This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft File: WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json) Hash identifier: EwUTzJH+jqrNS22lTPEleQGPrba261Lkz2rovJJbRJs= Subject key identifier: CD:41:86:D9:B1:B7:07:F4:C0:D8:11:4C:FC:D9:CE:4E:1D:71:48:C5 Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3 Certificate issuer: /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3 Certificate serial: 019AF19B17598A5363A26CA4E12DBB295CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft Manifest number: 050D Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: JGGUZFFW6mkhM2spC4Om8Sl5Ik0.roa (hash: dqTj/vaS7gUXIm5IFoD4OZy7eNLtptQVc2/Kh4P7oE4=) 2: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: Xgpbow3gdakLGRcLaBDTyBQBsC73942Wn27kxDLCTMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:17:59:8a:53:63:a2:6c:a4:e1:2d:bb:29:5c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=cd4186d9b1b707f4c0d8114cfcd9ce4e1d7148c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:01:56:d6:ab:60:2c:bc:68:9b:ec:dd:05:7e: 4f:bd:b2:76:75:6c:00:30:49:b4:5e:6d:4b:6e:50: 32:52:39:a2:89:5b:a9:e4:32:29:0b:c6:93:c1:73: 54:e7:ed:23:5d:ca:bc:00:92:6b:ae:e2:8d:bd:f7: df:a8:67:9f:8f:63:5b:de:88:f2:78:b6:55:d6:7e: a7:ce:9c:4c:7b:38:b3:49:80:03:a1:8d:d9:c0:e4: e2:c4:65:a6:5b:b1:fa:52:75:06:62:0d:72:b4:e4: bf:3f:f4:62:4b:7f:f6:42:e4:86:56:73:6c:ec:7b: 28:f0:58:a3:f3:ea:55:42:42:2a:ab:be:47:18:87: 1f:71:af:40:68:25:4c:cf:56:1b:95:87:a8:38:ca: 79:bc:d8:4e:24:53:83:2a:10:50:a5:ac:37:dd:6d: 28:2f:6b:76:b6:f6:50:4c:b2:8f:d5:6c:b1:8c:2f: 23:8c:e8:0b:63:e6:f3:85:76:1d:ce:ab:7f:d4:77: 17:23:c9:42:46:3c:ad:93:c2:ac:dc:6e:ae:ba:8c: 83:2c:cd:83:33:e2:85:2c:e9:9f:c4:c4:b6:14:b3: 3e:f5:9c:17:3c:a2:2b:4f:e8:12:7e:6d:9c:4d:5a: 2b:52:fa:07:85:4d:93:c1:36:f8:7a:37:b5:66:2c: 94:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:41:86:D9:B1:B7:07:F4:C0:D8:11:4C:FC:D9:CE:4E:1D:71:48:C5 X509v3 Authority Key Identifier: keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:51:d1:3b:05:e0:18:05:25:65:f1:7a:ae:8a:41:7e:7d:0d: fa:57:29:b0:e0:35:6f:d4:50:be:58:f5:f9:09:91:22:88:d4: ce:81:f5:43:2d:7e:25:e7:2e:bb:19:c2:f1:c8:d5:1c:91:30: f8:3e:e2:72:e8:5b:4b:f3:88:15:c2:ba:57:f0:e5:f3:2b:56: b5:37:f0:73:fc:c5:43:f8:76:b0:c5:c2:d7:f2:6f:f9:87:ea: cf:2d:55:a0:99:64:60:b5:4c:ab:a8:d0:24:17:4b:e3:a0:a0: 1d:a7:01:ec:12:0c:b0:90:29:d4:b3:57:77:98:0a:cb:37:01: 46:85:fe:4d:63:c7:e2:64:42:32:39:49:25:98:9a:60:45:86: da:63:bd:d5:91:d9:47:e4:68:f5:4b:5e:66:fb:8f:7c:9f:06: 02:9a:a5:6a:ba:1a:f4:91:93:f7:aa:52:d8:5b:f2:c9:1a:55: 7b:38:3c:ce:23:d7:fa:1a:ec:b2:c4:a0:ac:5a:d4:77:0e:a7: 0b:a4:a6:29:d2:f8:ff:d4:e5:0b:39:57:30:ea:00:aa:34:73: 29:02:e2:05:b3:47:ba:58:13:76:77:e3:24:e1:c5:6a:a6:06: c6:8c:93:8e:cc:c6:c4:a4:37:18:df:8f:9f:8f:34:14:5c:b3: f2:29:22:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxdZilNjomyk4S27KVz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmM2OTlmOGZlY2JlYzg0N2QzMzkwYjQ2NThkZDNjYjIx YzUyYjMwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD EyhjZDQxODZkOWIxYjcwN2Y0YzBkODExNGNmY2Q5Y2U0ZTFkNzE0OGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAFW1qtgLLxom+zdBX5PvbJ2dWwA MEm0Xm1LblAyUjmiiVup5DIpC8aTwXNU5+0jXcq8AJJrruKNvfffqGefj2Nb3ojy eLZV1n6nzpxMezizSYADoY3ZwOTixGWmW7H6UnUGYg1ytOS/P/RiS3/2QuSGVnNs 7Hso8Fij8+pVQkIqq75HGIcfca9AaCVMz1YblYeoOMp5vNhOJFODKhBQpaw33W0o L2t2tvZQTLKP1WyxjC8jjOgLY+bzhXYdzqt/1HcXI8lCRjytk8Ks3G6uuoyDLM2D M+KFLOmfxMS2FLM+9ZwXPKIrT+gSfm2cTVorUvoHhU2TwTb4eje1ZiyUoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1Bhtmxtwf0wNgRTPzZzk4dcUjFMB8GA1UdIwQY MBaAFFksaZ+P7L7IR9M5C0ZY3TyyHFKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEt YjI4YzNjOGM5OTA5LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEtYjI4YzNjOGM5OTA5 LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFHROwXg GAUlZfF6ropBfn0N+lcpsOA1b9RQvlj1+QmRIojUzoH1Qy1+JecuuxnC8cjVHJEw +D7icuhbS/OIFcK6V/Dl8ytWtTfwc/zFQ/h2sMXC1/Jv+Yfqzy1VoJlkYLVMq6jQ JBdL46CgHacB7BIMsJAp1LNXd5gKyzcBRoX+TWPH4mRCMjlJJZiaYEWG2mO91ZHZ R+Ro9UteZvuPfJ8GApqlaroa9JGT96pS2FvyyRpVezg8ziPX+hrsssSgrFrUdw6n C6SmKdL4/9TlCzlXMOoAqjRzKQLiBbNHulgTdnfjJOHFaqYGxoyTjszGxKQ3GN+P n480FFyz8ikiow== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:15 2025 by rpki-client