This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json) Hash identifier: UzpY9ZfCkXGxTDUQH/7kuo4rGQHe9xh19UyiK8M+ORQ= Subject key identifier: 62:E9:19:1A:B9:5B:F2:66:63:46:D3:A5:97:47:4E:F2:44:50:E2:24 Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11 Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611 Certificate serial: 019AF16402E8771E130BDD59E49D14F90C67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft Manifest number: 0E04 Signing time: Sat 06 Dec 2025 02:00:54 +0000 Manifest this update: Sat 06 Dec 2025 02:00:54 +0000 Manifest next update: Sun 07 Dec 2025 02:00:54 +0000 Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: EGashT/nY41p9eODvQwuEPAfEvqPmk3rnRUXJw1x86s=) 2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:02:e8:77:1e:13:0b:dd:59:e4:9d:14:f9:0c:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611 Validity Not Before: Dec 6 02:00:54 2025 GMT Not After : Dec 7 02:00:54 2025 GMT Subject: CN=62e9191ab95bf2666346d3a597474ef24450e224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:fc:6e:42:68:3f:df:26:32:03:8e:75:24: 57:f6:da:46:c3:ab:6e:90:36:7b:04:41:c1:80:1a: 9b:b5:ec:1f:79:26:7a:f5:69:aa:b7:73:c4:73:87: 8e:7e:f3:98:c7:9f:8d:a2:89:2f:b4:74:88:31:b9: 6a:fa:2c:2a:7a:5f:57:02:c8:a5:9c:d4:23:f2:0e: d6:5a:ff:93:5a:09:09:c9:39:d6:81:79:98:db:01: e7:0c:56:84:82:f6:9c:3f:78:1c:8e:e0:97:5e:7d: 7e:2d:80:e1:44:8e:c1:9a:8a:a4:fa:e3:49:89:5b: dd:78:33:ba:d4:10:52:28:8f:57:89:65:89:5e:7f: f8:aa:e5:f0:15:bd:96:1c:54:2d:c2:08:f1:c5:70: 99:86:9b:40:e2:e7:2b:d5:12:20:b7:0b:63:cb:d8: 0b:44:19:56:31:95:9a:c4:be:a2:df:47:64:d6:99: cb:7c:33:d5:c1:dc:1c:00:e2:8d:9d:f8:78:db:83: f2:7e:40:9c:4b:65:d1:20:c5:d2:8d:97:92:a4:5f: e5:40:18:77:27:1d:cb:77:5c:03:27:87:f8:39:6c: ef:07:c3:8e:4e:ce:2c:5d:cc:19:7b:f0:df:fd:81: d0:bf:c1:71:11:47:7d:5f:68:a2:b1:1e:6e:9a:90: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E9:19:1A:B9:5B:F2:66:63:46:D3:A5:97:47:4E:F2:44:50:E2:24 X509v3 Authority Key Identifier: keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e8:bf:b9:e8:cd:a2:29:15:12:12:8a:37:ac:35:80:c8:e7: 54:3d:33:86:5c:89:45:92:8f:a0:8d:d5:d4:2e:db:84:37:f1: 03:c8:39:ac:dc:1c:1b:6a:c4:c1:34:84:90:82:de:4b:28:37: 6d:59:e7:f8:9f:0c:f0:d7:55:af:ad:ae:ed:c7:5d:30:48:39: 92:dc:f0:f5:3a:d4:6f:8c:64:31:8f:af:fe:f3:7c:f6:b0:d0: 9c:7b:fb:60:91:1c:66:22:3e:5c:e5:8a:14:d0:bd:05:85:ae: a2:6c:f1:ed:8c:fd:fa:89:7a:6d:65:66:e1:1c:ee:d8:f2:7d: 9c:6c:9b:fe:e9:39:ef:c2:c9:cb:4d:77:59:f7:3a:ce:3c:97: 1b:42:5c:52:22:b5:ca:47:3a:10:34:5b:0d:f4:d3:eb:f6:69: 3b:27:39:24:56:9d:8a:fc:3a:1f:8c:72:94:87:a8:b9:c9:c8: 33:7d:14:9b:1c:d3:e4:83:5b:67:6b:03:5f:9c:5a:8d:03:e0: 8d:9a:a7:62:27:2a:6e:0f:06:b4:cd:50:1e:36:c4:17:22:d1: 6d:5b:28:dc:c2:a0:42:be:37:da:06:8f:d1:f7:ed:31:38:84: af:b1:65:cd:d4:6c:69:93:f0:b5:d8:90:64:22:6c:60:da:18: 5b:c4:8d:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZALodx4TC91Z5J0U+QxnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGQxMDE3YzUzNDU3YThhOTIxNDE5Njg3YmRlOGE4Yjhl YjU2MTEwHhcNMjUxMjA2MDIwMDU0WhcNMjUxMjA3MDIwMDU0WjAzMTEwLwYDVQQD Eyg2MmU5MTkxYWI5NWJmMjY2NjM0NmQzYTU5NzQ3NGVmMjQ0NTBlMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQz8bkJoP98mMgOOdSRX9tpGw6tu kDZ7BEHBgBqbtewfeSZ69Wmqt3PEc4eOfvOYx5+NookvtHSIMblq+iwqel9XAsil nNQj8g7WWv+TWgkJyTnWgXmY2wHnDFaEgvacP3gcjuCXXn1+LYDhRI7Bmoqk+uNJ iVvdeDO61BBSKI9XiWWJXn/4quXwFb2WHFQtwgjxxXCZhptA4ucr1RIgtwtjy9gL RBlWMZWaxL6i30dk1pnLfDPVwdwcAOKNnfh424PyfkCcS2XRIMXSjZeSpF/lQBh3 Jx3Ld1wDJ4f4OWzvB8OOTs4sXcwZe/Df/YHQv8FxEUd9X2iisR5umpBV4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGLpGRq5W/JmY0bTpZdHTvJEUOIkMB8GA1UdIwQY MBaAFFjdEBfFNFeoqSFBloe96Ki461YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEt ZGNhZjdlZjdhZTNhLzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEtZGNhZjdlZjdhZTNh LzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+i/uejN oikVEhKKN6w1gMjnVD0zhlyJRZKPoI3V1C7bhDfxA8g5rNwcG2rEwTSEkILeSyg3 bVnn+J8M8NdVr62u7cddMEg5ktzw9TrUb4xkMY+v/vN89rDQnHv7YJEcZiI+XOWK FNC9BYWuomzx7Yz9+ol6bWVm4Rzu2PJ9nGyb/uk578LJy013Wfc6zjyXG0JcUiK1 ykc6EDRbDfTT6/ZpOyc5JFadivw6H4xylIeoucnIM30UmxzT5INbZ2sDX5xajQPg jZqnYicqbg8GtM1QHjbEFyLRbVso3MKgQr432gaP0fftMTiEr7FlzdRsaZPwtdiQ ZCJsYNoYW8SNLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:44 2025 by rpki-client