This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft File: WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json) Hash identifier: xxGa/PihRX7B8DEDSrbvg0ojELSwi53Yc71v9Kqkr44= Subject key identifier: 29:38:B1:BA:7B:55:C9:5A:4B:26:AA:3D:53:C9:AC:0A:09:06:96:D5 Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62 Certificate issuer: /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62 Certificate serial: 019B3569F752363395A0E6F7F790E15E6427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft Manifest number: 0BFC Signing time: Fri 19 Dec 2025 07:01:35 +0000 Manifest this update: Fri 19 Dec 2025 07:01:35 +0000 Manifest next update: Sat 20 Dec 2025 07:01:35 +0000 Files and hashes: 1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: R9r5x5tMbuK0/2uSqEm9pI/hq1AC0V6qlu7z6YVduSE=) 2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:f7:52:36:33:95:a0:e6:f7:f7:90:e1:5e:64:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62 Validity Not Before: Dec 19 07:01:35 2025 GMT Not After : Dec 20 07:01:35 2025 GMT Subject: CN=2938b1ba7b55c95a4b26aa3d53c9ac0a090696d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:27:89:da:c2:71:3d:5b:f8:02:ce:b2:7d: 54:c2:30:3d:4b:30:bd:29:a9:91:5a:6d:1c:f2:0e: 37:01:7b:f9:87:16:f3:e0:7c:c8:91:5e:79:b2:11: 38:5b:e7:3f:3e:9b:ce:53:b8:1f:e5:5c:76:02:70: b8:86:30:c8:3c:4a:85:cb:78:2d:1d:2a:3b:e6:b2: 16:d4:96:84:51:43:1f:8a:6e:51:43:0a:89:3e:e4: a5:aa:a6:de:95:b6:53:0f:cf:f6:bf:d4:9c:19:c8: 6d:98:cf:60:95:ff:38:57:6a:e3:25:f9:05:47:af: fb:e3:29:d3:86:15:4c:24:08:31:bf:56:be:9c:9d: e3:9f:50:11:b5:7d:e7:a4:3f:90:a5:ed:11:4f:c4: 98:87:80:bd:7d:36:ff:f9:95:45:25:03:e2:20:a2: 94:42:0a:af:e5:e4:c1:1b:8f:4e:6c:19:90:d3:40: cf:3d:fd:42:11:5d:d4:5c:83:6f:9b:d8:c2:b4:a4: f0:07:1f:6b:47:62:86:ba:16:b9:ac:04:bc:54:8d: db:41:81:48:68:30:ae:13:ea:f8:ec:7d:fd:ec:1b: a6:65:17:2a:28:44:54:cf:e6:f9:46:4e:d6:10:84: 3a:ca:37:df:7a:b4:6d:34:12:f3:00:09:72:c7:df: df:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:38:B1:BA:7B:55:C9:5A:4B:26:AA:3D:53:C9:AC:0A:09:06:96:D5 X509v3 Authority Key Identifier: keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:d7:80:77:fd:8e:40:4b:64:31:64:1f:b2:f7:3d:5e:eb:ab: 30:a9:0b:6c:10:a3:fa:75:36:5e:5f:b9:7f:79:9b:23:c9:f4: 5e:bc:fe:67:78:31:b8:fb:b9:0c:ed:fa:89:06:64:da:07:97: 3b:fc:7c:7f:f8:28:63:86:86:8f:15:60:52:8f:1b:52:26:b2: 34:52:ff:89:2e:55:56:d1:a3:aa:61:7f:58:46:3e:35:0d:95: 88:26:e9:34:49:36:51:84:72:3c:78:98:44:96:59:3a:b9:fc: 69:80:ed:33:f2:50:d0:40:aa:a7:ac:e7:a4:48:af:5d:37:8f: f2:86:fb:67:7d:77:c0:b8:57:aa:05:eb:21:04:92:e0:ea:cc: 91:55:91:7b:d5:d8:90:60:6c:d4:89:90:7d:ac:b9:da:c7:04: f6:e3:b4:fa:c2:16:b6:e0:fd:eb:e4:b2:94:d3:eb:11:b7:02: 1f:fc:40:3b:a1:b8:e6:b1:2e:95:75:b1:52:79:15:b2:e1:de: e6:13:2a:ed:5f:33:07:e2:41:96:79:06:1c:45:4b:f4:43:06: d8:2c:28:bc:fc:48:94:14:a9:3a:eb:7e:76:d3:a6:5c:da:d7: da:70:84:48:bd:74:86:89:cc:18:2e:fb:92:19:e5:31:af:43: ff:2c:ec:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1afdSNjOVoOb395DhXmQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMzRiMTg0ODYxMTAwMDcxZmU0ZGIzZGRhODRhODJjYzFi YmNjNjIwHhcNMjUxMjE5MDcwMTM1WhcNMjUxMjIwMDcwMTM1WjAzMTEwLwYDVQQD EygyOTM4YjFiYTdiNTVjOTVhNGIyNmFhM2Q1M2M5YWMwYTA5MDY5NmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyknidrCcT1b+ALOsn1UwjA9SzC9 KamRWm0c8g43AXv5hxbz4HzIkV55shE4W+c/PpvOU7gf5Vx2AnC4hjDIPEqFy3gt HSo75rIW1JaEUUMfim5RQwqJPuSlqqbelbZTD8/2v9ScGchtmM9glf84V2rjJfkF R6/74ynThhVMJAgxv1a+nJ3jn1ARtX3npD+Qpe0RT8SYh4C9fTb/+ZVFJQPiIKKU Qgqv5eTBG49ObBmQ00DPPf1CEV3UXINvm9jCtKTwBx9rR2KGuha5rAS8VI3bQYFI aDCuE+r47H397BumZRcqKERUz+b5Rk7WEIQ6yjfferRtNBLzAAlyx9/fIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCk4sbp7VclaSyaqPVPJrAoJBpbVMB8GA1UdIwQY MBaAFFs0sYSGEQAHH+TbPdqEqCzBu8xiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3pTeGhJWVJBQWNmNU5zOTJvU29MTUc3ekdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hOGRlNTYtZWRjYy00MGIxLWI4N2Yt NGEwN2Y5N2U5OGE5LzEvV3pTeGhJWVJBQWNmNU5zOTJvU29MTUc3ekdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9hOGRlNTYtZWRjYy00MGIxLWI4N2YtNGEwN2Y5N2U5OGE5 LzEvV3pTeGhJWVJBQWNmNU5zOTJvU29MTUc3ekdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnteAd/2O QEtkMWQfsvc9XuurMKkLbBCj+nU2Xl+5f3mbI8n0Xrz+Z3gxuPu5DO36iQZk2geX O/x8f/goY4aGjxVgUo8bUiayNFL/iS5VVtGjqmF/WEY+NQ2ViCbpNEk2UYRyPHiY RJZZOrn8aYDtM/JQ0ECqp6znpEivXTeP8ob7Z313wLhXqgXrIQSS4OrMkVWRe9XY kGBs1ImQfay52scE9uO0+sIWtuD96+SylNPrEbcCH/xAO6G45rEulXWxUnkVsuHe 5hMq7V8zB+JBlnkGHEVL9EMG2CwovPxIlBSpOut+dtOmXNrX2nCESL10honMGC77 khnlMa9D/yzsFA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:20:50 2025 by rpki-client