This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json) Hash identifier: GcSHSpaogF2ITqBalJjnoxysZsHR5DNpGzwqF4D1sro= Subject key identifier: A9:6F:17:91:8B:02:3B:3C:4C:29:80:F3:AC:4B:79:88:06:07:EB:9D Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Certificate serial: 019B5D54102965FC6E41092EF9D78A3D9FC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft Manifest number: 1798 Signing time: Sat 27 Dec 2025 01:02:28 +0000 Manifest this update: Sat 27 Dec 2025 01:02:28 +0000 Manifest next update: Sun 28 Dec 2025 01:02:28 +0000 Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=) 2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: AfdEVx8kFRxo111vJI1PVb1mhqXyZ9VXe38eda9G1xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:54:10:29:65:fc:6e:41:09:2e:f9:d7:8a:3d:9f:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Validity Not Before: Dec 27 01:02:28 2025 GMT Not After : Dec 28 01:02:28 2025 GMT Subject: CN=a96f17918b023b3c4c2980f3ac4b79880607eb9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:25:51:e1:d7:32:e1:7e:3c:50:6f:36:5f:56: dd:30:a1:d7:28:ed:c2:cf:a6:fe:f0:45:a6:a3:42: d8:9c:cd:ed:bd:06:45:3b:b9:10:ca:44:74:46:ae: 87:27:db:f3:2e:50:62:37:56:a2:98:70:fa:a5:f4: 50:78:68:cf:8d:62:e9:e0:3d:e1:be:62:89:cc:fa: 13:f5:4e:5d:6c:54:cd:0c:53:e2:d2:a7:fc:e2:6f: c2:e9:e2:44:6f:3c:56:2a:a2:f2:1b:76:ec:92:f6: 13:a0:0e:0a:d9:5b:71:a6:ac:96:f8:50:73:06:d7: cd:f2:1b:14:29:92:77:e1:c2:9f:6e:af:a0:8b:9b: 8c:83:c4:08:cc:b7:8b:1d:c1:4a:1a:6e:1b:f3:f7: c0:4c:33:ac:27:1b:95:6f:c0:20:1f:3a:b5:89:97: f9:f3:74:56:22:4b:34:72:ac:ae:97:ca:45:70:f7: c7:65:7c:f3:dd:5f:ae:97:99:9d:42:8b:64:d7:fe: af:2e:37:dd:03:50:29:77:40:68:aa:20:b8:bd:9c: e1:dd:55:cc:20:69:96:81:d3:07:b6:e2:43:4c:77: 4d:8f:b8:8d:d4:2c:15:fa:17:6b:cd:84:b0:b7:d5: 74:19:c7:62:ee:7f:d0:dc:d3:64:a3:27:8f:05:33: 9a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:6F:17:91:8B:02:3B:3C:4C:29:80:F3:AC:4B:79:88:06:07:EB:9D X509v3 Authority Key Identifier: keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:24:28:75:18:a6:2b:23:74:43:6a:0d:4b:59:a1:d2:58:20: f7:36:ee:5c:86:8f:a6:07:a0:9c:62:40:00:8a:c4:51:bb:f7: 7a:57:7a:0a:cf:dc:f6:92:4a:80:ac:ad:d1:a8:1f:63:ed:72: 0a:75:70:63:b8:36:ed:10:f3:6b:58:92:4e:f7:9e:be:c6:14: c0:b1:ac:07:d7:d5:92:21:58:0d:6b:77:f1:9a:35:7f:4a:94: d2:a4:34:00:05:79:29:e9:63:0e:22:44:0a:a9:31:55:e8:34: 67:06:dd:2a:2a:ed:7b:da:35:03:4a:9a:3f:8d:9d:33:b6:79: 0d:9e:23:00:01:e0:f5:9b:63:70:06:b1:d2:a2:70:0c:50:b3: e5:3b:e9:50:31:21:c5:b9:48:17:20:7b:f2:64:2c:fd:6c:20: 6c:f5:6b:e0:34:05:50:dd:0f:a3:db:4a:bc:b7:a1:d9:c9:99: 39:fa:39:87:59:93:fe:ad:63:c4:00:e4:93:15:16:14:35:c4: 6d:ae:e4:90:cc:e3:e1:87:75:3a:a1:bc:3c:41:10:49:92:56: a9:dc:64:99:1f:ba:92:6d:12:c2:7a:20:ea:af:60:27:4c:d9: e6:1b:1c:8a:93:9e:dc:fb:a4:e0:4c:44:64:c6:f8:69:b3:ec: da:f0:54:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdVBApZfxuQQku+deKPZ/FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh OWY2MTAwHhcNMjUxMjI3MDEwMjI4WhcNMjUxMjI4MDEwMjI4WjAzMTEwLwYDVQQD EyhhOTZmMTc5MThiMDIzYjNjNGMyOTgwZjNhYzRiNzk4ODA2MDdlYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCVR4dcy4X48UG82X1bdMKHXKO3C z6b+8EWmo0LYnM3tvQZFO7kQykR0Rq6HJ9vzLlBiN1aimHD6pfRQeGjPjWLp4D3h vmKJzPoT9U5dbFTNDFPi0qf84m/C6eJEbzxWKqLyG3bskvYToA4K2VtxpqyW+FBz BtfN8hsUKZJ34cKfbq+gi5uMg8QIzLeLHcFKGm4b8/fATDOsJxuVb8AgHzq1iZf5 83RWIks0cqyul8pFcPfHZXzz3V+ul5mdQotk1/6vLjfdA1Apd0BoqiC4vZzh3VXM IGmWgdMHtuJDTHdNj7iN1CwV+hdrzYSwt9V0Gcdi7n/Q3NNkoyePBTOatQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlvF5GLAjs8TCmA86xLeYgGB+udMB8GA1UdIwQY MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt ZWYzODkxNGE4YWIwLzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiQodRim KyN0Q2oNS1mh0lgg9zbuXIaPpgegnGJAAIrEUbv3eld6Cs/c9pJKgKyt0agfY+1y CnVwY7g27RDza1iSTveevsYUwLGsB9fVkiFYDWt38Zo1f0qU0qQ0AAV5KeljDiJE CqkxVeg0ZwbdKirte9o1A0qaP42dM7Z5DZ4jAAHg9ZtjcAax0qJwDFCz5TvpUDEh xblIFyB78mQs/WwgbPVr4DQFUN0Po9tKvLeh2cmZOfo5h1mT/q1jxADkkxUWFDXE ba7kkMzj4Yd1OqG8PEEQSZJWqdxkmR+6km0Swnog6q9gJ0zZ5hscipOe3Puk4ExE ZMb4abPs2vBUoA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:04:19 2025 by rpki-client