This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft File: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json) Hash identifier: R2LNLCqZ27Ve3lYxBIna/1OjzBDElw/hgrfK9l4R4m8= Subject key identifier: 72:DB:EF:89:6D:EB:E6:3A:AF:51:5F:75:9E:1B:B2:17:02:B2:B5:30 Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1 Certificate issuer: /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1 Certificate serial: 019AF49C1A26E83FB8D5D831984947FEDAAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 17:01:02 +0000 Manifest this update: Sat 06 Dec 2025 17:01:02 +0000 Manifest next update: Sun 07 Dec 2025 17:01:02 +0000 Files and hashes: 1: 2x0oIHlLniQgJ8wCGF91u-VP36U.roa (hash: hTRJW3J22JabEFrfjLPUALfCkvH53/llK6Ms4YgJ720=) 2: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: gJdTj9PtlfHqB/KrGsrK7EtvStevEXcS/3vn89+N+xE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:1a:26:e8:3f:b8:d5:d8:31:98:49:47:fe:da:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1 Validity Not Before: Dec 6 17:01:02 2025 GMT Not After : Dec 7 17:01:02 2025 GMT Subject: CN=72dbef896debe63aaf515f759e1bb21702b2b530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:50:5e:65:3c:4c:31:cb:9e:c3:c9:29:09: 2a:2b:d3:8b:c8:97:08:1d:be:84:9e:e8:47:08:70: 00:e2:aa:2a:d1:60:e2:35:96:ad:5f:6e:3d:23:c0: 73:f7:cb:49:22:fd:2e:60:6f:6c:f0:73:a0:38:2c: 68:b0:21:82:76:f2:6d:e7:74:3e:9e:b0:d1:ee:de: 24:4a:86:49:ed:b3:a6:fe:df:45:b3:95:4f:41:bb: b5:2a:a5:3a:98:94:d4:f4:b8:22:f2:b8:f3:72:b7: cf:98:37:19:b2:ea:f7:9d:cb:57:f4:b2:25:b2:e2: 3d:e3:cb:01:85:b4:80:cf:78:fe:ed:be:dd:70:99: 1d:4b:61:12:d4:14:c5:fb:ff:f5:a2:bd:81:c2:aa: c5:6f:de:e2:10:01:2c:b0:34:9c:bd:d2:9f:52:36: 61:8c:a6:77:3d:76:17:f8:90:48:d0:55:b3:6a:ec: b6:00:de:00:38:56:15:0d:70:9d:fd:2f:b0:d2:c0: 58:15:ca:f5:88:8d:46:83:a0:5b:d4:61:2b:cd:27: 0d:79:2d:96:21:35:2c:1f:12:af:1f:bc:a3:1f:7b: d8:7c:de:98:84:fb:8d:10:46:c9:72:78:50:c2:ac: bc:7e:24:11:36:99:67:f6:2e:49:76:5e:e1:16:d5: 56:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DB:EF:89:6D:EB:E6:3A:AF:51:5F:75:9E:1B:B2:17:02:B2:B5:30 X509v3 Authority Key Identifier: keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:0d:4e:ed:4b:4d:5a:34:fc:c6:a0:b0:7a:ac:2a:e6:db:c9: e5:9b:ee:16:e5:bd:e4:9a:97:02:74:65:98:34:07:ff:da:7b: a5:62:fb:c4:62:e0:72:8d:1b:06:8e:76:15:20:8e:ef:1d:fa: 2e:7a:dd:6a:0a:ba:68:14:a8:5d:7a:d2:45:87:df:77:54:fc: 1c:74:2f:2d:09:6f:d8:27:d8:41:fe:6a:e9:c3:eb:00:16:7c: 50:90:76:1d:8a:a3:81:51:0b:ff:62:e9:08:56:f3:0a:aa:08: a0:bd:5f:e8:48:40:3f:9e:63:a9:af:ec:1e:3e:f8:51:67:38: 51:6a:a0:12:b3:b0:c1:8c:fe:21:b7:6a:00:99:de:91:9c:fe: b7:8a:15:36:c7:1a:fc:19:b7:33:df:99:c4:ed:30:e4:8c:d7: bd:0d:27:dc:96:bf:eb:bd:bb:25:3e:c7:c2:82:e8:b5:f2:71: 0a:74:08:2f:e7:46:bb:e3:69:19:e5:47:12:e1:96:21:6b:d4: c9:2b:b1:89:5e:b9:d1:d8:11:92:d3:1f:8c:2a:77:f4:a0:be: 8a:aa:d4:4d:1c:ac:c8:03:be:5d:28:cb:91:9d:da:e0:a0:8b: 42:1c:0c:a6:a3:66:05:ff:e8:7e:9b:d1:00:13:c4:ea:82:03: 78:6c:0c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBom6D+41dgxmElH/tqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzhmNjhhYzQxNTA1OWQ1NmQxOTM4YzM3NWE1OTg2YTZm ZmY0YjEwHhcNMjUxMjA2MTcwMTAyWhcNMjUxMjA3MTcwMTAyWjAzMTEwLwYDVQQD Eyg3MmRiZWY4OTZkZWJlNjNhYWY1MTVmNzU5ZTFiYjIxNzAyYjJiNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJRQXmU8TDHLnsPJKQkqK9OLyJcI Hb6EnuhHCHAA4qoq0WDiNZatX249I8Bz98tJIv0uYG9s8HOgOCxosCGCdvJt53Q+ nrDR7t4kSoZJ7bOm/t9Fs5VPQbu1KqU6mJTU9Lgi8rjzcrfPmDcZsur3nctX9LIl suI948sBhbSAz3j+7b7dcJkdS2ES1BTF+//1or2BwqrFb97iEAEssDScvdKfUjZh jKZ3PXYX+JBI0FWzauy2AN4AOFYVDXCd/S+w0sBYFcr1iI1Gg6Bb1GErzScNeS2W ITUsHxKvH7yjH3vYfN6YhPuNEEbJcnhQwqy8fiQRNpln9i5Jdl7hFtVWaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLb74lt6+Y6r1FfdZ4bshcCsrUwMB8GA1UdIwQY MBaAFFrI9orEFQWdVtGTjDdaWYam//SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4Njct MWM4MTMyZDVmNGI0LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4NjctMWM4MTMyZDVmNGI0 LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhg1O7UtN WjT8xqCweqwq5tvJ5ZvuFuW95JqXAnRlmDQH/9p7pWL7xGLgco0bBo52FSCO7x36 Lnrdagq6aBSoXXrSRYffd1T8HHQvLQlv2CfYQf5q6cPrABZ8UJB2HYqjgVEL/2Lp CFbzCqoIoL1f6EhAP55jqa/sHj74UWc4UWqgErOwwYz+IbdqAJnekZz+t4oVNsca /Bm3M9+ZxO0w5IzXvQ0n3Ja/6727JT7HwoLotfJxCnQIL+dGu+NpGeVHEuGWIWvU ySuxiV650dgRktMfjCp39KC+iqrUTRysyAO+XSjLkZ3a4KCLQhwMpqNmBf/ofpvR ABPE6oIDeGwMEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:37:18 2025 by rpki-client