This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft File: WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json) Hash identifier: D7gQXxp/orTeyeV+ox09YYWPlUPwYFqFZQfUr0aVdJc= Subject key identifier: 71:9B:1C:60:E6:DF:8B:1B:31:BD:58:3A:F9:B0:C6:0E:5E:29:B8:D6 Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50 Certificate issuer: /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250 Certificate serial: 019AF19AFEE368925ED8536E565FC8443C7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft Manifest number: 16C8 Signing time: Sat 06 Dec 2025 03:00:58 +0000 Manifest this update: Sat 06 Dec 2025 03:00:58 +0000 Manifest next update: Sun 07 Dec 2025 03:00:58 +0000 Files and hashes: 1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=) 2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: c7QoT73sim3W2ivLomsw9pElc0o5SFIudB3g52ljevU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:fe:e3:68:92:5e:d8:53:6e:56:5f:c8:44:3c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250 Validity Not Before: Dec 6 03:00:58 2025 GMT Not After : Dec 7 03:00:58 2025 GMT Subject: CN=719b1c60e6df8b1b31bd583af9b0c60e5e29b8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a7:4f:16:3c:1b:ff:03:ed:9f:2c:be:57:55: 4b:91:cd:f9:26:f0:b0:7a:38:ef:e1:30:7e:37:e3: e3:5c:8d:38:1a:bf:d7:56:01:3d:4c:da:1f:99:64: d6:fa:0f:4f:78:3d:b7:12:43:03:8c:ac:46:5d:31: 0f:22:49:c4:c6:47:f8:bb:69:aa:bf:fa:cd:55:73: c4:f0:db:39:ea:d4:20:db:fe:97:61:20:5b:83:0c: e6:ae:a0:dd:9e:56:58:9c:b3:62:86:5d:7c:ed:0a: 82:12:cb:94:39:e6:f4:e4:59:2e:1f:60:eb:16:a4: b4:50:71:7b:e4:da:ba:24:8d:c2:ac:9d:b5:1c:2e: 97:ca:f0:f2:64:d3:73:64:ff:24:13:e4:41:2e:b0: 31:b0:95:d5:ea:8e:9a:16:9b:f3:95:99:67:23:6f: 3b:6b:18:40:1f:58:cb:02:70:42:8b:c3:14:9d:62: db:a1:64:05:02:3e:1f:47:17:e3:e6:12:e4:d4:37: 35:01:38:85:70:8c:a3:41:ec:12:93:60:5d:f7:8b: 96:9b:a7:a0:d1:6a:07:6d:09:7d:d8:87:50:f7:d9: 14:52:c9:1f:a0:e6:6d:df:25:c7:f9:a3:65:b7:d0: 7a:e5:98:70:a1:4c:dc:ae:75:e0:cf:de:36:6f:bd: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9B:1C:60:E6:DF:8B:1B:31:BD:58:3A:F9:B0:C6:0E:5E:29:B8:D6 X509v3 Authority Key Identifier: keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d7:b9:85:18:38:c8:38:38:f4:ce:9c:71:fb:85:69:19:d0: f6:44:7c:da:68:e8:0d:29:ed:14:8e:b8:8b:d3:90:f0:70:c4: dc:f3:07:67:e6:ad:d1:bf:03:d5:f7:2b:59:ac:70:55:21:6c: 80:f4:c2:ca:c1:55:42:06:35:2e:d1:1e:08:09:dc:78:b4:a0: d1:86:d5:a7:fb:07:12:ca:0e:ed:76:a4:c4:1b:4f:b6:02:54: fc:12:d6:b1:b3:c6:97:49:60:d9:c2:70:ad:8b:c9:d4:47:90: 63:80:f5:53:82:c4:91:cd:f8:29:7d:a0:56:10:52:e4:91:bf: 94:e0:b1:b2:83:d2:a2:67:b4:b0:6c:41:e3:b0:e2:da:b0:28: 04:53:15:3e:d6:ad:93:db:76:f8:c7:0a:58:1d:36:da:03:2f: 58:58:1e:13:aa:15:a1:76:36:20:cd:c2:fe:90:e3:2c:8d:93: d9:5c:e4:f7:c6:76:c9:33:34:81:7f:0f:e3:22:e7:2f:ae:41: 9a:43:b0:5c:31:a6:51:3d:f4:f7:62:08:d1:ee:02:5d:55:a0: 23:7a:0f:8a:69:1c:59:aa:3d:dc:11:a4:c1:97:ae:45:00:74: 23:0d:03:06:d5:b6:d1:db:42:6d:e6:19:51:4d:b2:02:32:26: 76:b4:7c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmv7jaJJe2FNuVl/IRDx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2 NjkyNTAwHhcNMjUxMjA2MDMwMDU4WhcNMjUxMjA3MDMwMDU4WjAzMTEwLwYDVQQD Eyg3MTliMWM2MGU2ZGY4YjFiMzFiZDU4M2FmOWIwYzYwZTVlMjliOGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qdPFjwb/wPtnyy+V1VLkc35JvCw ejjv4TB+N+PjXI04Gr/XVgE9TNofmWTW+g9PeD23EkMDjKxGXTEPIknExkf4u2mq v/rNVXPE8Ns56tQg2/6XYSBbgwzmrqDdnlZYnLNihl187QqCEsuUOeb05FkuH2Dr FqS0UHF75Nq6JI3CrJ21HC6XyvDyZNNzZP8kE+RBLrAxsJXV6o6aFpvzlZlnI287 axhAH1jLAnBCi8MUnWLboWQFAj4fRxfj5hLk1Dc1ATiFcIyjQewSk2Bd94uWm6eg 0WoHbQl92IdQ99kUUskfoOZt3yXH+aNlt9B65ZhwoUzcrnXgz942b72DuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGbHGDm34sbMb1YOvmwxg5eKbjWMB8GA1UdIwQY MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACte5hRg4 yDg49M6ccfuFaRnQ9kR82mjoDSntFI64i9OQ8HDE3PMHZ+at0b8D1fcrWaxwVSFs gPTCysFVQgY1LtEeCAnceLSg0YbVp/sHEsoO7XakxBtPtgJU/BLWsbPGl0lg2cJw rYvJ1EeQY4D1U4LEkc34KX2gVhBS5JG/lOCxsoPSome0sGxB47Di2rAoBFMVPtat k9t2+McKWB022gMvWFgeE6oVoXY2IM3C/pDjLI2T2Vzk98Z2yTM0gX8P4yLnL65B mkOwXDGmUT3092II0e4CXVWgI3oPimkcWao93BGkwZeuRQB0Iw0DBtW20dtCbeYZ UU2yAjImdrR8QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:19 2025 by rpki-client