This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json) Hash identifier: QM4BlKu3MzeqaGq57ZjRZORBC+HHcN07CxWxdR3xCeg= Subject key identifier: A1:93:FB:57:E8:6A:5A:39:10:E1:DA:E7:34:3C:00:1B:91:50:C3:F2 Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19 Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019 Certificate serial: 019AF3F74FC8121939DBCB0F4DD13F78D516 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft Manifest number: 16DD Signing time: Sat 06 Dec 2025 14:01:02 +0000 Manifest this update: Sat 06 Dec 2025 14:01:02 +0000 Manifest next update: Sun 07 Dec 2025 14:01:02 +0000 Files and hashes: 1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=) 2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: ozCtFDyPa6tJCfvawxeHr9ts1JkYipR8+OiChyqN/+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:4f:c8:12:19:39:db:cb:0f:4d:d1:3f:78:d5:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595b243a7233e571c3c173eb8249111906326019 Validity Not Before: Dec 6 14:01:02 2025 GMT Not After : Dec 7 14:01:02 2025 GMT Subject: CN=a193fb57e86a5a3910e1dae7343c001b9150c3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:92:3b:7e:7b:11:67:f8:f5:5f:dd:20:03:4c: 90:63:b8:b2:c1:a6:3c:5f:d4:e9:51:5e:be:83:71: 4a:8b:19:f3:bb:6f:db:1d:72:5d:aa:69:9e:8b:5b: 6c:de:82:75:b9:ba:04:a4:1c:bc:10:02:01:cd:5f: 9d:cd:58:03:08:90:35:4f:bb:e4:14:68:75:8b:5e: dc:73:c9:a3:74:08:8c:51:30:66:29:db:02:1c:d6: 6c:d0:f0:aa:01:5b:51:f4:b5:b9:58:06:15:7a:5b: 0b:66:47:c8:b4:c9:95:ca:1f:3e:55:1c:fa:c2:8d: 63:37:dd:76:bf:b4:83:65:09:2d:e1:75:30:d2:6b: 25:ef:e4:0d:b9:03:14:e7:d4:e0:1a:6b:59:d2:0f: 13:7f:72:4e:9a:82:a0:74:53:c3:31:2b:9b:7d:f1: 80:17:cc:ff:c8:f0:03:66:b3:ba:4b:8f:96:6f:7a: 38:14:a0:98:89:4f:f6:39:2e:13:f9:81:6e:8b:5d: 5e:2a:08:44:f0:14:d1:d4:f0:99:2a:d7:be:cb:ab: c7:91:84:50:fa:31:63:56:3d:83:43:77:3b:60:fe: 84:ac:50:ba:f8:09:07:8f:17:68:a8:14:9b:02:bd: 5e:14:72:d9:0c:96:ef:bf:a2:73:63:95:10:ac:c0: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:93:FB:57:E8:6A:5A:39:10:E1:DA:E7:34:3C:00:1B:91:50:C3:F2 X509v3 Authority Key Identifier: keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b5:23:67:5f:9e:20:fe:ee:e8:55:bb:47:f2:8d:d8:d6:cc: 80:67:33:38:3b:3f:00:8d:79:c8:3d:88:f9:bc:b3:92:46:73: 68:cc:04:ec:4f:c7:65:40:2a:c9:20:29:02:00:cc:cc:83:05: 36:3f:4f:53:96:03:29:43:fb:73:a8:d4:bb:03:75:67:aa:8c: ad:e9:36:a6:be:09:93:f4:6e:16:72:5f:52:96:87:94:bf:e9: 39:e3:77:11:fe:af:98:7a:03:62:15:e0:b8:1c:04:bd:ab:40: 27:b7:96:48:e1:07:d3:68:e9:17:fb:08:1d:23:7a:99:dc:d9: 3c:fd:bc:f8:ec:f6:36:ec:28:0f:e2:8c:6d:27:1a:c7:2d:a1: ea:40:71:cd:77:31:aa:b0:02:9c:f2:00:f0:e3:b7:31:b1:2b: a5:93:6a:2e:32:6b:a5:6e:cc:19:5f:b5:bd:66:cb:ad:dc:ee: c5:75:30:7f:c4:f0:81:99:73:40:e1:ba:59:27:40:0d:7c:41: 7b:c1:cc:62:74:24:c6:a8:94:21:41:cc:8b:19:7f:7c:d3:17: 7a:7e:d3:b1:b3:c8:b1:1d:a8:84:55:33:64:d7:5d:34:54:30: a6:33:87:60:17:de:ac:fd:48:29:f4:37:13:a3:02:19:1f:83: d3:bc:7a:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90/IEhk528sPTdE/eNUWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NWIyNDNhNzIzM2U1NzFjM2MxNzNlYjgyNDkxMTE5MDYz MjYwMTkwHhcNMjUxMjA2MTQwMTAyWhcNMjUxMjA3MTQwMTAyWjAzMTEwLwYDVQQD EyhhMTkzZmI1N2U4NmE1YTM5MTBlMWRhZTczNDNjMDAxYjkxNTBjM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJI7fnsRZ/j1X90gA0yQY7iywaY8 X9TpUV6+g3FKixnzu2/bHXJdqmmei1ts3oJ1uboEpBy8EAIBzV+dzVgDCJA1T7vk FGh1i17cc8mjdAiMUTBmKdsCHNZs0PCqAVtR9LW5WAYVelsLZkfItMmVyh8+VRz6 wo1jN912v7SDZQkt4XUw0msl7+QNuQMU59TgGmtZ0g8Tf3JOmoKgdFPDMSubffGA F8z/yPADZrO6S4+Wb3o4FKCYiU/2OS4T+YFui11eKghE8BTR1PCZKte+y6vHkYRQ +jFjVj2DQ3c7YP6ErFC6+AkHjxdoqBSbAr1eFHLZDJbvv6JzY5UQrMBN3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGT+1foalo5EOHa5zQ8ABuRUMPyMB8GA1UdIwQY MBaAFFlbJDpyM+Vxw8Fz64JJERkGMmAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgt ODhlNDQ2NjkxNWY4LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgtODhlNDQ2NjkxNWY4 LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7UjZ1+e IP7u6FW7R/KN2NbMgGczODs/AI15yD2I+byzkkZzaMwE7E/HZUAqySApAgDMzIMF Nj9PU5YDKUP7c6jUuwN1Z6qMrek2pr4Jk/RuFnJfUpaHlL/pOeN3Ef6vmHoDYhXg uBwEvatAJ7eWSOEH02jpF/sIHSN6mdzZPP28+Oz2NuwoD+KMbScaxy2h6kBxzXcx qrACnPIA8OO3MbErpZNqLjJrpW7MGV+1vWbLrdzuxXUwf8TwgZlzQOG6WSdADXxB e8HMYnQkxqiUIUHMixl/fNMXen7TsbPIsR2ohFUzZNddNFQwpjOHYBferP1IKfQ3 E6MCGR+D07x6cA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:38 2025 by rpki-client