This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft File: WqWNXycSzMAES1nvp8vD6Yxfwlw.mft (raw, json) Hash identifier: kv5RIc6SmXcUTMoNF2iYxtNVyG8acBcpePrxaW3p2P8= Subject key identifier: 17:E0:BB:74:05:7E:D2:DF:0A:C3:05:DE:69:87:FC:35:E1:2B:9A:AB Authority key identifier: 5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C Certificate issuer: /CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Certificate serial: 019B30E8D445A1792EA6CD01F6CE9DA3BE37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft Manifest number: 0A98 Signing time: Thu 18 Dec 2025 10:02:03 +0000 Manifest this update: Thu 18 Dec 2025 10:02:03 +0000 Manifest next update: Fri 19 Dec 2025 10:02:03 +0000 Files and hashes: 1: OXwNzP8LjbH6TWcdoNaukflgQIw.roa (hash: 7FOkQ2B0o6NyuacIE5IJomlXcGtJ1C+uqMpIt2z5/74=) 2: WqWNXycSzMAES1nvp8vD6Yxfwlw.crl (hash: o8i6LuiDD/YsvUEFYi5PHKECKsCDgPP3lAFiBZAG5mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:d4:45:a1:79:2e:a6:cd:01:f6:ce:9d:a3:be:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aa58d5f2712ccc0044b59efa7cbc3e98c5fc25c Validity Not Before: Dec 18 10:02:03 2025 GMT Not After : Dec 19 10:02:03 2025 GMT Subject: CN=17e0bb74057ed2df0ac305de6987fc35e12b9aab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:39:7e:81:31:7e:63:cb:bd:06:4b:b7:b2: 47:7e:f2:9b:e1:30:1b:e0:65:1f:04:e5:7a:36:31: 89:d6:e3:6c:f9:aa:f3:10:02:9a:ed:be:bc:d3:40: c2:36:53:ef:82:45:d8:97:08:f9:dc:8f:6c:d5:b2: 21:64:80:48:d7:e7:18:08:a0:25:4e:7d:10:74:9c: fb:df:0b:ec:52:98:60:dd:30:81:b1:72:a6:a4:7d: c4:b5:3e:d8:c0:2a:cb:93:a1:99:de:e2:71:9f:37: 86:b6:11:8a:35:86:48:cd:e4:25:40:b7:d3:52:27: 02:65:44:d1:14:4b:8e:2f:45:61:f0:b1:c7:b8:97: 62:e7:05:33:fd:0f:86:75:44:cf:f8:8b:ee:21:b4: 8f:52:0d:91:95:78:06:0b:fb:2c:2c:e2:23:3f:3b: 9b:8c:db:53:0d:39:9f:96:80:1d:eb:77:05:04:ee: e9:c2:02:4b:f1:3a:59:32:ee:af:1e:54:9d:6d:86: 4a:b0:b0:e2:d5:c9:e7:cc:29:27:70:66:2c:fd:df: c4:67:60:c5:5a:9a:eb:79:a2:09:e5:cf:75:f1:dc: 84:53:80:f8:c3:3a:50:76:b5:7c:65:85:4c:53:2f: ff:cf:ca:28:71:e2:9a:e0:81:02:05:83:87:19:6c: 4c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E0:BB:74:05:7E:D2:DF:0A:C3:05:DE:69:87:FC:35:E1:2B:9A:AB X509v3 Authority Key Identifier: keyid:5A:A5:8D:5F:27:12:CC:C0:04:4B:59:EF:A7:CB:C3:E9:8C:5F:C2:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WqWNXycSzMAES1nvp8vD6Yxfwlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27a748-884d-4f19-b285-59199331ee09/1/WqWNXycSzMAES1nvp8vD6Yxfwlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b3:d7:7a:f6:6b:c4:1b:ed:61:ef:f8:af:ec:ff:f0:84:30: 