This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft File: Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json) Hash identifier: JNexLnD6Cur3+NYeUjOQO8rWLYInuLX+1/FngE5vdkU= Subject key identifier: 6A:85:49:43:BF:80:CE:2E:33:67:97:33:E3:CF:79:BD:2F:FC:34:0A Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3 Certificate issuer: /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3 Certificate serial: 019B34FB645588FDC4CC9A8525BD2690B5C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft Manifest number: 0548 Signing time: Fri 19 Dec 2025 05:00:48 +0000 Manifest this update: Fri 19 Dec 2025 05:00:48 +0000 Manifest next update: Sat 20 Dec 2025 05:00:48 +0000 Files and hashes: 1: HZBz5MrqBdAGlLzttgW8k7z_g5Y.roa (hash: vKALeCSvoIMsQY1cUM7A8I/fEETWOT998Li6zTAWX7w=) 2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: ufQdpeGKwyoqUTUQaN/JQ8yubCwGwsUKDnFTsWVmFeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:64:55:88:fd:c4:cc:9a:85:25:bd:26:90:b5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3 Validity Not Before: Dec 19 05:00:48 2025 GMT Not After : Dec 20 05:00:48 2025 GMT Subject: CN=6a854943bf80ce2e33679733e3cf79bd2ffc340a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:08:ef:aa:08:64:5a:eb:14:c7:d0:d5:66: 30:86:57:da:b3:9a:13:6e:16:f5:b6:16:73:79:0c: 72:2b:45:a3:54:44:6f:b2:6b:2c:0d:a9:cc:06:73: e1:9e:de:56:55:1a:cc:aa:0e:e3:cc:29:e2:4d:23: 79:65:71:79:5b:81:96:53:ad:1e:d4:29:4e:78:04: 92:cd:1c:7b:40:9a:95:64:cd:2a:21:27:ea:2e:cb: b7:ea:91:e6:e0:6f:1a:97:dc:31:88:70:72:a7:60: 36:09:bf:05:e5:37:b9:39:95:7e:a3:91:77:d3:8b: e4:25:53:d4:85:a4:b8:86:86:4a:2e:f2:3c:30:d2: 82:cc:66:26:f6:80:54:df:d7:f6:c4:fb:34:45:ca: 93:e3:df:60:7c:e9:d8:d0:3f:80:a5:c9:2a:fd:e0: c5:ff:6c:cf:63:45:9e:b2:d4:18:24:7c:57:e9:b0: d2:a4:65:88:d2:03:ea:7d:f5:0b:f3:e9:ed:66:04: da:66:c4:b6:2b:89:57:6b:8d:00:32:20:9c:c0:9f: a8:a8:6c:6c:e8:57:bb:84:a7:a5:fc:e3:1d:55:08: 2b:db:4e:0f:77:d6:91:b5:21:0a:f6:68:b5:97:1d: ce:21:f9:d5:d6:55:b0:19:b2:49:fd:f3:81:31:9c: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:85:49:43:BF:80:CE:2E:33:67:97:33:E3:CF:79:BD:2F:FC:34:0A X509v3 Authority Key Identifier: keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:26:52:e4:dc:ab:b8:57:5a:27:5e:d6:03:1d:09:ae:94:ab: a5:03:e4:f4:9a:59:d4:17:91:6b:41:8d:02:a8:71:90:ff:65: 01:f1:a5:3a:16:aa:f8:75:62:96:8d:61:46:fa:6d:1e:fc:5d: 7a:a9:6c:8c:3c:66:de:f8:e2:8f:a5:64:ff:d2:e2:f7:2d:f8: 6d:21:7e:59:d5:65:0a:62:2d:11:e9:fa:3c:94:dd:81:5e:1a: ca:94:6b:1d:aa:49:b8:a6:67:17:ae:f8:27:e1:3d:06:34:0d: 62:71:fa:db:56:e8:36:be:6f:a1:94:aa:69:89:c6:a2:39:17: e5:48:85:55:aa:5e:dc:12:59:dd:69:e9:30:08:5e:5b:5c:c8: cf:7c:65:3d:02:81:c3:0b:ed:30:5d:af:10:f4:42:d5:68:fc: 0e:0a:9b:3f:c5:55:34:b1:37:e9:2e:ee:28:66:d9:bb:87:44: 81:64:9d:24:b0:60:b6:4f:79:2a:85:9d:cc:ff:56:2c:fb:e1: e9:de:06:3c:27:c9:34:37:e4:1d:91:23:dd:f7:d1:c4:13:11: 66:7e:19:4a:04:ce:cb:cc:7c:38:07:79:b3:6e:06:d9:bc:c0: 52:cd:f1:2a:90:d7:7d:02:8b:ce:b2:53:51:5e:e1:ef:9d:bf: dc:e3:4f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+2RViP3EzJqFJb0mkLXJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDlmNWJlYjY5MzM0ODQ1NDFjZTU2MjgyYzk4OWVkNmU4 YmRiYTMwHhcNMjUxMjE5MDUwMDQ4WhcNMjUxMjIwMDUwMDQ4WjAzMTEwLwYDVQQD Eyg2YTg1NDk0M2JmODBjZTJlMzM2Nzk3MzNlM2NmNzliZDJmZmMzNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnkI76oIZFrrFMfQ1WYwhlfas5oT bhb1thZzeQxyK0WjVERvsmssDanMBnPhnt5WVRrMqg7jzCniTSN5ZXF5W4GWU60e 1ClOeASSzRx7QJqVZM0qISfqLsu36pHm4G8al9wxiHByp2A2Cb8F5Te5OZV+o5F3 04vkJVPUhaS4hoZKLvI8MNKCzGYm9oBU39f2xPs0RcqT499gfOnY0D+Apckq/eDF /2zPY0WestQYJHxX6bDSpGWI0gPqffUL8+ntZgTaZsS2K4lXa40AMiCcwJ+oqGxs 6Fe7hKel/OMdVQgr204Pd9aRtSEK9mi1lx3OIfnV1lWwGbJJ/fOBMZz3XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGqFSUO/gM4uM2eXM+PPeb0v/DQKMB8GA1UdIwQY MBaAFFrZ9b62kzSEVBzlYoLJie1ui9ujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUt NWFmODllNmNkMDU1LzEvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUtNWFmODllNmNkMDU1 LzEvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUyZS5Nyr uFdaJ17WAx0JrpSrpQPk9JpZ1BeRa0GNAqhxkP9lAfGlOhaq+HVilo1hRvptHvxd eqlsjDxm3vjij6Vk/9Li9y34bSF+WdVlCmItEen6PJTdgV4aypRrHapJuKZnF674 J+E9BjQNYnH621boNr5voZSqaYnGojkX5UiFVape3BJZ3WnpMAheW1zIz3xlPQKB wwvtMF2vEPRC1Wj8DgqbP8VVNLE36S7uKGbZu4dEgWSdJLBgtk95KoWdzP9WLPvh 6d4GPCfJNDfkHZEj3ffRxBMRZn4ZSgTOy8x8OAd5s24G2bzAUs3xKpDXfQKLzrJT UV7h752/3ONP7A== -----END CERTIFICATE-----Generated at Fri Dec 19 08:50:17 2025 by rpki-client