This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json) Hash identifier: 5d11E5tYBwplrSe9Kpstv+Ycc3FrWzX8dooyXqitri4= Subject key identifier: 04:1E:B8:9F:1A:C6:AF:23:87:44:8E:30:24:1F:28:A5:D3:33:B7:BB Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E Certificate issuer: /CN=58afedfef67918490634be4e2b75c11b70c2ea2e Certificate serial: 019AF12E2B547B3F67D2DA29AEE3FF3EF6DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft Manifest number: 0B8C Signing time: Sat 06 Dec 2025 01:02:06 +0000 Manifest this update: Sat 06 Dec 2025 01:02:06 +0000 Manifest next update: Sun 07 Dec 2025 01:02:06 +0000 Files and hashes: 1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: ecnnnj8yK+hqX6fKGdEEFyb2/gZR0VeLV2cTMCQJcHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:2b:54:7b:3f:67:d2:da:29:ae:e3:ff:3e:f6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e Validity Not Before: Dec 6 01:02:06 2025 GMT Not After : Dec 7 01:02:06 2025 GMT Subject: CN=041eb89f1ac6af2387448e30241f28a5d333b7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:56:98:3f:62:14:0e:77:83:cd:79:76:a6: b2:59:bf:32:f3:b2:15:1d:78:c8:ed:3a:2b:42:c1: a9:6f:78:48:c5:96:1f:c6:1e:06:47:72:6b:02:d3: 8e:3d:d3:b8:83:ca:76:7d:df:e7:43:72:f3:8b:ad: 65:ec:a3:4e:92:f9:52:1f:c6:9d:b2:2b:b9:49:19: 9e:2a:c0:85:73:6a:10:77:b1:17:da:75:3a:93:68: b7:fe:f3:b8:cc:33:0b:2a:6c:8a:41:a8:fc:39:85: a1:1e:70:58:a6:86:d2:62:30:f3:3d:38:7b:61:88: 9e:ad:82:52:4c:e5:b5:51:d6:0f:4a:34:52:79:3d: 3d:71:fc:1e:c2:f5:db:d8:ed:e7:6c:37:cc:51:34: d6:12:3d:a8:5f:a4:b3:c0:9c:b5:38:87:37:94:2c: d0:7b:ed:96:77:15:7a:7e:90:ae:08:19:ce:37:a9: 3f:a0:a0:d4:97:4a:f8:9e:cc:53:e0:83:4a:8f:0f: 4c:be:b7:c5:bf:c9:23:0b:5b:ec:2e:d7:9c:23:24: ff:45:22:4a:5e:ae:12:49:7b:0b:ca:f4:31:07:65: 7d:36:01:ab:c9:ab:22:ec:67:f0:9a:13:9d:0a:e7: 66:e7:da:5a:39:55:71:50:1d:23:ef:09:98:5c:4d: da:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1E:B8:9F:1A:C6:AF:23:87:44:8E:30:24:1F:28:A5:D3:33:B7:BB X509v3 Authority Key Identifier: keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:94:76:6b:2b:d0:ec:09:8d:a0:02:c1:88:4f:d6:e2:9b:40: 05:8f:af:c6:d6:6a:03:00:59:fd:64:1c:9e:f7:7b:08:0d:ff: 33:44:f9:52:3a:39:87:31:82:ac:1b:bc:33:a1:44:e9:5e:16: 5f:88:49:45:e4:ea:18:91:d1:b3:97:d3:10:aa:a8:f6:09:9b: 2d:f5:df:af:98:ab:82:04:34:84:f2:bc:87:40:04:cc:71:dc: 5f:61:db:f6:ca:20:4b:b6:1c:f9:b4:34:29:f8:ab:80:5f:1a: c6:26:1c:dc:de:33:6a:55:1f:ba:4b:89:64:62:17:47:27:52: b1:3a:1e:84:1c:23:49:bd:c7:1a:8a:c2:69:9e:0b:0f:8d:b0: ac:1e:a1:11:e2:c1:e4:b3:ad:69:ae:f3:ed:cb:72:80:8d:5a: e3:8d:63:5e:45:8f:bb:7c:31:59:d8:85:ed:e4:43:32:f8:73: f8:24:d2:e0:c3:f4:c9:78:b2:80:88:e1:6d:e9:9f:57:ee:48: f5:fd:02:05:7e:de:2d:23:e9:c0:22:d2:65:d0:71:02:25:4a: ff:81:76:78:f9:ad:32:66:56:14:52:c4:18:48:3e:68:4b:90: 3d:25:ce:f0:e5:9d:70:8f:ed:d3:fe:7a:af:41:73:89:98:d0: 83:c2:06:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLitUez9n0topruP/PvbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWZlZGZlZjY3OTE4NDkwNjM0YmU0ZTJiNzVjMTFiNzBj MmVhMmUwHhcNMjUxMjA2MDEwMjA2WhcNMjUxMjA3MDEwMjA2WjAzMTEwLwYDVQQD EygwNDFlYjg5ZjFhYzZhZjIzODc0NDhlMzAyNDFmMjhhNWQzMzNiN2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys5WmD9iFA53g815dqayWb8y87IV HXjI7TorQsGpb3hIxZYfxh4GR3JrAtOOPdO4g8p2fd/nQ3Lzi61l7KNOkvlSH8ad siu5SRmeKsCFc2oQd7EX2nU6k2i3/vO4zDMLKmyKQaj8OYWhHnBYpobSYjDzPTh7 YYierYJSTOW1UdYPSjRSeT09cfwewvXb2O3nbDfMUTTWEj2oX6SzwJy1OIc3lCzQ e+2WdxV6fpCuCBnON6k/oKDUl0r4nsxT4INKjw9MvrfFv8kjC1vsLtecIyT/RSJK Xq4SSXsLyvQxB2V9NgGryasi7GfwmhOdCudm59paOVVxUB0j7wmYXE3a7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQeuJ8axq8jh0SOMCQfKKXTM7e7MB8GA1UdIwQY MBaAFFiv7f72eRhJBjS+Tit1wRtwwuouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMDEzNGMtNDQ3Zi00YzI5LWFlMWIt YjJjZDM2YzVhMTVlLzEvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9lMDEzNGMtNDQ3Zi00YzI5LWFlMWItYjJjZDM2YzVhMTVl LzEvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5R2ayvQ 7AmNoALBiE/W4ptABY+vxtZqAwBZ/WQcnvd7CA3/M0T5Ujo5hzGCrBu8M6FE6V4W X4hJReTqGJHRs5fTEKqo9gmbLfXfr5irggQ0hPK8h0AEzHHcX2Hb9sogS7Yc+bQ0 KfirgF8axiYc3N4zalUfukuJZGIXRydSsToehBwjSb3HGorCaZ4LD42wrB6hEeLB 5LOtaa7z7ctygI1a441jXkWPu3wxWdiF7eRDMvhz+CTS4MP0yXiygIjhbemfV+5I 9f0CBX7eLSPpwCLSZdBxAiVK/4F2ePmtMmZWFFLEGEg+aEuQPSXO8OWdcI/t0/56 r0FziZjQg8IGhA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:26 2025 by rpki-client