This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json) Hash identifier: gcbD0TAadtkxz5bU01H81a+JO1zfoeymIEOvQ1maDhU= Subject key identifier: C4:4F:CC:69:31:0F:DF:7C:56:DE:82:10:B3:69:A6:3D:20:95:A7:93 Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799 Certificate serial: 019AF0BF30174AE96FBBE6CC856E27F7F0D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=) 2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: 9pwcvnS2FHEFtwpHHG0PXXEZRL7pb5wZOP2O7hWWUF0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:30:17:4a:e9:6f:bb:e6:cc:85:6e:27:f7:f0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799 Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=c44fcc69310fdf7c56de8210b369a63d2095a793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:26:03:b5:7c:99:11:73:4d:91:50:2c:e0: 5a:b2:59:a9:1f:84:95:42:1c:ab:69:29:ae:e5:99: 68:fe:8a:b5:17:ac:3d:d0:c8:90:92:b3:e9:87:19: 56:d9:bb:d3:10:61:0e:33:d3:5c:f9:81:29:f5:00: 8e:32:13:10:a8:cf:d4:8f:24:b9:59:ce:de:ce:41: f5:34:ab:80:93:9b:09:d0:a8:a1:e4:6a:3d:3d:9a: 51:d0:06:fd:31:e7:9b:4e:df:a8:50:b7:c7:f4:76: 9c:2f:64:90:d1:9c:ca:24:38:57:14:b3:31:e4:d0: db:72:a6:65:c6:95:8b:55:55:82:2c:c3:5a:ea:70: bb:1c:8c:42:9f:8c:85:9a:9a:c9:f9:bb:63:13:c0: 8c:3a:88:21:76:3b:78:06:f6:db:54:c5:04:b6:0e: d5:fa:bb:9d:fe:e2:c2:fb:c8:3d:61:19:c9:28:09: 39:c8:35:05:17:81:9c:59:c6:ac:f5:eb:e7:31:a0: 62:38:50:58:6d:41:66:e6:a0:ee:be:cc:9f:a0:00: 0f:bf:55:de:cd:77:bd:a7:69:93:ee:6f:fc:cf:65: ed:f3:96:d0:3b:33:89:09:72:0c:cc:7d:4d:b9:e7: f0:c2:0c:74:d2:19:44:03:88:1e:2e:cf:38:ed:14: c0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4F:CC:69:31:0F:DF:7C:56:DE:82:10:B3:69:A6:3D:20:95:A7:93 X509v3 Authority Key Identifier: keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d7:28:fb:72:d8:4c:26:2f:9f:d7:1e:8b:78:9a:00:bf:39: 08:a8:e4:92:f4:3c:b4:e5:1d:f7:72:a7:a6:9c:c8:37:1e:4e: fb:bd:49:db:52:ce:21:5e:50:a2:a2:32:e4:39:40:73:c2:d6: 0c:78:9e:90:c3:0e:d2:22:9e:92:f1:61:3f:9a:f2:c3:55:a3: 96:e6:6a:3c:e0:4e:01:52:07:f9:75:75:39:64:37:0c:cc:e3: 0e:af:58:31:c9:6d:0e:1f:54:b4:cc:0a:39:e4:f5:eb:91:ed: 04:3e:c4:2a:25:22:b0:c6:2f:db:44:db:bf:1c:0b:ea:b2:e4: 2d:8d:ca:5b:3e:a7:43:9b:b4:f3:b1:6b:6d:cd:88:57:86:fc: 99:a4:52:26:c0:8b:29:4b:25:b8:50:c3:b4:63:ba:77:14:b7: 33:c0:c4:3a:2c:40:8c:0d:1d:9e:26:f3:ea:67:3f:06:50:4e: ea:5a:aa:15:4e:47:d0:f7:32:16:ba:63:69:11:01:f5:20:94: 6d:b9:65:a6:df:e3:3a:08:d4:74:79:d5:d4:3f:98:e4:09:cc: 47:bc:9b:d7:96:ed:5f:63:a0:4a:4e:8a:2e:d9:b6:57:40:20: ce:8c:9d:58:c6:51:c5:05:12:30:51:f0:34:3c:8a:81:a7:01: c9:b4:68:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzAXSulvu+bMhW4n9/DYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl NTA3OTkwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD EyhjNDRmY2M2OTMxMGZkZjdjNTZkZTgyMTBiMzY5YTYzZDIwOTVhNzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzQmA7V8mRFzTZFQLOBaslmpH4SV QhyraSmu5Zlo/oq1F6w90MiQkrPphxlW2bvTEGEOM9Nc+YEp9QCOMhMQqM/UjyS5 Wc7ezkH1NKuAk5sJ0Kih5Go9PZpR0Ab9MeebTt+oULfH9HacL2SQ0ZzKJDhXFLMx 5NDbcqZlxpWLVVWCLMNa6nC7HIxCn4yFmprJ+btjE8CMOoghdjt4BvbbVMUEtg7V +rud/uLC+8g9YRnJKAk5yDUFF4GcWcas9evnMaBiOFBYbUFm5qDuvsyfoAAPv1Xe zXe9p2mT7m/8z2Xt85bQOzOJCXIMzH1Nuefwwgx00hlEA4geLs847RTAfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRPzGkxD998Vt6CELNppj0glaeTMB8GA1UdIwQY MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANdco+3LY TCYvn9cei3iaAL85CKjkkvQ8tOUd93KnppzINx5O+71J21LOIV5QoqIy5DlAc8LW DHiekMMO0iKekvFhP5ryw1WjluZqPOBOAVIH+XV1OWQ3DMzjDq9YMcltDh9UtMwK OeT165HtBD7EKiUisMYv20TbvxwL6rLkLY3KWz6nQ5u087Frbc2IV4b8maRSJsCL KUsluFDDtGO6dxS3M8DEOixAjA0dnibz6mc/BlBO6lqqFU5H0PcyFrpjaREB9SCU bbllpt/jOgjUdHnV1D+Y5AnMR7yb15btX2OgSk6KLtm2V0AgzoydWMZRxQUSMFHw NDyKgacBybRoww== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:04 2025 by rpki-client