This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json) Hash identifier: PtjQ0bfbuv03d20BVPSgH4houFkHxWBHats0b4+lLW8= Subject key identifier: 8C:9E:8C:C8:E5:74:78:02:69:53:1F:72:1C:53:4B:B3:FE:1C:21:71 Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Certificate serial: 019AF1D1888E0C31ED16F4244B44619F6B84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft Manifest number: 11E2 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=) 2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=) 3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: z2MxPL6kd6vFO+WspDceaUU7jOtYz7LRgn0TWCnWc+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:88:8e:0c:31:ed:16:f4:24:4b:44:61:9f:6b:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=8c9e8cc8e574780269531f721c534bb3fe1c2171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:8c:c9:ff:02:84:0d:ea:50:7d:25:8d:bf: e0:22:fd:30:79:8b:20:0c:6c:0b:a1:26:55:9e:a6: 1b:f9:16:b0:98:49:76:7c:27:56:1b:b1:1e:c2:32: 3b:6a:c8:24:74:ab:fe:79:8f:c0:e4:fd:96:ed:e7: 8b:35:c2:db:d9:d9:cc:49:f1:11:6d:90:3d:f7:eb: af:a8:94:dd:7a:a3:c7:11:0f:ce:70:51:e9:8a:cd: 1b:40:23:46:68:e4:dd:59:8c:bd:22:8a:17:ca:a0: 2f:a9:13:e7:29:1e:55:e3:f4:9c:63:fa:cf:f7:84: f3:e6:93:cd:93:aa:7e:e4:85:01:03:f2:c7:ca:7e: f2:e0:8e:3a:a6:f6:9e:c1:fa:1c:df:b7:c4:df:c8: b3:df:3c:ab:12:8b:59:77:eb:18:0b:f0:c8:23:4c: 19:31:95:8f:29:1b:93:80:21:2a:0e:70:67:4d:a5: 79:11:f8:5b:7b:cc:1b:5f:19:90:cc:31:39:c9:ad: 5a:46:2e:df:14:4e:76:c3:f8:6e:90:55:8d:e1:f8: f1:fb:8a:0b:3b:d6:32:ec:40:fb:3b:ea:6c:bf:4b: 05:66:07:88:40:f7:cd:fb:90:92:a2:d9:3c:a5:e9: ca:fc:4a:c1:d7:05:73:9a:cd:85:28:e0:56:fd:60: 95:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:9E:8C:C8:E5:74:78:02:69:53:1F:72:1C:53:4B:B3:FE:1C:21:71 X509v3 Authority Key Identifier: keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:50:1d:11:d6:14:6f:1d:bc:36:4a:98:0a:c8:b4:a9:2d:63: a7:76:35:33:9f:5c:c8:41:66:6d:86:77:be:26:11:56:6e:5f: a2:b7:53:b0:7e:29:f8:72:60:96:71:00:f7:cb:d2:38:45:62: f8:77:76:8f:da:a2:5d:02:ab:ed:1c:2f:82:97:bc:78:20:b9: 55:f2:ac:fb:48:05:70:c1:ed:a0:92:83:40:09:f3:2e:d3:e3: 36:46:4c:d7:e2:e2:73:e1:31:94:7c:ec:92:a7:77:7a:00:3b: be:22:c5:24:42:a9:da:4d:3f:c5:b5:cc:7a:96:dd:64:5b:64: d1:f3:47:9e:89:8d:30:05:26:3d:a4:40:b9:78:00:6e:71:9f: eb:7b:bc:78:25:c0:15:75:f9:94:e4:77:68:53:ec:e7:40:76: bc:41:e0:66:ed:e7:c2:98:a1:fb:cf:0f:9c:df:02:13:2b:6e: 8e:10:73:a8:b7:d5:2f:a9:47:27:a0:e3:37:7d:39:6c:01:89: 3e:98:5c:d9:a1:15:7c:fd:b1:bb:f8:15:bf:ee:21:87:63:65: b4:34:ef:3c:cd:b9:78:26:bb:a2:7e:b9:cf:9c:fe:5e:53:c9: c2:82:b3:0f:a6:09:0b:fb:d6:f0:fd:8c:d2:94:44:a1:83:09: 78:3b:f2:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YiODDHtFvQkS0Rhn2uEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm NmM5YzUwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD Eyg4YzllOGNjOGU1NzQ3ODAyNjk1MzFmNzIxYzUzNGJiM2ZlMWMyMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4eMyf8ChA3qUH0ljb/gIv0weYsg DGwLoSZVnqYb+RawmEl2fCdWG7EewjI7asgkdKv+eY/A5P2W7eeLNcLb2dnMSfER bZA99+uvqJTdeqPHEQ/OcFHpis0bQCNGaOTdWYy9IooXyqAvqRPnKR5V4/ScY/rP 94Tz5pPNk6p+5IUBA/LHyn7y4I46pvaewfoc37fE38iz3zyrEotZd+sYC/DII0wZ MZWPKRuTgCEqDnBnTaV5Efhbe8wbXxmQzDE5ya1aRi7fFE52w/hukFWN4fjx+4oL O9Yy7ED7O+psv0sFZgeIQPfN+5CSotk8penK/ErB1wVzms2FKOBW/WCVEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIyejMjldHgCaVMfchxTS7P+HCFxMB8GA1UdIwQY MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlAdEdYU bx28NkqYCsi0qS1jp3Y1M59cyEFmbYZ3viYRVm5fordTsH4p+HJglnEA98vSOEVi +Hd2j9qiXQKr7Rwvgpe8eCC5VfKs+0gFcMHtoJKDQAnzLtPjNkZM1+Lic+ExlHzs kqd3egA7viLFJEKp2k0/xbXMepbdZFtk0fNHnomNMAUmPaRAuXgAbnGf63u8eCXA FXX5lOR3aFPs50B2vEHgZu3nwpih+88PnN8CEytujhBzqLfVL6lHJ6DjN305bAGJ Pphc2aEVfP2xu/gVv+4hh2NltDTvPM25eCa7on65z5z+XlPJwoKzD6YJC/vW8P2M 0pREoYMJeDvyJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:17 2025 by rpki-client