This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json) Hash identifier: SKaMDfuOS7CxNSLCqp0khXXQBbUNY7fKSkDoQTvADKY= Subject key identifier: D1:DD:B1:51:2A:2F:90:91:17:0C:2F:94:84:B1:B3:AA:26:59:6E:55 Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019AF2ADBB401E391E157F3A8B4B71479CA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 08:01:03 +0000 Manifest this update: Sat 06 Dec 2025 08:01:03 +0000 Manifest next update: Sun 07 Dec 2025 08:01:03 +0000 Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=) 2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=) 3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=) 4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: d2zQZIKv6r7qP42ojxzlcsZjGdjio+uqeR47I114vVw=) 5: deip-a1nKqtxdR8MxNP4CLXk9DQ.roa (hash: MuDORlB5KKMApbLSzyMuwBEYboiHiJyqO3SnrsnY1ps=) 6: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=) 7: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=) 8: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:bb:40:1e:39:1e:15:7f:3a:8b:4b:71:47:9c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Dec 6 08:01:03 2025 GMT Not After : Dec 7 08:01:03 2025 GMT Subject: CN=d1ddb1512a2f9091170c2f9484b1b3aa26596e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4c:8e:89:18:b9:4e:cd:d5:2c:23:45:fd:11: 73:17:90:71:62:66:09:d1:2b:b6:6c:94:aa:6d:86: 37:35:67:d1:8e:cb:b6:de:8d:89:d6:04:28:c6:b0: 24:3f:04:81:a9:b9:eb:e0:f2:3a:70:e4:6f:48:88: fb:1d:07:00:ec:88:fc:b6:90:dd:8b:19:62:fc:f2: 42:54:6a:6a:17:f8:ea:64:db:2b:36:0f:d7:6c:6e: 6d:c5:30:56:94:67:3a:e4:22:3c:b7:a7:ee:dd:7a: c0:6b:7b:8e:33:2d:16:77:09:3e:b2:c0:4f:96:36: 76:7c:0e:a8:4a:35:77:e6:1e:d7:8c:1f:16:f3:9b: 95:86:d6:34:91:23:fd:08:b9:28:7d:ac:8b:95:d2: 26:2a:13:36:7c:24:c7:fe:8f:0e:08:84:43:50:f9: d3:60:70:f3:a3:60:f7:0f:2e:ba:92:b3:aa:a9:57: 7d:ae:da:6e:3e:6d:06:de:c6:6c:66:7c:51:ed:44: c8:03:91:68:9e:da:74:5a:a5:9c:2b:c0:13:13:32: 8a:16:39:9b:44:b5:af:05:98:44:1b:c5:eb:bf:67: 59:3b:40:bc:a6:82:76:9e:94:0e:04:19:94:94:08: 23:a1:4d:1a:83:92:18:ef:c1:59:81:ac:e2:f2:46: 47:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DD:B1:51:2A:2F:90:91:17:0C:2F:94:84:B1:B3:AA:26:59:6E:55 X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:28:fc:c8:84:27:bb:74:78:e2:05:ec:e7:4d:7d:c6:10:b5: 18:20:35:91:7a:50:db:12:09:a6:80:25:6f:d7:de:ef:93:21: 9e:3e:75:3c:66:cd:e5:3f:f3:82:b1:55:a3:e9:55:a7:3a:c7: 86:25:d8:ad:36:73:8b:8c:28:06:3e:29:f6:77:ba:5d:75:59: 76:4c:46:68:1b:f3:f7:1b:58:64:68:ee:42:d0:da:aa:2d:9f: de:6b:47:97:12:4f:10:82:f4:b1:38:bd:30:06:39:7c:d2:85: 7b:a9:a4:0a:90:8b:30:8a:b5:cd:9d:f6:4d:b2:68:cc:5b:39: 53:70:63:04:50:e0:0a:24:20:7f:d4:c7:bf:64:63:1b:de:b7: ea:62:95:16:0d:7e:fb:28:83:e1:ce:80:17:0f:d2:18:9c:fc: a4:dd:0a:61:dd:8a:e0:a4:6c:7a:9f:2a:36:c2:84:34:e5:79: 3b:ae:58:52:3c:91:66:12:9d:f2:20:e6:c9:19:7f:5c:6c:31: a1:f5:3a:13:c1:ee:81:84:a5:95:b6:eb:da:8c:83:3f:49:16: 6d:8c:55:8b:ca:38:5c:19:c2:d8:a9:8d:7a:0f:82:ba:70:04: 4e:ee:5a:56:47:2a:44:a3:0b:c5:4c:0a:cc:75:44:b5:06:3d: 6e:31:c6:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbtAHjkeFX86i0txR5ynMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjUxMjA2MDgwMTAzWhcNMjUxMjA3MDgwMTAzWjAzMTEwLwYDVQQD EyhkMWRkYjE1MTJhMmY5MDkxMTcwYzJmOTQ4NGIxYjNhYTI2NTk2ZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUyOiRi5Ts3VLCNF/RFzF5BxYmYJ 0Su2bJSqbYY3NWfRjsu23o2J1gQoxrAkPwSBqbnr4PI6cORvSIj7HQcA7Ij8tpDd ixli/PJCVGpqF/jqZNsrNg/XbG5txTBWlGc65CI8t6fu3XrAa3uOMy0Wdwk+ssBP ljZ2fA6oSjV35h7XjB8W85uVhtY0kSP9CLkofayLldImKhM2fCTH/o8OCIRDUPnT YHDzo2D3Dy66krOqqVd9rtpuPm0G3sZsZnxR7UTIA5Fontp0WqWcK8ATEzKKFjmb RLWvBZhEG8Xrv2dZO0C8poJ2npQOBBmUlAgjoU0ag5IY78FZgazi8kZH+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHdsVEqL5CRFwwvlISxs6omWW5VMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSj8yIQn u3R44gXs5019xhC1GCA1kXpQ2xIJpoAlb9fe75Mhnj51PGbN5T/zgrFVo+lVpzrH hiXYrTZzi4woBj4p9ne6XXVZdkxGaBvz9xtYZGjuQtDaqi2f3mtHlxJPEIL0sTi9 MAY5fNKFe6mkCpCLMIq1zZ32TbJozFs5U3BjBFDgCiQgf9THv2RjG9636mKVFg1+ +yiD4c6AFw/SGJz8pN0KYd2K4KRsep8qNsKENOV5O65YUjyRZhKd8iDmyRl/XGwx ofU6E8HugYSllbbr2oyDP0kWbYxVi8o4XBnC2KmNeg+CunAETu5aVkcqRKMLxUwK zHVEtQY9bjHGmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:12 2025 by rpki-client