This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json) Hash identifier: T/LI5fe7xWwVs8qXiWM5oS78kareUzpZ777JC9Ikf0E= Subject key identifier: 68:37:28:80:2F:ED:2B:30:44:DE:70:7A:C5:D9:A7:F7:8A:67:E6:D9 Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0 Certificate serial: 019B3DFE91D65965CBFD0E22D937400281D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft Manifest number: 0CD7 Signing time: Sat 20 Dec 2025 23:00:52 +0000 Manifest this update: Sat 20 Dec 2025 23:00:52 +0000 Manifest next update: Sun 21 Dec 2025 23:00:52 +0000 Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: ym8uucCfv0yKmowBSSycQHrE9ERnKO+NMY/kvuW/5H4=) 2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:91:d6:59:65:cb:fd:0e:22:d9:37:40:02:81:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0 Validity Not Before: Dec 20 23:00:52 2025 GMT Not After : Dec 21 23:00:52 2025 GMT Subject: CN=683728802fed2b3044de707ac5d9a7f78a67e6d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:90:a6:61:6f:c4:af:5a:4d:25:7a:dc:78:f5: a0:f1:0f:1a:67:03:28:20:9d:ea:8a:73:a9:ec:c2: 7f:f5:39:d5:30:6a:09:a2:c9:7c:92:53:e9:6d:bb: 40:64:96:f9:91:81:7b:b9:a5:1a:8c:ce:6f:bf:86: e9:81:94:48:34:96:49:a7:d8:67:08:9c:89:b7:8f: 70:38:08:a7:3b:7e:bc:8c:24:99:4a:a3:f1:31:b7: a3:7f:cb:b2:e8:73:0a:7a:4b:05:45:de:1d:ea:cc: 6c:07:d4:6a:5d:d7:23:99:fd:ed:21:c8:cd:51:b5: c9:c4:43:6d:f0:78:13:8f:f2:18:26:b5:67:19:0e: 4b:ab:1e:81:98:85:7f:01:21:ac:eb:be:05:8b:2d: d4:b6:fa:03:f5:c6:fe:65:07:da:b1:72:6c:a8:72: 31:7b:4c:20:f4:8f:09:76:c0:57:02:46:bd:35:21: e3:31:a9:4d:54:3d:19:54:bc:05:85:c6:79:b7:04: 3d:17:50:47:17:35:cc:c1:4c:e0:9f:e0:6d:3d:47: 2a:1b:1f:99:15:96:f7:d3:66:e0:a4:07:8c:1d:33: 5f:f9:37:56:dd:68:66:d3:cf:c4:1f:49:10:21:bd: 7f:a3:38:4f:94:7f:86:d5:b0:62:08:9d:f8:14:fb: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:37:28:80:2F:ED:2B:30:44:DE:70:7A:C5:D9:A7:F7:8A:67:E6:D9 X509v3 Authority Key Identifier: keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:86:51:c3:64:3e:2b:f3:82:fa:b4:ae:23:6a:70:12:cb:e7: 70:b9:8a:21:72:13:64:a6:ca:be:a4:6f:55:8a:bf:8f:ab:4c: ef:4d:c8:af:e5:e7:02:34:d4:10:8b:74:71:7b:24:f5:e9:0e: c7:55:96:27:f8:bc:6c:fe:48:b8:5b:c8:27:f7:59:01:1e:84: a8:53:8e:09:4d:79:25:53:42:e0:49:4b:35:cd:bd:24:f5:0d: c5:01:14:fe:28:33:3f:eb:fe:56:ea:9f:86:b5:8e:78:6d:59: 9b:b0:a8:b3:39:2e:b0:94:c4:d0:fc:bc:79:f0:a3:48:3f:0f: 61:f1:cd:64:cd:da:56:89:6c:da:8c:f4:a4:36:dc:89:43:1a: 6b:91:72:c2:f7:87:b1:7f:a5:07:cb:41:47:35:ca:41:58:be: 3d:11:ae:31:d1:33:55:ab:cc:2f:49:a0:86:47:4f:e3:3e:2a: 06:60:98:ce:e9:d8:58:b9:6b:11:cb:ec:4c:5e:8f:24:23:57: 2c:c3:e1:46:72:84:0b:eb:15:09:b3:1f:4f:47:4d:83:c7:65: 3b:6d:8b:32:97:56:4f:9f:34:c9:5b:06:85:b8:77:66:33:a1: 31:23:41:5e:f4:d5:81:2e:c0:a9:31:5d:25:2f:3e:c9:29:a8: ea:15:c7:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pHWWWXL/Q4i2TdAAoHTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz NDg5YjAwHhcNMjUxMjIwMjMwMDUyWhcNMjUxMjIxMjMwMDUyWjAzMTEwLwYDVQQD Eyg2ODM3Mjg4MDJmZWQyYjMwNDRkZTcwN2FjNWQ5YTdmNzhhNjdlNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5CmYW/Er1pNJXrcePWg8Q8aZwMo IJ3qinOp7MJ/9TnVMGoJosl8klPpbbtAZJb5kYF7uaUajM5vv4bpgZRINJZJp9hn CJyJt49wOAinO368jCSZSqPxMbejf8uy6HMKeksFRd4d6sxsB9RqXdcjmf3tIcjN UbXJxENt8HgTj/IYJrVnGQ5Lqx6BmIV/ASGs674Fiy3UtvoD9cb+ZQfasXJsqHIx e0wg9I8JdsBXAka9NSHjMalNVD0ZVLwFhcZ5twQ9F1BHFzXMwUzgn+BtPUcqGx+Z FZb302bgpAeMHTNf+TdW3Whm08/EH0kQIb1/ozhPlH+G1bBiCJ34FPvWfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg3KIAv7SswRN5wesXZp/eKZ+bZMB8GA1UdIwQY MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt MDk4ZjdjNWZkOTc1LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1 LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4ZRw2Q+ K/OC+rSuI2pwEsvncLmKIXITZKbKvqRvVYq/j6tM703Ir+XnAjTUEIt0cXsk9ekO x1WWJ/i8bP5IuFvIJ/dZAR6EqFOOCU15JVNC4ElLNc29JPUNxQEU/igzP+v+Vuqf hrWOeG1Zm7CoszkusJTE0Py8efCjSD8PYfHNZM3aVols2oz0pDbciUMaa5FywveH sX+lB8tBRzXKQVi+PRGuMdEzVavML0mghkdP4z4qBmCYzunYWLlrEcvsTF6PJCNX LMPhRnKEC+sVCbMfT0dNg8dlO22LMpdWT580yVsGhbh3ZjOhMSNBXvTVgS7AqTFd JS8+ySmo6hXH+Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:00:31 2025 by rpki-client