This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft File: WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json) Hash identifier: FStH6IikntelYP7onXTUJmkCZuFR9eQ87oaLXWv+aMY= Subject key identifier: 58:D7:20:C4:A7:61:30:29:18:14:3C:C9:F9:C1:3F:52:65:3D:96:E8 Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2 Certificate issuer: /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2 Certificate serial: 019AF0BED8A5A09E64393727193C781331D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft Manifest number: 1616 Signing time: Fri 05 Dec 2025 23:00:30 +0000 Manifest this update: Fri 05 Dec 2025 23:00:30 +0000 Manifest next update: Sat 06 Dec 2025 23:00:30 +0000 Files and hashes: 1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=) 2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: RpVeoj8cBY0og8JWsBBMYM3JndjHH88ZHL+X+iu6AQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:d8:a5:a0:9e:64:39:37:27:19:3c:78:13:31:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2 Validity Not Before: Dec 5 23:00:30 2025 GMT Not After : Dec 6 23:00:30 2025 GMT Subject: CN=58d720c4a761302918143cc9f9c13f52653d96e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f9:bc:a4:a6:62:2b:ca:28:73:fa:1a:14:34: 73:d4:c4:64:67:84:d3:1a:b2:1b:c3:95:d3:b3:5c: 1f:ed:84:b9:70:7b:fe:53:1e:8c:95:a8:db:c4:69: 94:4f:5b:d7:3d:ef:af:b4:e3:3c:b9:ab:b5:d8:cd: 10:7f:2f:91:cf:33:fb:7f:97:91:bc:28:b1:be:bf: 15:43:d0:51:7e:2f:9f:93:5b:65:24:b3:06:10:89: 95:70:40:45:88:c8:93:b3:c9:68:87:fd:e8:d0:4f: 6e:a7:bf:3d:2f:c6:68:4d:27:ee:9f:2d:de:2b:0f: b7:4c:62:8c:d6:c3:1c:d3:6c:e8:80:ff:c8:73:7f: 77:65:3b:16:a1:08:77:bb:13:eb:fb:16:58:2b:1c: 02:68:15:e4:4c:95:08:96:49:b9:d0:23:a1:fa:ba: c4:64:9b:14:6d:fe:03:a9:4a:27:4e:b6:3c:77:c9: ca:f0:de:b7:a5:8f:96:d3:66:bd:ff:67:da:9a:fc: 6e:21:1b:5c:af:74:36:82:48:34:5f:f7:77:ff:60: bd:be:98:18:b8:e7:b4:e7:5a:c6:fe:12:aa:18:4e: 73:fb:43:26:89:c1:ed:fa:ce:9c:81:6e:d6:d3:a4: aa:21:49:19:96:31:d7:af:69:a6:21:d8:40:ca:65: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D7:20:C4:A7:61:30:29:18:14:3C:C9:F9:C1:3F:52:65:3D:96:E8 X509v3 Authority Key Identifier: keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:26:eb:60:6d:b8:88:62:e0:51:31:06:c0:7d:e8:ea:c8:69: 08:65:ec:f3:18:e0:b3:ed:0a:7f:41:c2:b5:62:7c:7b:02:56: 70:72:40:dc:dc:5c:25:75:a2:f1:6f:79:ef:3f:15:07:f4:c1: ab:90:c0:7a:59:14:f2:b1:18:0f:9a:13:76:54:f0:cc:2d:85: a5:ee:35:21:ed:0d:d8:cf:12:27:3f:a2:ff:6f:60:fd:eb:65: ba:37:c1:05:45:98:1c:ad:3c:63:44:a7:23:f3:d9:0b:c9:b5: 45:ba:e5:35:56:6e:36:4b:5e:3a:b9:af:33:f2:97:05:5a:c9: a6:9f:91:05:d2:90:61:5e:7d:20:07:12:45:28:83:c8:d2:06: b3:16:76:a4:8e:be:df:43:e9:01:41:c3:d4:a2:82:a0:96:5e: 6f:73:99:c3:e6:c5:25:96:53:07:0b:2b:7f:58:0d:ec:ec:59: ca:72:65:b5:e7:34:b0:8a:6a:d5:bd:44:75:dd:7d:58:08:58: 91:47:dc:18:65:dd:32:33:ea:71:bf:da:25:9f:d6:a2:b2:13: 4f:e2:1a:c6:e1:38:df:41:d9:6a:d4:4d:0c:58:4a:8e:53:5e: 40:60:77:82:aa:07:bd:77:b3:c5:fa:58:f4:ae:7a:f9:a7:b0: b9:16:4e:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvtiloJ5kOTcnGTx4EzHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw ZDk2YjIwHhcNMjUxMjA1MjMwMDMwWhcNMjUxMjA2MjMwMDMwWjAzMTEwLwYDVQQD Eyg1OGQ3MjBjNGE3NjEzMDI5MTgxNDNjYzlmOWMxM2Y1MjY1M2Q5NmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfm8pKZiK8ooc/oaFDRz1MRkZ4TT GrIbw5XTs1wf7YS5cHv+Ux6MlajbxGmUT1vXPe+vtOM8uau12M0Qfy+RzzP7f5eR vCixvr8VQ9BRfi+fk1tlJLMGEImVcEBFiMiTs8loh/3o0E9up789L8ZoTSfuny3e Kw+3TGKM1sMc02zogP/Ic393ZTsWoQh3uxPr+xZYKxwCaBXkTJUIlkm50COh+rrE ZJsUbf4DqUonTrY8d8nK8N63pY+W02a9/2famvxuIRtcr3Q2gkg0X/d3/2C9vpgY uOe051rG/hKqGE5z+0MmicHt+s6cgW7W06SqIUkZljHXr2mmIdhAymUm9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjXIMSnYTApGBQ8yfnBP1JlPZboMB8GA1UdIwQY MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt M2YxN2NiY2JhNWNhLzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSbrYG24 iGLgUTEGwH3o6shpCGXs8xjgs+0Kf0HCtWJ8ewJWcHJA3NxcJXWi8W957z8VB/TB q5DAelkU8rEYD5oTdlTwzC2Fpe41Ie0N2M8SJz+i/29g/etlujfBBUWYHK08Y0Sn I/PZC8m1RbrlNVZuNkteOrmvM/KXBVrJpp+RBdKQYV59IAcSRSiDyNIGsxZ2pI6+ 30PpAUHD1KKCoJZeb3OZw+bFJZZTBwsrf1gN7OxZynJltec0sIpq1b1Edd19WAhY kUfcGGXdMjPqcb/aJZ/WorITT+IaxuE430HZatRNDFhKjlNeQGB3gqoHvXezxfpY 9K56+aewuRZOig== -----END CERTIFICATE-----Generated at Sat Dec 6 07:22:29 2025 by rpki-client