This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json) Hash identifier: 9E34kzRpqDqMY/K7dQBa8drC/l0WxH1s5jYr7h/eufk= Subject key identifier: 5F:41:B5:35:37:D0:A5:83:5E:19:6E:83:AC:BF:9E:EF:E5:3F:8D:3A Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8 Certificate serial: 019AF3C0533DB4A6596ECA7B2DF867344CFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft Manifest number: 1533 Signing time: Sat 06 Dec 2025 13:00:59 +0000 Manifest this update: Sat 06 Dec 2025 13:00:59 +0000 Manifest next update: Sun 07 Dec 2025 13:00:59 +0000 Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=) 2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=) 3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: u7r65ir+VJ2EGvedfzExIZ/oavzme+pRShP1ss3pSt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:53:3d:b4:a6:59:6e:ca:7b:2d:f8:67:34:4c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Validity Not Before: Dec 6 13:00:59 2025 GMT Not After : Dec 7 13:00:59 2025 GMT Subject: CN=5f41b53537d0a5835e196e83acbf9eefe53f8d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:36:35:a5:d9:fa:2d:f6:56:3e:1e:e5:d3:0b: 59:16:4a:62:7c:df:ff:bf:58:00:53:3f:35:9b:78: 38:4a:b2:0c:32:c4:7c:a3:8f:c9:ea:98:c5:60:48: e0:e8:e9:92:1c:1c:e0:05:4f:97:62:96:91:e2:ce: bf:45:8f:b5:71:be:24:04:c9:1d:cd:01:54:a4:31: bb:a1:27:e2:15:81:5a:7a:f3:f9:6e:e7:7e:3c:e4: d1:4b:52:c2:29:21:98:38:c4:4a:e6:f9:5e:6e:a4: 76:4a:52:48:12:47:83:a3:36:64:68:4a:e1:75:2e: 84:bb:af:c0:33:4e:62:11:8d:dc:37:0e:df:9f:e9: e9:39:24:77:c4:bf:bf:71:2a:ab:19:72:73:c4:17: af:d0:2b:30:1f:74:94:7f:4b:b8:2e:9c:3c:7d:45: 0b:34:32:13:ad:3a:39:5d:25:f9:fd:27:da:12:80: 0d:28:9b:ef:59:b0:69:4c:be:f7:c1:bd:da:02:09: 40:8c:34:3d:8b:32:5a:2c:67:42:fe:04:85:1b:99: e7:47:c5:4c:2b:25:95:bb:13:cd:97:dc:9e:56:23: d4:34:17:b4:6a:59:ec:71:89:11:19:67:35:b7:22: bd:15:c0:a7:19:78:20:fe:19:57:28:cb:a9:cf:57: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:41:B5:35:37:D0:A5:83:5E:19:6E:83:AC:BF:9E:EF:E5:3F:8D:3A X509v3 Authority Key Identifier: keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bb:d4:02:7d:45:30:fb:d2:f3:13:07:b3:a0:55:2d:77:22: 88:39:1b:75:47:f8:64:89:6d:e0:12:8a:69:d0:64:9e:73:68: b4:67:cb:1a:a7:b8:d3:92:52:7b:c4:1c:54:71:1e:6d:51:dd: 25:61:f1:79:80:11:26:c4:a3:79:01:60:4d:da:e5:6f:2b:f4: 4f:e3:0a:d4:e5:0e:2f:c7:30:69:d8:bb:ff:07:c1:8c:f1:48: f1:64:21:e1:c6:7a:99:23:25:b6:3e:c1:8b:c1:43:93:d7:e2: 8c:7c:90:9f:f6:fd:b8:1f:a7:81:68:46:09:e3:b4:b8:d1:d8: 49:47:ca:22:4a:d3:99:ac:f5:8a:8b:65:a0:6b:3b:43:e8:4b: 77:2f:9f:4b:25:3c:9d:2b:c2:3c:84:6b:c4:a4:fa:d1:03:e4: f5:13:b0:99:52:9a:41:56:92:db:b1:d2:74:4f:d4:06:29:ab: af:d4:06:ac:1b:28:6e:04:df:1a:e2:8e:4b:2b:06:9a:43:dd: d5:bc:44:c2:1f:a1:dd:c8:ff:e8:40:19:8d:2f:d6:2e:2c:c3: a3:2b:24:70:c8:3f:b6:f6:14:dd:2c:6e:d8:c4:c1:b5:7a:35: 60:08:d6:75:2d:f2:ce:ea:05:45:c5:d9:9f:99:83:28:3e:8b: 4f:6f:10:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwFM9tKZZbsp7LfhnNEz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5 YjNiYTgwHhcNMjUxMjA2MTMwMDU5WhcNMjUxMjA3MTMwMDU5WjAzMTEwLwYDVQQD Eyg1ZjQxYjUzNTM3ZDBhNTgzNWUxOTZlODNhY2JmOWVlZmU1M2Y4ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TY1pdn6LfZWPh7l0wtZFkpifN// v1gAUz81m3g4SrIMMsR8o4/J6pjFYEjg6OmSHBzgBU+XYpaR4s6/RY+1cb4kBMkd zQFUpDG7oSfiFYFaevP5bud+POTRS1LCKSGYOMRK5vlebqR2SlJIEkeDozZkaErh dS6Eu6/AM05iEY3cNw7fn+npOSR3xL+/cSqrGXJzxBev0CswH3SUf0u4Lpw8fUUL NDITrTo5XSX5/SfaEoANKJvvWbBpTL73wb3aAglAjDQ9izJaLGdC/gSFG5nnR8VM KyWVuxPNl9yeViPUNBe0alnscYkRGWc1tyK9FcCnGXgg/hlXKMupz1dNjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9BtTU30KWDXhlug6y/nu/lP406MB8GA1UdIwQY MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7vUAn1F MPvS8xMHs6BVLXciiDkbdUf4ZIlt4BKKadBknnNotGfLGqe405JSe8QcVHEebVHd JWHxeYARJsSjeQFgTdrlbyv0T+MK1OUOL8cwadi7/wfBjPFI8WQh4cZ6mSMltj7B i8FDk9fijHyQn/b9uB+ngWhGCeO0uNHYSUfKIkrTmaz1iotloGs7Q+hLdy+fSyU8 nSvCPIRrxKT60QPk9ROwmVKaQVaS27HSdE/UBimrr9QGrBsobgTfGuKOSysGmkPd 1bxEwh+h3cj/6EAZjS/WLizDoyskcMg/tvYU3Sxu2MTBtXo1YAjWdS3yzuoFRcXZ n5mDKD6LT28QuA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:29 2025 by rpki-client