This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft File: WgqpaCxoOpwblc6WdtUbINOf0q4.mft (raw, json) Hash identifier: pAP3ZUKY62dSAazoNaK+QzHDr2/Iu6yM1sENaQfJKgo= Subject key identifier: BA:F0:87:CB:91:F6:C1:8C:C8:93:05:1A:92:57:FE:3A:53:C5:9D:7C Authority key identifier: 5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE Certificate issuer: /CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae Certificate serial: 019AF3F74E8979ADE8161116CCD67BFEBE4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft Manifest number: 0FD1 Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: D9VtpqQ5QcOE8_3AAGv6AbSncPk.roa (hash: 45VJpPEdefwyDmmpbMXwZdBXiJtpSM2szrEhn6hGnnw=) 2: WgqpaCxoOpwblc6WdtUbINOf0q4.crl (hash: Sd3XZxIH+1UUW9ybLihJ5N/x3UtU+cbyNCOiCjoW5mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:4e:89:79:ad:e8:16:11:16:cc:d6:7b:fe:be:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0aa9682c683a9c1b95ce9676d51b20d39fd2ae Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=baf087cb91f6c18cc893051a9257fe3a53c59d7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:45:44:af:19:3f:bd:39:0c:60:55:8b:fd:25: e3:3f:ea:89:56:a5:f1:f2:af:fc:69:d3:8a:72:03: 55:b5:c3:5d:8d:5e:a2:fc:4a:73:ed:f3:4d:5b:82: 22:17:68:76:61:9b:92:03:85:53:c7:3e:4b:5a:de: 3a:5d:76:f4:9f:23:56:4b:ee:94:bb:c2:b6:53:23: 93:c0:96:35:c6:e8:be:d7:67:ab:18:c8:3e:59:93: 7d:4c:5c:b0:81:a2:02:95:24:af:07:91:f3:1d:77: 8f:0c:d1:74:dd:c6:37:df:a0:06:3b:af:e4:83:69: 7e:cd:89:7b:7d:99:85:ec:cc:d0:55:01:84:68:2e: 34:29:5a:29:ac:ca:ef:33:f0:f7:6c:ff:03:07:1b: 8c:5b:a3:6c:5f:9a:4e:ba:16:69:80:ef:1d:8a:4f: 20:f0:d0:4d:2d:cc:4d:23:91:a0:a9:4f:c6:f6:0b: bb:d6:e8:e3:46:08:d5:c0:a6:67:e3:8f:f7:58:8b: 58:8d:e0:51:25:5c:c5:5a:c4:40:5b:47:d8:7b:81: 95:0e:8f:0d:ba:a4:16:4f:69:b3:23:91:77:9f:90: 31:88:ba:43:05:f5:0f:e1:5d:4a:dc:56:e6:84:33: 8c:d5:93:4b:86:a5:aa:9b:d2:80:aa:cf:af:f1:46: 72:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F0:87:CB:91:F6:C1:8C:C8:93:05:1A:92:57:FE:3A:53:C5:9D:7C X509v3 Authority Key Identifier: keyid:5A:0A:A9:68:2C:68:3A:9C:1B:95:CE:96:76:D5:1B:20:D3:9F:D2:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgqpaCxoOpwblc6WdtUbINOf0q4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f491a0-b666-4e9f-b0f9-6eed52968b1c/1/WgqpaCxoOpwblc6WdtUbINOf0q4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:44:cc:04:f7:25:e9:7e:12:ba:51:ec:3f:ef:cb:57:6e:b7: e9:6a:d2:32:45:ae:4d:86:c9:9f:04:77:ac:72:3d:10:1e:4d: e2:7a:f9:c7:ec:4e:a9:e6:a6:96:f4:48:b3:40:dd:bb:65:0d: ef:22:c6:ac:f9:d4:05:38:55:d6:4b:b7:9d:b5:15:c2:18:17: 9c:74:2e:48:33:7f:a1:92:6e:7d:77:13:bb:b1:5c:9f:dc:fe: 21:e8:6b:73:35:54:a4:21:eb:60:b7:d0:5d:ba:e5:8a:ab:f3: 50:17:e7:bc:87:12:b2:aa:60:cb:2d:58:b9:42:73:e8:bd:aa: b7:11:e1:45:a6:bc:f6:73:90:06:20:b2:75:90:5c:35:3e:48: 19:d2:ee:a0:a2:01:f6:87:6a:25:6b:d9:5b:7a:87:71:db:89: 0c:d1:26:a3:4c:c1:cf:71:ef:54:2b:6f:74:69:32:0a:cf:13: 2c:d2:9e:8a:15:0d:17:e6:41:8a:d6:f7:d1:54:62:17:df:d1: ff:00:5f:2a:a3:c5:bc:82:cf:70:e1:cf:95:80:0d:34:3a:89: 1f:96:a6:2a:41:29:5a:2a:dd:49:dc:e6:b8:9e:70:93:2d:66: 85:f0:44:dc:88:6b:79:38:68:dc:9a:02:7c:8c:13:0b:9d:ed: 94:1b:d3:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz906Jea3oFhEWzNZ7/r5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMGFhOTY4MmM2ODNhOWMxYjk1Y2U5Njc2ZDUxYjIwZDM5 ZmQyYWUwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD EyhiYWYwODdjYjkxZjZjMThjYzg5MzA1MWE5MjU3ZmUzYTUzYzU5ZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkVErxk/vTkMYFWL/SXjP+qJVqXx 8q/8adOKcgNVtcNdjV6i/Epz7fNNW4IiF2h2YZuSA4VTxz5LWt46XXb0nyNWS+6U u8K2UyOTwJY1xui+12erGMg+WZN9TFywgaIClSSvB5HzHXePDNF03cY336AGO6/k g2l+zYl7fZmF7MzQVQGEaC40KVoprMrvM/D3bP8DBxuMW6NsX5pOuhZpgO8dik8g 8NBNLcxNI5GgqU/G9gu71ujjRgjVwKZn44/3WItYjeBRJVzFWsRAW0fYe4GVDo8N uqQWT2mzI5F3n5AxiLpDBfUP4V1K3FbmhDOM1ZNLhqWqm9KAqs+v8UZy8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrwh8uR9sGMyJMFGpJX/jpTxZ18MB8GA1UdIwQY MBaAFFoKqWgsaDqcG5XOlnbVGyDTn9KuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjkt NmVlZDUyOTY4YjFjLzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9mNDkxYTAtYjY2Ni00ZTlmLWIwZjktNmVlZDUyOTY4YjFj LzEvV2dxcGFDeG9PcHdibGM2V2R0VWJJTk9mMHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjkTMBPcl 6X4SulHsP+/LV2636WrSMkWuTYbJnwR3rHI9EB5N4nr5x+xOqeamlvRIs0Ddu2UN 7yLGrPnUBThV1ku3nbUVwhgXnHQuSDN/oZJufXcTu7Fcn9z+IehrczVUpCHrYLfQ XbrliqvzUBfnvIcSsqpgyy1YuUJz6L2qtxHhRaa89nOQBiCydZBcNT5IGdLuoKIB 9odqJWvZW3qHcduJDNEmo0zBz3HvVCtvdGkyCs8TLNKeihUNF+ZBitb30VRiF9/R /wBfKqPFvILPcOHPlYANNDqJH5amKkEpWirdSdzmuJ5wky1mhfBE3IhreTho3JoC fIwTC53tlBvT3Q== -----END CERTIFICATE-----Generated at Sat Dec 6 22:42:02 2025 by rpki-client