This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json) Hash identifier: 4UKqpeF5eZpAZuAc6Pphva0aBtWflwn24OCqJ/ZrO9E= Subject key identifier: 3C:8D:BC:E8:10:50:5D:D7:D3:40:1A:C5:11:F6:6F:7C:FA:1C:C0:AF Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f Certificate serial: 019AFCC304E0E3088264443E84AB00B64FEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft Manifest number: 0359 Signing time: Mon 08 Dec 2025 07:00:30 +0000 Manifest this update: Mon 08 Dec 2025 07:00:30 +0000 Manifest next update: Tue 09 Dec 2025 07:00:30 +0000 Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: lmj2n7rnF3FSYrnlGAiey95XNKoksx2zfy55xBU21lo=) 2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:04:e0:e3:08:82:64:44:3e:84:ab:00:b6:4f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f Validity Not Before: Dec 8 07:00:30 2025 GMT Not After : Dec 9 07:00:30 2025 GMT Subject: CN=3c8dbce810505dd7d3401ac511f66f7cfa1cc0af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:13:bb:83:e5:c8:4d:9f:85:46:76:c4:78: d2:4c:fa:d5:ff:cc:10:4c:37:76:a9:6a:a2:84:36: c3:61:c0:c2:56:90:29:c1:18:43:29:be:5f:e9:95: fc:bd:17:10:da:2d:44:65:40:ca:d7:c7:5e:6f:db: fe:a4:89:48:34:31:24:4b:9c:6d:2d:1f:02:2b:2e: 9b:af:fb:9c:d9:22:d4:ac:9b:ed:a5:c0:1c:20:34: da:e9:01:3d:8e:56:9b:a9:38:49:49:6d:b9:4a:71: 74:d2:52:92:84:99:8d:ca:77:56:ed:a2:74:c5:8e: e7:a1:1f:0b:12:a6:35:b5:ac:ea:24:93:d9:60:06: ea:7d:91:9c:81:46:4e:09:d7:17:7d:47:e4:5b:46: bc:6a:d3:0b:f7:23:0e:3d:a6:97:62:b8:fa:77:2a: aa:62:d0:7a:06:d2:55:e7:b1:c6:5a:db:12:99:7e: 7a:5e:30:11:91:77:d1:4c:03:46:85:36:8d:af:0e: ef:c1:7d:25:c3:2d:a1:b3:7b:61:eb:27:9b:99:08: dc:e3:b7:25:95:2d:49:47:92:75:00:2e:49:97:a0: 05:fe:88:0e:a9:45:35:91:6f:73:44:82:59:01:19: 44:1f:3f:41:ee:f5:85:e1:1b:4a:8d:c8:78:a3:f4: cf:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8D:BC:E8:10:50:5D:D7:D3:40:1A:C5:11:F6:6F:7C:FA:1C:C0:AF X509v3 Authority Key Identifier: keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:18:c6:95:d2:e1:f8:e8:69:59:c2:20:9c:41:d9:3c:e9:0d: 18:4c:fa:d9:89:7b:a1:55:79:6d:b5:fa:72:ef:0d:36:1c:f2: ec:13:fa:2f:72:50:cf:02:ca:cc:68:53:33:3d:69:5e:7d:fc: d9:6a:34:9c:66:88:05:73:38:bb:19:29:4d:aa:74:22:ce:a5: fc:5a:32:54:b6:b7:73:ca:f0:5b:40:ea:b9:21:d7:76:9c:c9: d5:8d:31:d7:d6:75:fc:bc:81:ab:19:24:5c:01:12:33:1e:cd: 6f:8a:7d:71:55:3d:99:2d:c3:84:65:b5:3f:77:5c:ab:f9:7d: 3b:03:97:e2:94:d0:95:87:fa:eb:75:9c:4f:47:b1:9b:e2:7e: 8e:06:e0:5a:99:7e:b8:a6:a9:1d:bc:d0:12:96:92:10:5c:dc: a6:d2:6d:0b:70:a7:1c:a2:64:13:27:f7:e5:90:e5:8a:70:1f: 32:d8:39:ee:0b:f9:d6:6c:36:a7:c4:49:4c:a9:68:c9:ef:b3: 81:63:cc:a0:a8:88:08:c0:69:14:5a:fe:ad:a7:78:88:a6:0d: 99:e5:f9:c8:5a:ae:55:c9:6a:f4:a2:60:40:59:09:95:a5:81: 9b:6f:0d:dd:7c:44:a7:c7:f7:ed:8c:68:ec:98:6e:6f:d4:53: 98:24:21:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8wwTg4wiCZEQ+hKsAtk/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx N2Q3MmYwHhcNMjUxMjA4MDcwMDMwWhcNMjUxMjA5MDcwMDMwWjAzMTEwLwYDVQQD EygzYzhkYmNlODEwNTA1ZGQ3ZDM0MDFhYzUxMWY2NmY3Y2ZhMWNjMGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvYTu4PlyE2fhUZ2xHjSTPrV/8wQ TDd2qWqihDbDYcDCVpApwRhDKb5f6ZX8vRcQ2i1EZUDK18deb9v+pIlINDEkS5xt LR8CKy6br/uc2SLUrJvtpcAcIDTa6QE9jlabqThJSW25SnF00lKShJmNyndW7aJ0 xY7noR8LEqY1tazqJJPZYAbqfZGcgUZOCdcXfUfkW0a8atML9yMOPaaXYrj6dyqq YtB6BtJV57HGWtsSmX56XjARkXfRTANGhTaNrw7vwX0lwy2hs3th6yebmQjc47cl lS1JR5J1AC5Jl6AF/ogOqUU1kW9zRIJZARlEHz9B7vWF4RtKjch4o/TPvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyNvOgQUF3X00AaxRH2b3z6HMCvMB8GA1UdIwQY MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0 LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARhjGldLh +OhpWcIgnEHZPOkNGEz62Yl7oVV5bbX6cu8NNhzy7BP6L3JQzwLKzGhTMz1pXn38 2Wo0nGaIBXM4uxkpTap0Is6l/FoyVLa3c8rwW0DquSHXdpzJ1Y0x19Z1/LyBqxkk XAESMx7Nb4p9cVU9mS3DhGW1P3dcq/l9OwOX4pTQlYf663WcT0exm+J+jgbgWpl+ uKapHbzQEpaSEFzcptJtC3CnHKJkEyf35ZDlinAfMtg57gv51mw2p8RJTKloye+z gWPMoKiICMBpFFr+rad4iKYNmeX5yFquVclq9KJgQFkJlaWBm28N3XxEp8f37Yxo 7Jhub9RTmCQhnw== -----END CERTIFICATE-----Generated at Mon Dec 8 09:33:46 2025 by rpki-client