This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json) Hash identifier: hQl2NPLsoTE/OpgiIKd9c+jwl2oGMlxByJ3EagGd9Wg= Subject key identifier: 3A:0E:E3:C3:1B:F1:CA:53:0C:5C:AD:12:66:83:CA:4C:EC:82:EE:3C Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd Certificate serial: 019AF208FEC1F9D20434CE6531B645FD71FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft Manifest number: 1710 Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: /V8eVAFnDsC8BOjKhKPk8dP0eBxlYiebnAlB/CAcwRg=) 2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fe:c1:f9:d2:04:34:ce:65:31:b6:45:fd:71:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=3a0ee3c31bf1ca530c5cad126683ca4cec82ee3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:1b:ed:55:7e:c1:38:bf:64:57:cc:3b:ac: a6:2e:f0:d9:05:5b:af:45:9b:43:d7:00:93:30:e8: 60:0f:10:dd:e8:4c:96:88:79:74:96:95:ce:83:f5: f7:ff:ad:b1:37:a3:26:eb:65:f2:f5:65:2a:9e:bc: 24:db:b3:19:9b:a3:b8:c2:69:8d:58:07:7e:28:e5: fa:22:54:79:66:6e:2a:86:3a:d2:3d:f4:2b:e5:31: 00:6e:ad:17:db:19:95:3a:5d:95:15:c5:5d:eb:77: 55:da:27:ab:b5:7f:36:9d:7e:a3:7f:37:13:30:b1: 8e:1e:f6:e5:26:d6:a8:5b:74:48:8e:8d:62:1e:f9: ea:25:0d:07:14:d1:88:c1:c2:31:ee:b7:cf:03:0e: ca:3d:0f:46:dd:aa:d6:86:20:00:1c:34:0b:3c:aa: cb:7e:29:41:a2:a1:f8:40:d1:29:59:37:17:ba:5d: bb:82:a1:57:c1:86:e6:b0:50:63:9a:c0:6d:3b:57: 35:af:98:68:3e:f2:e1:8c:1c:8b:27:49:dd:83:e0: 46:13:4a:e8:09:98:37:43:12:99:b2:22:2b:26:61: 9c:c0:41:c9:82:e7:38:53:c7:75:68:8e:39:ca:22: 6a:59:97:a3:a3:ef:55:b7:e5:58:44:8e:4d:ac:86: 88:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0E:E3:C3:1B:F1:CA:53:0C:5C:AD:12:66:83:CA:4C:EC:82:EE:3C X509v3 Authority Key Identifier: keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d1:68:d7:7a:9f:d8:66:98:77:c4:80:12:a4:d0:62:d2:a9: 5b:68:3e:12:a6:48:65:9f:16:76:8c:cc:06:01:53:6b:1b:e9: 7e:5f:61:c3:41:47:6c:a6:aa:5b:eb:9f:70:c7:d9:39:cc:7d: d0:4b:64:73:04:33:a9:97:66:94:a7:28:8e:fe:8a:46:48:86: 9f:18:5b:f7:f6:01:13:6d:2e:cb:b6:02:b9:30:56:e4:b1:83: 9f:a5:80:0c:ec:9e:e7:c3:8a:87:4a:45:56:e9:09:5a:a6:e8: 04:89:4c:07:c0:4f:b0:da:34:b0:be:7e:5b:a9:07:44:b7:1c: f6:ae:2e:34:ce:23:11:3f:be:3b:90:fc:3c:5d:ba:08:d9:55: f7:77:1b:97:d1:6b:04:a6:34:67:fb:10:ae:72:7f:1b:4f:e2: aa:66:4b:ec:dd:3f:d2:fd:cb:e2:a3:67:bc:9c:5a:f8:f3:3a: 6f:f7:a6:e1:44:ff:e9:b4:02:7c:e5:96:af:04:a6:cc:00:5c: 10:8e:cd:29:86:dc:2d:eb:43:b9:c7:97:74:14:2f:ac:0e:5d: 37:99:1e:72:ac:7e:75:5f:10:b6:fb:97:bd:c6:e9:94:ba:5e: 7c:7f:ed:24:b0:24:fa:d9:39:90:3d:d1:37:07:83:c0:a5:e9: 34:8c:62:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP7B+dIENM5lMbZF/XH9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWQ5NjhmNWJlMWNlNjcxZTIwZDU4MzFjMTcwMDAxZjM3 MmQzZGQwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EygzYTBlZTNjMzFiZjFjYTUzMGM1Y2FkMTI2NjgzY2E0Y2VjODJlZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfUb7VV+wTi/ZFfMO6ymLvDZBVuv RZtD1wCTMOhgDxDd6EyWiHl0lpXOg/X3/62xN6Mm62Xy9WUqnrwk27MZm6O4wmmN WAd+KOX6IlR5Zm4qhjrSPfQr5TEAbq0X2xmVOl2VFcVd63dV2iertX82nX6jfzcT MLGOHvblJtaoW3RIjo1iHvnqJQ0HFNGIwcIx7rfPAw7KPQ9G3arWhiAAHDQLPKrL filBoqH4QNEpWTcXul27gqFXwYbmsFBjmsBtO1c1r5hoPvLhjByLJ0ndg+BGE0ro CZg3QxKZsiIrJmGcwEHJguc4U8d1aI45yiJqWZejo+9Vt+VYRI5NrIaIZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoO48Mb8cpTDFytEmaDykzsgu48MB8GA1UdIwQY MBaAFFhdlo9b4c5nHiDVgxwXAAHzctPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUt OWVkMzVkNWIzNzM1LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUtOWVkMzVkNWIzNzM1 LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNFo13qf 2GaYd8SAEqTQYtKpW2g+EqZIZZ8WdozMBgFTaxvpfl9hw0FHbKaqW+ufcMfZOcx9 0EtkcwQzqZdmlKcojv6KRkiGnxhb9/YBE20uy7YCuTBW5LGDn6WADOye58OKh0pF VukJWqboBIlMB8BPsNo0sL5+W6kHRLcc9q4uNM4jET++O5D8PF26CNlV93cbl9Fr BKY0Z/sQrnJ/G0/iqmZL7N0/0v3L4qNnvJxa+PM6b/em4UT/6bQCfOWWrwSmzABc EI7NKYbcLetDuceXdBQvrA5dN5kecqx+dV8QtvuXvcbplLpefH/tJLAk+tk5kD3R NweDwKXpNIxisg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:01 2025 by rpki-client