This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft File: WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json) Hash identifier: 2zM3pjQNrTzleCAbGGu0vbzEeNBMkBbqLCQe8sDQVys= Subject key identifier: 6A:81:99:D5:E7:52:F1:6C:F8:3D:55:4D:FD:FF:A7:4B:79:54:1D:A3 Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Certificate serial: 019AF08835125F5B90B080990B9A9007AB7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft Manifest number: 0B49 Signing time: Fri 05 Dec 2025 22:00:49 +0000 Manifest this update: Fri 05 Dec 2025 22:00:49 +0000 Manifest next update: Sat 06 Dec 2025 22:00:49 +0000 Files and hashes: 1: DTuRKBc5DWAml25DkyA602e9E2c.roa (hash: 5dE22gWyeJTuF6kqg31h2vC+gEZF7bnxpO0rszd82sI=) 2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: F4Vic1oETI3N+I428PFKDAf5ixhT0pQLtnQOYD3A7MI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:35:12:5f:5b:90:b0:80:99:0b:9a:90:07:ab:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Validity Not Before: Dec 5 22:00:49 2025 GMT Not After : Dec 6 22:00:49 2025 GMT Subject: CN=6a8199d5e752f16cf83d554dfdffa74b79541da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ae:c3:b7:cc:74:27:f4:77:c1:b3:ed:f8:f7: 23:45:c9:9a:45:30:6c:db:2c:43:57:bf:65:6d:d6: 78:f3:22:55:0e:90:dd:a8:56:ac:f7:92:e5:e3:07: d7:21:50:35:57:72:a9:76:af:49:9e:fb:12:34:66: 02:66:3e:b2:b7:f8:f7:eb:32:cc:75:d5:a8:e2:46: bd:79:bd:70:13:35:3f:39:e2:f9:aa:e4:d4:ba:29: 44:36:d0:31:2e:78:f8:1e:61:4e:b6:7a:df:82:1f: fa:9d:b4:4d:63:9e:7d:76:6a:c1:57:ba:da:47:bf: 8f:7b:31:58:9e:08:51:7d:d6:4a:c3:72:0f:8c:ed: 86:57:27:12:c2:cc:73:79:62:ec:d4:7c:47:83:63: a5:80:8d:61:80:b7:99:f2:ce:c7:b4:79:2a:42:83: 8c:a5:3f:a7:87:01:4f:61:80:8d:81:e3:57:b6:87: 86:5b:ce:a9:ee:87:03:33:76:fc:9d:cb:9e:c9:c3: 31:e8:fe:82:f5:e4:d1:1c:cb:42:a0:7c:c5:be:35: d9:08:3a:ea:11:54:d2:b1:1b:ba:06:1e:a1:8f:a4: 4f:40:7f:d8:49:b9:a0:7b:5c:5a:35:a8:26:7c:41: a8:39:5f:08:f8:c9:db:0f:60:f8:8e:8e:60:05:59: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:81:99:D5:E7:52:F1:6C:F8:3D:55:4D:FD:FF:A7:4B:79:54:1D:A3 X509v3 Authority Key Identifier: keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:dd:7c:64:4a:7e:71:e7:b0:d8:0f:a5:31:cd:35:10:28:8a: 8c:a8:73:a2:ae:1a:fd:13:78:6d:e2:ae:24:5c:7b:01:21:dc: 26:33:0d:06:e8:cd:3a:52:c3:11:37:ab:1c:43:08:5c:d7:fd: a6:eb:db:bf:5a:bf:eb:7e:68:fc:34:3f:73:f4:2f:7a:f0:06: 7c:68:52:db:4a:8f:24:ea:20:d7:58:9a:de:76:07:89:9b:50: ef:6c:18:1a:49:40:73:b2:0e:c3:11:ec:a0:52:e9:28:cc:24: 76:b0:47:e3:c4:9a:be:ec:83:12:99:69:c1:59:a8:41:84:f6: a0:eb:5a:9e:af:68:4e:36:f4:81:02:bc:2a:89:43:e5:c5:5d: f5:87:da:ea:71:3f:d3:9f:00:0d:ce:fa:2b:34:3a:45:27:11: be:62:0f:6e:e8:1c:02:50:f1:09:43:3d:24:e0:7b:30:fe:2b: aa:f0:76:5a:ff:98:2e:ca:42:89:c4:bd:06:40:b5:1e:cb:c3: ce:d9:70:07:90:95:88:03:6e:6b:8c:e3:31:d9:73:b6:ff:f7: d6:34:ed:a9:63:2e:c1:08:8f:c4:1a:47:8d:41:13:9d:ff:66: 8a:83:6f:d9:4d:1f:ff:a5:d1:c9:40:a2:5d:8b:89:61:ab:f7: 77:12:2b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDUSX1uQsICZC5qQB6t/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm MDNjYmMwHhcNMjUxMjA1MjIwMDQ5WhcNMjUxMjA2MjIwMDQ5WjAzMTEwLwYDVQQD Eyg2YTgxOTlkNWU3NTJmMTZjZjgzZDU1NGRmZGZmYTc0Yjc5NTQxZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa7Dt8x0J/R3wbPt+PcjRcmaRTBs 2yxDV79lbdZ48yJVDpDdqFas95Ll4wfXIVA1V3Kpdq9JnvsSNGYCZj6yt/j36zLM ddWo4ka9eb1wEzU/OeL5quTUuilENtAxLnj4HmFOtnrfgh/6nbRNY559dmrBV7ra R7+PezFYnghRfdZKw3IPjO2GVycSwsxzeWLs1HxHg2OlgI1hgLeZ8s7HtHkqQoOM pT+nhwFPYYCNgeNXtoeGW86p7ocDM3b8ncueycMx6P6C9eTRHMtCoHzFvjXZCDrq EVTSsRu6Bh6hj6RPQH/YSbmge1xaNagmfEGoOV8I+MnbD2D4jo5gBVkKlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqBmdXnUvFs+D1VTf3/p0t5VB2jMB8GA1UdIwQY MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et OTY2NmVkZWVlMWUzLzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVd18ZEp+ ceew2A+lMc01ECiKjKhzoq4a/RN4beKuJFx7ASHcJjMNBujNOlLDETerHEMIXNf9 puvbv1q/635o/DQ/c/QvevAGfGhS20qPJOog11ia3nYHiZtQ72wYGklAc7IOwxHs oFLpKMwkdrBH48SavuyDEplpwVmoQYT2oOtanq9oTjb0gQK8KolD5cVd9Yfa6nE/ 058ADc76KzQ6RScRvmIPbugcAlDxCUM9JOB7MP4rqvB2Wv+YLspCicS9BkC1HsvD ztlwB5CViANua4zjMdlztv/31jTtqWMuwQiPxBpHjUETnf9mioNv2U0f/6XRyUCi XYuJYav3dxIrQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:31 2025 by rpki-client