This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft File: wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft (raw, json) Hash identifier: 9MUIUbrTqVvL2+kYq4/woDdO9iOGPJ1itu1SnpueUq0= Subject key identifier: 52:50:F7:BB:A5:06:72:49:2D:E5:85:12:D6:19:B2:06:C4:8C:45:3E Authority key identifier: C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11 Certificate issuer: /CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611 Certificate serial: 019B3F117CF6C02C8C0990DF2A64833D6006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft Manifest number: 0350 Signing time: Sun 21 Dec 2025 04:01:09 +0000 Manifest this update: Sun 21 Dec 2025 04:01:09 +0000 Manifest next update: Mon 22 Dec 2025 04:01:09 +0000 Files and hashes: 1: shq45UEehLHlmhOeyI4UV2c2u0c.roa (hash: m82S0LKa4u++R6z0pfw1er3BwvIyylTnAWkb4EmiNoE=) 2: wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl (hash: zhwM+L5T3FDH84GxQOrF9nT0pnnG03zN1BxQs0hA0tk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:7c:f6:c0:2c:8c:09:90:df:2a:64:83:3d:60:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ac8f70961d2dc73e2fe3a7990832e93d495611 Validity Not Before: Dec 21 04:01:09 2025 GMT Not After : Dec 22 04:01:09 2025 GMT Subject: CN=5250f7bba50672492de58512d619b206c48c453e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c3:f6:c7:c9:d3:18:e5:0b:b4:d3:d3:70:1a: 3e:2b:2d:8b:72:e9:d1:d7:b0:a3:9c:08:3e:22:97: b3:a8:87:d9:34:35:8d:ea:db:2c:cf:f4:2c:aa:20: cf:04:be:f1:e6:a9:99:68:af:f9:2a:d7:e4:e2:ec: 1f:e1:29:2c:2d:7a:51:94:4a:7e:3b:9e:78:c5:cf: 58:70:24:ea:59:6b:3d:1f:22:4f:3f:d7:26:e6:25: 8f:e8:c2:67:18:72:63:4c:9e:de:ab:8d:20:ee:ad: a7:49:f5:ed:38:23:50:9b:e9:50:38:54:04:a3:45: de:6a:e3:e5:7c:cc:cd:37:d0:21:29:55:70:38:f0: ab:1e:77:f8:63:c8:ac:50:cc:43:54:bc:6b:ae:21: 2e:e5:c8:4b:18:d6:96:4d:fe:78:32:55:5b:21:e7: c0:af:f9:ca:1a:00:30:49:a0:af:f6:24:34:5c:ef: 17:5a:93:65:9f:21:79:cf:fa:0b:af:83:42:8e:d9: 4a:cc:42:2b:b6:70:3f:ff:a1:19:86:41:13:d8:ca: de:87:85:5f:7b:13:ba:fc:78:89:09:0d:d1:2d:de: 17:cd:a4:06:8f:ca:e4:3e:11:5f:d8:a0:93:ee:4a: bd:8c:bb:84:ad:50:27:03:d0:83:cc:b7:87:c9:f0: f9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:50:F7:BB:A5:06:72:49:2D:E5:85:12:D6:19:B2:06:C4:8C:45:3E X509v3 Authority Key Identifier: