This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft File: WL58UZyUIEI80vkGQL1RyYtKFTY.mft (raw, json) Hash identifier: hgNcVYcWeI2k9GDyeqKkNdFBIgYIn1xkTlP/sw/TRyc= Subject key identifier: C1:4F:0E:F8:65:35:5E:5E:FF:9B:AE:1E:7E:A5:0B:DF:B4:DB:D9:EE Authority key identifier: 58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36 Certificate issuer: /CN=58be7c519c9420423cd2f90640bd51c98b4a1536 Certificate serial: 019AF4D29FA487C744A58C65BC0C9B9C3242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft Manifest number: 0F04 Signing time: Sat 06 Dec 2025 18:00:35 +0000 Manifest this update: Sat 06 Dec 2025 18:00:35 +0000 Manifest next update: Sun 07 Dec 2025 18:00:35 +0000 Files and hashes: 1: WL58UZyUIEI80vkGQL1RyYtKFTY.crl (hash: mhLIdU8HFBJhZppZdle0PjTQ9wukqDjAgpdPOSbO4Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:9f:a4:87:c7:44:a5:8c:65:bc:0c:9b:9c:32:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58be7c519c9420423cd2f90640bd51c98b4a1536 Validity Not Before: Dec 6 18:00:35 2025 GMT Not After : Dec 7 18:00:35 2025 GMT Subject: CN=c14f0ef865355e5eff9bae1e7ea50bdfb4dbd9ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:b1:9d:af:88:ff:e8:1c:35:c5:f1:92:15: 7c:94:62:fc:7a:cf:74:be:f1:b4:80:1a:07:6a:8f: dc:f6:ef:91:d5:d2:46:e5:9b:17:f7:2a:f3:48:5a: 33:35:bc:a5:14:9f:98:0e:58:5b:f4:5f:be:60:93: 60:b0:59:80:3f:75:af:8a:1e:3c:47:a1:ab:9f:ce: ff:02:a3:6d:60:94:58:60:dd:8f:59:a6:c8:c3:4b: c2:5a:60:da:43:5a:35:74:21:22:55:2f:83:f9:b4: 13:69:dc:ad:12:77:00:25:d3:fe:77:34:33:2a:53: 33:fe:3d:66:80:20:93:a3:d4:87:22:68:1c:0c:08: 6e:e3:6c:3c:3a:4a:e1:4a:42:5c:6a:6b:8a:d1:6c: 92:59:5a:37:4c:07:49:e2:4e:f4:bd:04:7e:db:72: 2e:50:48:ed:81:6c:83:bb:3f:5a:eb:c6:aa:c6:f9: 76:3c:38:02:a4:f4:e7:80:e6:ed:82:63:c0:6f:4f: 49:00:c2:96:3a:a8:ca:9a:58:a9:22:bd:6a:72:19: ff:6b:97:51:d9:8b:50:a2:fa:e3:38:65:41:2c:4d: a7:8c:da:e6:88:d3:ab:b6:32:89:5a:9e:6a:15:0d: 90:a7:62:86:1f:f1:02:63:ea:46:3b:89:20:ff:80: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:0E:F8:65:35:5E:5E:FF:9B:AE:1E:7E:A5:0B:DF:B4:DB:D9:EE X509v3 Authority Key Identifier: keyid:58:BE:7C:51:9C:94:20:42:3C:D2:F9:06:40:BD:51:C9:8B:4A:15:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WL58UZyUIEI80vkGQL1RyYtKFTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a41acf-2757-4015-b041-c9d2383d2bd6/1/WL58UZyUIEI80vkGQL1RyYtKFTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:35:a2:1c:eb:d2:12:57:2d:b6:5f:d0:49:d6:ea:65:c0:f0: 