This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft File: WPgwRPUQ5RX_XcTffgCO3fmmf50.mft (raw, json) Hash identifier: BDiQHXWYIJQPJgDc9yN3O83PeUPLJMsRbIZkTdJSR08= Subject key identifier: 85:0F:DA:52:F2:8D:B6:51:C1:42:55:79:D1:75:A1:11:3E:18:EA:82 Authority key identifier: 58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D Certificate issuer: /CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d Certificate serial: 019AF088EAFA54342B1461C99AD652BB6DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft Manifest number: 175C Signing time: Fri 05 Dec 2025 22:01:36 +0000 Manifest this update: Fri 05 Dec 2025 22:01:36 +0000 Manifest next update: Sat 06 Dec 2025 22:01:36 +0000 Files and hashes: 1: WPgwRPUQ5RX_XcTffgCO3fmmf50.crl (hash: opxDWVKh0+XYV7gbKEIPiC+sSazIg1SEel3L00AHYXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ea:fa:54:34:2b:14:61:c9:9a:d6:52:bb:6d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f83044f510e515ff5dc4df7e008eddf9a67f9d Validity Not Before: Dec 5 22:01:36 2025 GMT Not After : Dec 6 22:01:36 2025 GMT Subject: CN=850fda52f28db651c1425579d175a1113e18ea82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5b:51:79:07:5d:1b:28:44:83:9d:0f:a6:8b: f1:f7:a5:7b:bd:5c:a7:77:ca:da:39:2d:d7:6b:f7: a8:40:58:89:35:61:1e:ce:1d:a2:be:6a:bb:51:ab: 1f:e7:3d:e7:53:56:22:c7:41:bc:22:23:e8:e8:e1: 0d:8b:28:68:cf:35:00:38:61:a1:8d:f7:c0:43:2b: 8b:54:cd:b7:4e:5a:07:4d:ca:64:6a:9c:29:aa:db: 9d:0a:29:09:81:bd:bb:36:93:15:19:b5:70:68:95: 4d:1c:2d:43:65:1f:c1:e6:59:b5:8b:a3:d8:ae:9f: 0c:05:f2:76:87:c7:77:86:74:bf:d9:1c:67:eb:68: a5:2c:f2:4d:14:4f:79:02:3d:cb:92:80:9d:54:96: e6:e6:6b:88:77:31:95:b6:c3:24:90:92:bb:9a:df: 6b:9c:fd:e3:20:17:53:7c:44:49:fd:90:79:a2:99: 11:fd:a9:19:9c:36:bc:7d:a1:a9:80:87:6e:19:73: 27:5d:9b:4a:f7:4b:b0:b1:e8:8b:16:3e:f7:40:2d: 7b:de:55:9e:0f:24:7b:83:85:d2:63:ee:f1:ee:42: a0:9f:81:29:92:91:d1:c8:59:7e:0c:f6:ff:e9:8e: 66:b2:9b:f7:ff:0e:53:d3:d1:7e:41:c6:d7:54:20: c9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:DA:52:F2:8D:B6:51:C1:42:55:79:D1:75:A1:11:3E:18:EA:82 X509v3 Authority Key Identifier: keyid:58:F8:30:44:F5:10:E5:15:FF:5D:C4:DF:7E:00:8E:DD:F9:A6:7F:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPgwRPUQ5RX_XcTffgCO3fmmf50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef580a-9b75-40a3-958b-f9f97659a9c3/1/WPgwRPUQ5RX_XcTffgCO3fmmf50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:27:b2:29:13:86:98:41:db:9d:12:90:14:69:01:60:4a:2e: 