This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json) Hash identifier: Gm8A8F2zt+qPO10wR+UVFg60jjstBJ+npvz1V8Ejc1M= Subject key identifier: 3C:33:9E:D1:56:B0:7A:B4:22:45:AA:03:57:C4:4E:18:F0:47:64:84 Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42 Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42 Certificate serial: 019AF1D1869AD90163DEAD028B1F9F3906D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: KP80vYjBHcAyBIgfYvy2FIGaF88AFXPYDdshHaSeOSc=) 2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:86:9a:d9:01:63:de:ad:02:8b:1f:9f:39:06:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42 Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=3c339ed156b07ab42245aa0357c44e18f0476484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c5:76:53:8b:08:1d:e4:20:e2:92:82:bf:3a: a5:7a:a9:46:9d:01:1b:39:6f:5e:97:e5:46:5b:93: 51:68:da:ed:dd:72:7e:19:b3:f6:b7:7f:2f:31:0f: e2:53:2c:7c:b4:e7:17:6f:8b:11:cb:b2:09:0c:5f: 63:7b:9a:85:4f:fb:b4:7b:99:aa:c8:be:31:6e:c2: 97:05:d7:01:d4:27:8a:47:37:6f:89:83:f6:65:7f: bc:d0:d6:3b:6b:98:05:0d:cf:bc:c7:96:1c:35:af: 82:c9:91:44:0f:16:12:ee:68:08:bb:dc:07:ce:55: e6:21:db:52:36:b6:50:49:3e:6b:b4:fe:c0:72:7b: 49:1e:f0:01:32:2d:61:05:44:dd:ec:de:29:52:33: 51:b7:7f:db:d9:39:e6:6f:b4:2e:a6:9d:a7:ee:fb: 7e:e8:f4:fc:ef:6b:95:9c:67:2d:e1:f1:c9:c4:4d: 13:37:fb:91:40:90:64:0d:31:17:8e:67:84:37:65: 3b:5c:ec:2b:ce:50:7d:fc:36:ab:00:4c:e9:a8:1e: 63:c7:ff:7e:d0:0f:f4:69:19:6e:0c:79:31:5b:d4: 72:cc:4e:2a:29:f8:31:e6:44:7c:7c:96:97:19:8d: c2:a9:7f:09:04:ad:ea:9b:db:71:19:50:fc:81:69: 41:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:33:9E:D1:56:B0:7A:B4:22:45:AA:03:57:C4:4E:18:F0:47:64:84 X509v3 Authority Key Identifier: keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6a:5b:02:23:a8:a6:a6:df:b9:ae:45:b7:1e:03:3f:b0:fc: 5a:e4:e7:ee:3d:c5:a9:a1:0f:60:5d:d0:e2:1d:ba:09:e1:6f: ff:2d:3a:b5:c5:d7:6c:67:c3:33:1a:71:95:31:1c:12:57:d3: 47:8c:2c:c6:6f:c7:09:73:75:0a:5b:66:be:98:5f:52:7e:22: 87:ff:59:35:e8:f5:bf:d4:8e:a2:d8:7b:12:46:04:86:73:f0: b3:79:bc:a6:6e:f1:b1:21:1e:7f:17:87:5c:75:43:65:76:3b: db:03:ed:e5:21:0e:d7:5c:a4:ed:62:1f:e7:5a:56:35:3b:48: d0:d4:64:e3:8b:dc:8f:3b:89:78:e4:cf:04:d4:d0:61:9e:93: 4b:51:53:f5:c3:e4:f9:8f:c4:b6:b3:e5:92:6a:48:7b:85:77: 3b:78:d0:74:1e:74:98:a2:e2:7f:52:7b:de:ca:aa:78:1c:4d: 16:a0:3c:a8:35:a4:56:73:ac:4d:88:10:da:9a:b3:73:97:8d: 45:dc:1c:66:d8:10:4e:b5:01:c9:a4:96:c2:13:d6:1e:cf:57: fb:a7:60:d9:68:f6:69:ce:9a:56:91:9d:52:78:6a:23:fd:6e: ed:13:8e:57:b7:f4:d3:2d:40:64:2c:1c:e9:92:45:9b:fa:9e: b8:cf:f2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Yaa2QFj3q0Cix+fOQbZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDRhYmViMGVkNGZmODY2YzA2NWZlMzZjMmM2Mjg0ZTI1 MjBiNDIwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EygzYzMzOWVkMTU2YjA3YWI0MjI0NWFhMDM1N2M0NGUxOGYwNDc2NDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58V2U4sIHeQg4pKCvzqleqlGnQEb OW9el+VGW5NRaNrt3XJ+GbP2t38vMQ/iUyx8tOcXb4sRy7IJDF9je5qFT/u0e5mq yL4xbsKXBdcB1CeKRzdviYP2ZX+80NY7a5gFDc+8x5YcNa+CyZFEDxYS7mgIu9wH zlXmIdtSNrZQST5rtP7AcntJHvABMi1hBUTd7N4pUjNRt3/b2Tnmb7Qupp2n7vt+ 6PT872uVnGct4fHJxE0TN/uRQJBkDTEXjmeEN2U7XOwrzlB9/DarAEzpqB5jx/9+ 0A/0aRluDHkxW9RyzE4qKfgx5kR8fJaXGY3CqX8JBK3qm9txGVD8gWlBEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwzntFWsHq0IkWqA1fEThjwR2SEMB8GA1UdIwQY MBaAFFkEq+sO1P+GbAZf42wsYoTiUgtCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYt NzdkNjVlZjMwNWIwLzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYtNzdkNjVlZjMwNWIw LzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWpbAiOo pqbfua5Ftx4DP7D8WuTn7j3FqaEPYF3Q4h26CeFv/y06tcXXbGfDMxpxlTEcElfT R4wsxm/HCXN1CltmvphfUn4ih/9ZNej1v9SOoth7EkYEhnPws3m8pm7xsSEefxeH XHVDZXY72wPt5SEO11yk7WIf51pWNTtI0NRk44vcjzuJeOTPBNTQYZ6TS1FT9cPk +Y/EtrPlkmpIe4V3O3jQdB50mKLif1J73sqqeBxNFqA8qDWkVnOsTYgQ2pqzc5eN RdwcZtgQTrUByaSWwhPWHs9X+6dg2Wj2ac6aVpGdUnhqI/1u7ROOV7f00y1AZCwc 6ZJFm/qeuM/yTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:20 2025 by rpki-client