This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft File: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft (raw, json) Hash identifier: qy/29whBJchMnsZqJoy5E7XXed8c5Byoe8w26EaEegw= Subject key identifier: 38:D4:3F:64:68:9A:3D:C9:40:E7:E1:E2:7B:E4:84:7F:EF:AB:E5:4B Authority key identifier: 59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E Certificate issuer: /CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Certificate serial: 019B5F422EC67F9248B9776E49BE2763F283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft Manifest number: 02F7 Signing time: Sat 27 Dec 2025 10:02:11 +0000 Manifest this update: Sat 27 Dec 2025 10:02:11 +0000 Manifest next update: Sun 28 Dec 2025 10:02:11 +0000 Files and hashes: 1: O2Pnp2xiRD6R4iT3wVRhdJLNeu0.roa (hash: Yn5cJiKHr0OGQWImfyXWk4ihqiwMLF8Xm0w3Bpt+rdg=) 2: WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl (hash: nTpyRUadwT2IPfglyNZdNZC/HTrS1OknmV1ZT/oTnJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:42:2e:c6:7f:92:48:b9:77:6e:49:be:27:63:f2:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59392f91f43a67f50aa79a0116eaa4de9bd7351e Validity Not Before: Dec 27 10:02:11 2025 GMT Not After : Dec 28 10:02:11 2025 GMT Subject: CN=38d43f64689a3dc940e7e1e27be4847fefabe54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:27:77:0c:c8:ae:e0:a7:82:75:eb:96:d4:f7: 2c:e4:3b:73:d1:cf:b9:75:7d:79:1f:69:c3:86:72: 0c:72:eb:96:13:7f:e9:67:bb:38:cd:21:62:1c:4c: e4:f4:82:60:d8:66:45:1c:29:ca:74:12:d1:7a:19: 01:1b:e3:0e:30:02:6c:a9:3c:9c:27:7e:70:67:20: d5:01:29:1a:90:64:9d:e2:e6:76:8f:c4:ec:04:30: eb:cb:09:a0:ad:94:41:5a:84:40:ea:95:8e:c2:03: 0d:1b:fd:f0:ad:45:c2:dd:84:3d:98:65:e8:39:dd: 7f:fe:8d:e2:2f:4a:17:36:bc:30:fe:74:ab:c6:c8: 05:f6:47:93:4b:4a:5c:c1:59:80:9d:0b:a5:c1:5b: f4:de:51:d0:e2:e2:b3:c1:ca:dd:b2:7a:ea:9a:d0: 23:f8:76:31:1f:97:58:41:72:2a:0a:55:92:9b:ea: 24:43:79:4f:f0:58:08:64:cc:84:a6:64:6d:03:94: 99:c7:ac:ed:0a:1c:5e:68:41:41:38:66:c8:5f:2a: 81:1c:2f:4c:7c:bc:1c:60:6e:47:b7:83:53:7f:80: 0f:5e:45:52:4a:ed:e2:10:53:62:ff:c1:2a:da:a5: 02:9d:25:aa:94:30:7f:fc:14:c0:7e:96:22:ed:9e: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D4:3F:64:68:9A:3D:C9:40:E7:E1:E2:7B:E4:84:7F:EF:AB:E5:4B X509v3 Authority Key Identifier: