This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json) Hash identifier: G0AkgF1dH78uReUW7qiY7ZKbJnb+amQkzNwmsGbKaWI= Subject key identifier: 01:5F:D2:16:01:26:DA:D3:71:23:5C:D9:76:DE:E9:C7:EA:40:48:89 Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a Certificate serial: 019AF12D059E4C999097A7CDB1FC2A6526D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft Manifest number: 0E41 Signing time: Sat 06 Dec 2025 01:00:50 +0000 Manifest this update: Sat 06 Dec 2025 01:00:50 +0000 Manifest next update: Sun 07 Dec 2025 01:00:50 +0000 Files and hashes: 1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=) 2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: 9vBzIfiel9S0ghzW7CyFsfBTbaBt4w4hJKQd0nT4Vxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:05:9e:4c:99:90:97:a7:cd:b1:fc:2a:65:26:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a Validity Not Before: Dec 6 01:00:50 2025 GMT Not After : Dec 7 01:00:50 2025 GMT Subject: CN=015fd2160126dad371235cd976dee9c7ea404889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:bb:ff:df:d6:a6:e5:68:a6:a4:bb:29:ca: f5:93:c2:db:f0:26:2d:c9:37:13:30:6d:cc:b6:2f: 87:81:ea:98:48:de:88:71:99:05:de:6c:86:89:9a: cc:37:87:09:64:c8:ed:80:6f:94:b2:98:58:77:7e: a4:9e:6d:21:20:80:cb:80:0d:18:72:39:c5:7e:90: b9:2c:39:2f:e1:d8:da:b4:ad:b1:0b:8c:b8:a0:b2: 0c:26:ba:15:28:98:13:58:e4:0e:74:f5:a1:90:22: 48:f1:37:c1:0c:dd:e6:ad:f1:ce:5d:ef:f2:f6:a9: fa:41:dc:fa:ec:b0:f3:bc:5e:53:cc:b4:d4:27:f0: e6:e3:3c:43:b4:06:5f:8b:4a:bc:90:6d:5e:65:f4: 4e:7b:25:a1:6c:19:9a:ee:96:b3:f7:0a:a6:66:a0: 12:bc:62:8a:f8:24:2d:a6:f1:a6:83:37:8c:19:3a: ab:4a:0e:cf:b7:43:d9:90:42:03:bb:97:9c:59:a6: d9:53:8d:80:64:23:94:70:73:81:3d:68:59:4c:3e: 63:02:32:be:a3:5a:32:c5:00:b3:86:8d:ed:9e:0b: ea:b5:da:7a:9a:c2:65:4a:ac:79:03:4d:16:51:cc: 0c:fe:3b:45:6a:d1:cc:22:9d:ec:1a:21:27:05:e7: 57:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5F:D2:16:01:26:DA:D3:71:23:5C:D9:76:DE:E9:C7:EA:40:48:89 X509v3 Authority Key Identifier: keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3b:75:a7:10:0e:1a:b7:62:f2:1c:77:ef:eb:fe:94:da:cd: 6e:64:8b:6a:6c:33:a9:c0:42:17:03:c9:e1:70:f3:31:3c:d3: f7:68:4c:5d:67:f3:de:4e:14:c9:d0:5c:cc:ef:ac:18:b6:dc: 21:72:db:21:f4:2a:15:0f:13:29:c6:9c:36:5a:9b:0b:c3:57: aa:e5:f7:22:bb:5c:54:58:f7:47:17:b5:9c:eb:ef:19:98:fa: b9:85:a0:fa:7d:58:78:41:d6:86:b1:75:28:85:c8:f7:29:4b: 3a:62:2c:a1:2e:de:0e:39:bd:69:f6:b4:e1:6b:1a:c4:7c:0f: 64:c3:da:a3:66:25:e8:5d:df:f7:1b:68:48:a1:ac:1b:c6:7d: 8a:af:7f:9a:95:bf:ea:79:f3:12:82:3e:8e:cf:2b:d6:a7:00: ed:2a:b5:b4:74:35:90:6f:9a:63:e3:66:10:2d:a3:3c:51:c2: 97:e1:3d:9f:45:61:f1:6a:71:09:46:27:fe:f2:06:d0:87:2a: 9f:b4:b0:a6:31:dc:de:42:64:80:b8:44:3a:de:f4:c3:0c:82: b7:8a:3d:50:19:92:75:c6:c7:88:f6:38:8d:f6:74:09:08:9d: 19:e6:fc:86:88:12:aa:1b:4f:64:5e:f9:23:31:82:8b:03:b8: b3:87:68:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQWeTJmQl6fNsfwqZSbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MjBkNjcwNjQ5YTRhNGE5Y2IyZTY2NzcyMTcwNzQxYWRm N2M1MWEwHhcNMjUxMjA2MDEwMDUwWhcNMjUxMjA3MDEwMDUwWjAzMTEwLwYDVQQD EygwMTVmZDIxNjAxMjZkYWQzNzEyMzVjZDk3NmRlZTljN2VhNDA0ODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEq7/9/WpuVopqS7Kcr1k8Lb8CYt yTcTMG3Mti+HgeqYSN6IcZkF3myGiZrMN4cJZMjtgG+UsphYd36knm0hIIDLgA0Y cjnFfpC5LDkv4djatK2xC4y4oLIMJroVKJgTWOQOdPWhkCJI8TfBDN3mrfHOXe/y 9qn6Qdz67LDzvF5TzLTUJ/Dm4zxDtAZfi0q8kG1eZfROeyWhbBma7paz9wqmZqAS vGKK+CQtpvGmgzeMGTqrSg7Pt0PZkEIDu5ecWabZU42AZCOUcHOBPWhZTD5jAjK+ o1oyxQCzho3tngvqtdp6msJlSqx5A00WUcwM/jtFatHMIp3sGiEnBedXNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFf0hYBJtrTcSNc2Xbe6cfqQEiJMB8GA1UdIwQY MBaAFFkg1nBkmkpKnLLmZ3IXB0Gt98UaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2Et YWM3NjRjOTUyMzU3LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2EtYWM3NjRjOTUyMzU3 LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTt1pxAO Grdi8hx37+v+lNrNbmSLamwzqcBCFwPJ4XDzMTzT92hMXWfz3k4UydBczO+sGLbc IXLbIfQqFQ8TKcacNlqbC8NXquX3IrtcVFj3Rxe1nOvvGZj6uYWg+n1YeEHWhrF1 KIXI9ylLOmIsoS7eDjm9afa04WsaxHwPZMPao2Yl6F3f9xtoSKGsG8Z9iq9/mpW/ 6nnzEoI+js8r1qcA7Sq1tHQ1kG+aY+NmEC2jPFHCl+E9n0Vh8WpxCUYn/vIG0Icq n7SwpjHc3kJkgLhEOt70wwyCt4o9UBmSdcbHiPY4jfZ0CQidGeb8hogSqhtPZF75 IzGCiwO4s4doJQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:46:39 2025 by rpki-client