This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft File: WX2pAlHCK1uljAuii6BJC51tQgU.mft (raw, json) Hash identifier: iAflftyvD6I4xw3eXmj5v6I2PmiNsp/hYW/txMw4GaM= Subject key identifier: 40:C1:41:7C:4F:50:48:45:33:63:5B:5F:48:4A:5D:00:DC:49:ED:A5 Authority key identifier: 59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05 Certificate issuer: /CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205 Certificate serial: 019AF12CE005BD45BD878F95320080DA4D9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft Manifest number: 11AF Signing time: Sat 06 Dec 2025 01:00:41 +0000 Manifest this update: Sat 06 Dec 2025 01:00:41 +0000 Manifest next update: Sun 07 Dec 2025 01:00:41 +0000 Files and hashes: 1: WX2pAlHCK1uljAuii6BJC51tQgU.crl (hash: LsCo9+8mu7APVvu5M8epXEsjN6Wtkahs46aHUvBZJOM=) 2: wp43uQ4Y7G_TuDLdqj3WtI8cFb8.asa (hash: cM42IU8piBPhyxypKouUfTLilijPrh6kydUlWxujs08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e0:05:bd:45:bd:87:8f:95:32:00:80:da:4d:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597da90251c22b5ba58c0ba28ba0490b9d6d4205 Validity Not Before: Dec 6 01:00:41 2025 GMT Not After : Dec 7 01:00:41 2025 GMT Subject: CN=40c1417c4f50484533635b5f484a5d00dc49eda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c7:8b:07:9c:35:7f:f4:c7:24:69:fe:57:a4: 84:0d:7d:30:32:42:a4:45:e1:92:cd:f8:f3:93:f1: 83:4f:a8:f4:42:03:b9:36:aa:45:2d:63:4d:6e:7f: 82:18:22:9d:fe:11:c7:05:c6:76:b9:93:e1:cd:28: 25:e9:13:f0:ed:87:82:ee:97:f9:f9:17:26:c4:c7: fe:63:8e:c6:f6:b8:fc:df:a0:bb:b8:89:e7:d3:d2: 83:5b:a7:8a:28:34:6f:80:6f:b4:6b:e9:81:a1:50: d4:e8:bf:15:b8:b6:bb:97:c3:73:ee:f3:c6:7a:bc: 4f:8d:1e:e4:c0:97:59:9d:70:13:dd:47:ea:91:88: e5:4a:26:a3:84:e7:20:13:f8:f6:ae:c9:24:4b:ac: 81:f6:d1:62:39:3d:51:34:b8:e3:f6:06:1c:6c:aa: 93:64:ae:5a:19:f6:fb:15:c9:b9:09:8a:e3:c1:0b: 10:22:ef:66:0c:33:b7:40:6b:97:70:ed:52:aa:3e: 2d:0b:0e:46:82:30:25:6c:c9:8c:a9:79:41:06:90: 47:2b:59:11:b3:fc:ac:b8:d0:2d:a2:c8:fd:e9:e4: d2:ad:00:01:51:c8:32:a3:cd:00:77:f1:f1:eb:cb: d2:a3:f5:62:0e:dc:1b:8f:4a:8f:5b:4a:10:70:4f: 05:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C1:41:7C:4F:50:48:45:33:63:5B:5F:48:4A:5D:00:DC:49:ED:A5 X509v3 Authority Key Identifier: keyid:59:7D:A9:02:51:C2:2B:5B:A5:8C:0B:A2:8B:A0:49:0B:9D:6D:42:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WX2pAlHCK1uljAuii6BJC51tQgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/fb9482-c01d-42d5-af63-e17be82f43cc/1/WX2pAlHCK1uljAuii6BJC51tQgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d0:57:c5:eb:bb:a4:5d:98:de:02:ee:42:e5:97:0d:ef:19: 