This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft File: WP3E4ivstTWhxX9LjcRBtTMWd-M.mft (raw, json) Hash identifier: c/b3BML0vPO1BtesFyWF/9brpvkVS6DGGbHTMF4gx7U= Subject key identifier: 7F:3F:FE:39:6D:0D:24:B5:4A:8D:D1:C1:4E:DF:03:97:1F:88:6A:B1 Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3 Certificate issuer: /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3 Certificate serial: 019AF2092411CE91C556D4610595E56C584C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft Manifest number: 14A4 Signing time: Sat 06 Dec 2025 05:01:16 +0000 Manifest this update: Sat 06 Dec 2025 05:01:16 +0000 Manifest next update: Sun 07 Dec 2025 05:01:16 +0000 Files and hashes: 1: WP3E4ivstTWhxX9LjcRBtTMWd-M.crl (hash: jOpbsGgvExG+BfnkIcV2QNtJN5Q/QIc+cUKJwfoYLSI=) 2: taQy9HpaIR-B5wNPU72M0d1f0co.roa (hash: GppUCw9ptPGs5O818rWaJoPW+Ulu8uS+JiuUV5bM6v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:24:11:ce:91:c5:56:d4:61:05:95:e5:6c:58:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3 Validity Not Before: Dec 6 05:01:16 2025 GMT Not After : Dec 7 05:01:16 2025 GMT Subject: CN=7f3ffe396d0d24b54a8dd1c14edf03971f886ab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:c8:d8:80:ef:0d:30:73:0d:8e:90:a9:d3: e8:e9:38:fb:d5:57:33:09:7c:2b:2f:20:4e:b5:af: 73:6b:46:4e:54:c2:80:5f:34:61:26:59:c5:13:7b: 47:de:ef:e8:8e:71:66:f9:c6:42:69:5f:f3:ed:a8: 09:fa:3e:ed:4c:89:d0:44:7d:3b:ef:3a:48:c7:8f: 9b:76:b8:42:29:11:7e:ff:72:c3:0e:9c:97:82:c5: 2e:5d:2f:28:8e:85:b3:bc:b8:06:79:53:77:54:80: 8e:f4:68:a2:4b:f6:da:7b:a1:e5:fe:5b:bb:15:7e: c0:6d:dc:7a:36:27:71:8f:b9:25:88:77:21:c1:98: 2d:48:d9:99:65:20:2b:31:cd:78:7b:09:9b:dc:b1: 7d:ce:db:be:83:cf:39:58:05:21:36:07:f8:5f:51: 42:ac:fe:18:1c:61:18:51:08:28:13:46:1a:de:6a: 1e:39:37:cc:ba:61:03:e5:c9:2f:6d:ee:ed:a5:9e: 91:3f:7f:16:5e:99:37:96:15:08:9b:be:f4:6d:ad: ba:cc:f5:e0:94:ba:0b:a3:2e:58:6e:3d:6d:d0:7c: 60:5a:e8:fb:8c:5b:16:c9:c4:d7:f2:69:3b:03:14: 1a:20:aa:2a:04:59:57:3f:c5:10:93:01:06:f8:ae: d7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3F:FE:39:6D:0D:24:B5:4A:8D:D1:C1:4E:DF:03:97:1F:88:6A:B1 X509v3 Authority Key Identifier: keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e8:bd:74:e7:ed:44:4c:92:dc:e2:a6:1c:08:3d:f5:31:6d: 99:b0:f7:ba:3b:fe:f2:77:fe:d2:4e:a2:9f:2a:01:23:54:2c: 55:55:73:75:1b:35:c1:43:03:a2:d1:2d:07:15:3f:7e:7a:bd: 5e:a7:e8:7e:2c:b9:b0:53:1d:e3:6b:92:4c:e3:be:16:c2:a0: 8d:3c:b1:a5:94:f9:cf:e0:89:fe:47:18:36:d7:72:64:ae:db: 65:0d:e0:72:65:f6:b0:b3:2f:54:2d:fe:31:47:86:27:0f:aa: cd:fe:48:9f:6d:5d:3b:23:80:35:36:d4:d0:44:1e:69:e6:36: d0:3f:62:72:17:b1:1e:8c:57:14:90:5d:27:6b:6c:f4:97:76: 0c:19:2e:e5:36:85:f3:77:d0:3a:7b:a7:c1:2f:d8:82:d6:8e: e5:ed:4c:3a:18:e6:22:2c:91:6a:ef:ed:ed:cf:eb:b1:1c:93: c7:67:44:04:1e:17:6e:0f:1c:a6:7a:05:5f:7e:65:2f:75:59: 63:e2:7a:e9:48:b8:e3:45:c1:2f:75:d6:6f:4e:7e:55:50:c0: 2a:97:3b:e7:09:1d:46:cf:79:4c:c4:dc:65:97:de:d2:9b:1c: a0:a4:c6:35:5e:c2:3d:9e:71:12:50:73:53:de:6b:5d:65:ff: ea:c2:8e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSQRzpHFVtRhBZXlbFhMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZmRjNGUyMmJlY2I1MzVhMWM1N2Y0YjhkYzQ0MWI1MzMx Njc3ZTMwHhcNMjUxMjA2MDUwMTE2WhcNMjUxMjA3MDUwMTE2WjAzMTEwLwYDVQQD Eyg3ZjNmZmUzOTZkMGQyNGI1NGE4ZGQxYzE0ZWRmMDM5NzFmODg2YWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/LI2IDvDTBzDY6QqdPo6Tj71Vcz CXwrLyBOta9za0ZOVMKAXzRhJlnFE3tH3u/ojnFm+cZCaV/z7agJ+j7tTInQRH07 7zpIx4+bdrhCKRF+/3LDDpyXgsUuXS8ojoWzvLgGeVN3VICO9GiiS/bae6Hl/lu7 FX7Abdx6Nidxj7kliHchwZgtSNmZZSArMc14ewmb3LF9ztu+g885WAUhNgf4X1FC rP4YHGEYUQgoE0Ya3moeOTfMumED5ckvbe7tpZ6RP38WXpk3lhUIm770ba26zPXg lLoLoy5Ybj1t0HxgWuj7jFsWycTX8mk7AxQaIKoqBFlXP8UQkwEG+K7X/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8//jltDSS1So3RwU7fA5cfiGqxMB8GA1UdIwQY MBaAFFj9xOIr7LU1ocV/S43EQbUzFnfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZjA2MGMtYzcyNi00Yjk5LTgzNjAt YjUzZjI3MTMwZDc4LzEvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lZjA2MGMtYzcyNi00Yjk5LTgzNjAtYjUzZjI3MTMwZDc4 LzEvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArei9dOft REyS3OKmHAg99TFtmbD3ujv+8nf+0k6inyoBI1QsVVVzdRs1wUMDotEtBxU/fnq9 Xqfofiy5sFMd42uSTOO+FsKgjTyxpZT5z+CJ/kcYNtdyZK7bZQ3gcmX2sLMvVC3+ MUeGJw+qzf5In21dOyOANTbU0EQeaeY20D9ichexHoxXFJBdJ2ts9Jd2DBku5TaF 83fQOnunwS/YgtaO5e1MOhjmIiyRau/t7c/rsRyTx2dEBB4Xbg8cpnoFX35lL3VZ Y+J66Ui440XBL3XWb05+VVDAKpc75wkdRs95TMTcZZfe0pscoKTGNV7CPZ5xElBz U95rXWX/6sKONg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:50 2025 by rpki-client