This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft File: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft (raw, json) Hash identifier: ZFFvtZ3B5tYPxWEnRHxzKrWsD0g0lcJcOPx4bOvHECk= Subject key identifier: AF:18:6D:65:2A:82:E6:E5:D8:2B:C2:96:4F:45:42:7B:1F:F0:79:5B Authority key identifier: 58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED Certificate issuer: /CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed Certificate serial: 019AF12EA36B77A5B3E225B07A8CE71ECD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft Manifest number: 03FA Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: CqZAFiIzp-k21bzGsuj1395ZHTc.roa (hash: gXssHvpvQonpjegaCBTMeVVsQnPbWqrgEQgoKWzts44=) 2: WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl (hash: QJ8iQmh2MlFfXjGszrlU9mbWmsfJtz0tOdSfqGT0YrI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a3:6b:77:a5:b3:e2:25:b0:7a:8c:e7:1e:cd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b2b2f6113ba430f72e55445b5c7849dc7cfaed Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=af186d652a82e6e5d82bc2964f45427b1ff0795b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:c1:35:fe:b2:7e:16:36:d3:62:4f:72:33: f2:b9:22:97:5f:8d:66:96:a5:09:02:be:71:1d:60: df:bd:43:e1:f8:d0:f5:cd:8b:b5:bc:2a:77:ab:22: df:02:61:cd:9b:35:0f:cd:b1:1f:e9:42:32:3e:a7: 3e:8f:9c:fb:8b:29:8b:cd:33:19:c6:29:35:94:49: e0:dc:4d:be:89:b4:c8:9c:53:96:a9:1a:13:6b:f1: 7e:d7:ee:ae:cd:4b:af:3e:41:be:2f:40:1f:c6:e6: 63:93:c6:0b:6d:f1:fb:20:1a:41:03:2f:66:cf:f2: 88:7d:32:31:75:0a:81:70:57:59:6e:83:0e:78:f4: 4a:d3:1f:c7:e6:91:53:9c:ae:a6:79:86:39:5e:96: a7:86:72:a8:34:03:82:72:3c:2f:8b:46:bc:ef:55: ee:c8:96:a8:b2:b9:ec:e2:d8:24:98:e9:6e:21:04: 9a:59:8c:01:49:4d:0c:b9:3a:25:96:51:3a:88:05: 8f:b7:6c:5c:45:b6:0c:35:9f:e6:b9:3c:25:88:a1: cd:ca:f8:53:62:e0:ac:e0:ee:2f:26:fd:85:ae:9a: a2:45:fb:b1:e6:05:82:56:0a:20:c1:38:9f:8b:b3: fe:6a:e1:9c:b9:ee:6d:2a:45:e5:4b:78:c4:ab:6a: 8c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:18:6D:65:2A:82:E6:E5:D8:2B:C2:96:4F:45:42:7B:1F:F0:79:5B X509v3 Authority Key Identifier: keyid:58:B2:B2:F6:11:3B:A4:30:F7:2E:55:44:5B:5C:78:49:DC:7C:FA:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/7b369f-b06e-4af0-9acb-a4cccef8c4a8/1/WLKy9hE7pDD3LlVEW1x4Sdx8-u0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:93:18:41:35:77:db:ea:e7:ed:60:b6:a1:1f:ba:20:e1:46: 09:ba:d6:06:cc:8d:31:be:54:a3:eb:f0:2e:50:67:de:61:4b: a9:4c:38:c0:97:d9:a4:0b:0f:b2:ba:fa:7a:ce:52:95:ed:e8: 4c:3c:7d:07:be:65:5d:06:f9:3f:fa:c3:01:79:b0:a2:1a:e9: 91:fd:53:e5:97:53:df:57:4b:f3:c2:9a:5e:05:8f:67:f7:9b: 0e:f5:0d:e3:6d:d4:63:b9:4d:ee:e5:6c:b7:7c:78:3c:89:27: 37:97:4c:c5:63:8c:a3:c1:30:b1:de:6b:b5:56:d7:56:f5:41: be:78:e8:04:d5:fc:4c:72:d0:f0:7f:d4:38:7c:14:f8:0b:c2: 8e:df:6c:4f:f9:f5:67:bc:1e:45:0a:aa:67:eb:e8:ca:a0:f1: 7f:85:fd:3f:ee:5a:83:3d:36:c5:cf:78:fe:bd:22:15:ab:5a: 34:82:06:5f:b3:40:a0:83:6c:60:45:6f:a3:ac:53:02:db:5b: 0d:95:2a:19:93:ac:3b:e1:1c:b5:95:f3:3f:a3:25:40:a0:3c: c8:96:ed:f4:19:7d:b2:0c:c9:ad:b1:9f:8f:a4:25:4a:5a:29: 05:e8:28:b0:2e:be:c0:ca:22:78:40:21:33:9a:af:b1:7d:07: 97:6c:9b:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqNrd6Wz4iWweoznHs0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjJiMmY2MTEzYmE0MzBmNzJlNTU0NDViNWM3ODQ5ZGM3 Y2ZhZWQwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD EyhhZjE4NmQ2NTJhODJlNmU1ZDgyYmMyOTY0ZjQ1NDI3YjFmZjA3OTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnHBNf6yfhY202JPcjPyuSKXX41m lqUJAr5xHWDfvUPh+ND1zYu1vCp3qyLfAmHNmzUPzbEf6UIyPqc+j5z7iymLzTMZ xik1lEng3E2+ibTInFOWqRoTa/F+1+6uzUuvPkG+L0AfxuZjk8YLbfH7IBpBAy9m z/KIfTIxdQqBcFdZboMOePRK0x/H5pFTnK6meYY5XpanhnKoNAOCcjwvi0a871Xu yJaosrns4tgkmOluIQSaWYwBSU0MuTolllE6iAWPt2xcRbYMNZ/muTwliKHNyvhT YuCs4O4vJv2FrpqiRfux5gWCVgogwTifi7P+auGcue5tKkXlS3jEq2qMzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8YbWUqgubl2CvClk9FQnsf8HlbMB8GA1UdIwQY MBaAFFiysvYRO6Qw9y5VRFtceEncfPrtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2It YTRjY2NlZjhjNGE4LzEvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My83YjM2OWYtYjA2ZS00YWYwLTlhY2ItYTRjY2NlZjhjNGE4 LzEvV0xLeTloRTdwREQzTGxWRVcxeDRTZHg4LXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJMYQTV3 2+rn7WC2oR+6IOFGCbrWBsyNMb5Uo+vwLlBn3mFLqUw4wJfZpAsPsrr6es5Sle3o TDx9B75lXQb5P/rDAXmwohrpkf1T5ZdT31dL88KaXgWPZ/ebDvUN423UY7lN7uVs t3x4PIknN5dMxWOMo8Ewsd5rtVbXVvVBvnjoBNX8THLQ8H/UOHwU+AvCjt9sT/n1 Z7weRQqqZ+voyqDxf4X9P+5agz02xc94/r0iFataNIIGX7NAoINsYEVvo6xTAttb DZUqGZOsO+EctZXzP6MlQKA8yJbt9Bl9sgzJrbGfj6QlSlopBegosC6+wMoieEAh M5qvsX0Hl2ybuQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:46 2025 by rpki-client