44:c6:ff:94:57:8d:ca:42:09:88:5b:dd:46:80:f7:c1:64:9a: 9d:e1:80:86:a1:c6:eb:d2:97:9b:7a:41:53:5c:8b:69:5b:fa: c6:14:17:12:4c:e3:d4:e7:d3:cb:7d:16:19:09:a1:6c:a2:bc: 01:fe:11:0f:32:7a:5c:11:56:f9:d4:d6:35:a6:6b:e4:7d:c9: fd:16:bb:82:44:b7:15:9b:c6:00:6c:50:59:0c:b4:ad:d8:fb: 5d:61:f3:d6:2d:4c:f9:c7:d1:3d:eb:ef:10:41:a7:c2:7c:1f: 65:eb:44:f7:57:ec:44:7b:48:11:3f:ed:de:c8:29:60:09:0f: 8a:b1:c5:14:2f:c3:b9:c0:82:0e:6e:80:46:9b:29:49:18:0b: b9:92:4a:5c:f1:98:16:64:14:52:c4:a3:c0:9c:03:06:23:e9: 82:19:9d:79:eb:21:e8:7f:ed:3b:5e:71:b8:80:90:be:26:c0: bb:82:ee:da:fb:1d:04:dc:31:31:55:c2:5c:b1:22:43:44:1b: 8e:d9:0f:c9:10:58:b8:dc:eb:23:5b:7c:f9:c3:23:0c:50:25: 2c:83:9c:6e:94:06:af:4b:dd:8d:5a:ed:b9:1d:0e:97:02:49: 2c:64:00:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOAFvUW9h4+VMgCA2k2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2RhOTAyNTFjMjJiNWJhNThjMGJhMjhiYTA0OTBiOWQ2 ZDQyMDUwHhcNMjUxMjA2MDEwMDQxWhcNMjUxMjA3MDEwMDQxWjAzMTEwLwYDVQQD Eyg0MGMxNDE3YzRmNTA0ODQ1MzM2MzViNWY0ODRhNWQwMGRjNDllZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApseLB5w1f/THJGn+V6SEDX0wMkKk ReGSzfjzk/GDT6j0QgO5NqpFLWNNbn+CGCKd/hHHBcZ2uZPhzSgl6RPw7YeC7pf5 +RcmxMf+Y47G9rj836C7uInn09KDW6eKKDRvgG+0a+mBoVDU6L8VuLa7l8Nz7vPG erxPjR7kwJdZnXAT3UfqkYjlSiajhOcgE/j2rskkS6yB9tFiOT1RNLjj9gYcbKqT ZK5aGfb7Fcm5CYrjwQsQIu9mDDO3QGuXcO1Sqj4tCw5GgjAlbMmMqXlBBpBHK1kR s/ysuNAtosj96eTSrQABUcgyo80Ad/Hx68vSo/ViDtwbj0qPW0oQcE8FBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDBQXxPUEhFM2NbX0hKXQDcSe2lMB8GA1UdIwQY MBaAFFl9qQJRwitbpYwLoougSQudbUIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMt ZTE3YmU4MmY0M2NjLzEvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mYjk0ODItYzAxZC00MmQ1LWFmNjMtZTE3YmU4MmY0M2Nj LzEvV1gycEFsSENLMXVsakF1aWk2QkpDNTF0UWdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdBXxeu7 pF2Y3gLuQuWXDe8ZRMb/lFeNykIJiFvdRoD3wWSaneGAhqHG69KXm3pBU1yLaVv6 xhQXEkzj1OfTy30WGQmhbKK8Af4RDzJ6XBFW+dTWNaZr5H3J/Ra7gkS3FZvGAGxQ WQy0rdj7XWHz1i1M+cfRPevvEEGnwnwfZetE91fsRHtIET/t3sgpYAkPirHFFC/D ucCCDm6ARpspSRgLuZJKXPGYFmQUUsSjwJwDBiPpghmdeesh6H/tO15xuICQvibA u4Lu2vsdBNwxMVXCXLEiQ0QbjtkPyRBYuNzrI1t8+cMjDFAlLIOcbpQGr0vdjVrt uR0OlwJJLGQA4g== -----END CERTIFICATE-----Generated at Sat Dec 6 05:02:37 2025 by rpki-client