This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json) Hash identifier: 92d0E69yqCISqn2cMf3u8OIB7bUR2CaK2SAkSRcGLpk= Subject key identifier: DD:8B:EB:AB:0A:B9:06:44:E4:04:62:CA:52:DA:C9:79:C9:54:28:B2 Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87 Certificate serial: 019B3BD9C749BC0BC0B94A5EB4E1CCEFD621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft Manifest number: 09C2 Signing time: Sat 20 Dec 2025 13:01:26 +0000 Manifest this update: Sat 20 Dec 2025 13:01:26 +0000 Manifest next update: Sun 21 Dec 2025 13:01:26 +0000 Files and hashes: 1: oXdvfaAw2HX5k9hgoYRskK2gnZ0.roa (hash: RsMteruai2QKgImCyNPBir6yRcbFaU5c9mP5yO+ruyE=) 2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: JMoCLN3xyGGvzySa+TKlcpsXP86w5qGYdQMpPvhTcYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:c7:49:bc:0b:c0:b9:4a:5e:b4:e1:cc:ef:d6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87 Validity Not Before: Dec 20 13:01:26 2025 GMT Not After : Dec 21 13:01:26 2025 GMT Subject: CN=dd8bebab0ab90644e40462ca52dac979c95428b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:f5:f9:db:3e:7a:64:11:fe:8f:40:8e:5e: 79:4e:fa:a0:f2:eb:a9:17:55:94:fc:ca:fe:14:cb: 1b:5a:82:48:db:29:9d:5c:cb:f0:1e:65:a6:5e:93: d5:03:56:5e:4b:28:4c:d1:75:75:77:d7:6e:c6:89: d0:45:73:33:b1:c9:ee:e6:f9:08:15:5c:54:94:20: 75:ea:51:df:87:11:18:8c:88:e6:74:92:d5:86:74: d7:52:08:5c:7f:1d:d5:1c:32:10:17:37:9d:a9:24: 49:53:45:7b:0f:6c:16:9d:c3:32:da:94:da:a2:c2: f5:fe:cd:37:6c:81:7e:95:6e:43:0b:50:1e:1a:96: 6c:a1:e9:28:e4:31:c6:34:49:99:4f:88:a8:ec:b5: 23:cb:a7:0e:0d:67:f7:a3:ae:ce:a3:ff:c6:24:23: 4d:ba:6f:d0:62:49:e3:40:38:ac:cc:87:81:bb:a2: 1f:b4:07:26:59:2c:13:c3:00:7c:e1:56:d1:6d:52: f3:7a:7c:85:f8:18:8a:46:6c:39:0a:a1:38:92:27: e3:77:77:71:d5:2f:f5:bf:d2:29:f2:dc:0c:0c:73: fd:af:08:ed:81:e2:07:5c:6c:54:1f:d1:3a:54:28: 72:71:5d:40:e7:82:88:3d:02:df:59:7b:2a:af:7f: c6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8B:EB:AB:0A:B9:06:44:E4:04:62:CA:52:DA:C9:79:C9:54:28:B2 X509v3 Authority Key Identifier: keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:25:f6:2c:25:d3:3b:cd:a9:95:09:4b:ae:73:bd:09:76:51: 97:c5:6d:30:9c:fe:fd:37:93:b6:be:29:b7:ea:e5:e8:dd:6a: c1:a7:b6:8d:6f:ff:45:0d:86:2e:bf:80:c0:9a:29:20:19:74: d2:90:61:9b:d6:63:9e:04:37:08:b8:d6:ce:55:d8:89:ff:52: 48:23:2a:c5:2b:d7:81:73:a9:57:95:cc:b2:c2:14:8a:e2:74: 96:f6:de:39:2e:19:5f:8a:35:ee:d9:9c:c2:fd:b1:58:42:0f: 54:d5:bc:85:cf:db:bd:7b:44:4e:96:f7:dd:61:b3:f6:e7:64: fb:7e:5f:01:e2:97:6f:8e:30:89:7d:99:8f:8b:73:e0:12:63: e3:7f:29:b0:d4:de:12:b4:08:b3:fb:09:36:fc:95:3d:3a:83: 1f:99:93:10:fb:ab:5d:81:9d:0f:17:3a:16:93:42:aa:64:60: 65:5c:2c:6b:00:12:9b:96:40:34:ed:ab:3f:1f:7c:19:f3:66: 19:76:7a:7e:84:7d:f7:82:19:f5:89:8e:16:47:f4:e3:c6:da: 65:40:87:dd:db:8d:b8:44:25:9f:00:4c:c8:0b:7b:97:0c:c5: 70:8d:ff:e7:c0:b5:a3:30:8d:42:a1:c7:85:7f:31:04:f0:ca: 58:e6:5e:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72cdJvAvAuUpetOHM79YhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1 YjlhODcwHhcNMjUxMjIwMTMwMTI2WhcNMjUxMjIxMTMwMTI2WjAzMTEwLwYDVQQD EyhkZDhiZWJhYjBhYjkwNjQ0ZTQwNDYyY2E1MmRhYzk3OWM5NTQyOGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzv1+ds+emQR/o9Ajl55Tvqg8uup F1WU/Mr+FMsbWoJI2ymdXMvwHmWmXpPVA1ZeSyhM0XV1d9duxonQRXMzscnu5vkI FVxUlCB16lHfhxEYjIjmdJLVhnTXUghcfx3VHDIQFzedqSRJU0V7D2wWncMy2pTa osL1/s03bIF+lW5DC1AeGpZsoeko5DHGNEmZT4io7LUjy6cODWf3o67Oo//GJCNN um/QYknjQDiszIeBu6IftAcmWSwTwwB84VbRbVLzenyF+BiKRmw5CqE4kifjd3dx 1S/1v9Ip8twMDHP9rwjtgeIHXGxUH9E6VChycV1A54KIPQLfWXsqr3/GTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2L66sKuQZE5ARiylLayXnJVCiyMB8GA1UdIwQY MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3 LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbiX2LCXT O82plQlLrnO9CXZRl8VtMJz+/TeTtr4pt+rl6N1qwae2jW//RQ2GLr+AwJopIBl0 0pBhm9ZjngQ3CLjWzlXYif9SSCMqxSvXgXOpV5XMssIUiuJ0lvbeOS4ZX4o17tmc wv2xWEIPVNW8hc/bvXtETpb33WGz9udk+35fAeKXb44wiX2Zj4tz4BJj438psNTe ErQIs/sJNvyVPTqDH5mTEPurXYGdDxc6FpNCqmRgZVwsawASm5ZANO2rPx98GfNm GXZ6foR994IZ9YmOFkf048baZUCH3duNuEQlnwBMyAt7lwzFcI3/58C1ozCNQqHH hX8xBPDKWOZe4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 16:02:04 2025 by rpki-client