keyid:59:39:2F:91:F4:3A:67:F5:0A:A7:9A:01:16:EA:A4:DE:9B:D7:35:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/ae4fb1-5c16-4ce8-9eee-447cfcb5e688/1/WTkvkfQ6Z_UKp5oBFuqk3pvXNR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:40:00:46:eb:d8:f4:3f:83:2d:24:26:19:50:99:18:0e:ae: 1c:5a:c3:4a:d2:67:08:fe:39:96:e3:a6:1c:c4:1b:ec:b5:8f: 95:80:f3:b0:15:85:61:a5:96:b0:fc:bd:36:b1:59:55:24:4e: a9:53:7f:8b:46:a9:00:9f:36:4b:35:f3:a6:fd:91:21:3c:b3: df:d0:d2:22:81:00:ef:2e:27:66:39:a6:06:92:dc:83:12:93: 64:72:c2:e0:00:89:51:79:0f:63:f4:f4:cf:12:19:01:68:72: a2:e3:9b:5b:ec:71:e2:84:7d:31:8b:0f:c2:29:4f:46:be:56: a5:d3:57:9a:4d:f6:b6:54:94:3e:0f:0f:c9:66:ee:0f:fd:ad: 25:ea:30:39:86:94:a8:e2:65:24:54:d2:d3:36:8b:3d:ea:72: 70:9f:6a:9b:ce:2d:9c:e0:f2:22:27:b9:51:e4:b0:64:78:b1: ac:2d:f9:29:45:ff:cb:b9:93:8f:13:1c:70:70:d7:b3:38:93: 6d:e0:58:84:6e:cc:66:c4:3d:12:05:41:24:d3:50:df:99:ef: 28:59:66:af:81:4a:00:4c:5f:63:1e:91:8b:d7:e9:d4:70:f4: 76:8f:c3:a2:ee:ca:12:4a:2b:35:28:e7:22:28:5b:26:b3:d8: 4c:69:ff:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQi7Gf5JIuXduSb4nY/KDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MzkyZjkxZjQzYTY3ZjUwYWE3OWEwMTE2ZWFhNGRlOWJk NzM1MWUwHhcNMjUxMjI3MTAwMjExWhcNMjUxMjI4MTAwMjExWjAzMTEwLwYDVQQD EygzOGQ0M2Y2NDY4OWEzZGM5NDBlN2UxZTI3YmU0ODQ3ZmVmYWJlNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyid3DMiu4KeCdeuW1Pcs5Dtz0c+5 dX15H2nDhnIMcuuWE3/pZ7s4zSFiHEzk9IJg2GZFHCnKdBLRehkBG+MOMAJsqTyc J35wZyDVASkakGSd4uZ2j8TsBDDrywmgrZRBWoRA6pWOwgMNG/3wrUXC3YQ9mGXo Od1//o3iL0oXNrww/nSrxsgF9keTS0pcwVmAnQulwVv03lHQ4uKzwcrdsnrqmtAj +HYxH5dYQXIqClWSm+okQ3lP8FgIZMyEpmRtA5SZx6ztChxeaEFBOGbIXyqBHC9M fLwcYG5Ht4NTf4APXkVSSu3iEFNi/8Eq2qUCnSWqlDB//BTAfpYi7Z7VkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjUP2Romj3JQOfh4nvkhH/vq+VLMB8GA1UdIwQY MBaAFFk5L5H0Omf1CqeaARbqpN6b1zUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUt NDQ3Y2ZjYjVlNjg4LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9hZTRmYjEtNWMxNi00Y2U4LTllZWUtNDQ3Y2ZjYjVlNjg4 LzEvV1RrdmtmUTZaX1VLcDVvQkZ1cWszcHZYTlI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUAARuvY 9D+DLSQmGVCZGA6uHFrDStJnCP45luOmHMQb7LWPlYDzsBWFYaWWsPy9NrFZVSRO qVN/i0apAJ82SzXzpv2RITyz39DSIoEA7y4nZjmmBpLcgxKTZHLC4ACJUXkPY/T0 zxIZAWhyouObW+xx4oR9MYsPwilPRr5WpdNXmk32tlSUPg8PyWbuD/2tJeowOYaU qOJlJFTS0zaLPepycJ9qm84tnODyIie5UeSwZHixrC35KUX/y7mTjxMccHDXsziT beBYhG7MZsQ9EgVBJNNQ35nvKFlmr4FKAExfYx6Ri9fp1HD0do/Dou7KEkorNSjn IihbJrPYTGn/kA== -----END CERTIFICATE-----Generated at Sat Dec 27 15:59:22 2025 by rpki-client