This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json) Hash identifier: babNCSDIuBSlOHrBTLuDT7GF4nTwKCUE6VPNmjW4BTY= Subject key identifier: 0F:3D:07:F4:CD:49:5A:CB:C2:43:86:62:26:A0:A6:7F:E6:BE:1E:0D Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25 Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325 Certificate serial: 019B27ADE7CA64BC8D4758243B6BD1C2FDB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft Manifest number: 0E9D Signing time: Tue 16 Dec 2025 15:01:07 +0000 Manifest this update: Tue 16 Dec 2025 15:01:07 +0000 Manifest next update: Wed 17 Dec 2025 15:01:07 +0000 Files and hashes: 1: NpfRtoVnz3NxGuD-uEbggfqrJTM.roa (hash: tIkhKB+ig4LtT1LifK/STgZvceUuRWeXKrf22HpiIlA=) 2: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: tfa1pQy5RRrr4TwgfWOER7Dx5/Lb72sRQgRsz3F+sjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ad:e7:ca:64:bc:8d:47:58:24:3b:6b:d1:c2:fd:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325 Validity Not Before: Dec 16 15:01:07 2025 GMT Not After : Dec 17 15:01:07 2025 GMT Subject: CN=0f3d07f4cd495acbc243866226a0a67fe6be1e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:84:4e:f5:49:e8:21:75:93:8e:fe:6d:04:25: a0:28:79:71:be:0d:7b:d7:1c:5b:93:7d:56:3e:0d: 32:5b:07:02:3b:da:40:31:1c:8e:ac:c2:85:35:74: f6:a5:e8:ee:85:87:35:ae:de:a6:d5:c2:ba:d6:ea: cf:c3:f9:87:a5:35:73:ff:9b:1e:dc:20:5c:ca:06: f7:ba:74:24:0b:73:e8:15:62:72:bc:73:2b:97:90: 04:c9:63:e6:cc:6b:32:3a:3a:f2:b4:d5:3d:6e:fb: 87:15:a1:41:9d:48:63:54:8f:0c:ad:2a:bf:7a:69: 24:26:9a:5e:db:ed:3f:5e:d3:b0:2f:a6:55:ee:a4: 93:f4:5d:75:1a:f6:d0:91:3d:12:4b:78:1c:a8:f3: 01:29:74:9a:b7:87:72:23:3a:61:d7:52:08:69:3d: 9e:48:68:48:d8:97:30:a2:9f:a0:fe:f4:83:63:aa: a6:21:94:21:93:e5:45:7f:5e:84:b0:a0:45:fd:02: 08:b4:e7:4e:c2:0e:aa:39:9c:60:bb:4f:bc:4c:00: d3:5d:62:e1:23:56:c6:0d:33:64:63:a0:5c:96:98: bf:e3:8f:63:a5:92:2a:5d:84:93:ae:66:69:62:2e: 71:76:d9:76:19:9b:e7:90:3e:93:3f:24:42:49:07: 84:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3D:07:F4:CD:49:5A:CB:C2:43:86:62:26:A0:A6:7F:E6:BE:1E:0D X509v3 Authority Key Identifier: keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1b:61:55:db:53:f9:02:b6:51:fb:40:a4:ba:29:3f:5b:3e: 20:eb:18:d3:b9:70:f5:10:d9:0d:85:87:3c:9c:9a:49:5f:cf: 61:94:f2:94:db:a3:fe:a9:28:21:bc:14:64:b5:ce:15:2a:42: 30:8b:2f:96:6e:42:80:cf:35:a0:55:93:6c:ca:65:2f:01:c4: dc:0e:86:15:3c:38:62:8c:6b:fb:d5:b3:13:37:07:8f:c3:80: 48:4b:51:47:3a:54:d6:83:3d:06:4f:38:5e:01:73:66:3a:df: 55:f4:2a:39:2c:36:76:93:5a:44:b9:05:2d:5a:f9:6b:da:07: 2f:62:e3:46:6c:d8:2b:84:08:0c:a1:2d:88:4b:cc:4d:96:e1: 24:f1:9e:e2:1b:6b:43:0b:d2:b7:fe:32:35:bf:77:b5:4c:74: 5e:79:c2:b8:05:d0:84:ed:ec:dc:e8:03:87:c0:6c:de:1c:64: a5:2b:ec:be:1d:9a:e6:33:b1:f0:92:2b:5d:8f:66:a3:80:b8: c5:f5:76:52:b5:b6:65:22:c3:96:20:18:34:fd:2e:8e:f1:58: 3b:99:d5:89:fc:48:c7:98:ab:f9:9c:eb:97:44:63:9d:c5:bd: a1:de:65:98:0f:7f:c3:7b:9a:b6:0e:52:24:b6:da:40:b1:3b: 77:94:eb:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrefKZLyNR1gkO2vRwv25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTI2YzJiYzUwM2E3YzY4MTI4ZDJhZTFhYjRjZDM3ZGVi OTkzMjUwHhcNMjUxMjE2MTUwMTA3WhcNMjUxMjE3MTUwMTA3WjAzMTEwLwYDVQQD EygwZjNkMDdmNGNkNDk1YWNiYzI0Mzg2NjIyNmEwYTY3ZmU2YmUxZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oRO9UnoIXWTjv5tBCWgKHlxvg17 1xxbk31WPg0yWwcCO9pAMRyOrMKFNXT2pejuhYc1rt6m1cK61urPw/mHpTVz/5se 3CBcygb3unQkC3PoFWJyvHMrl5AEyWPmzGsyOjrytNU9bvuHFaFBnUhjVI8MrSq/ emkkJppe2+0/XtOwL6ZV7qST9F11GvbQkT0SS3gcqPMBKXSat4dyIzph11IIaT2e SGhI2Jcwop+g/vSDY6qmIZQhk+VFf16EsKBF/QIItOdOwg6qOZxgu0+8TADTXWLh I1bGDTNkY6Bclpi/449jpZIqXYSTrmZpYi5xdtl2GZvnkD6TPyRCSQeEUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA89B/TNSVrLwkOGYiagpn/mvh4NMB8GA1UdIwQY MBaAFFiibCvFA6fGgSjSrhq0zTfeuZMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGIt YTlkM2VlZjA2YzY3LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGItYTlkM2VlZjA2YzY3 LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABxthVdtT +QK2UftApLopP1s+IOsY07lw9RDZDYWHPJyaSV/PYZTylNuj/qkoIbwUZLXOFSpC MIsvlm5CgM81oFWTbMplLwHE3A6GFTw4Yoxr+9WzEzcHj8OASEtRRzpU1oM9Bk84 XgFzZjrfVfQqOSw2dpNaRLkFLVr5a9oHL2LjRmzYK4QIDKEtiEvMTZbhJPGe4htr QwvSt/4yNb93tUx0XnnCuAXQhO3s3OgDh8Bs3hxkpSvsvh2a5jOx8JIrXY9mo4C4 xfV2UrW2ZSLDliAYNP0ujvFYO5nVifxIx5ir+Zzrl0RjncW9od5lmA9/w3uatg5S JLbaQLE7d5TraA== -----END CERTIFICATE-----Generated at Tue Dec 16 21:03:38 2025 by rpki-client