This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft File: wRjjTglHnc6J72HZj0wqv4GJzyQ.mft (raw, json) Hash identifier: FMIdi2/zlTuJ/9iM0sXPCN/Q1JI6hSy0F8WzXTUq1TI= Subject key identifier: 87:1F:CD:C3:F5:96:1C:0E:6A:3F:66:02:5E:A9:10:BF:40:D8:57:0F Authority key identifier: C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24 Certificate issuer: /CN=c118e34e09479dce89ef61d98f4c2abf8189cf24 Certificate serial: 019AF5780D33848D738BED8AF43D851E4B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft Manifest number: 0551 Signing time: Sat 06 Dec 2025 21:01:16 +0000 Manifest this update: Sat 06 Dec 2025 21:01:16 +0000 Manifest next update: Sun 07 Dec 2025 21:01:16 +0000 Files and hashes: 1: C_QylDjtmeXaqfQqwZx9bW-pizU.roa (hash: TxsogUKYtZ4fwZHLxBqP+QAdRfnbhKHLWlZVu8NvQ2Y=) 2: wRjjTglHnc6J72HZj0wqv4GJzyQ.crl (hash: v/C5c5pLFEretQHa30y+sZN+kmwR037Uwd3JEXJIh/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:0d:33:84:8d:73:8b:ed:8a:f4:3d:85:1e:4b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c118e34e09479dce89ef61d98f4c2abf8189cf24 Validity Not Before: Dec 6 21:01:16 2025 GMT Not After : Dec 7 21:01:16 2025 GMT Subject: CN=871fcdc3f5961c0e6a3f66025ea910bf40d8570f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:22:cf:10:b0:62:a5:cb:5a:fb:07:39:90:3f: 89:9f:f7:d4:12:00:6d:a4:a5:0f:ba:14:83:6c:42: 36:20:08:54:cc:45:68:ce:76:94:21:48:bb:dc:c0: 5c:ce:76:9c:55:0f:81:49:2f:37:9f:8e:36:2b:d3: c1:c5:4d:43:e2:12:61:7a:c5:64:10:e4:9c:f3:8f: 9b:cb:00:d8:c1:6b:f1:86:92:68:06:7f:80:86:e9: 9c:97:d7:f4:3d:f2:0a:6d:2a:4f:ca:0d:71:78:1b: 4b:bc:fd:b2:14:5c:b3:81:6a:8f:69:65:e4:f2:45: d8:36:a3:05:96:7a:42:c9:e5:44:73:2d:03:4a:56: 10:3e:90:3f:50:7b:2d:fd:9c:81:f4:ff:a6:65:d7: c0:85:05:83:c9:aa:dc:61:9a:a9:92:af:ac:0d:5c: 50:8e:9a:8c:31:ed:59:e3:12:f1:0f:48:af:00:f6: f5:f2:b6:e1:a7:bf:c2:e4:80:ec:54:41:cb:0f:39: 88:b3:62:c6:a0:0b:06:91:37:bc:3a:50:b4:00:eb: eb:31:02:77:f0:a7:7c:bc:9f:95:9d:ce:fa:21:11: e4:fa:e7:45:11:c9:a4:0e:cf:57:09:48:bc:5b:e2: da:ed:ce:b1:e6:01:ea:cf:24:1a:53:df:2b:af:af: e7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1F:CD:C3:F5:96:1C:0E:6A:3F:66:02:5E:A9:10:BF:40:D8:57:0F X509v3 Authority Key Identifier: keyid:C1:18:E3:4E:09:47:9D:CE:89:EF:61:D9:8F:4C:2A:BF:81:89:CF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRjjTglHnc6J72HZj0wqv4GJzyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7d6d4-941b-422a-905d-e29833c9c1c6/1/wRjjTglHnc6J72HZj0wqv4GJzyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:37:af:29:92:df:6c:16:4d:1d:6f:a1:6a:d3:e2:96:43:08: