This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json) Hash identifier: /PQFXykSknLgiUmN3FYX8kFZ+Vrp7Yc0uDFj5/u0xm0= Subject key identifier: 44:65:4E:2A:7E:D9:8E:F2:A7:D5:A3:E8:EB:31:B3:8D:41:C0:6B:CC Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Certificate serial: 019AF12CFC833DEE6D7D3A646B8E225838F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft Manifest number: 02CA Signing time: Sat 06 Dec 2025 01:00:48 +0000 Manifest this update: Sat 06 Dec 2025 01:00:48 +0000 Manifest next update: Sun 07 Dec 2025 01:00:48 +0000 Files and hashes: 1: 1-5XVVmVVHnbWezmHevbBtqQuslE.roa (hash: TCMJyFyTSXpsoaD5GEolasl3XtqDe4iETZ7PPnlIixY=) 2: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: 4mKtiwiDyuOWHQQZ1mKz3adTmt1BSNpErbvuZyl6aJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fc:83:3d:ee:6d:7d:3a:64:6b:8e:22:58:38:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Validity Not Before: Dec 6 01:00:48 2025 GMT Not After : Dec 7 01:00:48 2025 GMT Subject: CN=44654e2a7ed98ef2a7d5a3e8eb31b38d41c06bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:36:ec:94:49:3a:48:6a:4b:dd:d8:2d:ff:21: 8c:dc:97:a9:73:0e:0c:31:ae:d6:a8:01:1a:b6:e8: a2:ea:aa:ce:9c:26:e9:0d:f4:84:a9:57:d0:89:4f: d3:eb:ba:84:76:37:6e:1e:1d:c4:4a:0a:cb:16:1a: ec:45:15:83:d8:32:93:de:0b:b9:96:d5:4c:f4:e6: fe:34:eb:02:69:53:67:db:14:d3:6f:9c:74:26:fd: 22:7f:1b:bc:af:5f:f7:46:77:d6:1b:38:f0:09:88: 14:47:39:62:9f:dc:97:ac:5a:d7:7d:84:65:a6:30: 58:bf:a2:4a:57:42:ff:6c:eb:f2:34:ff:66:96:c0: ff:64:29:cc:55:75:4e:82:78:bf:ef:a9:b6:50:06: ea:05:f6:f1:d8:d8:48:a9:bc:d9:f6:cc:c6:f7:49: 54:5d:e4:bf:d7:30:bf:74:1b:2b:35:9e:54:02:08: 3a:42:9d:5d:79:99:93:a1:71:2d:d5:ec:14:8a:84: c7:a7:59:ef:b4:ef:60:98:89:f8:0e:dd:27:af:65: 51:29:d8:b2:a8:e8:be:8c:92:a0:4a:09:65:9a:1f: 39:db:50:ad:a1:92:47:35:e8:c6:2a:7c:2d:4a:6a: 39:61:32:8d:0d:1e:bf:c8:40:0e:46:d4:92:44:bd: a9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:65:4E:2A:7E:D9:8E:F2:A7:D5:A3:E8:EB:31:B3:8D:41:C0:6B:CC X509v3 Authority Key Identifier: keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:34:60:04:20:44:f6:5c:28:c9:76:2d:fe:84:cf:f0:f6:05: 7e:49:62:16:e3:88:3b:2f:b7:a3:dd:28:46:05:06:c0:3c:41: 10:2a:84:4c:ca:cb:1f:b4:bd:a8:9e:0d:31:09:6f:00:8e:aa: 7b:88:eb:0e:e3:db:3b:13:b7:f7:28:c0:32:07:06:dd:df:fb: b0:1e:16:8c:a2:72:b0:e0:39:9d:ea:f5:ae:8f:25:03:36:0b: a2:41:aa:f3:54:c3:27:37:0e:21:dd:e4:58:00:af:c2:67:1d: ad:15:6a:1f:b2:e5:46:53:84:6f:89:7e:3a:c5:7b:5e:01:19: 7b:36:70:66:a8:9d:98:25:51:ff:07:99:0f:89:ce:39:68:97: 08:aa:18:52:c9:4b:8b:4e:bb:58:cf:0c:c5:d9:43:c2:05:c3: f7:f7:35:65:16:dc:30:a0:8d:2f:94:59:eb:58:0d:6e:da:4c: d0:7c:fc:75:47:d6:e2:dd:29:97:f9:ab:02:bf:2f:af:0a:a0: 91:08:d8:ea:2b:93:a1:76:55:36:40:1a:a5:ed:8a:7d:78:b8: e3:64:1c:b8:73:8a:99:e2:fd:80:65:73:7c:08:0a:ef:26:8d: 03:e4:fe:98:d4:e7:1e:2a:b3:56:66:b9:f1:64:0b:d2:00:23: 14:bb:02:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPyDPe5tfTpka44iWDj2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw N2ExMjIwHhcNMjUxMjA2MDEwMDQ4WhcNMjUxMjA3MDEwMDQ4WjAzMTEwLwYDVQQD Eyg0NDY1NGUyYTdlZDk4ZWYyYTdkNWEzZThlYjMxYjM4ZDQxYzA2YmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTbslEk6SGpL3dgt/yGM3Jepcw4M Ma7WqAEatuii6qrOnCbpDfSEqVfQiU/T67qEdjduHh3ESgrLFhrsRRWD2DKT3gu5 ltVM9Ob+NOsCaVNn2xTTb5x0Jv0ifxu8r1/3RnfWGzjwCYgURzlin9yXrFrXfYRl pjBYv6JKV0L/bOvyNP9mlsD/ZCnMVXVOgni/76m2UAbqBfbx2NhIqbzZ9szG90lU XeS/1zC/dBsrNZ5UAgg6Qp1deZmToXEt1ewUioTHp1nvtO9gmIn4Dt0nr2VRKdiy qOi+jJKgSgllmh8521CtoZJHNejGKnwtSmo5YTKNDR6/yEAORtSSRL2pDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERlTip+2Y7yp9Wj6Osxs41BwGvMMB8GA1UdIwQY MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzRgBCBE 9lwoyXYt/oTP8PYFfkliFuOIOy+3o90oRgUGwDxBECqETMrLH7S9qJ4NMQlvAI6q e4jrDuPbOxO39yjAMgcG3d/7sB4WjKJysOA5ner1ro8lAzYLokGq81TDJzcOId3k WACvwmcdrRVqH7LlRlOEb4l+OsV7XgEZezZwZqidmCVR/weZD4nOOWiXCKoYUslL i067WM8MxdlDwgXD9/c1ZRbcMKCNL5RZ61gNbtpM0Hz8dUfW4t0pl/mrAr8vrwqg kQjY6iuToXZVNkAape2KfXi442QcuHOKmeL9gGVzfAgK7yaNA+T+mNTnHiqzVma5 8WQL0gAjFLsC9w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:13 2025 by rpki-client