This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json) Hash identifier: fTKq4zW2CvLrlh5pd0RWey3YKH10mMSt6Z0T+1YPrFI= Subject key identifier: 19:46:41:B5:BD:6B:ED:78:A2:95:7C:26:92:22:67:B6:52:1B:10:B3 Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1 Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1 Certificate serial: 019AF31BE26D7950A9EF8A81AD6C648FC533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft Manifest number: 0AEC Signing time: Sat 06 Dec 2025 10:01:22 +0000 Manifest this update: Sat 06 Dec 2025 10:01:22 +0000 Manifest next update: Sun 07 Dec 2025 10:01:22 +0000 Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: 90uUCg5vsJMJNQNwl4DlBPBhJTvGO8FO9Ufsk1smdVw=) 2: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (hash: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:e2:6d:79:50:a9:ef:8a:81:ad:6c:64:8f:c5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1 Validity Not Before: Dec 6 10:01:22 2025 GMT Not After : Dec 7 10:01:22 2025 GMT Subject: CN=194641b5bd6bed78a2957c26922267b6521b10b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3f:17:cd:57:f1:48:a6:f8:f8:1f:94:7c:83: bd:76:77:72:07:80:09:68:aa:9f:60:b3:a9:b4:1a: de:c1:6a:9d:e8:36:5c:ff:ce:1e:c4:44:dc:03:26: d8:62:ef:74:96:25:78:a8:ca:55:67:11:63:6b:fe: 48:bd:33:94:a8:6b:44:07:be:66:aa:0e:18:9d:dd: ac:b3:07:2d:86:c3:8f:a5:08:f7:6a:8f:95:e6:8b: a6:9f:fb:df:d2:83:75:80:75:ab:1f:80:2d:6e:a5: 7e:0a:29:59:6f:86:ff:32:0f:ce:7b:cb:80:90:d4: e4:ab:78:61:1d:dd:6c:a6:dc:16:15:25:9a:ff:cf: f2:e3:6a:55:bf:19:2d:f5:4f:b6:9e:59:1f:20:d9: 47:84:d5:05:f4:f1:18:e6:95:8d:59:99:aa:38:11: 35:a1:de:03:09:ea:63:0d:c8:80:52:6a:85:94:a6: 7a:e6:3f:27:88:d4:8f:d5:49:f9:31:95:29:04:24: 01:80:c8:04:01:73:19:50:9b:c5:bb:51:44:e8:1a: 51:50:92:3e:46:6b:91:4e:a4:65:2a:e9:93:98:f6: a7:3d:4b:e1:83:cd:03:65:19:97:f1:6e:59:20:f0: bf:9a:a5:5f:35:c8:55:79:9f:e8:d5:bf:bf:50:0d: 9c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:46:41:B5:BD:6B:ED:78:A2:95:7C:26:92:22:67:B6:52:1B:10:B3 X509v3 Authority Key Identifier: keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:60:ab:cc:4e:3b:e8:2b:cf:e9:98:67:4d:24:15:26:f2:c5: 7b:5b:8e:74:41:fd:bd:b3:e8:da:04:8a:90:06:61:4a:c7:b7: cf:83:c5:1a:b1:e6:f9:77:db:2b:f4:4c:17:fc:f5:19:33:3c: 4d:65:ac:d2:03:d2:91:6c:be:0c:79:ae:2d:b2:d4:a3:17:6b: 7d:54:90:e1:d1:50:f3:17:98:d1:b7:d9:68:48:1f:4c:b1:9a: 7f:82:83:45:37:ee:fd:d3:58:21:4c:47:20:c7:74:da:5a:96: b1:a4:79:3f:0d:52:f9:66:e1:7f:76:c0:4c:10:90:48:17:76: 04:4d:4a:70:9b:1e:15:ff:14:54:89:29:41:43:5b:ed:50:92: 24:56:87:21:00:6a:1e:8b:bc:9e:65:4c:4f:9d:fb:7e:25:93: 32:fa:6b:be:6e:ae:7f:2c:38:e0:6b:dc:b5:a2:b6:21:71:48: 1c:47:d2:87:0d:cc:70:80:dc:b2:69:47:7e:14:cd:b5:0e:84: 1f:9b:3c:ec:a4:fe:4f:5e:2e:8f:b4:0d:0e:5e:d0:5d:db:31: 9c:f5:f7:81:f3:65:31:e7:85:8d:9f:90:7d:e4:ba:d1:f2:8d: 4e:2f:73:06:2b:22:4f:9f:58:67:dd:7c:22:c3:d8:53:91:be: 8a:fe:9d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+JteVCp74qBrWxkj8UzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NDdmMWY0ZjZiY2IyYTQ3NThhYzhhOTk3YmMxMDgwMDBl NDE4ZDEwHhcNMjUxMjA2MTAwMTIyWhcNMjUxMjA3MTAwMTIyWjAzMTEwLwYDVQQD EygxOTQ2NDFiNWJkNmJlZDc4YTI5NTdjMjY5MjIyNjdiNjUyMWIxMGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7z8XzVfxSKb4+B+UfIO9dndyB4AJ aKqfYLOptBrewWqd6DZc/84exETcAybYYu90liV4qMpVZxFja/5IvTOUqGtEB75m qg4Ynd2sswcthsOPpQj3ao+V5oumn/vf0oN1gHWrH4AtbqV+CilZb4b/Mg/Oe8uA kNTkq3hhHd1sptwWFSWa/8/y42pVvxkt9U+2nlkfINlHhNUF9PEY5pWNWZmqOBE1 od4DCepjDciAUmqFlKZ65j8niNSP1Un5MZUpBCQBgMgEAXMZUJvFu1FE6BpRUJI+ RmuRTqRlKumTmPanPUvhg80DZRmX8W5ZIPC/mqVfNchVeZ/o1b+/UA2c8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlGQbW9a+14opV8JpIiZ7ZSGxCzMB8GA1UdIwQY MBaAFFhH8fT2vLKkdYrIqZe8EIAA5BjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYt MDY1YmMyOGMyYTUyLzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYtMDY1YmMyOGMyYTUy LzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmCrzE47 6CvP6ZhnTSQVJvLFe1uOdEH9vbPo2gSKkAZhSse3z4PFGrHm+XfbK/RMF/z1GTM8 TWWs0gPSkWy+DHmuLbLUoxdrfVSQ4dFQ8xeY0bfZaEgfTLGaf4KDRTfu/dNYIUxH IMd02lqWsaR5Pw1S+Wbhf3bATBCQSBd2BE1KcJseFf8UVIkpQUNb7VCSJFaHIQBq Hou8nmVMT537fiWTMvprvm6ufyw44GvctaK2IXFIHEfShw3McIDcsmlHfhTNtQ6E H5s87KT+T14uj7QNDl7QXdsxnPX3gfNlMeeFjZ+QfeS60fKNTi9zBisiT59YZ918 IsPYU5G+iv6d9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:12 2025 by rpki-client