This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json) Hash identifier: SSJw2/R8naikZEEt1TMsycy1Xszpu0kHrR1SQ2x59qI= Subject key identifier: 5C:CC:00:9C:F6:4F:15:DB:C3:EE:4E:B1:18:69:13:8D:D8:51:F6:33 Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf Certificate serial: 019B35699E16B39B8241CF17AE5311DC417C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft Manifest number: 127C Signing time: Fri 19 Dec 2025 07:01:12 +0000 Manifest this update: Fri 19 Dec 2025 07:01:12 +0000 Manifest next update: Sat 20 Dec 2025 07:01:12 +0000 Files and hashes: 1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: 7EOEkBt6tzhleyymW/WB7521N0QrXeeMVZaeTaijUOc=) 2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:9e:16:b3:9b:82:41:cf:17:ae:53:11:dc:41:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf Validity Not Before: Dec 19 07:01:12 2025 GMT Not After : Dec 20 07:01:12 2025 GMT Subject: CN=5ccc009cf64f15dbc3ee4eb11869138dd851f633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b7:90:64:a0:f0:ec:b0:27:7d:d1:7b:66:61: aa:80:45:e2:0c:98:49:19:dc:cf:65:f1:fd:9d:51: fe:01:73:d5:50:e1:81:1b:4b:ee:de:ff:db:af:09: 8e:fb:c7:53:ca:ac:b8:74:d2:63:96:85:63:fb:46: 11:0e:58:7d:ab:46:17:73:e8:07:28:f5:05:f6:2a: f5:c2:c2:f6:5f:7c:89:28:f6:53:5f:59:b9:11:9d: 8d:60:74:10:a2:de:1b:80:f6:2e:85:4c:b6:74:d1: 63:72:76:35:27:cd:b2:9f:f6:73:27:4f:7e:69:b2: 76:3f:1f:90:b3:c5:7a:8f:19:6c:1c:8e:57:cf:cc: 7f:1c:8b:c9:0c:bd:8d:e8:58:52:34:38:ab:8c:e6: 59:0c:96:1c:de:71:20:9d:d7:14:e5:9e:a6:d1:51: 77:b3:34:ee:89:27:98:b4:32:6f:75:5b:dd:f3:c0: 98:8c:8b:3a:0a:13:a4:fd:b7:e9:c9:46:1b:51:ff: 93:75:bc:cb:ce:42:c1:5d:d4:57:71:66:cc:ce:7b: 18:ee:50:c1:8d:f6:4f:2a:b2:fa:2b:69:65:fa:83: d9:90:5c:68:0e:54:0f:e3:c9:16:f8:f2:be:73:fe: 59:d6:d4:08:ec:3a:ef:ad:9d:dc:00:12:e0:d3:3f: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CC:00:9C:F6:4F:15:DB:C3:EE:4E:B1:18:69:13:8D:D8:51:F6:33 X509v3 Authority Key Identifier: keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:48:44:b0:1c:5b:2f:a6:32:40:2c:db:1e:bc:79:b6:eb:26: 36:1e:8a:90:6a:91:fb:8c:c6:82:59:9c:48:82:fe:74:d5:e0: c3:64:39:50:87:7b:2b:35:cb:3f:9f:af:bc:48:8c:b2:97:e1: 64:88:d4:7b:99:33:ab:42:ad:de:4c:81:b9:73:0f:f5:b5:40: 70:57:ba:c5:2a:4b:5e:7a:3a:d3:7a:87:c0:65:42:69:bf:ab: 18:7d:6e:a6:a3:5a:98:45:0d:45:c4:12:0e:74:2d:38:d4:be: d9:30:db:24:0f:54:17:80:8b:fb:45:41:36:54:d2:91:e2:83: 13:b9:81:b3:91:56:b7:64:12:25:ba:09:11:ae:a4:95:ef:b8: cc:4f:52:e6:f8:c2:b4:54:62:e3:3a:45:f6:01:9f:d0:6a:ea: e9:31:b5:08:55:6c:aa:1e:b9:24:3a:11:ac:54:cb:c3:65:9b: 84:03:ab:18:53:f4:ec:65:bb:85:a6:ed:00:3a:8d:b3:de:86: 19:57:6d:57:21:07:41:cf:57:9e:2b:a1:cc:49:67:e2:b5:e5: 34:ef:ef:99:79:e6:4d:c9:26:e8:48:c1:35:5b:e2:22:01:5e: c4:81:2d:23:80:39:57:b6:23:ad:a2:0a:5f:90:94:55:8f:93: c6:a4:aa:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aZ4Ws5uCQc8XrlMR3EF8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNjExMDJlZDRkNjZkY2Q5NTJkZTAxMzA0ZTBhZmUxMzg0 ZDAwYmYwHhcNMjUxMjE5MDcwMTEyWhcNMjUxMjIwMDcwMTEyWjAzMTEwLwYDVQQD Eyg1Y2NjMDA5Y2Y2NGYxNWRiYzNlZTRlYjExODY5MTM4ZGQ4NTFmNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmreQZKDw7LAnfdF7ZmGqgEXiDJhJ GdzPZfH9nVH+AXPVUOGBG0vu3v/brwmO+8dTyqy4dNJjloVj+0YRDlh9q0YXc+gH KPUF9ir1wsL2X3yJKPZTX1m5EZ2NYHQQot4bgPYuhUy2dNFjcnY1J82yn/ZzJ09+ abJ2Px+Qs8V6jxlsHI5Xz8x/HIvJDL2N6FhSNDirjOZZDJYc3nEgndcU5Z6m0VF3 szTuiSeYtDJvdVvd88CYjIs6ChOk/bfpyUYbUf+TdbzLzkLBXdRXcWbMznsY7lDB jfZPKrL6K2ll+oPZkFxoDlQP48kW+PK+c/5Z1tQI7DrvrZ3cABLg0z+6KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFzMAJz2TxXbw+5OsRhpE43YUfYzMB8GA1UdIwQY MBaAFFphEC7U1m3NlS3gEwTgr+E4TQC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYt Mjg4YmQ2YjllMDkyLzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYtMjg4YmQ2YjllMDky LzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEhEsBxb L6YyQCzbHrx5tusmNh6KkGqR+4zGglmcSIL+dNXgw2Q5UId7KzXLP5+vvEiMspfh ZIjUe5kzq0Kt3kyBuXMP9bVAcFe6xSpLXno603qHwGVCab+rGH1upqNamEUNRcQS DnQtONS+2TDbJA9UF4CL+0VBNlTSkeKDE7mBs5FWt2QSJboJEa6kle+4zE9S5vjC tFRi4zpF9gGf0Grq6TG1CFVsqh65JDoRrFTLw2WbhAOrGFP07GW7habtADqNs96G GVdtVyEHQc9XniuhzEln4rXlNO/vmXnmTckm6EjBNVviIgFexIEtI4A5V7YjraIK X5CUVY+TxqSqPA== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:26 2025 by rpki-client