This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft File: WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json) Hash identifier: MI2y1GMs+moc95NMhd40hFNZkRjHcN+SPhTKegKJXp0= Subject key identifier: 3D:16:B3:AA:3B:71:6E:42:98:94:EE:51:A8:0F:F0:70:0D:24:E2:19 Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91 Certificate issuer: /CN=58dd42ab3460279709c134b570f76e34e4d95b91 Certificate serial: 019AF2098799A939F5E2249E0D3BED7E2DE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft Manifest number: 1486 Signing time: Sat 06 Dec 2025 05:01:41 +0000 Manifest this update: Sat 06 Dec 2025 05:01:41 +0000 Manifest next update: Sun 07 Dec 2025 05:01:41 +0000 Files and hashes: 1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: ZLEh3TjTUO5cU1baV+LKL/8pOrdl75fMTSumP6qeq8k=) 2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:87:99:a9:39:f5:e2:24:9e:0d:3b:ed:7e:2d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91 Validity Not Before: Dec 6 05:01:41 2025 GMT Not After : Dec 7 05:01:41 2025 GMT Subject: CN=3d16b3aa3b716e429894ee51a80ff0700d24e219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:20:e0:3d:4e:28:ac:05:f6:f3:04:77:37: f0:5a:ea:1b:21:b8:df:8a:71:14:21:09:d3:4d:b8: 53:74:9a:27:b6:0f:2f:c6:85:fe:ec:fa:b2:99:60: ec:ad:86:03:55:f4:17:27:26:50:7d:da:2c:72:4a: d7:db:22:89:7b:9b:18:0d:4b:43:c3:cd:f5:9e:45: 2a:c1:bb:e4:b3:aa:7f:b3:0b:d1:86:f1:d7:e6:92: 67:6c:29:1d:9c:ee:35:dc:1b:40:6b:d5:88:cc:bb: 0a:b8:9c:32:ab:ca:f2:49:d5:88:3d:3c:f8:c0:f8: 2e:26:24:46:a8:68:16:6e:d4:90:44:1b:20:a7:a0: e4:48:4d:b1:40:32:9a:f7:72:2b:e0:0a:44:30:53: 4d:5c:66:04:bd:ba:68:28:a5:d2:fd:6b:e3:3d:8a: f6:a2:56:9c:bd:eb:3b:32:9f:4c:63:f7:0d:91:1c: a1:d2:64:d5:88:13:7c:30:7c:72:59:98:a3:aa:e0: 5b:9f:1c:8f:cb:14:5e:fd:ef:1d:24:71:f8:08:59: 6d:f2:23:ea:a0:60:85:7a:f9:48:98:fd:e3:44:dd: 25:99:c6:1e:87:5e:97:82:83:2b:ac:82:97:05:19: 7d:5e:4a:68:e3:2e:4d:2b:6e:f8:25:ab:0d:06:df: af:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:B3:AA:3B:71:6E:42:98:94:EE:51:A8:0F:F0:70:0D:24:E2:19 X509v3 Authority Key Identifier: keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:16:da:b8:50:49:6f:0d:eb:62:ba:fe:1f:d2:0b:11:81:7c: 4f:07:99:37:a7:92:69:08:83:a0:99:ab:3d:4c:9a:bf:75:12: 4d:38:c5:c9:91:fd:8f:1b:04:95:c4:40:2a:13:8e:72:b0:4d: 9b:78:3c:83:f1:2d:14:57:77:80:80:11:2f:c2:ba:b7:fc:73: cd:6b:2f:91:7f:5e:99:6a:6c:30:08:91:3f:e4:9c:01:cc:8f: f0:73:82:91:b4:e3:3f:c7:11:4b:9e:7f:a2:45:c8:dd:1a:6b: 9a:4d:95:78:e5:1f:e2:0e:6f:f3:32:33:87:20:61:53:58:60: 4b:3c:0b:31:8e:c7:be:b5:c7:c2:44:7d:72:75:25:d9:76:b9: ab:b6:7d:9d:3f:6e:50:e2:b4:43:88:b0:a4:f1:9d:a4:a8:85: c7:ad:1a:6a:26:ab:24:69:d1:9b:9f:2c:ec:2b:f3:d0:74:87: 20:aa:79:27:ff:bc:96:c4:7b:94:72:d7:51:5f:1d:06:8c:91: 8d:16:71:c9:f6:a8:dc:98:1c:c3:ce:59:da:ef:c8:78:5b:98: 78:11:4b:17:92:0d:4f:b3:81:71:97:90:82:ef:63:79:e3:4d: 04:33:2c:e2:7d:56:49:cd:5b:bf:24:90:f0:9a:96:52:6c:da: 28:05:5f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYeZqTn14iSeDTvtfi3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGQ0MmFiMzQ2MDI3OTcwOWMxMzRiNTcwZjc2ZTM0ZTRk OTViOTEwHhcNMjUxMjA2MDUwMTQxWhcNMjUxMjA3MDUwMTQxWjAzMTEwLwYDVQQD EygzZDE2YjNhYTNiNzE2ZTQyOTg5NGVlNTFhODBmZjA3MDBkMjRlMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGAg4D1OKKwF9vMEdzfwWuobIbjf inEUIQnTTbhTdJontg8vxoX+7PqymWDsrYYDVfQXJyZQfdosckrX2yKJe5sYDUtD w831nkUqwbvks6p/swvRhvHX5pJnbCkdnO413BtAa9WIzLsKuJwyq8rySdWIPTz4 wPguJiRGqGgWbtSQRBsgp6DkSE2xQDKa93Ir4ApEMFNNXGYEvbpoKKXS/WvjPYr2 olacves7Mp9MY/cNkRyh0mTViBN8MHxyWZijquBbnxyPyxRe/e8dJHH4CFlt8iPq oGCFevlImP3jRN0lmcYeh16XgoMrrIKXBRl9Xkpo4y5NK274JasNBt+v7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0Ws6o7cW5CmJTuUagP8HANJOIZMB8GA1UdIwQY MBaAFFjdQqs0YCeXCcE0tXD3bjTk2VuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgt NmUzMTM0N2QwNGQ5LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgtNmUzMTM0N2QwNGQ5 LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxbauFBJ bw3rYrr+H9ILEYF8TweZN6eSaQiDoJmrPUyav3USTTjFyZH9jxsElcRAKhOOcrBN m3g8g/EtFFd3gIARL8K6t/xzzWsvkX9emWpsMAiRP+ScAcyP8HOCkbTjP8cRS55/ okXI3Rprmk2VeOUf4g5v8zIzhyBhU1hgSzwLMY7HvrXHwkR9cnUl2Xa5q7Z9nT9u UOK0Q4iwpPGdpKiFx60aaiarJGnRm58s7Cvz0HSHIKp5J/+8lsR7lHLXUV8dBoyR jRZxyfao3Jgcw85Z2u/IeFuYeBFLF5INT7OBcZeQgu9jeeNNBDMs4n1WSc1bvySQ 8JqWUmzaKAVfuw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:35 2025 by rpki-client