This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft File: WwyVAj-g0zsibu8vIsjso5BSa_A.mft (raw, json) Hash identifier: bn97VnxlUZ9YdzJaQIPSfEu1qOE1D+5xwDc8OgiIBI4= Subject key identifier: AC:0D:CD:B7:DB:07:B8:0E:66:06:9C:21:20:CF:63:28:C6:F1:01:0C Authority key identifier: 5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0 Certificate issuer: /CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0 Certificate serial: 019AF27731A455ABFCAA9D82BBEC3D540364 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft Manifest number: 0E96 Signing time: Sat 06 Dec 2025 07:01:28 +0000 Manifest this update: Sat 06 Dec 2025 07:01:28 +0000 Manifest next update: Sun 07 Dec 2025 07:01:28 +0000 Files and hashes: 1: WwyVAj-g0zsibu8vIsjso5BSa_A.crl (hash: llKBooCO5tXobgQboOGM96ivfmfZfKQbuDG8Gs/J5aQ=) 2: wllNqt1P393lVw_WgHLjVq0jQ3M.roa (hash: BBqAMtasXCpwxv6WN/tQ+Ub2hvQgjIJGzl78O7sCb5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:31:a4:55:ab:fc:aa:9d:82:bb:ec:3d:54:03:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b0c95023fa0d33b226eef2f22c8eca390526bf0 Validity Not Before: Dec 6 07:01:28 2025 GMT Not After : Dec 7 07:01:28 2025 GMT Subject: CN=ac0dcdb7db07b80e66069c2120cf6328c6f1010c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:90:e8:74:a9:bf:77:d9:53:37:e6:e9:5e:ce: 32:58:fb:04:6a:e8:36:6d:31:ea:41:90:e3:a6:b8: 06:df:97:91:8b:7c:34:d2:a9:2d:fb:34:71:00:f8: c5:07:c7:7d:2e:7c:5a:94:30:d3:7e:f4:d6:c6:b3: 7d:4c:0b:45:22:cc:0a:b1:da:22:41:03:b8:d6:27: 2f:8c:c0:6e:39:35:ee:e1:db:3e:c3:88:2e:0f:f6: 2a:d3:79:cc:f7:f2:1a:34:23:e6:a3:a7:bd:99:e8: d1:5e:dd:81:75:cf:db:72:88:a9:85:58:db:98:69: cf:de:15:29:dc:ae:95:94:80:8c:8a:03:a6:d2:91: a4:0e:52:53:9e:67:1b:ba:73:53:ba:92:ee:e9:1b: d9:19:1e:a5:c4:a7:ec:ca:20:d0:79:f1:c5:fa:da: 07:57:af:10:cf:6c:10:b7:54:f8:b3:c9:76:65:09: b4:9b:8e:9c:0d:46:62:07:78:1f:5d:70:ea:84:22: 1c:cb:0b:05:61:43:e1:17:c2:cf:be:bf:6b:a4:55: f5:e4:e5:15:12:77:f9:ee:da:f4:99:7d:4d:35:3d: 93:4a:97:01:88:53:47:92:80:7e:5d:ba:96:cb:b3: d9:d4:1e:90:45:b5:10:f5:01:40:57:63:e7:68:7f: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0D:CD:B7:DB:07:B8:0E:66:06:9C:21:20:CF:63:28:C6:F1:01:0C X509v3 Authority Key Identifier: keyid:5B:0C:95:02:3F:A0:D3:3B:22:6E:EF:2F:22:C8:EC:A3:90:52:6B:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwyVAj-g0zsibu8vIsjso5BSa_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/58576d-d439-401b-9f81-e0e90e084508/1/WwyVAj-g0zsibu8vIsjso5BSa_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fa:36:2f:e1:24:83:cb:2f:ff:4f:92:e3:e6:1b:bb:3b:aa: