This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json) Hash identifier: mfo+mJJiXk4k1tGcxkRehG2vl9zXjWUOK4WR1fZeSI8= Subject key identifier: C7:95:D4:FD:5F:21:31:53:A8:AB:49:0C:03:AF:08:51:6B:A8:68:13 Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6 Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6 Certificate serial: 019AF5409EA70A033432E1BC8E09CCF8AB1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft Manifest number: 0ECA Signing time: Sat 06 Dec 2025 20:00:44 +0000 Manifest this update: Sat 06 Dec 2025 20:00:44 +0000 Manifest next update: Sun 07 Dec 2025 20:00:44 +0000 Files and hashes: 1: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: Uc0ENJWotPE+GGG7jhRr182cz0Jil/v5UyZ93h7vggY=) 2: yaeOkPk5PAc3CyptDZFnR-9_TDc.roa (hash: U7LQZWfNIcJS/maFkqunUXfknCM0Oqd5HXcK5KxayII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:9e:a7:0a:03:34:32:e1:bc:8e:09:cc:f8:ab:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6 Validity Not Before: Dec 6 20:00:44 2025 GMT Not After : Dec 7 20:00:44 2025 GMT Subject: CN=c795d4fd5f213153a8ab490c03af08516ba86813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:df:66:36:26:39:08:00:6c:a4:8e:9c:61:db: e5:65:e0:1e:97:54:a7:bc:39:06:6e:b1:13:cc:82: a6:2f:35:59:bb:15:5a:c1:aa:48:aa:0b:a4:51:12: ac:0a:fa:d1:c8:f9:9b:59:6d:b5:70:cd:e7:51:e4: 43:d1:ef:6c:f0:e2:4a:a2:70:0f:66:f8:20:ef:9e: be:45:4b:c7:c4:a2:35:c3:f0:bd:9a:4a:e3:02:6b: c1:8b:ef:57:f3:b3:0d:ad:d0:ce:a4:b8:6e:cb:79: c2:d8:bc:5d:f4:4e:52:fc:e6:f6:74:fe:b4:1e:13: 55:12:7f:ab:a7:c8:6e:74:6a:76:e0:5c:55:8c:ba: df:6d:66:3e:32:df:a9:e7:4c:6c:f8:99:d3:fe:88: 08:7c:b3:d8:93:86:2b:90:3b:18:3c:c0:84:5b:e7: f7:22:2e:62:8e:12:7d:11:ec:dd:69:84:b9:3d:98: e4:c5:21:f3:c4:04:94:47:91:18:ed:ed:fd:aa:d6: d0:dc:fa:76:2f:b1:fc:81:34:7c:cb:6d:77:06:cb: b7:ec:0f:b9:d3:85:99:b6:6b:c7:84:d2:25:1b:3d: 79:1f:c5:0f:73:2e:d0:98:13:0e:21:21:c7:86:24: 6d:5d:fd:bc:d6:92:a4:f0:3c:bd:f5:78:98:1c:1a: 09:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:95:D4:FD:5F:21:31:53:A8:AB:49:0C:03:AF:08:51:6B:A8:68:13 X509v3 Authority Key Identifier: keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bf:93:78:05:43:7e:39:67:f1:ac:a5:c4:c5:83:64:71:5c: ab:a5:7e:fd:4c:a5:57:b3:ca:c8:e0:60:b4:7b:84:d8:d6:ce: c5:99:88:d5:26:d7:ff:57:dd:87:88:6a:80:f8:a2:41:62:d6: db:89:a5:b1:5d:46:73:d9:ec:ea:59:0c:55:40:05:57:36:7c: e8:0f:5b:58:64:4d:77:36:3f:47:85:24:8b:68:0b:b7:83:72: c5:b7:74:96:70:37:6f:9a:3c:52:ab:28:b0:66:06:78:46:8e: e0:a8:20:17:b8:02:fd:28:cb:d9:ef:f3:30:12:81:09:ed:a6: 17:a6:4a:2a:1f:77:f7:c9:55:7b:b2:89:fc:a8:63:74:29:d2: 3f:6f:25:b9:a8:18:08:7c:5e:62:c8:e8:c0:a8:db:94:74:f3: 61:51:1f:1d:8e:08:64:a7:56:37:28:ef:3d:4a:ff:28:b2:c2: cc:5a:c9:a2:55:bf:2a:f2:0c:7f:46:7e:6e:ea:5d:b6:0d:7e: b5:03:ca:2b:f4:04:b7:be:ab:f3:46:cc:59:fa:b8:83:a9:55: df:c8:bf:c1:da:95:7d:9a:35:78:86:c5:a6:17:83:76:ca:e3: fe:a3:bc:c1:51:3a:33:f1:fa:7b:8d:f5:6f:4b:51:64:24:b9: 6c:e5:f7:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QJ6nCgM0MuG8jgnM+KsfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTVlZDhlM2VjYzkyYTJkZThjODBhYmU5YTgxOTVkNWZm OTk3ZTYwHhcNMjUxMjA2MjAwMDQ0WhcNMjUxMjA3MjAwMDQ0WjAzMTEwLwYDVQQD EyhjNzk1ZDRmZDVmMjEzMTUzYThhYjQ5MGMwM2FmMDg1MTZiYTg2ODEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6t9mNiY5CABspI6cYdvlZeAel1Sn vDkGbrETzIKmLzVZuxVawapIqgukURKsCvrRyPmbWW21cM3nUeRD0e9s8OJKonAP Zvgg756+RUvHxKI1w/C9mkrjAmvBi+9X87MNrdDOpLhuy3nC2Lxd9E5S/Ob2dP60 HhNVEn+rp8hudGp24FxVjLrfbWY+Mt+p50xs+JnT/ogIfLPYk4YrkDsYPMCEW+f3 Ii5ijhJ9EezdaYS5PZjkxSHzxASUR5EY7e39qtbQ3Pp2L7H8gTR8y213Bsu37A+5 04WZtmvHhNIlGz15H8UPcy7QmBMOISHHhiRtXf281pKk8Dy99XiYHBoJ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeV1P1fITFTqKtJDAOvCFFrqGgTMB8GA1UdIwQY MBaAFFil7Y4+zJKi3oyAq+moGV1f+ZfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5Nzct MDA2N2JjYWYzNzcwLzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5NzctMDA2N2JjYWYzNzcw LzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7+TeAVD fjln8aylxMWDZHFcq6V+/UylV7PKyOBgtHuE2NbOxZmI1SbX/1fdh4hqgPiiQWLW 24mlsV1Gc9ns6lkMVUAFVzZ86A9bWGRNdzY/R4Uki2gLt4Nyxbd0lnA3b5o8Uqso sGYGeEaO4KggF7gC/SjL2e/zMBKBCe2mF6ZKKh9398lVe7KJ/KhjdCnSP28luagY CHxeYsjowKjblHTzYVEfHY4IZKdWNyjvPUr/KLLCzFrJolW/KvIMf0Z+bupdtg1+ tQPKK/QEt76r80bMWfq4g6lV38i/wdqVfZo1eIbFpheDdsrj/qO8wVE6M/H6e431 b0tRZCS5bOX3SA== -----END CERTIFICATE-----Generated at Sun Dec 7 04:31:31 2025 by rpki-client