bf:ee:7d:e6:3b:af:1d:73:ba:4f:10:33:c7:dc:d5:c3:41:c5: 52:21:a9:0e:ba:43:2f:20:66:3f:eb:87:a4:84:44:f2:92:31: 1c:45:57:54:61:f2:93:3e:bd:01:be:3f:6f:52:02:d9:98:17: 81:9d:30:ad:32:88:f8:8f:cb:c9:4c:55:54:9c:1e:fe:41:a6: 2e:62:f4:a8:f1:f8:e8:09:de:b5:c3:60:dd:ae:fd:08:ca:83: 2a:3e:0c:be:0c:34:55:ac:3f:6d:e6:82:42:7d:42:7e:d3:43: f8:69:02:ca:64:92:b9:d4:85:1a:d2:3d:25:11:c2:d6:58:4e: 5f:97:01:8f:8d:99:74:ab:d6:cc:d5:ea:56:89:07:c8:2c:8d: c5:c8:38:c0:b4:25:8c:17:86:22:b6:14:6b:4c:04:13:27:09: b5:d7:31:3f:2f:54:84:71:92:3f:38:ca:ef:93:1f:79:11:06: 06:91:fb:b0:47:53:6e:7a:ee:fc:fd:2c:49:0b:6e:90:fa:d2: e7:98:24:ab:0f:5b:83:5b:a6:6c:af:10:f2:5e:2e:89:bd:e2: 34:59:0c:e2:fa:f7:ed:37:2a:b6:4e:17:ee:18:8d:c7:69:af: 28:72:10:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eA0zhI1zi+2K9D2FHksrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMThlMzRlMDk0NzlkY2U4OWVmNjFkOThmNGMyYWJmODE4 OWNmMjQwHhcNMjUxMjA2MjEwMTE2WhcNMjUxMjA3MjEwMTE2WjAzMTEwLwYDVQQD Eyg4NzFmY2RjM2Y1OTYxYzBlNmEzZjY2MDI1ZWE5MTBiZjQwZDg1NzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CLPELBipcta+wc5kD+Jn/fUEgBt pKUPuhSDbEI2IAhUzEVoznaUIUi73MBcznacVQ+BSS83n442K9PBxU1D4hJhesVk EOSc84+bywDYwWvxhpJoBn+Ahumcl9f0PfIKbSpPyg1xeBtLvP2yFFyzgWqPaWXk 8kXYNqMFlnpCyeVEcy0DSlYQPpA/UHst/ZyB9P+mZdfAhQWDyarcYZqpkq+sDVxQ jpqMMe1Z4xLxD0ivAPb18rbhp7/C5IDsVEHLDzmIs2LGoAsGkTe8OlC0AOvrMQJ3 8Kd8vJ+Vnc76IRHk+udFEcmkDs9XCUi8W+La7c6x5gHqzyQaU98rr6/nFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIcfzcP1lhwOaj9mAl6pEL9A2FcPMB8GA1UdIwQY MBaAFMEY404JR53Oie9h2Y9MKr+Bic8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iN2Q2ZDQtOTQxYi00MjJhLTkwNWQt ZTI5ODMzYzljMWM2LzEvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9iN2Q2ZDQtOTQxYi00MjJhLTkwNWQtZTI5ODMzYzljMWM2 LzEvd1JqalRnbEhuYzZKNzJIWmowd3F2NEdKenlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArTevKZLf bBZNHW+hatPilkMIv+595juvHXO6TxAzx9zVw0HFUiGpDrpDLyBmP+uHpIRE8pIx HEVXVGHykz69Ab4/b1IC2ZgXgZ0wrTKI+I/LyUxVVJwe/kGmLmL0qPH46AnetcNg 3a79CMqDKj4Mvgw0Vaw/beaCQn1CftND+GkCymSSudSFGtI9JRHC1lhOX5cBj42Z dKvWzNXqVokHyCyNxcg4wLQljBeGIrYUa0wEEycJtdcxPy9UhHGSPzjK75MfeREG BpH7sEdTbnru/P0sSQtukPrS55gkqw9bg1umbK8Q8l4uib3iNFkM4vr37Tcqtk4X 7hiNx2mvKHIQ0w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:16:14 2025 by rpki-client