This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft File: WCXq-3jz1WkmUXwqPNUzmqUTht4.mft (raw, json) Hash identifier: 4ASg5Pny8omu+4EGwSW5hroGOvlh+gpyXLSTZz2PYyc= Subject key identifier: A7:87:DE:90:52:00:7D:A1:D1:68:A6:E3:4B:BF:44:7E:2E:A3:40:C8 Authority key identifier: 58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE Certificate issuer: /CN=5825eafb78f3d56926517c2a3cd5339aa51386de Certificate serial: 019AF19B72300B6F9862B8F6DF90EF9A2C94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft Manifest number: 0308 Signing time: Sat 06 Dec 2025 03:01:27 +0000 Manifest this update: Sat 06 Dec 2025 03:01:27 +0000 Manifest next update: Sun 07 Dec 2025 03:01:27 +0000 Files and hashes: 1: WCXq-3jz1WkmUXwqPNUzmqUTht4.crl (hash: +6SNn7ltwu/onqgXOPYj0XNN6B4byE94xlts+GHqRdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:72:30:0b:6f:98:62:b8:f6:df:90:ef:9a:2c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5825eafb78f3d56926517c2a3cd5339aa51386de Validity Not Before: Dec 6 03:01:27 2025 GMT Not After : Dec 7 03:01:27 2025 GMT Subject: CN=a787de9052007da1d168a6e34bbf447e2ea340c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4b:59:ef:ae:d2:63:35:39:a6:48:47:c5:32: 77:80:34:34:98:34:09:b6:b6:94:27:30:09:b8:07: 66:41:70:dd:45:f7:cc:73:ea:f1:9a:d7:a0:76:0f: cb:bf:8c:95:cc:12:e0:b5:81:2a:9c:b9:00:0b:c6: d9:8a:98:66:7b:1f:e8:54:f4:d2:a9:d2:db:bb:41: fd:76:b3:b7:46:82:54:3b:85:2f:b0:a6:01:4d:b8: 4c:10:88:63:ab:2e:c0:41:9e:fa:6f:fb:f0:70:c8: 16:65:46:05:5a:c3:53:b3:17:72:e3:02:51:c5:72: 1e:21:04:54:59:3a:2a:19:81:7f:ab:43:12:40:a3: a7:8a:c5:f3:35:a5:5e:3f:68:11:b5:f3:44:a5:57: a3:48:78:6d:65:c5:9f:ea:ff:4b:1e:60:1c:3d:f6: fa:d0:86:df:d1:5b:a0:29:8a:12:d6:f4:eb:24:d7: 69:be:09:77:05:05:3c:af:07:d2:49:de:20:ef:40: 32:7a:af:33:dc:1a:1a:45:c6:05:33:bf:70:bf:fc: ec:a1:5f:08:c2:95:2d:07:9a:7e:4d:d7:69:b6:9e: eb:80:f3:09:b9:c0:78:85:74:9d:ad:39:1d:35:13: 75:07:95:4d:8d:c1:5d:fe:15:5f:a1:f3:e7:fe:a0: 48:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:87:DE:90:52:00:7D:A1:D1:68:A6:E3:4B:BF:44:7E:2E:A3:40:C8 X509v3 Authority Key Identifier: keyid:58:25:EA:FB:78:F3:D5:69:26:51:7C:2A:3C:D5:33:9A:A5:13:86:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCXq-3jz1WkmUXwqPNUzmqUTht4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fa825b-cae6-477b-abfc-d5c6ae2625aa/1/WCXq-3jz1WkmUXwqPNUzmqUTht4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:09:01:b2:bd:5b:79:9c:54:79:70:0a:99:0c:ef:fb:eb:02: c9:21:0e:fa:dc:a4:8b:47:1e:22:7c:c2:9c:20:b7:67:37:11: ed:77:88:17:e0:20:bc:80:8b:39:a6:36:1f:f4:6e:9a:c2:ba: fc:40:07:ba:c1:84:24:9f:99:86:17:67:7b:8b:d7:89:be:e0: 9a:34:c8:6d:74:5c:11:c6:55:11:23:73:fb:c0:75:5b:f9:48: 17:da:fd:50:a0:c3:39:48:1c:07:e0:8c:40:f5:b5:e1:16:46: da:9b:13:b7:08:75:29:f8:e4:c6:e1:02:34:60:86:5f:98:d1: 3f:41:0e:c3:00:e4:25:21:f0:f3:f0:ed:46:37:b3:3d:97:45: a8:9c:02:d3:cf:fa:59:49:64:cf:5c:47:3f:c3:4c:dd:fb:b5: 62:e5:02:ad:a3:e2:d5:5d:67:4f:d4:97:a7:70:ca:34:43:ba: 25:d9:82:6c:5c:b8:1e:2c:be:07:ac:6c:a9:fd:c0:f7:88:65: a1:fd:80:7a:96:18:69:95:aa:9e:30:6e:3f:6f:65:c4:75:01: dd:e6:2d:c0:0e:07:20:eb:d1:7c:8f:f8:4b:69:6a:8f:69:c3: c0:65:e7:b3:46:36:21:fb:3a:b8:38:b1:75:d2:07:15:8e:d0: 0a:be:ed:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3IwC2+YYrj235DvmiyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MjVlYWZiNzhmM2Q1NjkyNjUxN2MyYTNjZDUzMzlhYTUx Mzg2ZGUwHhcNMjUxMjA2MDMwMTI3WhcNMjUxMjA3MDMwMTI3WjAzMTEwLwYDVQQD EyhhNzg3ZGU5MDUyMDA3ZGExZDE2OGE2ZTM0YmJmNDQ3ZTJlYTM0MGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UtZ767SYzU5pkhHxTJ3gDQ0mDQJ traUJzAJuAdmQXDdRffMc+rxmtegdg/Lv4yVzBLgtYEqnLkAC8bZiphmex/oVPTS qdLbu0H9drO3RoJUO4UvsKYBTbhMEIhjqy7AQZ76b/vwcMgWZUYFWsNTsxdy4wJR xXIeIQRUWToqGYF/q0MSQKOnisXzNaVeP2gRtfNEpVejSHhtZcWf6v9LHmAcPfb6 0Ibf0VugKYoS1vTrJNdpvgl3BQU8rwfSSd4g70Ayeq8z3BoaRcYFM79wv/zsoV8I wpUtB5p+Tddptp7rgPMJucB4hXSdrTkdNRN1B5VNjcFd/hVfofPn/qBI7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeH3pBSAH2h0Wim40u/RH4uo0DIMB8GA1UdIwQY MBaAFFgl6vt489VpJlF8KjzVM5qlE4beMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMt ZDVjNmFlMjYyNWFhLzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mYTgyNWItY2FlNi00NzdiLWFiZmMtZDVjNmFlMjYyNWFh LzEvV0NYcS0zanoxV2ttVVh3cVBOVXptcVVUaHQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAkBsr1b eZxUeXAKmQzv++sCySEO+tyki0ceInzCnCC3ZzcR7XeIF+AgvICLOaY2H/RumsK6 /EAHusGEJJ+Zhhdne4vXib7gmjTIbXRcEcZVESNz+8B1W/lIF9r9UKDDOUgcB+CM QPW14RZG2psTtwh1KfjkxuECNGCGX5jRP0EOwwDkJSHw8/DtRjezPZdFqJwC08/6 WUlkz1xHP8NM3fu1YuUCraPi1V1nT9SXp3DKNEO6JdmCbFy4Hiy+B6xsqf3A94hl of2AepYYaZWqnjBuP29lxHUB3eYtwA4HIOvRfI/4S2lqj2nDwGXns0Y2Ifs6uDix ddIHFY7QCr7tTg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:40 2025 by rpki-client