This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft File: wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json) Hash identifier: vmjnFWFswbEmxIT2jzDhng4XU4vZn1ijgfpKdWv2XIs= Subject key identifier: CF:4B:DC:52:BA:C1:FF:05:D2:C2:23:4A:F9:82:C2:5A:C9:29:C6:18 Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE Certificate issuer: /CN=c13b90faac5efcf93195619da16f3a47effe99fe Certificate serial: 019B40C9698B5C08194740F43FA1CD6CD5CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 12:01:39 +0000 Manifest this update: Sun 21 Dec 2025 12:01:39 +0000 Manifest next update: Mon 22 Dec 2025 12:01:39 +0000 Files and hashes: 1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=) 2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: SzIQlNfIJQTxIqJC4PqvwfQdKCwQ5j2iXflNQ1bmUNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:69:8b:5c:08:19:47:40:f4:3f:a1:cd:6c:d5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe Validity Not Before: Dec 21 12:01:39 2025 GMT Not After : Dec 22 12:01:39 2025 GMT Subject: CN=cf4bdc52bac1ff05d2c2234af982c25ac929c618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e2:9a:1a:19:ba:32:c3:94:c1:f0:a1:bf:4c: e2:9a:0b:aa:cc:ba:5c:08:18:f7:0f:34:ab:7e:ec: ef:77:2e:45:01:84:d7:b3:e9:a4:0b:48:46:24:b6: a1:6f:73:f4:b8:20:cc:87:20:98:32:54:3d:68:45: dc:17:be:14:5e:31:d6:53:e4:1f:c0:38:e0:71:c7: 93:08:cd:81:54:d7:f3:c8:b3:f7:5d:97:76:80:e1: 19:e9:e7:ec:ed:75:f6:06:04:8c:08:99:f0:29:9e: d8:5a:cc:06:19:7c:3c:e3:9e:18:41:06:9a:f1:d0: d7:14:6b:12:f7:75:7c:3d:de:65:2f:6f:aa:7c:26: fe:16:18:1e:53:06:1c:b4:77:49:6c:77:06:09:c2: fc:79:86:69:19:57:be:ac:53:d3:1f:49:f3:00:c8: 8d:64:98:0a:3a:17:cc:8f:76:57:68:15:c9:a9:bd: c4:c1:77:21:9d:23:7a:bf:8b:f2:04:82:4d:16:79: 9d:d4:7b:4b:01:38:03:b3:c0:2c:9c:84:9d:2e:42: ad:77:62:42:25:e7:b5:37:3e:1d:61:80:46:9f:8b: da:92:8c:47:f6:f6:59:a3:dc:23:f7:30:d1:71:5e: 67:75:0e:a6:f4:eb:8e:45:57:2d:1e:15:09:cc:0a: 8a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:4B:DC:52:BA:C1:FF:05:D2:C2:23:4A:F9:82:C2:5A:C9:29:C6:18 X509v3 Authority Key Identifier: keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ac:04:13:d2:ed:a5:12:ce:76:73:b4:54:63:c9:c9:7a:c8: fb:39:24:65:a9:21:84:c1:e1:dc:8c:9d:ab:45:ea:3d:02:6e: 06:50:1a:96:4c:78:15:66:75:6c:5a:44:02:97:61:25:be:ac: 71:f3:9b:44:d8:c4:9a:ee:d9:bc:ec:1d:e3:5b:4b:4b:2d:1d: 0a:40:5e:ac:4c:b4:ed:ad:da:76:66:a1:78:c0:7c:04:ec:36: 30:02:b2:c8:12:5e:3a:a6:88:54:ce:a1:0f:ac:4f:60:4c:27: 8b:8f:be:bc:f2:9b:7d:71:06:50:45:88:a5:8b:79:b9:39:a8: 17:a3:77:e5:43:c4:82:4a:e3:7a:a7:b2:55:04:ba:6a:e0:9a: f4:e7:0a:01:59:61:9c:57:57:8c:24:6e:bc:51:1a:ff:1d:ca: 24:4e:13:bd:1c:fc:d3:3c:72:c2:30:f6:e1:91:d7:96:a9:28: 64:c7:11:af:68:51:eb:98:b2:86:b7:4c:1c:3c:6a:55:ae:5e: f1:95:6d:ac:ac:5f:c8:60:0f:8b:f2:f1:6f:93:42:8e:d5:b8: 27:c6:3d:cd:28:6a:59:40:e2:91:b1:df:b5:4e:fe:56:01:23: 2e:ee:b9:9e:4f:ce:e3:67:9e:c5:74:fd:89:91:3c:fb:f2:ba: 9d:02:89:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyWmLXAgZR0D0P6HNbNXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm ZTk5ZmUwHhcNMjUxMjIxMTIwMTM5WhcNMjUxMjIyMTIwMTM5WjAzMTEwLwYDVQQD EyhjZjRiZGM1MmJhYzFmZjA1ZDJjMjIzNGFmOTgyYzI1YWM5MjljNjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OKaGhm6MsOUwfChv0zimguqzLpc CBj3DzSrfuzvdy5FAYTXs+mkC0hGJLahb3P0uCDMhyCYMlQ9aEXcF74UXjHWU+Qf wDjgcceTCM2BVNfzyLP3XZd2gOEZ6efs7XX2BgSMCJnwKZ7YWswGGXw8454YQQaa 8dDXFGsS93V8Pd5lL2+qfCb+FhgeUwYctHdJbHcGCcL8eYZpGVe+rFPTH0nzAMiN ZJgKOhfMj3ZXaBXJqb3EwXchnSN6v4vyBIJNFnmd1HtLATgDs8AsnISdLkKtd2JC Jee1Nz4dYYBGn4vakoxH9vZZo9wj9zDRcV5ndQ6m9OuORVctHhUJzAqKEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM9L3FK6wf8F0sIjSvmCwlrJKcYYMB8GA1UdIwQY MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt YzEzNWE2ZWRiODYxLzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANawEE9Lt pRLOdnO0VGPJyXrI+zkkZakhhMHh3Iydq0XqPQJuBlAalkx4FWZ1bFpEApdhJb6s cfObRNjEmu7ZvOwd41tLSy0dCkBerEy07a3admaheMB8BOw2MAKyyBJeOqaIVM6h D6xPYEwni4++vPKbfXEGUEWIpYt5uTmoF6N35UPEgkrjeqeyVQS6auCa9OcKAVlh nFdXjCRuvFEa/x3KJE4TvRz80zxywjD24ZHXlqkoZMcRr2hR65iyhrdMHDxqVa5e 8ZVtrKxfyGAPi/Lxb5NCjtW4J8Y9zShqWUDikbHftU7+VgEjLu65nk/O42eexXT9 iZE8+/K6nQKJwQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:28:44 2025 by rpki-client