This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft File: WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json) Hash identifier: Qv1g7MXutOhfqpFXUHPZlv3ivHTb9Gr978lKtGjavik= Subject key identifier: 3F:6E:A6:A2:C9:2D:52:D0:61:FD:BE:62:5C:CF:6B:74:09:5E:95:5C Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E Certificate issuer: /CN=59138e3db77640beadf1da5b15194b9384a1444e Certificate serial: 019B43CA0766EED1DCC5040AF047D928012C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft Manifest number: 0BEE Signing time: Mon 22 Dec 2025 02:01:12 +0000 Manifest this update: Mon 22 Dec 2025 02:01:12 +0000 Manifest next update: Tue 23 Dec 2025 02:01:12 +0000 Files and hashes: 1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: VWbbMJpyZ5xWH58uI4b1mL2KcUR36ECp8PtBY4vcYU0=) 2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:ca:07:66:ee:d1:dc:c5:04:0a:f0:47:d9:28:01:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e Validity Not Before: Dec 22 02:01:12 2025 GMT Not After : Dec 23 02:01:12 2025 GMT Subject: CN=3f6ea6a2c92d52d061fdbe625ccf6b74095e955c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:19:70:4c:06:02:3b:a0:4f:9a:62:02:d4: db:b6:df:61:2f:a9:21:1a:11:6a:92:93:c6:3d:b3: 47:32:4e:54:32:36:f1:6c:5d:06:b9:ba:f2:c3:52: e3:1a:c5:50:6f:2a:b7:a6:69:69:79:3d:58:fd:cc: 1c:76:c9:6e:3d:4a:c3:7f:17:19:f4:30:42:02:cf: 1c:e1:26:91:b3:89:92:47:dd:ce:c7:94:10:f0:18: dd:26:74:6f:73:d8:b2:80:cf:4d:32:fc:d2:5d:5e: 04:a0:fc:ca:d0:14:03:77:9e:8d:f4:5a:1b:06:4c: 86:0a:01:58:a2:e3:71:46:ca:90:5f:c4:57:37:aa: 82:f4:75:65:15:f2:ef:d8:10:e1:50:ba:0e:ff:b2: 52:9c:a8:fd:6e:4a:96:84:30:2c:72:24:e1:1d:b7: 92:08:bd:85:db:10:b3:0a:88:bf:8f:c3:e4:36:01: 81:d2:ea:51:ba:ab:ef:72:4e:ad:7f:7e:16:e2:69: ac:70:65:08:d9:ff:23:75:ea:d8:c4:46:e2:2f:72: 7a:60:29:ec:2b:5e:2a:58:ea:bb:b5:35:7c:39:a5: 8a:f9:b5:f4:45:54:ed:f9:b3:b0:51:85:85:72:25: ed:0e:d0:d4:df:ae:ae:17:8d:53:98:a4:8f:f8:86: fb:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6E:A6:A2:C9:2D:52:D0:61:FD:BE:62:5C:CF:6B:74:09:5E:95:5C X509v3 Authority Key Identifier: keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fc:19:e7:05:21:7e:de:a1:45:27:9c:d4:9d:b0:9c:06:1c: 84:99:b4:23:6a:58:81:b3:cc:22:80:c7:b8:99:41:66:21:f0: 6a:bf:50:60:5e:62:55:a2:f6:25:b5:c8:4d:b6:bf:d2:fc:7f: 85:43:b9:69:ec:f5:68:48:b9:22:91:26:6c:5c:59:a5:57:3b: c4:b6:99:46:56:74:cb:96:5d:dd:22:d4:1f:0b:43:82:97:40: b0:d2:27:d1:ef:d3:a9:e2:ff:b6:0c:a2:3f:06:ab:b5:3d:e4: fb:4f:e1:50:2d:3e:88:cb:68:21:a0:6d:60:5e:88:48:6e:2f: bc:f5:93:f2:c7:f8:f4:5a:31:34:fa:88:19:d8:33:1f:58:71: d7:70:c0:36:5b:4e:20:d3:a7:1b:b1:07:cf:bb:bc:92:ee:dc: 2b:6d:34:ff:66:d2:f8:51:d1:e3:bf:6b:e9:0b:45:b8:12:aa: e0:02:e1:87:d2:ae:06:1c:f3:9d:7e:49:2d:6e:90:f2:f2:58: e0:d2:a8:c1:d5:8e:0f:a7:ba:bf:7e:92:d6:32:07:55:88:62: 75:66:72:8c:f5:27:a0:0f:5f:b6:b7:c8:64:98:6e:4c:aa:91: 63:8b:df:7a:1a:9b:49:51:fd:c6:bc:af:d3:36:c3:5b:1e:b8: f6:ea:fe:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDygdm7tHcxQQK8EfZKAEsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTM4ZTNkYjc3NjQwYmVhZGYxZGE1YjE1MTk0YjkzODRh MTQ0NGUwHhcNMjUxMjIyMDIwMTEyWhcNMjUxMjIzMDIwMTEyWjAzMTEwLwYDVQQD EygzZjZlYTZhMmM5MmQ1MmQwNjFmZGJlNjI1Y2NmNmI3NDA5NWU5NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJMZcEwGAjugT5piAtTbtt9hL6kh GhFqkpPGPbNHMk5UMjbxbF0Gubryw1LjGsVQbyq3pmlpeT1Y/cwcdsluPUrDfxcZ 9DBCAs8c4SaRs4mSR93Ox5QQ8BjdJnRvc9iygM9NMvzSXV4EoPzK0BQDd56N9Fob BkyGCgFYouNxRsqQX8RXN6qC9HVlFfLv2BDhULoO/7JSnKj9bkqWhDAsciThHbeS CL2F2xCzCoi/j8PkNgGB0upRuqvvck6tf34W4mmscGUI2f8jderYxEbiL3J6YCns K14qWOq7tTV8OaWK+bX0RVTt+bOwUYWFciXtDtDU366uF41TmKSP+Ib7lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9upqLJLVLQYf2+YlzPa3QJXpVcMB8GA1UdIwQY MBaAFFkTjj23dkC+rfHaWxUZS5OEoUROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDkt N2E0ZTMzNDBhNDkxLzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDktN2E0ZTMzNDBhNDkx LzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqPwZ5wUh ft6hRSec1J2wnAYchJm0I2pYgbPMIoDHuJlBZiHwar9QYF5iVaL2JbXITba/0vx/ hUO5aez1aEi5IpEmbFxZpVc7xLaZRlZ0y5Zd3SLUHwtDgpdAsNIn0e/TqeL/tgyi PwartT3k+0/hUC0+iMtoIaBtYF6ISG4vvPWT8sf49FoxNPqIGdgzH1hx13DANltO INOnG7EHz7u8ku7cK200/2bS+FHR479r6QtFuBKq4ALhh9KuBhzznX5JLW6Q8vJY 4NKowdWOD6e6v36S1jIHVYhidWZyjPUnoA9ftrfIZJhuTKqRY4vfehqbSVH9xryv 0zbDWx649ur+zw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:20 2025 by rpki-client