This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft File: WsRdmhoiQWgz3lml5hnRIJbQlp4.mft (raw, json) Hash identifier: kVaExwhFRffV+stBkHFmcH5IOO3WbhakFhhi2kMxbZY= Subject key identifier: 74:26:B9:54:9B:34:82:CC:74:AF:00:BE:16:6B:62:D1:56:06:79:85 Authority key identifier: 5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E Certificate issuer: /CN=5ac45d9a1a22416833de59a5e619d12096d0969e Certificate serial: 019B2E1E019F6E59C0028D450C2CC1A17C66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft Manifest number: 10D4 Signing time: Wed 17 Dec 2025 21:01:16 +0000 Manifest this update: Wed 17 Dec 2025 21:01:16 +0000 Manifest next update: Thu 18 Dec 2025 21:01:16 +0000 Files and hashes: 1: WsRdmhoiQWgz3lml5hnRIJbQlp4.crl (hash: dh6UKjx3Fc/I62qCUwmB7u4loQpQzvaHYi0xkHzuE1M=) 2: X2K16vfCCw5yGYZ35G284aX5j-w.roa (hash: 1LbHM2S0fWzRZr7mNPkcXGUnRUmoTc3QJQmvi/4U+L4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:1e:01:9f:6e:59:c0:02:8d:45:0c:2c:c1:a1:7c:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ac45d9a1a22416833de59a5e619d12096d0969e Validity Not Before: Dec 17 21:01:16 2025 GMT Not After : Dec 18 21:01:16 2025 GMT Subject: CN=7426b9549b3482cc74af00be166b62d156067985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:27:ce:40:ef:ab:b1:17:b3:b4:8e:8b:f5: 67:f1:50:c0:6a:35:23:7d:0a:4c:be:b6:02:31:4d: 85:29:a8:82:8e:2e:1a:64:a9:bd:cb:7c:cc:a7:ec: e8:0a:06:fb:07:cb:44:a6:a2:54:0d:41:74:12:71: b8:18:77:bf:96:76:3b:36:36:81:29:1e:a3:73:f7: 7d:fe:e4:d8:18:44:cd:ef:58:fe:27:ce:c4:ea:65: 95:9e:9e:91:d1:61:87:36:f4:ef:8d:ee:8d:16:f0: 52:ee:38:ab:77:a8:f3:83:fd:4b:3e:be:2c:e5:c4: d1:f5:06:ee:17:c1:e0:23:d5:ca:ba:85:a3:57:33: cf:42:23:c8:79:7c:ad:53:df:ac:3d:e8:5e:89:67: 5a:fc:9c:31:40:02:46:ea:30:a7:b9:82:07:26:97: 22:96:d0:8f:fd:95:59:1d:88:2d:54:28:14:7b:fc: 91:62:6f:14:57:89:d8:7b:72:1a:85:02:5f:4b:28: 8d:d7:07:16:91:f5:fe:0a:7d:16:8f:5c:9c:a1:85: de:5c:d6:33:81:5a:a9:6c:0c:29:42:63:6b:89:e6: 11:03:7e:71:ec:88:6e:6b:ee:35:6b:1c:f2:dc:6e: 20:04:17:a1:11:74:7a:15:9d:ba:cc:da:5d:27:c5: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:26:B9:54:9B:34:82:CC:74:AF:00:BE:16:6B:62:D1:56:06:79:85 X509v3 Authority Key Identifier: keyid:5A:C4:5D:9A:1A:22:41:68:33:DE:59:A5:E6:19:D1:20:96:D0:96:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRdmhoiQWgz3lml5hnRIJbQlp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/715e1c-5512-4eb4-9ba3-3a003135aad1/1/WsRdmhoiQWgz3lml5hnRIJbQlp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:04:c7:1d:0e:43:d4:c8:0e:35:0c:c3:b1:33:56:76:99:19: