This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json) Hash identifier: T9KlG6wY1JZP1J7sVOWf0I3AsHj8YZZDYBXagT2lY7k= Subject key identifier: DC:ED:7D:50:E3:CE:28:FB:25:3A:46:B2:66:B3:EA:CF:97:80:1D:74 Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e Certificate serial: 019AF2ADDC0056002708135F8A394EA921F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft Manifest number: 0BC4 Signing time: Sat 06 Dec 2025 08:01:11 +0000 Manifest this update: Sat 06 Dec 2025 08:01:11 +0000 Manifest next update: Sun 07 Dec 2025 08:01:11 +0000 Files and hashes: 1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: jpDgLT4Nmm+4q5yMtQiE59kNrc2JPCob1G0/dnr7H+I=) 2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:dc:00:56:00:27:08:13:5f:8a:39:4e:a9:21:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e Validity Not Before: Dec 6 08:01:11 2025 GMT Not After : Dec 7 08:01:11 2025 GMT Subject: CN=dced7d50e3ce28fb253a46b266b3eacf97801d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cf:c4:ec:b5:6a:a2:9d:35:f4:e3:d7:50:48: 18:c9:7f:03:a8:43:58:cc:54:d4:81:b3:74:fa:1c: 0b:98:9b:fa:0c:2c:4b:4f:9a:18:f4:0d:0f:f5:e0: ab:22:f9:51:ff:e9:e0:fb:36:37:a1:db:9f:41:0c: ca:c9:c2:c5:06:e7:af:4d:55:1c:e6:d8:28:d4:a2: e3:00:15:3d:e4:e4:3a:77:c2:ac:19:c9:28:f3:1e: 4a:7a:86:a7:b1:b2:8e:dd:0d:3b:22:a3:ae:ec:c4: 3e:bd:dc:eb:35:76:64:7d:7a:dd:ca:b3:89:cf:65: 5e:bc:71:eb:48:2f:fd:54:46:10:bb:43:12:c1:4d: 07:fa:42:8b:cb:c4:65:a6:2e:a3:39:a8:9b:60:62: 21:35:3f:f3:73:49:65:38:46:22:c6:4c:b6:e7:2b: b0:98:a0:16:5d:b2:6a:6b:d6:f9:b6:ee:40:dc:06: a1:14:75:7a:e9:82:8b:f0:a9:d2:69:5e:c3:36:ed: 1d:79:59:75:b1:6d:69:5a:fd:db:bb:94:f4:c8:42: f4:09:45:68:63:55:7d:11:81:7a:61:1b:e9:ce:0c: c1:3d:ea:1c:01:8a:aa:5e:a0:dd:be:c4:ce:f1:cb: 1d:26:c5:16:9a:d8:40:20:76:13:2f:e5:ae:a6:22: 84:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:ED:7D:50:E3:CE:28:FB:25:3A:46:B2:66:B3:EA:CF:97:80:1D:74 X509v3 Authority Key Identifier: keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1c:61:c8:13:8e:88:e3:51:f8:97:30:2d:ea:85:60:77:89: 17:e0:10:df:fe:ec:e0:4e:9c:6d:10:0d:0b:76:7e:f8:ec:fe: 89:26:30:77:e9:eb:5b:f4:54:18:0a:1f:9d:71:ad:22:7c:4e: 8a:87:3e:e4:c0:45:de:a8:78:89:08:27:14:6e:aa:c0:ed:27: a7:0d:6d:c8:67:1e:23:6d:4b:0d:2c:e6:7d:9d:ce:0d:d4:67: 58:72:89:6e:34:f9:a5:7d:66:4d:41:ab:92:12:cd:cd:e8:7c: 2a:33:cb:72:ee:17:9d:f8:ac:bc:e0:46:73:c4:a7:9d:b3:da: 57:65:2d:0b:9a:25:b9:a4:73:bf:48:4d:64:97:3a:a7:aa:f6: 60:c9:84:15:e7:6f:d2:03:0c:cf:84:31:24:76:06:5e:f6:8b: 1b:9c:f9:72:b5:18:60:08:b4:24:9b:20:78:34:73:27:f1:0a: d1:ca:45:1f:c6:4b:d3:96:70:58:c9:71:ac:7b:ae:a4:6a:a4: 85:57:b5:d4:07:a6:ff:6f:0d:93:6a:d9:ec:90:0c:b1:c4:93: 71:e6:66:16:a2:e1:e3:e4:2d:22:36:00:27:a0:d6:c3:c7:a1: d9:c1:1f:9a:12:2a:c6:df:ea:9a:c4:90:fa:bf:64:46:bd:11: 33:3d:8f:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdwAVgAnCBNfijlOqSH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTM4ZTNkYjc3NjQwYmVhZGYxZGE1YjE1MTk0YjkzODRh MTQ0NGUwHhcNMjUxMjA2MDgwMTExWhcNMjUxMjA3MDgwMTExWjAzMTEwLwYDVQQD EyhkY2VkN2Q1MGUzY2UyOGZiMjUzYTQ2YjI2NmIzZWFjZjk3ODAxZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM/E7LVqop019OPXUEgYyX8DqENY zFTUgbN0+hwLmJv6DCxLT5oY9A0P9eCrIvlR/+ng+zY3odufQQzKycLFBuevTVUc 5tgo1KLjABU95OQ6d8KsGcko8x5KeoansbKO3Q07IqOu7MQ+vdzrNXZkfXrdyrOJ z2VevHHrSC/9VEYQu0MSwU0H+kKLy8Rlpi6jOaibYGIhNT/zc0llOEYixky25yuw mKAWXbJqa9b5tu5A3AahFHV66YKL8KnSaV7DNu0deVl1sW1pWv3bu5T0yEL0CUVo Y1V9EYF6YRvpzgzBPeocAYqqXqDdvsTO8csdJsUWmthAIHYTL+WupiKEtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNztfVDjzij7JTpGsmaz6s+XgB10MB8GA1UdIwQY MBaAFFkTjj23dkC+rfHaWxUZS5OEoUROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDkt N2E0ZTMzNDBhNDkxLzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDktN2E0ZTMzNDBhNDkx LzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYhxhyBOO iONR+JcwLeqFYHeJF+AQ3/7s4E6cbRANC3Z++Oz+iSYwd+nrW/RUGAofnXGtInxO ioc+5MBF3qh4iQgnFG6qwO0npw1tyGceI21LDSzmfZ3ODdRnWHKJbjT5pX1mTUGr khLNzeh8KjPLcu4XnfisvOBGc8SnnbPaV2UtC5oluaRzv0hNZJc6p6r2YMmEFedv 0gMMz4QxJHYGXvaLG5z5crUYYAi0JJsgeDRzJ/EK0cpFH8ZL05ZwWMlxrHuupGqk hVe11Aem/28Nk2rZ7JAMscSTceZmFqLh4+QtIjYAJ6DWw8eh2cEfmhIqxt/qmsSQ +r9kRr0RMz2PRg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:24 2025 by rpki-client