0:fe:ff:3a:c1:d0:8f:c0:5e:10:9b:e6:f7:03: e3:52:5d:26:37:e8:ec:9e:0d:ff:72:14:81:88:8f:c9:f0:d4: 79:5b:22:80:7d:12:84:2a:f3:b7:a9:ff:ad:0d:e2:b2:42:f1: 81:47:86:20:fe:5f:55:54:1d:8a:33:39:e3:4a:9f:22:fc:63: 29:56:59:fb:70:a0:4c:54:48:1b:f2:4d:80:23:69:ea:25:6f: 0e:a2:0a:5f:b1:12:cb:52:77:a3:61:f7:42:ba:6a:df:8c:d9: 6f:12:05:87:3a:6d:8b:01:50:23:f8:d0:14:d2:94:73:2b:a4: c1:e4:ab:66:ff:bf:00:63:8b:30:be:dc:d5:69:68:c7:48:4d: 9c:54:1d:f8:a0:ae:18:0d:7e:47:a5:91:95:f3:d3:ec:44:39: 07:ce:e3:cb:03:79:c0:12:c6:c0:4e:35:3c:f4:78:3b:91:22: 94:30:0c:96:8a:64:9d:06:4f:7b:7e:29:ee:f3:57:98:69:2a: d3:b8:45:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCn6hn7OhiFCK0gFfUNVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGM0Zjk2YWE1YTAyY2FkYTgzZDRiODhkNDllNmE3M2Fi ZDI1ZjAwHhcNMjUxMjA2MTcwMTA2WhcNMjUxMjA3MTcwMTA2WjAzMTEwLwYDVQQD EygwZjQ5NTFiZDBjMmM4MjBmY2QyM2U0OWU2MzdiYmRhNDU5NDA3ODEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mM6e7VTL4IKRVZMyXQ64bG1jDEF tQ9XaCOopbeM4dtOv42z2TZvbRi/JaoSa69xzClJCfbKxySljdxLfmIR3od0dHhQ 44wThp6JlNsda9YBMdh38wadC//vbxOHWQWDt48zCn0vwaMwnpedkrcJOYAuDe9Q azhCU8cREHSCUW9GmGWMk7HZGEOyanjSVpQUiKPEtkyIiRoT2iyuzjHafAD8twuu 1ciNEqzzHPq2O23Lnv05tVg+E/VLHhjjS/v8UXntTV4X6OrQBUgLcsFEteEJn/cR FhiLpmckFZExF5GwsHOi8U3zXx99mnD16sG2H4WrNJBBtfGsf3jSjQpl0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9JUb0MLIIPzSPknmN7vaRZQHgSMB8GA1UdIwQY MBaAFFpMT5aqWgLK2oPUuI1J5qc6vSXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMt OGE5MjEwOTk4OWVmLzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85ZDgxODctMmI1NC00MjAzLWEwMjMtOGE5MjEwOTk4OWVm LzEvV2t4UGxxcGFBc3JhZzlTNGpVbm1wenE5SmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyft5EOI Gv4PgQkDDkFY9NdqiXmZ56myM9u+nF+iwKregUWOZ4+75SLd9iWh30TXXZcSJBjr dcBZbsD+/zrB0I/AXhCb5vcD41JdJjfo7J4N/3IUgYiPyfDUeVsigH0ShCrzt6n/ rQ3iskLxgUeGIP5fVVQdijM540qfIvxjKVZZ+3CgTFRIG/JNgCNp6iVvDqIKX7ES y1J3o2H3Qrpq34zZbxIFhzptiwFQI/jQFNKUcyukweSrZv+/AGOLML7c1Wlox0hN nFQd+KCuGA1+R6WRlfPT7EQ5B87jywN5wBLGwE41PPR4O5EilDAMlopknQZPe34p 7vNXmGkq07hF1w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:34 2025 by rpki-client