This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json) Hash identifier: P9pLUvnf+ImlWyQ0ccE7LIGUGFLbJIv/ayyGPo+MbNM= Subject key identifier: CF:2E:89:87:41:7B:56:65:A2:C2:E8:D9:CA:C9:85:B5:8E:11:B1:D9 Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba Certificate serial: 019B3DFE7EDD04025422DB862D1BF9F9C9B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft Manifest number: 023E Signing time: Sat 20 Dec 2025 23:00:47 +0000 Manifest this update: Sat 20 Dec 2025 23:00:47 +0000 Manifest next update: Sun 21 Dec 2025 23:00:47 +0000 Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: doCb3gASd3Vsi1l+IKA7C/RLIfr/wjGXmHPssCR5RHg=) 2: wNDSq8yZE9PBcRFzNVbL2mjY9tI.roa (hash: +CAo2P8QJyLpdrdtqSl+fQIj2IGhG8nr3/YTjB35bgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:7e:dd:04:02:54:22:db:86:2d:1b:f9:f9:c9:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba Validity Not Before: Dec 20 23:00:47 2025 GMT Not After : Dec 21 23:00:47 2025 GMT Subject: CN=cf2e8987417b5665a2c2e8d9cac985b58e11b1d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d8:68:21:46:18:8e:ff:d4:db:03:d0:73:b4: a7:44:e4:0b:bc:86:de:ae:d8:35:b8:07:92:51:df: 8a:e7:5c:31:60:7a:e2:4a:7b:ce:2b:7b:83:99:eb: d6:9a:59:6e:52:ae:2e:a8:fc:ae:bd:97:75:ae:81: 45:3d:dd:09:a6:ef:f2:18:09:0b:ff:1e:ec:ec:1c: ef:c2:a0:c1:48:9d:28:ca:ed:be:17:c5:14:d6:c1: 1c:2c:64:94:3a:05:c5:be:06:d9:02:7e:e5:8f:3c: 13:ad:66:d6:a1:8b:7d:65:95:14:cf:0b:4e:d8:d9: 92:2b:e5:3e:b2:63:84:c7:5d:18:87:89:df:f2:83: 4e:8e:86:d9:3a:34:e7:4f:35:d3:62:cf:c9:73:03: fa:33:f2:c1:da:98:c2:af:06:89:23:67:4c:c9:89: 5f:6b:37:a7:89:7b:c4:73:06:37:f3:74:27:97:be: bd:9f:b5:e7:b0:22:7d:61:1d:81:02:8d:86:a1:49: 16:c9:0f:4c:c6:d8:7a:61:44:a1:66:0e:7f:57:ec: 68:5b:25:42:4f:d0:e2:a9:d7:ce:44:7d:06:87:45: f8:bc:7c:5c:7a:d6:7a:3a:fd:8a:e6:48:fa:76:02: 18:ff:aa:be:56:28:4d:16:fa:7f:39:91:bb:42:66: 08:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2E:89:87:41:7B:56:65:A2:C2:E8:D9:CA:C9:85:B5:8E:11:B1:D9 X509v3 Authority Key Identifier: keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:2b:8b:bc:b4:85:c5:4d:6a:35:fe:b2:49:06:49:db:c6:cd: ff:cf:17:9a:a8:e8:76:54:d5:18:95:1f:ae:34:f5:aa:70:d7: a8:01:53:d6:de:6c:51:ee:ec:fe:f2:72:02:66:e6:92:1f:23: 37:f6:62:9d:30:5f:c7:9f:40:fa:41:01:ca:ca:a4:64:1a:12: a4:a7:9d:ee:b1:cb:b9:99:db:8b:95:83:7c:e8:a0:60:fd:37: c7:71:24:62:94:2a:9e:2d:47:0b:ca:8d:13:7a:a6:3f:66:e9: 42:64:e2:d9:29:c8:8f:3a:0c:47:15:df:3b:97:58:82:70:d7: 9f:4a:c4:5f:5c:23:e3:82:47:05:e1:79:ef:bc:9f:5b:47:05: ae:45:4d:dd:85:51:ad:f6:84:63:c2:67:a6:82:e8:e9:98:9f: e1:f1:6e:24:26:ae:46:6f:08:33:16:59:8d:df:da:ce:26:ef: ec:c8:8f:12:7e:0a:b6:7d:7d:8d:80:ee:7c:0b:fc:d5:89:8b: 16:e3:16:6f:ba:b5:83:b3:b9:99:37:81:32:64:56:6e:1c:61: 09:c5:3e:dd:92:e2:c4:c8:86:5b:ef:bb:0c:5a:25:fa:28:60: ec:06:9b:85:f4:8a:5b:0a:3e:eb:5b:83:0c:a4:c1:3f:d2:60: f6:b4:b3:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/n7dBAJUItuGLRv5+cm4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjE1NzliODc1ZTNlMDkzZDQ3MzI1Yjk3MzVlZGJmZTc4 MDlmYmEwHhcNMjUxMjIwMjMwMDQ3WhcNMjUxMjIxMjMwMDQ3WjAzMTEwLwYDVQQD EyhjZjJlODk4NzQxN2I1NjY1YTJjMmU4ZDljYWM5ODViNThlMTFiMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjthoIUYYjv/U2wPQc7SnROQLvIbe rtg1uAeSUd+K51wxYHriSnvOK3uDmevWmlluUq4uqPyuvZd1roFFPd0Jpu/yGAkL /x7s7BzvwqDBSJ0oyu2+F8UU1sEcLGSUOgXFvgbZAn7ljzwTrWbWoYt9ZZUUzwtO 2NmSK+U+smOEx10Yh4nf8oNOjobZOjTnTzXTYs/JcwP6M/LB2pjCrwaJI2dMyYlf azeniXvEcwY383Qnl769n7XnsCJ9YR2BAo2GoUkWyQ9Mxth6YUShZg5/V+xoWyVC T9DiqdfORH0Gh0X4vHxcetZ6Ov2K5kj6dgIY/6q+VihNFvp/OZG7QmYIhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8uiYdBe1ZlosLo2crJhbWOEbHZMB8GA1UdIwQY MBaAFFhhV5uHXj4JPUcyW5c17b/ngJ+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQt ZjUzMzYzMjdiODgxLzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQtZjUzMzYzMjdiODgx LzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSuLvLSF xU1qNf6ySQZJ28bN/88XmqjodlTVGJUfrjT1qnDXqAFT1t5sUe7s/vJyAmbmkh8j N/ZinTBfx59A+kEBysqkZBoSpKed7rHLuZnbi5WDfOigYP03x3EkYpQqni1HC8qN E3qmP2bpQmTi2SnIjzoMRxXfO5dYgnDXn0rEX1wj44JHBeF577yfW0cFrkVN3YVR rfaEY8JnpoLo6Zif4fFuJCauRm8IMxZZjd/azibv7MiPEn4Ktn19jYDufAv81YmL FuMWb7q1g7O5mTeBMmRWbhxhCcU+3ZLixMiGW++7DFol+ihg7AabhfSKWwo+61uD DKTBP9Jg9rSzPQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:03:10 2025 by rpki-client