08:ea:a6:53:a8:b6:be:bd:58:87:29:cd:ab:1d:52:87:55:88: 3c:c3:a9:34:5e:56:e9:ed:a8:dc:f3:cb:c8:ff:c0:96:c4:d3: 26:77:9b:62:b7:ff:20:ae:71:61:40:53:8b:fb:61:ce:40:b9: ff:d1:75:92:f9:85:53:62:28:4f:03:8a:98:89:8c:c9:2a:42: 9b:f8:ff:0e:cb:72:87:53:3f:7e:e2:09:d3:96:5f:12:55:50: dd:0f:f1:6f:0a:af:e0:7c:8e:ab:ea:3e:48:9b:2e:51:e5:0b: e1:17:16:6e:cc:69:21:ad:38:fe:a0:2b:18:89:9c:99:71:7d: 4b:85:73:d5:46:ce:1a:a1:13:f2:7f:16:9b:93:50:73:12:58: af:55:27:33:a0:8e:4a:94:84:8e:95:b0:8b:e5:91:67:c1:a8: 73:13:0c:18:ed:9f:12:b0:bb:fb:76:0b:3f:be:36:b3:47:f3: e6:ce:c8:fd:1f:ea:77:ab:bf:74:f2:85:7b:d7:81:12:5a:7d: fb:0e:e4:c2:46:a3:23:ab:7f:db:08:89:0a:de:1e:34:53:91: 42:cd:69:26:93:d1:eb:5c:d1:14:22:a7:43:6e:ca:54:18:35: 4c:65:64:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiOr6VDQrFGHJmtZSu23WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZjgzMDQ0ZjUxMGU1MTVmZjVkYzRkZjdlMDA4ZWRkZjlh NjdmOWQwHhcNMjUxMjA1MjIwMTM2WhcNMjUxMjA2MjIwMTM2WjAzMTEwLwYDVQQD Eyg4NTBmZGE1MmYyOGRiNjUxYzE0MjU1NzlkMTc1YTExMTNlMThlYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VtReQddGyhEg50Ppovx96V7vVyn d8raOS3Xa/eoQFiJNWEezh2ivmq7Uasf5z3nU1Yix0G8IiPo6OENiyhozzUAOGGh jffAQyuLVM23TloHTcpkapwpqtudCikJgb27NpMVGbVwaJVNHC1DZR/B5lm1i6PY rp8MBfJ2h8d3hnS/2Rxn62ilLPJNFE95Aj3LkoCdVJbm5muIdzGVtsMkkJK7mt9r nP3jIBdTfERJ/ZB5opkR/akZnDa8faGpgIduGXMnXZtK90uwseiLFj73QC173lWe DyR7g4XSY+7x7kKgn4EpkpHRyFl+DPb/6Y5mspv3/w5T09F+QcbXVCDJCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUP2lLyjbZRwUJVedF1oRE+GOqCMB8GA1UdIwQY MBaAFFj4MET1EOUV/13E334Ajt35pn+dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1Bnd1JQVVE1UlhfWGNUZmZnQ08zZm1tZjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9lZjU4MGEtOWI3NS00MGEzLTk1OGIt ZjlmOTc2NTlhOWMzLzEvV1Bnd1JQVVE1UlhfWGNUZmZnQ08zZm1tZjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9lZjU4MGEtOWI3NS00MGEzLTk1OGItZjlmOTc2NTlhOWMz LzEvV1Bnd1JQVVE1UlhfWGNUZmZnQ08zZm1tZjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkieyKROG mEHbnRKQFGkBYEouCOqmU6i2vr1YhynNqx1Sh1WIPMOpNF5W6e2o3PPLyP/AlsTT JnebYrf/IK5xYUBTi/thzkC5/9F1kvmFU2IoTwOKmImMySpCm/j/Dstyh1M/fuIJ 05ZfElVQ3Q/xbwqv4HyOq+o+SJsuUeUL4RcWbsxpIa04/qArGImcmXF9S4Vz1UbO GqET8n8Wm5NQcxJYr1UnM6COSpSEjpWwi+WRZ8GocxMMGO2fErC7+3YLP742s0fz 5s7I/R/qd6u/dPKFe9eBElp9+w7kwkajI6t/2wiJCt4eNFORQs1pJpPR61zRFCKn Q27KVBg1TGVkGQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:17 2025 by rpki-client