This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft File: WLPteKcQZof2-2jvIG7dzw696bM.mft (raw, json) Hash identifier: gGguHPzOPr1/7O2ZNzKmZ60RQhqZnOz2rBCibfKV/GQ= Subject key identifier: 83:0B:45:7A:BB:9A:47:6B:55:2A:F5:7C:F9:A0:49:C0:A4:6E:B9:8D Authority key identifier: 58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3 Certificate issuer: /CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3 Certificate serial: 019B71EC0CCE9A43C85F3DAD0A8A025D80D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft Manifest number: 0C9E Signing time: Wed 31 Dec 2025 01:00:53 +0000 Manifest this update: Wed 31 Dec 2025 01:00:53 +0000 Manifest next update: Thu 01 Jan 2026 01:00:53 +0000 Files and hashes: 1: WLPteKcQZof2-2jvIG7dzw696bM.crl (hash: BYfGiBALGtTwRsXN0vjVEuw1VdezldYgqIPsqc3/O4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:ec:0c:ce:9a:43:c8:5f:3d:ad:0a:8a:02:5d:80:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3ed78a7106687f6fb68ef206eddcf0ebde9b3 Validity Not Before: Dec 31 01:00:53 2025 GMT Not After : Jan 1 01:00:53 2026 GMT Subject: CN=830b457abb9a476b552af57cf9a049c0a46eb98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:0e:4d:a8:95:54:bc:87:3d:05:57:d4:56: 3e:03:99:88:19:4c:01:c7:08:cb:bc:df:02:35:bf: 45:29:ab:36:c0:dc:9d:46:3b:c8:92:85:f2:f3:b3: 73:61:ea:dd:94:e2:e8:6a:f5:6e:e3:fd:63:3d:bd: 23:a7:9d:f8:70:95:1d:b2:a7:6e:e7:5b:53:79:b8: d0:49:14:77:d5:60:88:9d:91:c2:1e:ff:45:91:ef: f7:09:86:d8:07:f1:94:6f:8f:6b:08:1f:64:58:49: a6:b1:61:96:d8:ae:ab:80:bf:cc:c0:d1:5c:a6:a0: b9:34:a7:e3:31:94:9f:7a:36:c8:f2:bf:76:4f:5c: bc:f5:3a:e1:8b:c9:5f:25:36:86:5e:1d:f4:c9:0c: d2:91:7c:22:ba:3d:49:f2:f8:e2:fe:81:1c:9e:da: 8d:a7:b7:2d:e7:0c:77:b6:3d:2f:62:70:6b:d3:b0: 56:e2:14:ab:85:6b:04:ba:42:ca:c4:60:89:6b:97: 41:a3:6b:93:b1:6f:ab:e5:9d:ee:49:20:db:52:26: 54:7f:8b:db:a0:e0:08:7d:b0:26:e9:4c:0e:ce:19: ad:88:57:14:a2:45:91:2f:3d:fb:03:97:86:50:55: 68:64:4f:96:9c:eb:2f:58:08:4c:60:f6:3e:ec:d8: ac:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0B:45:7A:BB:9A:47:6B:55:2A:F5:7C:F9:A0:49:C0:A4:6E:B9:8D X509v3 Authority Key Identifier: keyid:58:B3:ED:78:A7:10:66:87:F6:FB:68:EF:20:6E:DD:CF:0E:BD:E9:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPteKcQZof2-2jvIG7dzw696bM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/65712b-958a-4e6f-b054-bf745eab957d/1/WLPteKcQZof2-2jvIG7dzw696bM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:01:8f:aa:f6:ea:e4:c3:dd:fa:45:39:93:be:3a:ef:f8:12: 