This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft File: WFRbn70B0owOptCPW0cts0-tLqM.mft (raw, json) Hash identifier: MmW1pnvbi95kBib6XK3C33JBz7qAZlwgLHgDoQPXTLc= Subject key identifier: 9F:9B:E0:16:57:63:54:7A:04:AF:BF:90:F3:06:55:A2:16:79:C1:A8 Authority key identifier: 58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3 Certificate issuer: /CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3 Certificate serial: 019B619D0AE16008F323CDCBE6DE2EF2E2FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft Manifest number: 1761 Signing time: Sat 27 Dec 2025 21:00:40 +0000 Manifest this update: Sat 27 Dec 2025 21:00:40 +0000 Manifest next update: Sun 28 Dec 2025 21:00:40 +0000 Files and hashes: 1: WFRbn70B0owOptCPW0cts0-tLqM.crl (hash: mOsvnFcE4qOLI+dd4HYmR2NarIyv+3TZO/ZTOzRhAZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:0a:e1:60:08:f3:23:cd:cb:e6:de:2e:f2:e2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58545b9fbd01d28c0ea6d08f5b472db34fad2ea3 Validity Not Before: Dec 27 21:00:40 2025 GMT Not After : Dec 28 21:00:40 2025 GMT Subject: CN=9f9be0165763547a04afbf90f30655a21679c1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:28:60:2e:0a:8a:72:5e:ab:6f:5d:aa:b7: 06:8f:84:b9:24:72:4a:2c:96:8d:6e:1c:41:84:ec: bb:b7:0a:a0:da:58:6d:36:86:96:e0:bb:01:f4:3c: 8d:30:59:fd:dc:3e:d3:94:e8:dc:ed:da:66:ca:4d: 1c:3f:03:92:76:fe:70:cc:6c:74:e1:33:5a:bb:57: 2a:c8:f1:67:f3:77:ca:9e:4d:75:2d:ab:53:a6:df: 44:87:53:c9:15:c7:c0:73:2a:02:42:f8:7e:8f:cd: 85:99:1b:3f:99:08:ec:19:1c:83:53:7c:53:18:29: f1:db:e3:1e:42:c9:c0:35:77:bc:35:ff:39:b1:8a: bb:3c:fa:01:5d:cd:36:15:1f:98:c0:9d:24:d7:d2: 41:8d:54:d7:7f:79:7d:c8:7c:d8:e9:af:aa:11:2d: 50:36:d7:89:df:b6:70:6f:8d:ed:3e:16:e0:f4:f5: b6:d7:86:91:ff:f3:8e:a6:99:94:eb:a6:5c:7c:f1: b3:7d:fc:fe:b9:23:9e:bf:8a:2a:85:d6:a5:5b:44: cc:bb:42:a6:1b:f3:90:3a:d6:e6:ac:a5:c1:b6:a5: e0:2a:c9:14:f1:0a:7b:24:d8:be:22:1f:1e:4a:30: f0:49:02:4e:52:c8:6b:eb:65:1f:5d:67:cf:85:6d: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9B:E0:16:57:63:54:7A:04:AF:BF:90:F3:06:55:A2:16:79:C1:A8 X509v3 Authority Key Identifier: keyid:58:54:5B:9F:BD:01:D2:8C:0E:A6:D0:8F:5B:47:2D:B3:4F:AD:2E:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFRbn70B0owOptCPW0cts0-tLqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9cfc79-8bda-4862-a7d8-4f8d9355d862/1/WFRbn70B0owOptCPW0cts0-tLqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f7:a4:20:43:ff:23:c1:ea:4d:a9:21:ec:aa:41:e9:14:01: 