This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json) Hash identifier: J6kJi5J7TrsyILOZ/Q5a9LnDeyN8GFUmLBveYnMAgLU= Subject key identifier: 04:9E:EF:74:B0:2A:ED:46:60:E4:00:EC:FC:D2:71:CB:22:20:FD:93 Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD Certificate issuer: /CN=594b79990f616a8344c860148fc922910e154dad Certificate serial: 019B3C7EE341DBE5326F52E09A1BA29527DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft Manifest number: 0FCE Signing time: Sat 20 Dec 2025 16:01:47 +0000 Manifest this update: Sat 20 Dec 2025 16:01:47 +0000 Manifest next update: Sun 21 Dec 2025 16:01:47 +0000 Files and hashes: 1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: f7m5SP11jSagI3khCKRnnwRUeHh2tWJeUKUjVdH6yMo=) 2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:e3:41:db:e5:32:6f:52:e0:9a:1b:a2:95:27:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=594b79990f616a8344c860148fc922910e154dad Validity Not Before: Dec 20 16:01:47 2025 GMT Not After : Dec 21 16:01:47 2025 GMT Subject: CN=049eef74b02aed4660e400ecfcd271cb2220fd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:c5:db:ee:78:9e:61:42:1b:a8:e5:d7:94: 65:0e:25:a2:17:f8:f9:ba:83:1f:ec:01:1e:e9:cd: 00:ff:e0:1c:b6:c3:4d:84:64:a4:74:6f:1a:aa:a8: f2:76:c0:3f:aa:dc:28:8b:c3:e4:72:fd:d4:1a:bc: b8:06:df:d7:5b:bc:b3:9c:5f:c1:d9:26:d4:52:0d: c1:06:1d:ac:84:1e:7a:4f:a1:a7:5e:5e:1b:c2:6b: 57:fa:2c:73:e4:91:a8:6a:5c:0a:26:9d:47:d5:a4: 90:2f:af:d5:f6:51:ec:34:3d:18:14:95:9e:cd:ec: 48:3d:31:75:31:d6:c4:01:07:0b:7f:5a:38:39:1a: a2:4d:d0:36:29:44:f7:c1:42:bb:90:b4:63:17:a7: 09:46:cd:0f:69:07:cd:a7:12:13:bf:06:f8:95:1f: c0:51:88:4c:59:3f:8d:62:5e:da:42:07:c0:25:f9: f0:36:92:c9:d3:a7:4e:43:b4:43:7e:1b:79:5f:89: e1:e4:14:be:a4:9b:ac:b9:9f:4d:de:a3:ed:e8:e0: ee:a4:0a:f9:99:41:dd:56:47:ca:fd:81:6d:95:b5: d8:af:fa:35:4d:83:81:d0:4e:3e:3c:8a:fd:67:42: 37:df:8d:5f:53:56:43:13:53:eb:d1:42:e1:5c:27: 4c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9E:EF:74:B0:2A:ED:46:60:E4:00:EC:FC:D2:71:CB:22:20:FD:93 X509v3 Authority Key Identifier: keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3a:6c:40:ee:97:b1:15:4f:67:55:6a:39:ac:3c:77:a2:6e: 57:97:eb:f8:4a:94:ad:46:d9:02:83:04:5e:13:fc:ae:d1:2d: cd:f7:e7:d6:37:bb:84:ba:7e:71:52:1d:94:b5:01:43:38:48: ef:24:9a:f4:1b:2c:df:92:38:d5:a4:41:1c:12:1e:40:5e:36: aa:1f:ba:68:8b:50:c5:d6:1d:26:63:cb:c9:72:6c:16:2b:3a: 48:1b:d2:9e:9d:ea:9e:ad:81:5e:ca:8d:af:b6:4d:87:97:09: 47:fd:36:99:db:3b:f4:50:48:d0:ec:07:27:78:dd:a6:aa:5a: 8a:ac:28:31:70:5f:09:3d:88:8d:50:30:5a:41:05:d5:6b:9c: 6e:b2:82:a1:5f:67:68:f5:0a:87:2c:00:20:a5:1e:4b:d9:37: 66:35:6a:f0:21:31:c7:4a:77:23:e5:b0:76:5c:e4:f6:17:1e: 1f:ed:71:87:0e:80:31:93:6f:0d:b5:1f:a9:46:e7:19:c3:2e: 38:81:45:64:a7:db:9d:e5:d9:3b:97:a8:0a:7d:c8:53:97:2d: b1:2e:01:b5:ef:ab:3f:0f:06:8d:c2:fc:33:12:1b:38:d8:81: c2:65:60:55:37:36:a0:1a:e3:e9:24:11:7c:05:38:39:12:2d: ee:ed:55:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fuNB2+Uyb1LgmhuilSfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NGI3OTk5MGY2MTZhODM0NGM4NjAxNDhmYzkyMjkxMGUx NTRkYWQwHhcNMjUxMjIwMTYwMTQ3WhcNMjUxMjIxMTYwMTQ3WjAzMTEwLwYDVQQD EygwNDllZWY3NGIwMmFlZDQ2NjBlNDAwZWNmY2QyNzFjYjIyMjBmZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/XF2+54nmFCG6jl15RlDiWiF/j5 uoMf7AEe6c0A/+ActsNNhGSkdG8aqqjydsA/qtwoi8Pkcv3UGry4Bt/XW7yznF/B 2SbUUg3BBh2shB56T6GnXl4bwmtX+ixz5JGoalwKJp1H1aSQL6/V9lHsND0YFJWe zexIPTF1MdbEAQcLf1o4ORqiTdA2KUT3wUK7kLRjF6cJRs0PaQfNpxITvwb4lR/A UYhMWT+NYl7aQgfAJfnwNpLJ06dOQ7RDfht5X4nh5BS+pJusuZ9N3qPt6ODupAr5 mUHdVkfK/YFtlbXYr/o1TYOB0E4+PIr9Z0I3341fU1ZDE1Pr0ULhXCdMHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASe73SwKu1GYOQA7PzSccsiIP2TMB8GA1UdIwQY MBaAFFlLeZkPYWqDRMhgFI/JIpEOFU2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yNjY0MWEtYjRmOS00ZmJhLTg2N2Qt ZjdmMzY0NTc4NzRlLzEvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yNjY0MWEtYjRmOS00ZmJhLTg2N2QtZjdmMzY0NTc4NzRl LzEvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKjpsQO6X sRVPZ1VqOaw8d6JuV5fr+EqUrUbZAoMEXhP8rtEtzffn1je7hLp+cVIdlLUBQzhI 7ySa9Bss35I41aRBHBIeQF42qh+6aItQxdYdJmPLyXJsFis6SBvSnp3qnq2BXsqN r7ZNh5cJR/02mds79FBI0OwHJ3jdpqpaiqwoMXBfCT2IjVAwWkEF1WucbrKCoV9n aPUKhywAIKUeS9k3ZjVq8CExx0p3I+Wwdlzk9hceH+1xhw6AMZNvDbUfqUbnGcMu OIFFZKfbneXZO5eoCn3IU5ctsS4Bte+rPw8GjcL8MxIbONiBwmVgVTc2oBrj6SQR fAU4ORIt7u1VqA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:11:14 2025 by rpki-client