This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json) Hash identifier: WNBVIUYULELTBIS6aVqpYpPxYKBNPykh6GZWME2QL6M= Subject key identifier: 87:4F:A6:D9:86:B4:B6:A6:08:F4:B0:98:DB:92:A3:8F:C9:C6:17:27 Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32 Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32 Certificate serial: 019B35A0C16232C1AE9B4FEDC604AB9F9E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft Manifest number: 1058 Signing time: Fri 19 Dec 2025 08:01:26 +0000 Manifest this update: Fri 19 Dec 2025 08:01:26 +0000 Manifest next update: Sat 20 Dec 2025 08:01:26 +0000 Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=) 2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: FX3I4hVYTNyJ4ywYFj7M/Slx8SdDhnvJ+6/KzQPid0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:c1:62:32:c1:ae:9b:4f:ed:c6:04:ab:9f:9e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32 Validity Not Before: Dec 19 08:01:26 2025 GMT Not After : Dec 20 08:01:26 2025 GMT Subject: CN=874fa6d986b4b6a608f4b098db92a38fc9c61727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:31:89:68:ec:c6:1e:1b:7f:dd:b2:aa:fb:95: b8:20:5b:70:e2:8a:62:78:d1:01:cd:f3:2c:66:3e: e4:70:5b:81:a9:f3:fd:4a:e0:52:74:14:c2:58:62: 77:82:c1:ea:a8:b1:00:77:e9:da:73:71:7b:c8:2f: 72:41:cd:be:02:82:4b:17:73:aa:e9:88:ae:a4:9d: c0:3e:6e:6d:c3:fb:20:80:4b:f2:94:ae:fe:47:e3: bf:12:36:86:45:f8:33:3e:a9:a1:74:e4:7a:d0:54: 6f:88:04:fc:bc:cb:b8:62:3a:79:c4:e6:d3:93:a2: c1:7d:ee:5c:ea:ae:68:8a:d6:57:c5:36:30:96:52: db:06:fc:b3:e9:b7:75:22:c9:b2:34:f1:89:db:a0: e3:32:0b:23:78:59:12:c9:87:2f:51:35:d7:ae:0a: 5e:d8:b5:b3:05:5e:f6:97:17:27:37:5e:19:f6:66: c2:f6:e5:79:5f:8a:dd:1f:2a:af:0c:fa:b2:e1:ea: 31:16:29:a1:63:7a:df:a3:de:26:f1:ec:83:35:a5: e2:60:66:31:c9:a5:e8:f6:e9:fd:a9:a3:5b:5b:2d: 38:ea:ea:5f:cb:bc:7f:de:be:fc:14:35:18:e6:81: 03:75:8b:05:b8:41:f8:f3:cf:d8:73:7b:c0:65:75: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:A6:D9:86:B4:B6:A6:08:F4:B0:98:DB:92:A3:8F:C9:C6:17:27 X509v3 Authority Key Identifier: keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:94:02:46:11:36:7c:f3:b1:7b:e1:ab:99:00:4b:81:02:be: 85:ac:aa:72:bf:45:92:17:dc:88:fd:96:13:3a:d0:7b:3f:3d: dc:f7:38:a8:b4:a1:62:45:0a:50:1a:e7:9b:c3:46:88:f5:24: 5c:7e:52:bc:0b:1e:68:d9:d5:99:68:75:55:9a:0c:07:a5:45: e0:c1:7c:35:85:18:ad:44:eb:32:cb:e5:61:5d:98:bc:78:06: c4:a8:8d:ee:2d:f5:9e:17:28:43:d5:15:e9:49:ca:67:73:04: 7c:b1:2b:ca:aa:ae:13:dd:20:a5:35:c0:36:c7:a8:e2:ee:2f: db:e0:ea:51:35:9e:c9:a3:78:29:80:5f:92:58:39:8e:bc:87: b9:2c:cc:e2:a8:79:0b:b8:02:3f:69:a5:62:fc:41:fd:df:e0: a6:13:a0:02:cb:54:19:21:4b:b9:80:3f:4d:2f:3d:12:4e:51: c0:04:24:0b:16:a9:97:a5:e8:f2:ac:5f:15:1d:08:bc:e1:e9: 9d:42:a3:de:6b:1b:33:e9:b7:6b:16:da:d3:e4:9c:01:dc:70: 01:e5:42:a3:4f:b5:9d:d5:2c:b8:8a:bd:a3:ff:f7:c9:30:7c: 90:4c:5c:19:5d:a7:e0:34:30:ac:21:df:f7:ad:58:21:0f:e5: 34:ed:c7:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oMFiMsGum0/txgSrn56aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzc1MGI4MzExMWQ0MTcxYmJmNTVjYTAyMzIyYzFhMGRj MGFjMzIwHhcNMjUxMjE5MDgwMTI2WhcNMjUxMjIwMDgwMTI2WjAzMTEwLwYDVQQD Eyg4NzRmYTZkOTg2YjRiNmE2MDhmNGIwOThkYjkyYTM4ZmM5YzYxNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzGJaOzGHht/3bKq+5W4IFtw4opi eNEBzfMsZj7kcFuBqfP9SuBSdBTCWGJ3gsHqqLEAd+nac3F7yC9yQc2+AoJLF3Oq 6YiupJ3APm5tw/sggEvylK7+R+O/EjaGRfgzPqmhdOR60FRviAT8vMu4Yjp5xObT k6LBfe5c6q5oitZXxTYwllLbBvyz6bd1IsmyNPGJ26DjMgsjeFkSyYcvUTXXrgpe 2LWzBV72lxcnN14Z9mbC9uV5X4rdHyqvDPqy4eoxFimhY3rfo94m8eyDNaXiYGYx yaXo9un9qaNbWy046upfy7x/3r78FDUY5oEDdYsFuEH488/Yc3vAZXXFKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdPptmGtLamCPSwmNuSo4/JxhcnMB8GA1UdIwQY MBaAFMB3ULgxEdQXG79VygIyLBoNwKwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjct M2M1MjliZjYyZTU0LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjctM2M1MjliZjYyZTU0 LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5QCRhE2 fPOxe+GrmQBLgQK+hayqcr9FkhfciP2WEzrQez893Pc4qLShYkUKUBrnm8NGiPUk XH5SvAseaNnVmWh1VZoMB6VF4MF8NYUYrUTrMsvlYV2YvHgGxKiN7i31nhcoQ9UV 6UnKZ3MEfLEryqquE90gpTXANseo4u4v2+DqUTWeyaN4KYBfklg5jryHuSzM4qh5 C7gCP2mlYvxB/d/gphOgAstUGSFLuYA/TS89Ek5RwAQkCxapl6Xo8qxfFR0IvOHp nUKj3msbM+m3axba0+ScAdxwAeVCo0+1ndUsuIq9o//3yTB8kExcGV2n4DQwrCHf 961YIQ/lNO3Hdg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:21 2025 by rpki-client