1c:1d:7b:41:d2:bb:88:56:c6:f6:bc:8e:d3:a0:16:15:89:fd: df:42:da:43:01:5c:d4:d7:94:63:68:58:b0:cf:f8:72:f7:3e: e3:26:4a:fb:7e:5d:93:b6:d6:7a:b2:2e:2a:a8:95:81:1b:38: c9:2e:1a:2d:2d:a8:65:5e:f2:9a:76:8e:77:c9:22:07:e9:f2: 44:b8:5b:89:ec:da:48:00:92:d1:4a:28:52:9d:85:0d:18:d0: ba:8a:94:6c:ff:af:57:a3:f0:88:a6:a7:f8:00:fb:56:9e:32: cc:e3:d2:a9:7c:9a:57:5a:44:d5:7f:5e:79:d6:d6:10:d5:51: c7:d5:72:e2:6d:e2:90:e4:db:6f:3e:9f:f5:bb:6b:3d:73:1d: af:e6:be:a7:61:5b:86:23:3e:9e:2e:b2:70:db:e7:61:18:79: cc:c5:d4:f0:b9:e8:36:ad:04:a8:88:4b:73:88:55:8d:13:31: 2a:c9:f9:7a:de:b5:26:51:62:52:4d:fd:64:82:a6:71:41:8a: 1c:46:f7:67:b8:c6:24:fb:fe:83:37:be:05:64:58:6d:40:c8: ca:a4:61:a0:bb:85:ae:22:f5:ea:e8:ea:d0:64:48:ff:a2:0d: 3f:e5:cf:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnQrhYAjzI83L5t4u8uL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NTQ1YjlmYmQwMWQyOGMwZWE2ZDA4ZjViNDcyZGIzNGZh ZDJlYTMwHhcNMjUxMjI3MjEwMDQwWhcNMjUxMjI4MjEwMDQwWjAzMTEwLwYDVQQD Eyg5ZjliZTAxNjU3NjM1NDdhMDRhZmJmOTBmMzA2NTVhMjE2NzljMWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyQoYC4KinJeq29dqrcGj4S5JHJK LJaNbhxBhOy7twqg2lhtNoaW4LsB9DyNMFn93D7TlOjc7dpmyk0cPwOSdv5wzGx0 4TNau1cqyPFn83fKnk11LatTpt9Eh1PJFcfAcyoCQvh+j82FmRs/mQjsGRyDU3xT GCnx2+MeQsnANXe8Nf85sYq7PPoBXc02FR+YwJ0k19JBjVTXf3l9yHzY6a+qES1Q NteJ37Zwb43tPhbg9PW214aR//OOppmU66ZcfPGzffz+uSOev4oqhdalW0TMu0Km G/OQOtbmrKXBtqXgKskU8Qp7JNi+Ih8eSjDwSQJOUshr62UfXWfPhW1rLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+b4BZXY1R6BK+/kPMGVaIWecGoMB8GA1UdIwQY MBaAFFhUW5+9AdKMDqbQj1tHLbNPrS6jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Y2ZjNzktOGJkYS00ODYyLWE3ZDgt NGY4ZDkzNTVkODYyLzEvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85Y2ZjNzktOGJkYS00ODYyLWE3ZDgtNGY4ZDkzNTVkODYy LzEvV0ZSYm43MEIwb3dPcHRDUFcwY3RzMC10THFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPekIEP/ I8HqTakh7KpB6RQBHB17QdK7iFbG9ryO06AWFYn930LaQwFc1NeUY2hYsM/4cvc+ 4yZK+35dk7bWerIuKqiVgRs4yS4aLS2oZV7ymnaOd8kiB+nyRLhbiezaSACS0Uoo Up2FDRjQuoqUbP+vV6PwiKan+AD7Vp4yzOPSqXyaV1pE1X9eedbWENVRx9Vy4m3i kOTbbz6f9btrPXMdr+a+p2FbhiM+ni6ycNvnYRh5zMXU8LnoNq0EqIhLc4hVjRMx Ksn5et61JlFiUk39ZIKmcUGKHEb3Z7jGJPv+gze+BWRYbUDIyqRhoLuFriL16ujq 0GRI/6INP+XPYw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:22:17 2025 by rpki-client