This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json) Hash identifier: O24RYZJftQ0erNRq/tNxRW7D18vKld/yEWf738G55eA= Subject key identifier: D6:66:83:B6:36:1A:AD:5C:AE:D7:6C:ED:29:52:23:EE:4A:C0:B5:44 Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a Certificate serial: 019AF509E708DCFFB48EF8F61E6BF89C1903 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft Manifest number: 0E07 Signing time: Sat 06 Dec 2025 19:00:58 +0000 Manifest this update: Sat 06 Dec 2025 19:00:58 +0000 Manifest next update: Sun 07 Dec 2025 19:00:58 +0000 Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: gCXp/aqzz9zA7NA4Pg1jcIi912AH2zkffMKxZceAUyk=) 2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:e7:08:dc:ff:b4:8e:f8:f6:1e:6b:f8:9c:19:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a Validity Not Before: Dec 6 19:00:58 2025 GMT Not After : Dec 7 19:00:58 2025 GMT Subject: CN=d66683b6361aad5caed76ced295223ee4ac0b544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2d:49:90:43:7e:59:6a:cd:24:51:19:9e:4f: 8a:08:b8:eb:49:6c:ba:46:a6:e8:98:42:c0:2f:eb: 9f:cc:0b:a7:15:aa:80:36:8e:5e:42:10:85:72:55: 2a:24:1f:f1:de:d4:28:eb:b5:1b:b8:9c:80:3d:f9: 07:56:0a:b6:d3:fd:bf:8f:44:76:93:a1:19:4e:cd: 88:56:89:4d:af:da:d4:9f:0b:0d:e7:9c:56:71:d1: f4:78:4b:a8:19:48:80:ac:6d:42:0c:2a:e5:f3:2b: da:52:13:9a:34:fb:1d:c7:ff:06:75:9c:98:7d:ef: f7:41:44:11:c7:82:5a:fc:c4:e1:9a:02:18:3f:ae: 13:19:63:46:b3:31:97:1b:7f:1b:a5:29:28:f1:51: 82:37:f3:2a:43:82:61:e9:e6:7e:5f:9a:ea:97:3c: f3:65:18:bd:cd:21:96:a9:36:c9:3d:c3:44:a9:d7: 63:31:af:12:3f:d6:29:bf:6a:67:40:54:1a:27:5b: 3a:80:ad:4e:ad:1b:65:1e:a9:6f:fa:21:fd:b3:4a: 8a:3d:57:18:0a:0a:c6:55:a9:9c:e4:ac:e8:99:47: 59:25:0b:3f:51:a3:81:c9:44:d7:5b:12:c2:24:1c: 07:9b:07:11:ff:5a:1a:34:94:15:11:c7:43:2a:86: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:66:83:B6:36:1A:AD:5C:AE:D7:6C:ED:29:52:23:EE:4A:C0:B5:44 X509v3 Authority Key Identifier: keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:f9:55:7f:5f:df:cd:d9:97:19:6b:bb:e5:7d:e9:5a:07:d3: f8:69:fe:18:3c:f3:e8:6d:8c:20:73:8f:9d:ca:78:cc:c6:27: 9b:2d:f8:51:cf:88:fa:97:47:eb:91:d6:4a:d4:bd:43:48:05: 75:98:2f:95:f1:94:c4:8b:10:eb:05:22:69:cf:86:d2:41:be: 81:4c:80:9b:9e:a7:15:e2:11:4d:92:ac:1c:2c:92:e5:a6:a4: 9f:cc:42:1d:98:e8:47:af:93:f1:59:d1:fc:31:9d:00:b8:aa: 87:f0:10:cc:f2:48:c6:e1:ca:cb:2f:b2:05:a9:ba:b3:56:14: fb:74:b2:6e:15:6c:13:cf:dd:04:a5:1b:49:2f:6b:ee:8d:bb: 80:4a:19:c7:ac:a4:f4:e7:92:94:52:c6:8b:a9:be:74:69:af: c2:28:25:cb:76:1d:cc:07:e3:45:4b:bb:35:90:5d:a1:c9:e5: 01:6f:30:ae:92:94:f7:5d:89:24:05:36:c7:1f:b9:19:1a:60: 2e:de:ca:71:d4:4e:d1:35:cf:75:0f:4a:d2:cc:fc:fc:d8:c5: 23:fd:1b:4d:e3:bf:36:1a:f8:9d:3a:6d:d3:57:d8:44:fa:99: f5:e8:e5:25:fc:72:3c:fa:ea:0a:90:a8:eb:ad:d4:93:5c:37: 76:bc:54:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CecI3P+0jvj2Hmv4nBkDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Nzg1YTIxZTJkMDdjNjhmZjMxNzU1OGM2OWVmMTE4Y2M3 NTgwNWEwHhcNMjUxMjA2MTkwMDU4WhcNMjUxMjA3MTkwMDU4WjAzMTEwLwYDVQQD EyhkNjY2ODNiNjM2MWFhZDVjYWVkNzZjZWQyOTUyMjNlZTRhYzBiNTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAty1JkEN+WWrNJFEZnk+KCLjrSWy6 RqbomELAL+ufzAunFaqANo5eQhCFclUqJB/x3tQo67UbuJyAPfkHVgq20/2/j0R2 k6EZTs2IVolNr9rUnwsN55xWcdH0eEuoGUiArG1CDCrl8yvaUhOaNPsdx/8GdZyY fe/3QUQRx4Ja/MThmgIYP64TGWNGszGXG38bpSko8VGCN/MqQ4Jh6eZ+X5rqlzzz ZRi9zSGWqTbJPcNEqddjMa8SP9Ypv2pnQFQaJ1s6gK1OrRtlHqlv+iH9s0qKPVcY CgrGVamc5KzomUdZJQs/UaOByUTXWxLCJBwHmwcR/1oaNJQVEcdDKoa0lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZmg7Y2Gq1crtds7SlSI+5KwLVEMB8GA1UdIwQY MBaAFFl4WiHi0Hxo/zF1WMae8RjMdYBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTct NzVmNGZjYTg2YWU0LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTctNzVmNGZjYTg2YWU0 LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/lVf1/f zdmXGWu75X3pWgfT+Gn+GDzz6G2MIHOPncp4zMYnmy34Uc+I+pdH65HWStS9Q0gF dZgvlfGUxIsQ6wUiac+G0kG+gUyAm56nFeIRTZKsHCyS5aakn8xCHZjoR6+T8VnR /DGdALiqh/AQzPJIxuHKyy+yBam6s1YU+3SybhVsE8/dBKUbSS9r7o27gEoZx6yk 9OeSlFLGi6m+dGmvwigly3YdzAfjRUu7NZBdocnlAW8wrpKU912JJAU2xx+5GRpg Lt7KcdRO0TXPdQ9K0sz8/NjFI/0bTeO/Nhr4nTpt01fYRPqZ9ejlJfxyPPrqCpCo 663Uk1w3drxUXA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:03:54 2025 by rpki-client