keyid:C2:AC:8F:70:96:1D:2D:C7:3E:2F:E3:A7:99:08:32:E9:3D:49:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqyPcJYdLcc-L-OnmQgy6T1JVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/956fd2-0dd3-4d4f-8b37-c6d86a1b08e0/1/wqyPcJYdLcc-L-OnmQgy6T1JVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:e6:66:87:0c:d9:2c:d6:0a:9f:a5:7c:2a:c5:2f:22:a9:4a: d3:79:98:c6:80:d6:91:90:cb:2d:46:4f:19:7c:05:13:96:06: e3:e6:93:e2:45:7c:2e:5e:90:7b:4e:1c:1e:c9:10:d8:60:72: 38:45:d4:e2:2b:17:90:ef:87:69:85:07:d3:91:fa:09:f8:7a: de:37:3d:c1:f2:fb:66:4f:b5:df:bd:71:2d:80:de:d8:68:af: 56:f1:84:32:8e:da:4d:cb:be:0b:2f:60:58:95:66:b0:bf:46: 37:22:f9:26:86:87:15:d0:e6:2b:f8:7f:9b:9d:e1:8d:03:bb: 53:ea:bb:41:25:51:fa:ff:42:8d:89:c0:e8:a5:70:36:99:d9: d2:85:0d:ae:a5:cb:4d:c8:fc:ca:1e:f3:be:b6:06:5e:21:a6: cc:5d:f8:ac:5a:67:3d:a8:71:23:98:df:3d:98:02:16:1a:6e: 9f:53:e1:48:46:06:37:80:20:8a:3e:9e:b5:9b:28:99:6f:bc: 01:39:5b:88:24:f8:3c:f9:ba:7c:3e:5c:f3:fa:fd:58:93:83: 36:57:d4:ad:f2:1a:7e:e9:9f:5b:17:85:09:dc:bb:22:73:bd: a1:2e:53:2f:62:25:48:af:fe:b4:d0:c7:f3:a1:b1:82:ed:e9: f3:d1:09:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EXz2wCyMCZDfKmSDPWAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYWM4ZjcwOTYxZDJkYzczZTJmZTNhNzk5MDgzMmU5M2Q0 OTU2MTEwHhcNMjUxMjIxMDQwMTA5WhcNMjUxMjIyMDQwMTA5WjAzMTEwLwYDVQQD Eyg1MjUwZjdiYmE1MDY3MjQ5MmRlNTg1MTJkNjE5YjIwNmM0OGM0NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcP2x8nTGOULtNPTcBo+Ky2LcunR 17CjnAg+IpezqIfZNDWN6tssz/QsqiDPBL7x5qmZaK/5Ktfk4uwf4SksLXpRlEp+ O554xc9YcCTqWWs9HyJPP9cm5iWP6MJnGHJjTJ7eq40g7q2nSfXtOCNQm+lQOFQE o0XeauPlfMzNN9AhKVVwOPCrHnf4Y8isUMxDVLxrriEu5chLGNaWTf54MlVbIefA r/nKGgAwSaCv9iQ0XO8XWpNlnyF5z/oLr4NCjtlKzEIrtnA//6EZhkET2Mreh4Vf exO6/HiJCQ3RLd4XzaQGj8rkPhFf2KCT7kq9jLuErVAnA9CDzLeHyfD5nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJQ97ulBnJJLeWFEtYZsgbEjEU+MB8GA1UdIwQY MBaAFMKsj3CWHS3HPi/jp5kIMuk9SVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzct YzZkODZhMWIwOGUwLzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85NTZmZDItMGRkMy00ZDRmLThiMzctYzZkODZhMWIwOGUw LzEvd3F5UGNKWWRMY2MtTC1Pbm1RZ3k2VDFKVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWeZmhwzZ LNYKn6V8KsUvIqlK03mYxoDWkZDLLUZPGXwFE5YG4+aT4kV8Ll6Qe04cHskQ2GBy OEXU4isXkO+HaYUH05H6Cfh63jc9wfL7Zk+1371xLYDe2GivVvGEMo7aTcu+Cy9g WJVmsL9GNyL5JoaHFdDmK/h/m53hjQO7U+q7QSVR+v9CjYnA6KVwNpnZ0oUNrqXL Tcj8yh7zvrYGXiGmzF34rFpnPahxI5jfPZgCFhpun1PhSEYGN4Agij6etZsomW+8 ATlbiCT4PPm6fD5c8/r9WJODNlfUrfIafumfWxeFCdy7InO9oS5TL2IlSK/+tNDH 86Gxgu3p89EJdg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:54:00 2025 by rpki-client