cf:12:e1:1c:40:5b:61:32:f4:b8:22:a7:bc:3d:ec:4f:34:28: 31:ae:60:05:4c:c8:ca:7d:72:ac:dd:2b:a0:51:12:d1:17:b7: 66:6b:ae:3c:27:c4:6f:3d:b6:f8:ee:6b:e9:8c:39:34:19:83: e5:ee:72:b4:0c:7f:e8:dc:b9:35:80:fa:21:a3:21:61:c2:cc: 13:0a:75:7e:0b:4f:10:13:23:42:56:6b:79:44:95:43:ae:b8: ce:2a:30:b4:35:c3:b2:6e:c9:0a:9e:8f:42:60:8d:30:8d:b3: 33:ea:f4:c2:15:a1:54:2b:c5:30:93:6f:65:7d:8e:73:ff:6d: f3:13:44:44:07:dd:10:f6:a3:8e:e1:f9:62:f1:f6:97:4f:e5: 6c:80:bc:b3:ca:b1:90:c2:b5:b3:58:b6:85:0a:f6:c1:aa:70: 52:12:0c:e2:ea:94:00:34:4a:a9:df:da:42:14:6f:ba:3e:d6: 95:5f:c9:c6:0c:f7:30:8b:7a:b6:ee:83:74:db:5d:30:8e:b6: 30:31:f8:28:70:d7:0f:8f:7b:89:45:ca:68:76:5c:eb:4a:75: f5:ec:01:d7:ba:05:d1:49:d6:08:f4:01:75:10:7b:77:ca:4d: 21:4b:52:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuHgGfblnAAo1FDCzBoXxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYzQ1ZDlhMWEyMjQxNjgzM2RlNTlhNWU2MTlkMTIwOTZk MDk2OWUwHhcNMjUxMjE3MjEwMTE2WhcNMjUxMjE4MjEwMTE2WjAzMTEwLwYDVQQD Eyg3NDI2Yjk1NDliMzQ4MmNjNzRhZjAwYmUxNjZiNjJkMTU2MDY3OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlknzkDvq7EXs7SOi/Vn8VDAajUj fQpMvrYCMU2FKaiCji4aZKm9y3zMp+zoCgb7B8tEpqJUDUF0EnG4GHe/lnY7NjaB KR6jc/d9/uTYGETN71j+J87E6mWVnp6R0WGHNvTvje6NFvBS7jird6jzg/1LPr4s 5cTR9QbuF8HgI9XKuoWjVzPPQiPIeXytU9+sPeheiWda/JwxQAJG6jCnuYIHJpci ltCP/ZVZHYgtVCgUe/yRYm8UV4nYe3IahQJfSyiN1wcWkfX+Cn0Wj1ycoYXeXNYz gVqpbAwpQmNrieYRA35x7Ihua+41axzy3G4gBBehEXR6FZ26zNpdJ8UTdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQmuVSbNILMdK8AvhZrYtFWBnmFMB8GA1UdIwQY MBaAFFrEXZoaIkFoM95ZpeYZ0SCW0JaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMt M2EwMDMxMzVhYWQxLzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83MTVlMWMtNTUxMi00ZWI0LTliYTMtM2EwMDMxMzVhYWQx LzEvV3NSZG1ob2lRV2d6M2xtbDVoblJJSmJRbHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIATHHQ5D 1MgONQzDsTNWdpkZzxLhHEBbYTL0uCKnvD3sTzQoMa5gBUzIyn1yrN0roFES0Re3 ZmuuPCfEbz22+O5r6Yw5NBmD5e5ytAx/6Ny5NYD6IaMhYcLMEwp1fgtPEBMjQlZr eUSVQ664ziowtDXDsm7JCp6PQmCNMI2zM+r0whWhVCvFMJNvZX2Oc/9t8xNERAfd EPajjuH5YvH2l0/lbIC8s8qxkMK1s1i2hQr2wapwUhIM4uqUADRKqd/aQhRvuj7W lV/Jxgz3MIt6tu6DdNtdMI62MDH4KHDXD497iUXKaHZc60p19ewB17oF0UnWCPQB dRB7d8pNIUtSMg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:01:52 2025 by rpki-client