This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft File: Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json) Hash identifier: dTXJf5Lh5ZwU9/2vUniScwzsfvzutrmhL0Z13w07qME= Subject key identifier: 00:49:9F:07:F9:9B:7C:E4:D0:9A:6A:37:49:AC:C7:82:F7:BE:6F:17 Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E Certificate issuer: /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e Certificate serial: 019AF3C07E6F709D723838DEFC70E1FFFD16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft Manifest number: 0558 Signing time: Sat 06 Dec 2025 13:01:10 +0000 Manifest this update: Sat 06 Dec 2025 13:01:10 +0000 Manifest next update: Sun 07 Dec 2025 13:01:10 +0000 Files and hashes: 1: JOSO1JmulK_3UGT4DHh2rfgYfwY.roa (hash: EgfSLon34sQaHSqw1cjg97JzDl/x10iZFo3pqDa2iBE=) 2: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: 3PLNyHqIWZeO/uHltFEqiKLuYYHmWqymNAV/6bRENJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:7e:6f:70:9d:72:38:38:de:fc:70:e1:ff:fd:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e Validity Not Before: Dec 6 13:01:10 2025 GMT Not After : Dec 7 13:01:10 2025 GMT Subject: CN=00499f07f99b7ce4d09a6a3749acc782f7be6f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c0:e7:c3:02:14:1d:f8:a1:d4:e1:f8:3f:c9: 18:86:82:51:b7:b9:c0:4a:0d:80:3c:8f:3b:bf:ee: f6:84:e1:58:65:ce:6c:27:05:6f:d9:35:22:07:a0: fe:b8:86:12:f5:17:45:cf:49:a8:ef:ac:14:5b:de: dd:3d:ed:b0:d4:8b:b9:17:ed:92:7b:48:a3:8f:3c: e8:32:77:85:dc:4f:ec:77:f1:fd:9c:6a:22:05:1b: 3f:d9:64:c2:62:48:15:a3:37:39:a2:11:16:43:7e: c7:5c:f3:7b:9d:09:cb:f1:cf:eb:7b:8f:50:5d:05: c2:73:63:cf:eb:06:c5:94:45:1d:c5:08:e2:de:ad: e7:36:e7:a4:b2:e6:0d:5e:8b:a5:da:88:05:46:47: 79:25:29:8c:fc:4e:a5:e2:cb:16:10:44:4b:24:e4: b9:52:c9:3f:71:50:76:89:67:1f:d9:a0:9e:50:59: 91:6f:21:31:f7:22:f9:a8:f8:6f:17:9b:fe:8d:91: 94:7b:eb:fb:53:3c:98:68:ba:9e:1e:7c:12:46:db: dd:2e:34:29:d3:00:a1:4e:9e:3b:a0:b0:84:fd:31: d1:f5:05:21:fe:64:12:c9:59:98:23:23:8e:aa:d0: 8d:e0:80:fe:de:37:34:5b:51:28:6a:0d:af:1a:9a: 12:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:49:9F:07:F9:9B:7C:E4:D0:9A:6A:37:49:AC:C7:82:F7:BE:6F:17 X509v3 Authority Key Identifier: keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:2d:99:c0:de:06:36:91:bc:65:4c:4e:0f:9a:41:a9:31:30: 96:19:83:6d:60:9f:47:75:eb:1f:5a:f3:4d:b3:5f:98:c3:c9: 03:bb:06:0b:ab:47:0e:fc:8f:43:47:2e:9a:82:09:25:1e:2a: 8f:c4:77:70:c6:cb:f7:f2:f3:38:21:25:41:01:86:bc:be:2f: 8f:4f:5a:9d:2b:11:8b:25:86:db:10:96:da:19:32:99:04:23: 95:70:93:e3:01:a9:1c:c1:d9:26:80:47:fe:2a:e5:1c:da:82: 74:69:6a:fe:81:79:9c:bc:9b:c1:bd:0e:fd:79:2c:84:48:d9: 21:9f:7b:ca:31:99:44:01:54:74:f8:c6:9e:33:cd:47:fb:c1: 00:26:7b:d7:a9:de:ef:e8:ff:c8:12:7b:80:36:6d:46:82:43: b1:80:b9:b8:ac:9d:89:93:30:c9:dc:bd:4c:f6:97:9b:10:83: 0b:bb:57:7d:5f:18:5f:9e:de:d9:0f:d2:3d:dd:90:e1:b8:88: 98:64:53:9e:57:05:b8:e0:ca:8d:3a:a8:a5:f3:19:91:12:c5: 9f:23:1c:55:33:a6:e1:cc:c3:96:f9:59:e5:09:16:18:08:fe: df:a5:5a:99:97:cf:3a:dd:78:dd:4f:67:97:9c:15:08:9d:0b: e8:42:5a:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwH5vcJ1yODje/HDh//0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Y2ZlODEyODYxNGQzMzI1YThjZWMxODMzZDczYmI2YTQ2 OThjMGUwHhcNMjUxMjA2MTMwMTEwWhcNMjUxMjA3MTMwMTEwWjAzMTEwLwYDVQQD EygwMDQ5OWYwN2Y5OWI3Y2U0ZDA5YTZhMzc0OWFjYzc4MmY3YmU2ZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8DnwwIUHfih1OH4P8kYhoJRt7nA Sg2API87v+72hOFYZc5sJwVv2TUiB6D+uIYS9RdFz0mo76wUW97dPe2w1Iu5F+2S e0ijjzzoMneF3E/sd/H9nGoiBRs/2WTCYkgVozc5ohEWQ37HXPN7nQnL8c/re49Q XQXCc2PP6wbFlEUdxQji3q3nNueksuYNXoul2ogFRkd5JSmM/E6l4ssWEERLJOS5 Usk/cVB2iWcf2aCeUFmRbyEx9yL5qPhvF5v+jZGUe+v7UzyYaLqeHnwSRtvdLjQp 0wChTp47oLCE/THR9QUh/mQSyVmYIyOOqtCN4ID+3jc0W1Eoag2vGpoSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABJnwf5m3zk0JpqN0msx4L3vm8XMB8GA1UdIwQY MBaAFFnP6BKGFNMyWozsGDPXO7akaYwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmZkMTEtZmYxZC00OTAxLThiNWEt Y2FlMzVhODcxNjQ2LzEvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmZkMTEtZmYxZC00OTAxLThiNWEtY2FlMzVhODcxNjQ2 LzEvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1S2ZwN4G NpG8ZUxOD5pBqTEwlhmDbWCfR3XrH1rzTbNfmMPJA7sGC6tHDvyPQ0cumoIJJR4q j8R3cMbL9/LzOCElQQGGvL4vj09anSsRiyWG2xCW2hkymQQjlXCT4wGpHMHZJoBH /irlHNqCdGlq/oF5nLybwb0O/XkshEjZIZ97yjGZRAFUdPjGnjPNR/vBACZ716ne 7+j/yBJ7gDZtRoJDsYC5uKydiZMwydy9TPaXmxCDC7tXfV8YX57e2Q/SPd2Q4biI mGRTnlcFuODKjTqopfMZkRLFnyMcVTOm4czDlvlZ5QkWGAj+36VamZfPOt143U9n l5wVCJ0L6EJa0A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:29:26 2025 by rpki-client