96:e9:7a:f7:a4:b2:4c:a2:39:ba:f8:89:a0:f0:ab:fb:7e:7a: 2f:01:32:67:d3:82:08:38:f6:24:f3:6d:75:bf:da:34:a8:cb: 34:6c:7c:aa:77:a5:fe:ee:3c:59:f0:a1:4b:38:70:e9:83:e4: 54:61:85:07:f6:62:77:4d:eb:3c:2d:88:88:74:68:62:8b:ed: c5:6f:f1:c8:74:79:43:30:b4:bd:10:7a:d6:99:31:83:97:d0: d3:bb:ae:22:26:a2:c3:44:0c:31:3a:e1:a7:9f:80:3d:13:41: 2d:2b:67:1e:f0:8e:ba:cc:49:91:6e:3e:fc:22:51:53:e1:69: 2b:7e:13:bd:95:cb:ee:6d:b7:4b:53:08:de:3b:5f:a0:f4:55: eb:a2:6e:e8:7f:43:df:02:51:af:00:d5:e8:9a:62:21:a5:d8: 26:0f:fe:c3:1c:e1:a3:a8:68:4a:6b:b4:13:fe:71:73:62:9f: 5f:09:5a:cf:09:24:5b:9f:43:8a:ba:82:e1:eb:1d:cc:7f:75: 7c:bb:95:56:24:c1:05:26:a8:91:e5:25:67:81:6c:79:95:74: 2d:e2:fa:8a:ac:bb:bd:02:73:86:d5:fc:ce:d6:4b:fd:59:96: 22:ea:16:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6NRFoXkups0B9s6do743MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYTU4ZDVmMjcxMmNjYzAwNDRiNTllZmE3Y2JjM2U5OGM1 ZmMyNWMwHhcNMjUxMjE4MTAwMjAzWhcNMjUxMjE5MTAwMjAzWjAzMTEwLwYDVQQD EygxN2UwYmI3NDA1N2VkMmRmMGFjMzA1ZGU2OTg3ZmMzNWUxMmI5YWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcY5foExfmPLvQZLt7JHfvKb4TAb 4GUfBOV6NjGJ1uNs+arzEAKa7b6800DCNlPvgkXYlwj53I9s1bIhZIBI1+cYCKAl Tn0QdJz73wvsUphg3TCBsXKmpH3EtT7YwCrLk6GZ3uJxnzeGthGKNYZIzeQlQLfT UicCZUTRFEuOL0Vh8LHHuJdi5wUz/Q+GdUTP+IvuIbSPUg2RlXgGC/ssLOIjPzub jNtTDTmfloAd63cFBO7pwgJL8TpZMu6vHlSdbYZKsLDi1cnnzCkncGYs/d/EZ2DF WprreaIJ5c918dyEU4D4wzpQdrV8ZYVMUy//z8ooceKa4IECBYOHGWxMhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfgu3QFftLfCsMF3mmH/DXhK5qrMB8GA1UdIwQY MBaAFFqljV8nEszABEtZ76fLw+mMX8JcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUt NTkxOTkzMzFlZTA5LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yN2E3NDgtODg0ZC00ZjE5LWIyODUtNTkxOTkzMzFlZTA5 LzEvV3FXTlh5Y1N6TUFFUzFudnA4dkQ2WXhmd2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlrPXevZr xBvtYe/4r+z/8IQwlul696SyTKI5uviJoPCr+356LwEyZ9OCCDj2JPNtdb/aNKjL NGx8qnel/u48WfChSzhw6YPkVGGFB/Zid03rPC2IiHRoYovtxW/xyHR5QzC0vRB6 1pkxg5fQ07uuIiaiw0QMMTrhp5+APRNBLStnHvCOusxJkW4+/CJRU+FpK34TvZXL 7m23S1MI3jtfoPRV66Ju6H9D3wJRrwDV6JpiIaXYJg/+wxzho6hoSmu0E/5xc2Kf XwlazwkkW59DirqC4esdzH91fLuVViTBBSaokeUlZ4FseZV0LeL6iqy7vQJzhtX8 ztZL/VmWIuoWAg== -----END CERTIFICATE-----Generated at Thu Dec 18 18:36:48 2025 by rpki-client