This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft File: WCroA98isFXHTl_o8R2UQIlWDtI.mft (raw, json) Hash identifier: Hk4ehiqtVMJJVX5iD9IUduyGzgQMvGWpobsl6ITz9ys= Subject key identifier: 6A:10:8E:2C:C1:D8:89:58:2D:1D:05:0F:09:D1:F3:F4:62:4D:D0:52 Authority key identifier: 58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2 Certificate issuer: /CN=582ae803df22b055c74e5fe8f11d944089560ed2 Certificate serial: 019AF19AC17EE3BB6B98BA201B1E01B5A789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft Manifest number: 01F0 Signing time: Sat 06 Dec 2025 03:00:42 +0000 Manifest this update: Sat 06 Dec 2025 03:00:42 +0000 Manifest next update: Sun 07 Dec 2025 03:00:42 +0000 Files and hashes: 1: 5Vle3KGfqnVJEdmvBasCstldoz8.roa (hash: Rl95m9yb5FSNGdnRgF3OQpiAhZ5L8MWgdG8dVfAGWKo=) 2: WCroA98isFXHTl_o8R2UQIlWDtI.crl (hash: +pYXBCl6uRh91Zx+kKvB7frQx0YSBXj5kh6DnM/BHlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c1:7e:e3:bb:6b:98:ba:20:1b:1e:01:b5:a7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582ae803df22b055c74e5fe8f11d944089560ed2 Validity Not Before: Dec 6 03:00:42 2025 GMT Not After : Dec 7 03:00:42 2025 GMT Subject: CN=6a108e2cc1d889582d1d050f09d1f3f4624dd052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:46:59:0f:70:ec:24:0c:c6:6e:15:47:25: 95:52:67:5c:b2:6b:1b:2a:12:48:99:3f:00:f9:d8: 65:08:ca:19:e3:65:28:e9:69:ef:0c:5f:fd:2f:38: 8d:79:0f:35:ca:b4:00:ca:33:5c:f5:fe:df:be:bc: fc:ca:35:b0:5c:b6:c6:ba:e6:8b:5f:0c:85:c0:1d: ba:e2:f0:22:08:15:96:0c:2f:dd:1d:05:b4:06:33: b6:1a:69:4c:83:40:9c:d4:7c:ab:a7:0a:4b:a4:b5: 46:e7:dc:12:e5:ff:0f:05:f1:7e:07:2b:36:71:e2: bc:f7:d7:a3:0d:42:cd:fc:f7:b0:62:49:28:28:ba: 14:d8:87:27:ba:2d:d8:17:c2:4a:5c:47:9d:d0:fe: 91:3c:8d:77:d3:08:4f:fa:39:52:c6:31:cd:42:cc: 78:ab:89:8e:b1:8a:80:7c:59:c2:43:70:13:55:86: 37:76:2c:52:44:a4:3c:e1:2b:2d:e0:4a:f4:5f:cc: e6:13:7a:7b:b1:85:c9:39:ff:6b:d9:a5:2d:38:38: a5:ab:6f:f4:a2:3e:14:e5:6f:f1:76:c6:32:6f:5b: 06:7b:12:17:d4:a8:85:19:6f:32:44:7d:d6:09:7a: 40:cc:16:73:f8:b2:64:59:4a:91:2d:0a:f0:5b:0e: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:10:8E:2C:C1:D8:89:58:2D:1D:05:0F:09:D1:F3:F4:62:4D:D0:52 X509v3 Authority Key Identifier: keyid:58:2A:E8:03:DF:22:B0:55:C7:4E:5F:E8:F1:1D:94:40:89:56:0E:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCroA98isFXHTl_o8R2UQIlWDtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/ef046d-f959-4798-96b8-cfe1647ea865/1/WCroA98isFXHTl_o8R2UQIlWDtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:bb:98:b7:08:f3:20:29:36:44:d6:5d:21:82:d7:5b:56:0c: