This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json) Hash identifier: xPJanZWIbmWdW0FFd8frRpaGj0vkfcoF36cNvaTm6yw= Subject key identifier: 42:22:A4:9A:1D:FF:32:73:43:CB:30:36:E3:15:6E:66:C7:4E:7A:EC Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a Certificate serial: 019B3C7F3F8C9CEE61A91D9B95869C1FDF04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft Manifest number: 0E2C Signing time: Sat 20 Dec 2025 16:02:10 +0000 Manifest this update: Sat 20 Dec 2025 16:02:10 +0000 Manifest next update: Sun 21 Dec 2025 16:02:10 +0000 Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: FhwTJliO0SgYvU6zv00P36VbuJGqvl4xcKdNeiY18iI=) 2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:3f:8c:9c:ee:61:a9:1d:9b:95:86:9c:1f:df:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a Validity Not Before: Dec 20 16:02:10 2025 GMT Not After : Dec 21 16:02:10 2025 GMT Subject: CN=4222a49a1dff327343cb3036e3156e66c74e7aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e9:42:4e:ac:7f:7b:e8:8d:df:40:f9:64:9e: 93:f3:0c:2b:c8:23:1f:84:51:36:62:af:90:52:23: 8f:bb:50:29:e9:a7:fc:b0:b1:84:35:26:28:2b:3d: 4a:55:39:a2:de:07:de:91:cc:83:79:70:99:30:c1: 45:d8:f7:00:fd:4b:4f:b2:28:c7:f5:d2:ba:92:b5: 37:f9:3a:33:f6:6a:fd:96:1c:dc:c3:59:64:64:f9: 96:2d:25:db:0d:81:e4:e7:68:ea:b5:79:af:65:83: 05:0d:62:c5:b1:81:e7:cf:c1:4e:cd:7a:f7:f2:7e: 40:2d:25:65:65:b1:dc:4f:5b:00:ab:bb:d8:6c:ac: 53:99:97:1f:2b:7a:40:1b:52:96:9b:34:95:f3:98: 37:9b:6b:84:b9:0e:23:e5:c6:ab:49:4e:c9:fe:8f: ff:18:80:0b:88:f6:20:9e:bd:fe:bb:aa:63:86:0f: 82:8d:05:2a:e3:40:a8:08:5f:94:5e:29:0c:6e:c9: 3d:47:e3:9e:da:c0:70:7d:8d:7c:98:a1:9b:59:77: 17:a6:d2:77:ca:86:eb:e4:b8:12:7d:59:a2:91:b3: 61:56:39:c2:c9:51:65:29:bb:fb:10:f3:08:a3:87: 4f:65:49:9f:d1:8e:71:18:40:be:9e:27:20:ce:a7: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:22:A4:9A:1D:FF:32:73:43:CB:30:36:E3:15:6E:66:C7:4E:7A:EC X509v3 Authority Key Identifier: keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:10:cc:e5:5b:31:6f:07:96:7e:f8:2a:a2:4d:c6:ee:3d:fd: a3:0d:87:a7:8d:dd:d6:65:af:ce:17:5f:43:f0:23:b8:a6:00: c7:d1:3c:bc:7d:d9:81:bf:fe:2e:00:66:b7:ba:ab:a4:49:5d: 3c:da:34:40:b8:70:d6:bf:a8:36:4b:bb:ad:68:6f:96:16:62: 6c:83:ff:e6:71:9e:c2:e3:32:e4:06:9b:1b:ab:da:19:29:84: 7f:aa:ad:a0:36:b9:af:68:91:ee:f2:25:6d:38:b2:41:f7:c0: 73:9d:ca:4d:d2:54:83:9e:f8:c7:a8:6c:0c:1d:b8:0b:49:c3: 7e:3c:f7:a3:c0:5b:ed:1e:91:20:cd:1e:ec:f8:53:b2:51:5b: 56:a3:fe:35:e0:49:b6:d6:89:20:2b:46:c9:81:44:b2:00:a5: 71:7f:fb:86:87:0a:13:67:98:0a:60:5e:43:c1:1e:9d:1e:cd: d6:37:fd:5c:a7:e5:92:a7:f2:d7:34:0a:f4:c9:a6:5f:7f:79: 3e:3d:5e:26:57:02:42:94:42:c6:4b:57:4d:05:75:5b:85:69: 9e:30:55:84:21:e3:21:6c:a1:a0:e8:62:de:a3:f8:23:39:9d: 62:d1:8e:5e:d5:64:9e:e4:66:e5:26:b4:f5:78:e5:b8:7e:ab: ce:37:d7:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fz+MnO5hqR2blYacH98EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Nzg1YTIxZTJkMDdjNjhmZjMxNzU1OGM2OWVmMTE4Y2M3 NTgwNWEwHhcNMjUxMjIwMTYwMjEwWhcNMjUxMjIxMTYwMjEwWjAzMTEwLwYDVQQD Eyg0MjIyYTQ5YTFkZmYzMjczNDNjYjMwMzZlMzE1NmU2NmM3NGU3YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOlCTqx/e+iN30D5ZJ6T8wwryCMf hFE2Yq+QUiOPu1Ap6af8sLGENSYoKz1KVTmi3gfekcyDeXCZMMFF2PcA/UtPsijH 9dK6krU3+Toz9mr9lhzcw1lkZPmWLSXbDYHk52jqtXmvZYMFDWLFsYHnz8FOzXr3 8n5ALSVlZbHcT1sAq7vYbKxTmZcfK3pAG1KWmzSV85g3m2uEuQ4j5carSU7J/o// GIALiPYgnr3+u6pjhg+CjQUq40CoCF+UXikMbsk9R+Oe2sBwfY18mKGbWXcXptJ3 yobr5LgSfVmikbNhVjnCyVFlKbv7EPMIo4dPZUmf0Y5xGEC+nicgzqeB3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIipJod/zJzQ8swNuMVbmbHTnrsMB8GA1UdIwQY MBaAFFl4WiHi0Hxo/zF1WMae8RjMdYBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTct NzVmNGZjYTg2YWU0LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTctNzVmNGZjYTg2YWU0 LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhDM5Vsx bweWfvgqok3G7j39ow2Hp43d1mWvzhdfQ/AjuKYAx9E8vH3Zgb/+LgBmt7qrpEld PNo0QLhw1r+oNku7rWhvlhZibIP/5nGewuMy5AabG6vaGSmEf6qtoDa5r2iR7vIl bTiyQffAc53KTdJUg574x6hsDB24C0nDfjz3o8Bb7R6RIM0e7PhTslFbVqP+NeBJ ttaJICtGyYFEsgClcX/7hocKE2eYCmBeQ8EenR7N1jf9XKflkqfy1zQK9MmmX395 Pj1eJlcCQpRCxktXTQV1W4VpnjBVhCHjIWyhoOhi3qP4IzmdYtGOXtVknuRm5Sa0 9XjluH6rzjfX8Q== -----END CERTIFICATE-----Generated at Sat Dec 20 22:42:02 2025 by rpki-client