This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft File: WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json) Hash identifier: +oo5tk8yv/3xmbcfvy+OX3oU9GjKj04h9XaiyD/+Mf0= Subject key identifier: 89:9E:28:A2:BB:69:51:1D:B9:E7:83:B9:71:B9:47:BC:B7:4B:F8:1A Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Certificate serial: 019B4A0454BE185F70C6BD97A908173C1C76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft Manifest number: 07F3 Signing time: Tue 23 Dec 2025 07:02:36 +0000 Manifest this update: Tue 23 Dec 2025 07:02:36 +0000 Manifest next update: Wed 24 Dec 2025 07:02:36 +0000 Files and hashes: 1: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: 2eJ/zUHn2M5/U8N+2wx54vfiq6i6GhtoKlFahbGiI6U=) 2: s5QSQwev5CqksmjM0AaoSdiOZEY.roa (hash: r2aK748rLgMwkpT8AEvF91wvzX74j/vxHw/8YYI08JI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:54:be:18:5f:70:c6:bd:97:a9:08:17:3c:1c:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Validity Not Before: Dec 23 07:02:36 2025 GMT Not After : Dec 24 07:02:36 2025 GMT Subject: CN=899e28a2bb69511db9e783b971b947bcb74bf81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:65:94:d2:d0:c7:c2:13:96:87:fc:55:e8: 85:c0:55:2b:b5:5b:27:6b:4b:ce:24:33:e2:b8:fe: e2:45:f1:80:23:3c:72:6e:d2:c0:6f:41:64:2f:b9: 85:22:49:5f:1b:e9:34:03:7e:17:cb:73:99:3c:84: 88:ce:0f:38:c3:76:ed:89:a0:93:39:7a:c8:0a:69: 63:df:37:dd:7e:e9:08:41:73:de:58:13:b4:d4:ef: 3b:8e:07:4a:cb:82:b1:f5:ec:07:33:45:12:51:52: 72:21:67:07:2b:5e:28:36:d2:3f:e5:dd:34:37:52: 39:64:9b:da:6a:c0:31:5e:01:0b:be:15:94:be:7e: 3f:e3:a6:db:fb:d6:bd:6b:1a:34:11:e3:87:7e:f1: 5b:93:d5:6e:4f:63:46:07:91:7e:95:8a:20:fc:7e: 82:fe:ce:3e:14:00:e6:41:ee:4f:41:74:dc:da:c2: fa:ae:0e:7c:28:5c:85:f0:e1:cc:c8:9d:d5:91:40: 7c:8b:af:ea:d1:36:db:92:07:9a:7f:ad:40:5a:67: 79:8a:7f:23:f7:bc:37:48:b7:15:86:4b:34:93:0f: 4d:a7:6c:36:d2:7d:95:23:ad:ad:fb:95:1d:cb:2b: f2:69:c6:35:0c:80:18:e1:8a:ce:54:22:81:7e:70: 15:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9E:28:A2:BB:69:51:1D:B9:E7:83:B9:71:B9:47:BC:B7:4B:F8:1A X509v3 Authority Key Identifier: keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a5:a7:d5:72:03:a8:c0:f3:2b:f8:8e:6c:fc:d7:e8:64:01: 07:dd:70:e5:23:d7:8e:10:d6:16:9c:4f:40:42:eb:8a:94:e0: ff:5f:b7:07:af:30:99:46:91:e9:66:fc:cd:65:8b:99:58:e0: d1:1e:de:ac:bb:58:77:10:3b:ee:1f:1e:ad:5b:50:23:4c:a4: ef:d9:a7:79:ea:1e:3d:20:df:89:5c:08:c5:fe:b5:e4:8a:77: 01:ce:30:66:bc:78:dc:b6:a6:7e:3c:09:ea:0c:ad:13:97:16: df:bb:72:3a:25:4b:14:c9:b5:e1:d9:ca:3f:29:d3:24:cd:5d: 4d:ca:be:1d:f9:13:64:9b:ba:4c:ce:28:26:09:b1:fa:30:db: ab:75:3a:d6:30:39:0b:38:ca:75:ee:4e:8b:a8:b9:b4:73:e4: 34:6d:7c:18:42:8f:67:31:62:57:03:e8:25:19:3f:2d:84:f1: 58:1d:2c:5d:56:87:95:ee:0a:cc:b5:72:4c:09:dd:42:6c:7e: 6b:48:e1:5a:c4:e2:4c:14:de:46:ba:3e:97:75:09:b7:97:9b: 3e:cd:43:56:f8:d4:56:48:b0:a8:ad:b3:fd:3a:cc:04:4e:3d: 0d:b4:20:fc:d9:65:8a:5e:5a:7e:67:30:79:cf:ea:f6:87:03: 7b:e0:b0:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBFS+GF9wxr2XqQgXPBx2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NmQ0MDBmYWE1MjY5MDk5Y2M3YjFjN2EwM2NlNjlkODM5 MWYyMWEwHhcNMjUxMjIzMDcwMjM2WhcNMjUxMjI0MDcwMjM2WjAzMTEwLwYDVQQD Eyg4OTllMjhhMmJiNjk1MTFkYjllNzgzYjk3MWI5NDdiY2I3NGJmODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknlllNLQx8ITlof8VeiFwFUrtVsn a0vOJDPiuP7iRfGAIzxybtLAb0FkL7mFIklfG+k0A34Xy3OZPISIzg84w3btiaCT OXrICmlj3zfdfukIQXPeWBO01O87jgdKy4Kx9ewHM0USUVJyIWcHK14oNtI/5d00 N1I5ZJvaasAxXgELvhWUvn4/46bb+9a9axo0EeOHfvFbk9VuT2NGB5F+lYog/H6C /s4+FADmQe5PQXTc2sL6rg58KFyF8OHMyJ3VkUB8i6/q0Tbbkgeaf61AWmd5in8j 97w3SLcVhks0kw9Np2w20n2VI62t+5UdyyvyacY1DIAY4YrOVCKBfnAVHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImeKKK7aVEdueeDuXG5R7y3S/gaMB8GA1UdIwQY MBaAFFltQA+qUmkJnMexx6A85p2DkfIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUt YzI4N2RiOTM0OTEyLzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUtYzI4N2RiOTM0OTEy LzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATaWn1XID qMDzK/iObPzX6GQBB91w5SPXjhDWFpxPQELripTg/1+3B68wmUaR6Wb8zWWLmVjg 0R7erLtYdxA77h8erVtQI0yk79mneeoePSDfiVwIxf615Ip3Ac4wZrx43LamfjwJ 6gytE5cW37tyOiVLFMm14dnKPynTJM1dTcq+HfkTZJu6TM4oJgmx+jDbq3U61jA5 CzjKde5Oi6i5tHPkNG18GEKPZzFiVwPoJRk/LYTxWB0sXVaHle4KzLVyTAndQmx+ a0jhWsTiTBTeRro+l3UJt5ebPs1DVvjUVkiwqK2z/TrMBE49DbQg/Nllil5afmcw ec/q9ocDe+CwnQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:44:50 2025 by rpki-client