This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft File: WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json) Hash identifier: JubrCDf8PeYa6oDElUhr3/MbuS+2bzd7E4AgG5RBVDI= Subject key identifier: AA:1D:69:D1:CD:43:6E:FE:88:FE:BB:B6:35:73:B8:92:72:E2:D1:B3 Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66 Certificate issuer: /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66 Certificate serial: 019B69C502191D8D431B53CD7D3EF825CA75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft Manifest number: 102E Signing time: Mon 29 Dec 2025 11:01:17 +0000 Manifest this update: Mon 29 Dec 2025 11:01:17 +0000 Manifest next update: Tue 30 Dec 2025 11:01:17 +0000 Files and hashes: 1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: f6lP5RjShYferSaiNollMc0CPiDF6jiZkAB//uWlHbw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c5:02:19:1d:8d:43:1b:53:cd:7d:3e:f8:25:ca:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66 Validity Not Before: Dec 29 11:01:17 2025 GMT Not After : Dec 30 11:01:17 2025 GMT Subject: CN=aa1d69d1cd436efe88febbb63573b89272e2d1b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8b:e5:5a:45:9a:33:2e:08:4c:36:7f:a0:c4: 2b:79:68:cb:72:bc:9c:e1:96:64:b5:b5:53:6f:55: 23:49:88:93:c9:95:01:38:6b:ec:4b:7c:73:b2:66: 0d:51:90:76:d1:18:d8:fe:aa:ba:f0:6f:fb:42:dc: 7b:89:e9:4c:82:80:2c:37:ff:92:4e:21:61:5c:68: 28:80:8c:17:81:3c:e8:89:61:87:d6:96:4c:eb:5e: c4:58:17:93:c9:fd:67:5c:b3:04:c4:48:10:5f:1b: a5:44:9f:ce:ec:3e:26:02:bb:09:b9:aa:69:99:17: ad:86:0e:40:46:d5:d6:9e:6e:d3:e5:6e:14:2d:10: f8:0c:29:5a:31:4b:6b:56:4d:c7:72:0c:1a:66:aa: ec:08:60:29:80:61:6b:3f:86:9a:ff:a5:d2:cb:70: 2f:86:bc:48:6f:cd:7b:0a:26:b0:dd:60:89:a2:c9: 4c:f8:5f:43:3c:5f:49:c6:b9:1a:4c:94:0e:9c:e8: 37:01:9a:d4:fe:8b:2f:47:07:a1:40:84:a5:aa:d8: f2:17:91:73:16:ff:b6:3d:4b:b1:e4:48:56:a1:0a: eb:ee:f1:96:fe:29:0c:6d:75:84:c3:fd:c7:0e:36: 24:a7:76:0e:69:8a:5f:2b:4b:29:cd:4e:7c:3d:77: 6f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1D:69:D1:CD:43:6E:FE:88:FE:BB:B6:35:73:B8:92:72:E2:D1:B3 X509v3 Authority Key Identifier: keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:ee:d9:14:e0:09:96:14:ed:d7:5f:84:2e:54:33:60:8b:ef: 55:a0:f7:14:97:4b:b2:74:2d:08:ad:67:23:fc:23:b2:47:30: b8:db:59:8d:cb:c2:e4:90:f5:f5:7f:b5:b9:f8:94:56:38:70: 13:a3:76:13:b1:f8:f0:d2:9c:a3:c3:dc:1e:47:b8:5c:65:f5: 5b:44:8d:1b:8a:f0:8a:13:16:a9:5a:53:19:e6:b7:49:46:4c: 53:a2:95:7e:1b:0f:b2:72:25:90:99:c3:b4:2b:e9:42:dd:09: ce:52:e2:09:df:71:cb:39:78:66:2b:f8:f2:99:2d:e7:90:71: 25:a2:07:11:cd:9e:b2:14:84:70:04:3f:c0:5c:e7:6c:8e:51: dd:35:c8:86:fc:d3:18:7e:2f:1a:9b:bc:38:02:ca:60:04:ec: 1b:b1:ae:03:d6:b0:1c:fc:84:be:60:7c:78:ae:19:70:8b:c6: 29:78:0d:d0:01:8c:7b:33:f9:59:67:a0:b5:73:83:ce:46:aa: 6d:0e:4d:8c:e9:34:5d:42:37:52:ee:40:78:df:9f:72:35:82: d1:c1:4c:5e:4d:fb:3a:19:6c:71:d7:12:be:57:16:f9:75:dd: 86:86:61:d6:0d:02:f1:1a:17:bc:e3:c3:67:ad:33:e6:9d:65: 9c:75:a7:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxQIZHY1DG1PNfT74Jcp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTgxZWNjY2ZhM2E3ODEwYmFlZTBmMDViZjNhMDdiYjhm NzhkNjYwHhcNMjUxMjI5MTEwMTE3WhcNMjUxMjMwMTEwMTE3WjAzMTEwLwYDVQQD EyhhYTFkNjlkMWNkNDM2ZWZlODhmZWJiYjYzNTczYjg5MjcyZTJkMWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtovlWkWaMy4ITDZ/oMQreWjLcryc 4ZZktbVTb1UjSYiTyZUBOGvsS3xzsmYNUZB20RjY/qq68G/7Qtx7ielMgoAsN/+S TiFhXGgogIwXgTzoiWGH1pZM617EWBeTyf1nXLMExEgQXxulRJ/O7D4mArsJuapp mRethg5ARtXWnm7T5W4ULRD4DClaMUtrVk3HcgwaZqrsCGApgGFrP4aa/6XSy3Av hrxIb817Ciaw3WCJoslM+F9DPF9JxrkaTJQOnOg3AZrU/osvRwehQISlqtjyF5Fz Fv+2PUux5EhWoQrr7vGW/ikMbXWEw/3HDjYkp3YOaYpfK0spzU58PXdvfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKodadHNQ27+iP67tjVzuJJy4tGzMB8GA1UdIwQY MBaAFFkYHszPo6eBC67g8FvzoHu4941mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84MzQ4NzUtYWFmYi00NWI0LWFiNTgt NTE5MzY4Yjc3YzVkLzEvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84MzQ4NzUtYWFmYi00NWI0LWFiNTgtNTE5MzY4Yjc3YzVk LzEvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlu7ZFOAJ lhTt11+ELlQzYIvvVaD3FJdLsnQtCK1nI/wjskcwuNtZjcvC5JD19X+1ufiUVjhw E6N2E7H48NKco8PcHke4XGX1W0SNG4rwihMWqVpTGea3SUZMU6KVfhsPsnIlkJnD tCvpQt0JzlLiCd9xyzl4Ziv48pkt55BxJaIHEc2eshSEcAQ/wFznbI5R3TXIhvzT GH4vGpu8OALKYATsG7GuA9awHPyEvmB8eK4ZcIvGKXgN0AGMezP5WWegtXODzkaq bQ5NjOk0XUI3Uu5AeN+fcjWC0cFMXk37OhlscdcSvlcW+XXdhoZh1g0C8RoXvOPD Z60z5p1lnHWnzw== -----END CERTIFICATE-----Generated at Mon Dec 29 14:54:29 2025 by rpki-client