7b:f0:49:7a:7b:76:4f:51:4b:f4:5e:fe:79:d8:54:9a:5d:22: d5:17:b5:b3:f7:7d:dd:3f:42:c3:6e:1d:3a:fa:7f:48:55:22: 06:65:96:61:66:4b:d6:c0:29:4b:46:ce:6c:ad:f0:ac:f3:fd: 9b:49:ce:b2:2d:81:23:29:19:bc:94:bb:19:5a:a5:7b:f4:fd: 35:3c:f2:c1:e1:59:08:4b:58:33:ae:81:9c:f0:5e:a0:72:b8: 21:a1:f2:76:6b:be:36:4e:ac:2d:9a:37:b7:6d:6a:f9:88:65: f4:cf:b9:e0:d8:5a:24:c9:36:db:2b:86:a0:d3:fc:ca:2f:e9: b3:bb:e0:fa:60:52:84:dd:2b:da:d3:ef:59:06:06:25:c7:65: 63:0b:a3:47:29:c3:9b:79:b0:98:af:3c:8f:bd:f5:39:2d:18: 21:df:cd:11:85:0e:20:81:16:43:62:26:64:c0:fb:c6:1b:29: 31:e6:21:12:82:49:c2:c9:ae:b8:2c:42:9c:1e:e5:c8:47:a5: 6b:11:ac:03:93:32:0f:1c:30:89:3b:c8:d7:38:8a:be:be:a4: de:7f:6a:7d:27:50:22:c4:39:06:58:8a:03:1f:03:ad:d7:88: b7:4b:90:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00p+kh8dEpYxlvAybnDJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmU3YzUxOWM5NDIwNDIzY2QyZjkwNjQwYmQ1MWM5OGI0 YTE1MzYwHhcNMjUxMjA2MTgwMDM1WhcNMjUxMjA3MTgwMDM1WjAzMTEwLwYDVQQD EyhjMTRmMGVmODY1MzU1ZTVlZmY5YmFlMWU3ZWE1MGJkZmI0ZGJkOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRKxna+I/+gcNcXxkhV8lGL8es90 vvG0gBoHao/c9u+R1dJG5ZsX9yrzSFozNbylFJ+YDlhb9F++YJNgsFmAP3Wvih48 R6Grn87/AqNtYJRYYN2PWabIw0vCWmDaQ1o1dCEiVS+D+bQTadytEncAJdP+dzQz KlMz/j1mgCCTo9SHImgcDAhu42w8OkrhSkJcamuK0WySWVo3TAdJ4k70vQR+23Iu UEjtgWyDuz9a68aqxvl2PDgCpPTngObtgmPAb09JAMKWOqjKmlipIr1qchn/a5dR 2YtQovrjOGVBLE2njNrmiNOrtjKJWp5qFQ2Qp2KGH/ECY+pGO4kg/4BOxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFPDvhlNV5e/5uuHn6lC9+029nuMB8GA1UdIwQY MBaAFFi+fFGclCBCPNL5BkC9UcmLShU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0w1OFVaeVVJRUk4MHZrR1FMMVJ5WXRLRlRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hNDFhY2YtMjc1Ny00MDE1LWIwNDEt YzlkMjM4M2QyYmQ2LzEvV0w1OFVaeVVJRUk4MHZrR1FMMVJ5WXRLRlRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hNDFhY2YtMjc1Ny00MDE1LWIwNDEtYzlkMjM4M2QyYmQ2 LzEvV0w1OFVaeVVJRUk4MHZrR1FMMVJ5WXRLRlRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDWiHOvS Elcttl/QSdbqZcDwe/BJent2T1FL9F7+edhUml0i1Re1s/d93T9Cw24dOvp/SFUi BmWWYWZL1sApS0bObK3wrPP9m0nOsi2BIykZvJS7GVqle/T9NTzyweFZCEtYM66B nPBeoHK4IaHydmu+Nk6sLZo3t21q+Yhl9M+54NhaJMk22yuGoNP8yi/ps7vg+mBS hN0r2tPvWQYGJcdlYwujRynDm3mwmK88j731OS0YId/NEYUOIIEWQ2ImZMD7xhsp MeYhEoJJwsmuuCxCnB7lyEelaxGsA5MyDxwwiTvI1ziKvr6k3n9qfSdQIsQ5BliK Ax8DrdeIt0uQ9w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:51:14 2025 by rpki-client