This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json) Hash identifier: 5hy/2viqP7B4LWca2nWWctpq9gBA8z54vpNy9m2DR80= Subject key identifier: 4F:A4:39:36:C7:EA:91:FC:40:28:36:D0:D9:EA:82:AD:B1:29:EA:91 Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403 Certificate serial: 019AF1D1DD58D7C01E41329DD3B4F4E0CB82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft Manifest number: 0940 Signing time: Sat 06 Dec 2025 04:00:53 +0000 Manifest this update: Sat 06 Dec 2025 04:00:53 +0000 Manifest next update: Sun 07 Dec 2025 04:00:53 +0000 Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: IhOH91pvviyZzgQH1LBLYqyYKhIH/0SC2ybzoiIPKbE=) 2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=) 3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:dd:58:d7:c0:1e:41:32:9d:d3:b4:f4:e0:cb:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403 Validity Not Before: Dec 6 04:00:53 2025 GMT Not After : Dec 7 04:00:53 2025 GMT Subject: CN=4fa43936c7ea91fc402836d0d9ea82adb129ea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:95:18:ec:3e:4f:a8:12:06:a5:cc:c5:61: 4f:35:04:f1:40:a3:78:13:d7:4b:f4:40:57:7e:5c: c6:97:ce:2c:88:ac:7c:cf:e4:1e:68:42:c8:0d:23: 04:b8:1b:6b:63:7b:d1:9f:57:47:79:c4:05:27:b5: fd:70:27:14:72:10:18:91:e5:be:31:55:9b:3f:6c: 57:03:60:ed:af:76:82:35:01:a2:22:00:ea:1f:c2: 8b:6c:de:4c:7a:0f:67:0e:e8:37:fe:df:8f:34:68: b0:72:87:7f:c7:9b:ac:d2:3d:79:4c:02:aa:9f:e5: 0e:2e:87:29:41:11:7a:0d:27:7e:a2:d4:88:ad:2a: 39:4f:c7:0f:fa:44:93:52:42:82:c1:13:77:3f:5a: 8d:da:ba:65:8c:b4:f5:53:ef:15:a9:e3:35:6e:b5: e7:b7:57:4f:d5:57:db:a5:f2:a6:c3:4f:6b:89:a5: 02:12:72:c9:49:a1:f6:f8:f7:9c:41:69:c5:ed:31: e8:a0:42:db:e8:f3:1b:d5:f8:84:dc:13:c6:63:43: 1b:d7:8c:e1:bd:9b:33:eb:89:08:bd:57:a2:fc:d3: 9e:f6:b4:52:96:f8:6d:b0:92:28:a8:97:27:4a:7c: ea:31:a3:16:6b:48:30:f5:d7:40:4d:b7:3b:c3:e4: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A4:39:36:C7:EA:91:FC:40:28:36:D0:D9:EA:82:AD:B1:29:EA:91 X509v3 Authority Key Identifier: keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:58:95:2a:42:9d:a9:b4:83:65:7b:ca:fc:b6:55:58:0b:5d: d9:40:3e:81:83:ab:ff:df:bd:99:09:56:96:31:41:5a:b3:eb: 1f:fe:37:89:af:ab:05:a1:9c:d6:18:e5:81:50:db:1e:50:00: 62:69:4a:08:14:63:e2:ac:08:50:45:3d:28:96:1e:46:f5:5b: 4e:34:25:fe:cc:ab:e5:d1:da:6a:9c:0a:15:60:27:47:c9:2c: ab:40:ed:f3:ca:cf:64:a7:5c:cf:6d:15:3d:6e:37:9a:0e:46: c1:ef:02:29:49:2f:36:3d:ef:3f:e1:18:7b:00:8d:60:ef:a5: 58:a8:5d:a4:af:e9:29:c2:c6:ff:4f:5d:69:7d:ab:a5:56:85: f9:2e:ee:15:47:bc:16:dd:22:41:bb:5a:83:34:60:6c:dc:cd: 7b:8f:50:10:ad:93:38:fc:42:5f:ae:ff:9e:94:98:ed:c3:35: 62:cb:10:81:44:78:e3:66:41:d9:fa:24:6e:b7:54:d3:ee:8c: c9:7c:4f:0f:ca:fd:35:5a:63:f3:09:bc:cc:13:e7:2e:4c:96: e7:22:c0:b5:b2:16:74:f0:77:6c:a0:8b:35:63:76:6f:ce:81: 66:c2:4b:21:88:3d:be:3b:61:00:f6:2c:7b:0e:1c:3d:3b:82: 71:1d:10:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0d1Y18AeQTKd07T04MuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx ODk0MDMwHhcNMjUxMjA2MDQwMDUzWhcNMjUxMjA3MDQwMDUzWjAzMTEwLwYDVQQD Eyg0ZmE0MzkzNmM3ZWE5MWZjNDAyODM2ZDBkOWVhODJhZGIxMjllYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdmVGOw+T6gSBqXMxWFPNQTxQKN4 E9dL9EBXflzGl84siKx8z+QeaELIDSMEuBtrY3vRn1dHecQFJ7X9cCcUchAYkeW+ MVWbP2xXA2Dtr3aCNQGiIgDqH8KLbN5Meg9nDug3/t+PNGiwcod/x5us0j15TAKq n+UOLocpQRF6DSd+otSIrSo5T8cP+kSTUkKCwRN3P1qN2rpljLT1U+8VqeM1brXn t1dP1VfbpfKmw09riaUCEnLJSaH2+PecQWnF7THooELb6PMb1fiE3BPGY0Mb14zh vZsz64kIvVei/NOe9rRSlvhtsJIoqJcnSnzqMaMWa0gw9ddATbc7w+TrFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+kOTbH6pH8QCg20Nnqgq2xKeqRMB8GA1UdIwQY MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt Y2IxNjhhZmRiMzQzLzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFiVKkKd qbSDZXvK/LZVWAtd2UA+gYOr/9+9mQlWljFBWrPrH/43ia+rBaGc1hjlgVDbHlAA YmlKCBRj4qwIUEU9KJYeRvVbTjQl/syr5dHaapwKFWAnR8ksq0Dt88rPZKdcz20V PW43mg5Gwe8CKUkvNj3vP+EYewCNYO+lWKhdpK/pKcLG/09daX2rpVaF+S7uFUe8 Ft0iQbtagzRgbNzNe49QEK2TOPxCX67/npSY7cM1YssQgUR442ZB2fokbrdU0+6M yXxPD8r9NVpj8wm8zBPnLkyW5yLAtbIWdPB3bKCLNWN2b86BZsJLIYg9vjthAPYs ew4cPTuCcR0QjA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:23 2025 by rpki-client