ad:b4:a6:6a:de:3b:a2:57:b4:dc:22:49:05:91:2a:0e:b9:13: e6:17:f2:d3:97:82:0e:22:4f:ed:f6:8a:d4:82:d7:79:5c:53: d1:d6:30:82:da:ce:c3:a4:06:10:79:b8:4a:39:03:43:c8:23: bd:d1:0c:bd:7e:33:d1:c7:18:23:4c:22:51:3f:28:b9:e9:13: 22:cb:aa:cc:2f:6a:a9:d9:96:45:d8:0b:e7:16:8c:4b:68:3c: 6e:c9:74:87:6e:f4:b7:f2:1d:df:76:08:e6:c8:04:b5:f1:1a: 1c:dd:d8:aa:f2:20:3e:06:c6:60:16:59:a4:5d:0d:e6:57:9c: 2e:e2:85:14:50:a8:61:27:0d:fd:a1:c7:47:26:43:b6:62:4f: 86:29:08:bc:1a:5c:7b:ad:12:c5:06:ac:95:c0:bf:50:a0:b8: 33:ce:b6:7a:4d:5a:a6:14:bf:b5:f5:ae:f8:71:99:25:cd:a2: e7:38:74:f9:bf:35:7f:1c:2d:07:64:ff:86:9d:fc:a2:52:a5: 71:6a:93:cf:5e:2b:1b:18:bb:fc:bd:be:86:99:ef:f5:14:6e: 52:db:30:19:c0:af:72:ca:74:67:1d:50:14:f5:1a:9a:62:8e: e1:ff:b2:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmsF+47trmLogGx4BtaeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmFlODAzZGYyMmIwNTVjNzRlNWZlOGYxMWQ5NDQwODk1 NjBlZDIwHhcNMjUxMjA2MDMwMDQyWhcNMjUxMjA3MDMwMDQyWjAzMTEwLwYDVQQD Eyg2YTEwOGUyY2MxZDg4OTU4MmQxZDA1MGYwOWQxZjNmNDYyNGRkMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBtGWQ9w7CQMxm4VRyWVUmdcsmsb KhJImT8A+dhlCMoZ42Uo6WnvDF/9LziNeQ81yrQAyjNc9f7fvrz8yjWwXLbGuuaL XwyFwB264vAiCBWWDC/dHQW0BjO2GmlMg0Cc1HyrpwpLpLVG59wS5f8PBfF+Bys2 ceK899ejDULN/PewYkkoKLoU2Icnui3YF8JKXEed0P6RPI130whP+jlSxjHNQsx4 q4mOsYqAfFnCQ3ATVYY3dixSRKQ84Sst4Er0X8zmE3p7sYXJOf9r2aUtODilq2/0 oj4U5W/xdsYyb1sGexIX1KiFGW8yRH3WCXpAzBZz+LJkWUqRLQrwWw4+6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoQjizB2IlYLR0FDwnR8/RiTdBSMB8GA1UdIwQY MBaAFFgq6APfIrBVx05f6PEdlECJVg7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2Yjgt Y2ZlMTY0N2VhODY1LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9lZjA0NmQtZjk1OS00Nzk4LTk2YjgtY2ZlMTY0N2VhODY1 LzEvV0Nyb0E5OGlzRlhIVGxfbzhSMlVRSWxXRHRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbuYtwjz ICk2RNZdIYLXW1YMrbSmat47ole03CJJBZEqDrkT5hfy05eCDiJP7faK1ILXeVxT 0dYwgtrOw6QGEHm4SjkDQ8gjvdEMvX4z0ccYI0wiUT8ouekTIsuqzC9qqdmWRdgL 5xaMS2g8bsl0h270t/Id33YI5sgEtfEaHN3YqvIgPgbGYBZZpF0N5lecLuKFFFCo YScN/aHHRyZDtmJPhikIvBpce60SxQaslcC/UKC4M862ek1aphS/tfWu+HGZJc2i 5zh0+b81fxwtB2T/hp38olKlcWqTz14rGxi7/L2+hpnv9RRuUtswGcCvcsp0Zx1Q FPUammKO4f+ySw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:49:12 2025 by rpki-client