09:9f:c4:10:7b:26:2b:4e:39:e5:cb:4f:42:c2:fb:5a:0f:6e: 57:12:11:41:ab:23:5f:0f:30:0b:f2:67:45:33:10:f4:16:9d: fb:99:e0:89:ba:fb:3b:26:54:fe:c1:ac:f3:86:77:b5:9a:39: 97:ce:e4:16:c8:db:8c:24:12:db:54:c8:fe:c0:e5:65:a7:da: c2:8a:ff:85:3a:7d:c1:37:7a:a1:0a:40:cc:3e:d9:35:ed:3e: ba:07:75:1e:36:22:6e:62:a5:2a:fd:d1:92:aa:f5:60:0e:97: 7d:48:cc:79:40:f7:1a:53:fc:0a:68:2d:40:9a:eb:35:aa:75: ee:98:5f:f1:9c:c8:d2:85:53:9a:30:5d:10:75:7d:ff:b0:0e: 00:50:54:fd:25:67:a8:b6:b2:8c:e6:32:59:87:e9:c1:29:7f: c2:b6:e2:d0:d9:4c:ce:0d:c7:70:17:5b:36:34:df:fa:52:20: db:32:b4:4d:42:07:c5:51:75:6b:a5:bb:08:f4:4f:92:73:80: de:1d:61:a9:f6:18:f2:24:c7:ce:f6:0c:9d:2b:a3:1c:6b:7f: 70:9e:f6:d0:eb:e2:87:e8:04:75:1f:0d:57:2b:b1:c4:b0:82: 7d:ba:2d:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx7AzOmkPIXz2tCooCXYDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNlZDc4YTcxMDY2ODdmNmZiNjhlZjIwNmVkZGNmMGVi ZGU5YjMwHhcNMjUxMjMxMDEwMDUzWhcNMjYwMTAxMDEwMDUzWjAzMTEwLwYDVQQD Eyg4MzBiNDU3YWJiOWE0NzZiNTUyYWY1N2NmOWEwNDljMGE0NmViOThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH4OTaiVVLyHPQVX1FY+A5mIGUwB xwjLvN8CNb9FKas2wNydRjvIkoXy87NzYerdlOLoavVu4/1jPb0jp534cJUdsqdu 51tTebjQSRR31WCInZHCHv9Fke/3CYbYB/GUb49rCB9kWEmmsWGW2K6rgL/MwNFc pqC5NKfjMZSfejbI8r92T1y89Trhi8lfJTaGXh30yQzSkXwiuj1J8vji/oEcntqN p7ct5wx3tj0vYnBr07BW4hSrhWsEukLKxGCJa5dBo2uTsW+r5Z3uSSDbUiZUf4vb oOAIfbAm6UwOzhmtiFcUokWRLz37A5eGUFVoZE+WnOsvWAhMYPY+7Nis9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMLRXq7mkdrVSr1fPmgScCkbrmNMB8GA1UdIwQY MBaAFFiz7XinEGaH9vto7yBu3c8OvemzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQdGVLY1Fab2YyLTJqdklHN2R6dzY5NmJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82NTcxMmItOTU4YS00ZTZmLWIwNTQt YmY3NDVlYWI5NTdkLzEvV0xQdGVLY1Fab2YyLTJqdklHN2R6dzY5NmJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC82NTcxMmItOTU4YS00ZTZmLWIwNTQtYmY3NDVlYWI5NTdk LzEvV0xQdGVLY1Fab2YyLTJqdklHN2R6dzY5NmJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQGPqvbq 5MPd+kU5k7467/gSCZ/EEHsmK0455ctPQsL7Wg9uVxIRQasjXw8wC/JnRTMQ9Bad +5ngibr7OyZU/sGs84Z3tZo5l87kFsjbjCQS21TI/sDlZafawor/hTp9wTd6oQpA zD7ZNe0+ugd1HjYibmKlKv3Rkqr1YA6XfUjMeUD3GlP8CmgtQJrrNap17phf8ZzI 0oVTmjBdEHV9/7AOAFBU/SVnqLayjOYyWYfpwSl/wrbi0NlMzg3HcBdbNjTf+lIg 2zK0TUIHxVF1a6W7CPRPknOA3h1hqfYY8iTHzvYMnSujHGt/cJ720Ovih+gEdR8N VyuxxLCCfbotpA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:27:21 2025 by rpki-client