fb:40:27:7a:81:a2:47:48:02:58:5f:c3:82:79:c2:c5:ec:0e: 23:d8:29:18:98:b1:4d:f6:6a:de:40:c3:53:76:99:f6:39:29: e2:ff:28:b0:2d:92:01:1a:c6:3e:60:e4:23:7d:28:64:8f:0b: 65:e6:a0:97:f0:11:48:ed:36:9b:8e:43:e5:06:8f:87:55:fe: 2e:a6:42:7c:79:4c:18:80:ae:96:38:b3:84:c5:7b:f1:5c:3a: 3b:7c:a3:6f:44:71:74:e6:4f:d2:9f:13:97:62:2c:9f:a0:c0: 92:61:d2:48:29:da:46:20:c6:41:6c:16:cd:f6:1f:12:76:8d: de:cc:d7:1f:a2:e5:44:21:d4:a4:06:68:52:6f:19:29:7b:76: 37:ea:af:74:65:98:1c:4e:40:aa:31:a1:19:0f:56:e7:0a:db: 88:e7:aa:89:b6:14:95:88:bd:57:38:e3:79:ca:d4:49:bc:79: ab:d1:aa:79:73:5a:0a:dd:76:cc:e6:4d:a9:d4:b6:ae:22:e3: 00:0f:05:55:f3:3c:65:55:de:7a:40:56:73:3e:48:03:7a:fa: 32:dd:73:3f:12:f0:13:0d:b9:22:d7:db:df:6a:6b:ea:f0:14: 0a:43:c6:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzGkVav8qp2Cu+w9VANkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMGM5NTAyM2ZhMGQzM2IyMjZlZWYyZjIyYzhlY2EzOTA1 MjZiZjAwHhcNMjUxMjA2MDcwMTI4WhcNMjUxMjA3MDcwMTI4WjAzMTEwLwYDVQQD EyhhYzBkY2RiN2RiMDdiODBlNjYwNjljMjEyMGNmNjMyOGM2ZjEwMTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJDodKm/d9lTN+bpXs4yWPsEaug2 bTHqQZDjprgG35eRi3w00qkt+zRxAPjFB8d9LnxalDDTfvTWxrN9TAtFIswKsdoi QQO41icvjMBuOTXu4ds+w4guD/Yq03nM9/IaNCPmo6e9mejRXt2Bdc/bcoiphVjb mGnP3hUp3K6VlICMigOm0pGkDlJTnmcbunNTupLu6RvZGR6lxKfsyiDQefHF+toH V68Qz2wQt1T4s8l2ZQm0m46cDUZiB3gfXXDqhCIcywsFYUPhF8LPvr9rpFX15OUV Enf57tr0mX1NNT2TSpcBiFNHkoB+XbqWy7PZ1B6QRbUQ9QFAV2PnaH+jyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwNzbfbB7gOZgacISDPYyjG8QEMMB8GA1UdIwQY MBaAFFsMlQI/oNM7Im7vLyLI7KOQUmvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEt ZTBlOTBlMDg0NTA4LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81ODU3NmQtZDQzOS00MDFiLTlmODEtZTBlOTBlMDg0NTA4 LzEvV3d5VkFqLWcwenNpYnU4dklzanNvNUJTYV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPo2L+Ek g8sv/0+S4+Ybuzuq+0AneoGiR0gCWF/DgnnCxewOI9gpGJixTfZq3kDDU3aZ9jkp 4v8osC2SARrGPmDkI30oZI8LZeagl/ARSO02m45D5QaPh1X+LqZCfHlMGICuljiz hMV78Vw6O3yjb0RxdOZP0p8Tl2Isn6DAkmHSSCnaRiDGQWwWzfYfEnaN3szXH6Ll RCHUpAZoUm8ZKXt2N+qvdGWYHE5AqjGhGQ9W5wrbiOeqibYUlYi9VzjjecrUSbx5 q9GqeXNaCt12zOZNqdS2riLjAA8FVfM8ZVXeekBWcz5IA3r6Mt1zPxLwEw25Itfb 32pr6vAUCkPGtw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:56 2025 by rpki-client