This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft File: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft (raw, json) Hash identifier: z4DlF8eHsYEzJ6Gaey5UqkvgQgTOLgkRB13o+mg0EQQ= Subject key identifier: C8:C7:C0:01:C7:96:4D:2A:5B:91:4A:61:FB:77:3F:6F:6D:CA:B0:93 Authority key identifier: 59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E Certificate issuer: /CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Certificate serial: 019B51BDBC9B1F19D4D3A49732C594D1FABB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft Manifest number: 02F0 Signing time: Wed 24 Dec 2025 19:02:27 +0000 Manifest this update: Wed 24 Dec 2025 19:02:27 +0000 Manifest next update: Thu 25 Dec 2025 19:02:27 +0000 Files and hashes: 1: O2Pnp2xiRD6R4iT3wVRhdJLNeu0.roa (hash: Yn5cJiKHr0OGQWImfyXWk4ihqiwMLF8Xm0w3Bpt+rdg=) 2: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl (hash: TVcSrqM4UoMEyBx0bMWrPmFUtkPeBYCCA7ThQxvOLrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:bc:9b:1f:19:d4:d3:a4:97:32:c5:94:d1:fa:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Validity Not Before: Dec 24 19:02:27 2025 GMT Not After : Dec 25 19:02:27 2025 GMT Subject: CN=c8c7c001c7964d2a5b914a61fb773f6f6dcab093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5e:18:4b:0c:a3:c7:69:53:6f:a2:90:4b:56: 89:00:85:96:37:1c:b2:8b:44:58:2b:05:4c:42:c8: 67:09:50:7e:f3:9b:a7:81:62:9a:35:2c:76:88:0e: 62:db:10:66:d3:83:4d:24:2f:95:99:33:2a:ea:51: 3c:a8:71:f8:48:ae:e0:46:94:a8:5d:17:cd:65:41: 6c:7c:37:9e:34:1f:00:0e:ce:a8:9e:ca:4a:df:8d: f6:e2:99:b5:d5:84:7e:91:4f:ef:68:84:cf:b6:ee: 90:db:2d:b9:0a:26:34:64:a1:23:64:98:fd:f3:12: 63:1b:6a:a5:e3:66:af:98:46:c8:5b:ec:61:8d:d0: 95:53:ae:bb:d2:c3:61:7a:54:3f:40:f9:a2:93:e9: 58:d4:3b:e2:db:68:6c:ca:c8:e2:76:9a:16:e5:46: 64:af:49:39:b5:8b:74:34:bb:73:61:0c:fa:63:55: 49:df:f1:f9:8d:a2:85:d0:ff:75:73:30:dd:7f:0f: 88:dd:a3:81:ee:31:f5:97:15:82:84:53:d7:50:27: 55:b3:35:a3:a6:83:77:a8:85:e7:ac:64:0e:59:1e: 0f:5a:c6:24:13:a7:d9:0c:0d:0b:7e:01:d8:3f:53: f6:ef:22:0b:87:bb:0d:77:52:3b:2a:cf:b5:81:c1: c9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C7:C0:01:C7:96:4D:2A:5B:91:4A:61:FB:77:3F:6F:6D:CA:B0:93 X509v3 Authority Key Identifier: keyid:59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:41:8c:c0:a9:ad:c2:6b:db:b1:d1:9d:81:34:8b:f0:5c:91: 62:50:8c:69:fc:50:6f:34:a9:1f:00:8f:5e:08:f2:9a:ab:d9: a4:77:9b:c3:0f:23:fd:69:29:09:12:d5:dc:5b:02:9a:a3:a1: 81:33:ff:f7:3b:4a:ed:a4:e1:f7:c0:70:90:95:e3:1c:b9:24: db:2f:63:b8:b3:ad:23:62:21:11:a9:f3:9b:e8:d0:cc:73:75: 6d:0d:fd:3b:b5:c6:64:54:e8:c8:35:71:b4:9f:dd:ec:d7:33: 63:44:11:ec:24:ef:f7:b0:74:24:25:1a:ac:90:55:05:07:7c: 92:00:df:26:2d:67:3a:23:4d:a3:79:5b:94:0b:77:09:c2:6a: 3e:51:66:72:aa:0c:16:f7:66:71:07:ce:3d:f1:56:95:6b:02: 66:28:77:80:2f:d7:33:01:22:b8:32:17:64:98:40:b1:21:c4: 7e:68:f0:c8:59:bc:7f:8b:51:e3:da:be:97:79:61:02:00:ff: c0:b8:e7:33:2f:c4:89:ad:2a:34:d6:6a:0c:b8:81:d2:3c:66: df:c4:31:22:a6:49:f7:f7:93:22:4f:62:ae:ef:94:6b:37:fc: c3:06:59:c3:cf:d7:54:9d:14:0a:95:08:61:97:c8:e0:f0:05: ad:37:50:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvbybHxnU06SXMsWU0fq7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MzkyZjkxZjQzYTY3ZjUwYWE3OWEwMTE2ZWFhNGRlOWJk NzM1MWUwHhcNMjUxMjI0MTkwMjI3WhcNMjUxMjI1MTkwMjI3WjAzMTEwLwYDVQQD EyhjOGM3YzAwMWM3OTY0ZDJhNWI5MTRhNjFmYjc3M2Y2ZjZkY2FiMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl4YSwyjx2lTb6KQS1aJAIWWNxyy i0RYKwVMQshnCVB+85ungWKaNSx2iA5i2xBm04NNJC+VmTMq6lE8qHH4SK7gRpSo XRfNZUFsfDeeNB8ADs6onspK34324pm11YR+kU/vaITPtu6Q2y25CiY0ZKEjZJj9 8xJjG2ql42avmEbIW+xhjdCVU6670sNhelQ/QPmik+lY1Dvi22hsysjidpoW5UZk r0k5tYt0NLtzYQz6Y1VJ3/H5jaKF0P91czDdfw+I3aOB7jH1lxWChFPXUCdVszWj poN3qIXnrGQOWR4PWsYkE6fZDA0LfgHYP1P27yILh7sNd1I7Ks+1gcHJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjHwAHHlk0qW5FKYft3P29tyrCTMB8GA1UdIwQY MBaAFFk5L5H0Omf1CqeaARbqpN6b1zUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUt NDQ3Y2ZjYjVlNjg4LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUtNDQ3Y2ZjYjVlNjg4 LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkGMwKmt wmvbsdGdgTSL8FyRYlCMafxQbzSpHwCPXgjymqvZpHebww8j/WkpCRLV3FsCmqOh gTP/9ztK7aTh98BwkJXjHLkk2y9juLOtI2IhEanzm+jQzHN1bQ39O7XGZFToyDVx tJ/d7NczY0QR7CTv97B0JCUarJBVBQd8kgDfJi1nOiNNo3lblAt3CcJqPlFmcqoM FvdmcQfOPfFWlWsCZih3gC/XMwEiuDIXZJhAsSHEfmjwyFm8f4tR49q+l3lhAgD/ wLjnMy/Eia0qNNZqDLiB0jxm38QxIqZJ9/eTIk9iru+Uazf8wwZZw8/XVJ0UCpUI YZfI4PAFrTdQEQ== -----END CERTIFICATE-----Generated at Thu Dec 25 05:16:01 2025 by rpki-client