This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft File: WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json) Hash identifier: zklxj/TLbGSw2eBjNj/Ys21veQcF9HlO8kdL4yZeqb8= Subject key identifier: 43:8B:07:99:68:A6:69:DE:83:87:B2:0E:68:7C:76:FD:A3:58:23:02 Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A Certificate issuer: /CN=591338a61f6a0f548420a9392037f4811749508a Certificate serial: 019AF19B04087EFE455D5DDFB222AC3EBF4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft Manifest number: 04C4 Signing time: Sat 06 Dec 2025 03:00:59 +0000 Manifest this update: Sat 06 Dec 2025 03:00:59 +0000 Manifest next update: Sun 07 Dec 2025 03:00:59 +0000 Files and hashes: 1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=) 2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: KwZ9z4QXlbzrQ3lYhSamS6pRSGEp69Ksag5CXhFXXBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:04:08:7e:fe:45:5d:5d:df:b2:22:ac:3e:bf:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=591338a61f6a0f548420a9392037f4811749508a Validity Not Before: Dec 6 03:00:59 2025 GMT Not After : Dec 7 03:00:59 2025 GMT Subject: CN=438b079968a669de8387b20e687c76fda3582302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a1:4f:41:4a:7f:51:e8:38:7e:13:83:02:b2: de:62:ee:5f:a5:47:ed:98:54:d9:45:f7:a2:43:40: a4:43:22:79:e2:1b:f7:ce:c9:b2:30:fe:67:fc:04: 24:1f:b1:d8:0b:5d:c5:91:0b:0f:c1:63:36:dc:2c: 77:6c:07:75:08:a3:01:43:f0:c9:de:49:3a:bb:fe: 9c:7b:0e:fe:55:eb:c2:c4:57:a0:3b:2c:5f:69:3b: fd:86:b6:e6:ba:e5:32:79:9c:47:71:a3:46:bb:4f: e4:f1:c3:05:47:21:f9:01:49:76:1a:0b:1a:0e:56: b1:52:a7:2b:90:2c:b4:13:4b:bb:26:10:bf:02:3f: fd:5a:04:7d:c3:66:6a:b3:3a:ec:f3:5f:83:90:0c: 80:24:d5:4d:06:08:0b:c9:9c:2a:f3:49:48:bc:ff: 04:36:62:d4:af:53:c8:a2:f6:29:1f:b6:59:63:82: c6:a2:12:7d:da:c4:00:6e:f5:2e:ec:b9:1e:d7:25: 4c:18:b8:8b:e8:11:f4:74:f5:9d:49:cd:e8:d1:bb: bc:da:88:ff:c3:27:2c:34:3c:4e:03:8e:96:69:c2: 3c:f4:14:d8:1a:3e:4f:84:bd:ae:19:c7:6c:c8:0c: 2d:40:ed:2e:ed:41:8c:8a:af:d0:a7:3d:9d:fc:d7: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:8B:07:99:68:A6:69:DE:83:87:B2:0E:68:7C:76:FD:A3:58:23:02 X509v3 Authority Key Identifier: keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:db:a8:9b:fc:2d:3a:28:a2:2d:81:2c:23:40:9e:2d:9a:68: ed:50:ae:a7:b9:e3:3f:4b:b4:a4:6e:bf:1e:0f:c9:16:bd:83: 73:f4:a7:36:c4:e8:04:ab:3d:67:ec:02:4c:26:e3:38:28:00: 0d:77:bc:05:93:4d:3e:c1:83:9e:41:b9:f8:c2:7d:26:d3:6a: d5:62:09:0b:dc:cd:ef:45:93:8d:0c:38:af:42:0b:7a:f5:ed: bd:99:b1:07:52:e0:2b:87:10:30:c8:5e:89:8b:6e:51:eb:9e: 50:35:a6:e2:46:e3:27:cc:4a:14:86:39:94:5b:fc:a4:1b:1b: 4d:08:92:48:4a:89:f6:c6:89:35:c8:26:71:21:88:5e:40:78: 84:9d:6d:e2:28:a1:72:2a:0a:b1:03:8b:62:72:d3:7f:90:e6: da:76:52:f3:8b:81:8b:a3:ca:ce:c9:a9:08:3a:4e:63:fc:ed: 88:57:a5:62:16:e8:cf:69:c7:96:d5:68:36:20:a0:a1:28:16: e0:0e:01:17:ea:b0:a5:f0:c6:2d:38:8e:07:04:19:5e:f8:79: 95:93:e9:f4:7f:47:22:8a:97:fc:82:5d:53:2b:0d:8b:98:32: 42:6c:30:31:b1:af:0f:c3:39:bb:8a:a8:53:13:52:fa:c6:fa: e6:f1:1a:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwQIfv5FXV3fsiKsPr9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTMzOGE2MWY2YTBmNTQ4NDIwYTkzOTIwMzdmNDgxMTc0 OTUwOGEwHhcNMjUxMjA2MDMwMDU5WhcNMjUxMjA3MDMwMDU5WjAzMTEwLwYDVQQD Eyg0MzhiMDc5OTY4YTY2OWRlODM4N2IyMGU2ODdjNzZmZGEzNTgyMzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKFPQUp/Ueg4fhODArLeYu5fpUft mFTZRfeiQ0CkQyJ54hv3zsmyMP5n/AQkH7HYC13FkQsPwWM23Cx3bAd1CKMBQ/DJ 3kk6u/6cew7+VevCxFegOyxfaTv9hrbmuuUyeZxHcaNGu0/k8cMFRyH5AUl2Ggsa DlaxUqcrkCy0E0u7JhC/Aj/9WgR9w2Zqszrs81+DkAyAJNVNBggLyZwq80lIvP8E NmLUr1PIovYpH7ZZY4LGohJ92sQAbvUu7Lke1yVMGLiL6BH0dPWdSc3o0bu82oj/ wycsNDxOA46WacI89BTYGj5PhL2uGcdsyAwtQO0u7UGMiq/Qpz2d/NdUbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOLB5lopmneg4eyDmh8dv2jWCMCMB8GA1UdIwQY MBaAFFkTOKYfag9UhCCpOSA39IEXSVCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEt MTg5NDBjYjM3MmJkLzEvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC83ZWEwMGQtNjA0Ny00ZTEyLWE4ODEtMTg5NDBjYjM3MmJk LzEvV1JNNHBoOXFEMVNFSUtrNUlEZjBnUmRKVUlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9uom/wt OiiiLYEsI0CeLZpo7VCup7njP0u0pG6/Hg/JFr2Dc/SnNsToBKs9Z+wCTCbjOCgA DXe8BZNNPsGDnkG5+MJ9JtNq1WIJC9zN70WTjQw4r0ILevXtvZmxB1LgK4cQMMhe iYtuUeueUDWm4kbjJ8xKFIY5lFv8pBsbTQiSSEqJ9saJNcgmcSGIXkB4hJ1t4iih cioKsQOLYnLTf5Dm2nZS84uBi6PKzsmpCDpOY/ztiFelYhboz2nHltVoNiCgoSgW 4A4BF+qwpfDGLTiOBwQZXvh5lZPp9H9HIoqX/IJdUysNi5gyQmwwMbGvD8M5u4qo UxNS+sb65vEasw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:37:00 2025 by rpki-client