This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json) Hash identifier: oN3eBIEVyn2qM5dv9U3/ormst9qoLqIjmlgDq0/FbtU= Subject key identifier: BE:6B:07:C5:8F:C9:85:5D:C5:93:F5:56:0F:7E:11:E5:B2:4F:7F:14 Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25 Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325 Certificate serial: 019B3532EFDB363E6A3A393D0FEC38CAA33A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft Manifest number: 0EA4 Signing time: Fri 19 Dec 2025 06:01:29 +0000 Manifest this update: Fri 19 Dec 2025 06:01:29 +0000 Manifest next update: Sat 20 Dec 2025 06:01:29 +0000 Files and hashes: 1: NpfRtoVnz3NxGuD-uEbggfqrJTM.roa (hash: tIkhKB+ig4LtT1LifK/STgZvceUuRWeXKrf22HpiIlA=) 2: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: vo861q+KuECGeJpeLyQgv1Cx28If4Y4wEc0c/Q45gEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:23:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:ef:db:36:3e:6a:3a:39:3d:0f:ec:38:ca:a3:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325 Validity Not Before: Dec 19 06:01:29 2025 GMT Not After : Dec 20 06:01:29 2025 GMT Subject: CN=be6b07c58fc9855dc593f5560f7e11e5b24f7f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:ff:59:21:ad:07:e7:cc:05:ff:15:fc:ea: 8e:c8:bb:00:df:87:95:fe:0e:ba:68:42:ec:b2:aa: 0a:42:eb:bd:89:2b:b1:95:b8:3d:35:10:b9:db:9d: fd:52:2b:f0:08:b9:87:9e:60:a5:ff:b2:e9:41:f5: f9:92:ee:86:f3:a4:06:49:48:e1:8b:09:c8:50:31: d4:d9:a7:0b:16:e6:dd:9b:be:9e:58:10:6e:5f:b5: 1c:16:e6:c2:8f:d5:f1:f1:d4:16:c7:7b:84:dd:a5: c1:70:9e:39:94:23:3f:b5:f8:36:7c:7d:54:87:46: 7e:9a:b5:05:5f:26:cc:4d:0f:2c:89:92:25:59:3b: ff:c3:8d:1c:b8:53:23:61:4c:05:aa:1d:b3:3e:81: d8:c0:fd:f5:0f:64:92:42:20:1b:ee:dd:9a:08:7f: 42:63:b0:c6:bc:07:79:f5:a3:6e:61:9b:56:4e:29: 43:3e:c6:c0:52:4c:22:c5:6e:c4:3d:f6:78:d2:26: 7a:e3:34:8a:09:45:13:d6:34:8e:0b:41:22:85:38: 35:cc:e0:97:22:d5:2b:02:06:a6:1c:55:e1:c4:7f: 63:40:42:15:99:85:7c:75:56:ad:99:ad:be:0c:b9: fc:bb:9a:a4:18:cd:8f:e4:d9:ed:31:f1:44:7e:de: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6B:07:C5:8F:C9:85:5D:C5:93:F5:56:0F:7E:11:E5:B2:4F:7F:14 X509v3 Authority Key Identifier: keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:20:52:f3:4f:d2:bb:2f:65:5e:88:1d:49:22:22:73:95: d6:81:52:54:b9:fb:b5:00:fe:a4:d7:69:f0:ba:1a:4c:a8:7f: 3f:dc:af:4b:d9:20:9e:ab:7f:99:b8:c5:c8:7c:3d:d5:66:07: 50:6d:72:18:dd:48:f9:3c:7d:54:af:6e:f2:e2:56:28:8f:43: e0:2f:41:52:75:8c:23:d8:53:ef:b2:6e:51:80:e4:5a:63:4c: 44:c1:17:71:64:a3:99:f2:88:68:e2:22:bd:9b:f9:13:61:29: 98:60:1f:b7:8a:dd:b1:5b:c2:e5:ef:e5:78:bd:23:20:60:e8: 72:75:c1:ae:92:ad:3b:0a:6d:ed:e6:b2:60:28:18:ac:65:d9: 0e:c5:03:1e:fb:31:0e:f3:d3:d3:fa:de:53:ce:05:51:41:f7: 21:59:60:ca:61:12:a4:9f:21:4d:8b:82:ce:97:d9:35:78:06: f3:d2:8a:ad:54:21:dc:bd:d6:85:0f:45:0b:f1:e0:86:90:dd: 57:66:ff:49:b5:28:ba:fb:01:43:63:6b:f1:9d:e5:ee:12:79: 61:ac:56:6c:e8:d7:27:41:19:3f:b1:96:20:a6:09:99:8e:2f: 4e:8f:e9:ed:4d:8b:d3:cd:7c:b5:5b:05:7e:6b:3b:cc:32:ae: a4:d8:71:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mu/bNj5qOjk9D+w4yqM6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTI2YzJiYzUwM2E3YzY4MTI4ZDJhZTFhYjRjZDM3ZGVi OTkzMjUwHhcNMjUxMjE5MDYwMTI5WhcNMjUxMjIwMDYwMTI5WjAzMTEwLwYDVQQD EyhiZTZiMDdjNThmYzk4NTVkYzU5M2Y1NTYwZjdlMTFlNWIyNGY3ZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstj/WSGtB+fMBf8V/OqOyLsA34eV /g66aELssqoKQuu9iSuxlbg9NRC52539UivwCLmHnmCl/7LpQfX5ku6G86QGSUjh iwnIUDHU2acLFubdm76eWBBuX7UcFubCj9Xx8dQWx3uE3aXBcJ45lCM/tfg2fH1U h0Z+mrUFXybMTQ8siZIlWTv/w40cuFMjYUwFqh2zPoHYwP31D2SSQiAb7t2aCH9C Y7DGvAd59aNuYZtWTilDPsbAUkwixW7EPfZ40iZ64zSKCUUT1jSOC0EihTg1zOCX ItUrAgamHFXhxH9jQEIVmYV8dVatma2+DLn8u5qkGM2P5NntMfFEft7/RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5rB8WPyYVdxZP1Vg9+EeWyT38UMB8GA1UdIwQY MBaAFFiibCvFA6fGgSjSrhq0zTfeuZMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGIt YTlkM2VlZjA2YzY3LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGItYTlkM2VlZjA2YzY3 LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArYgUvNP 0rsvZV6IHUkiInOV1oFSVLn7tQD+pNdp8LoaTKh/P9yvS9kgnqt/mbjFyHw91WYH UG1yGN1I+Tx9VK9u8uJWKI9D4C9BUnWMI9hT77JuUYDkWmNMRMEXcWSjmfKIaOIi vZv5E2EpmGAft4rdsVvC5e/leL0jIGDocnXBrpKtOwpt7eayYCgYrGXZDsUDHvsx DvPT0/reU84FUUH3IVlgymESpJ8hTYuCzpfZNXgG89KKrVQh3L3WhQ9FC/HghpDd V2b/SbUouvsBQ2Nr8Z3l7hJ5YaxWbOjXJ0EZP7GWIKYJmY4vTo/p7U2L0818tVsF fms7zDKupNhxiw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:52:53 2025 by rpki-client