This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json) Hash identifier: aKG32XHKWA4GMSkrvay2nsH4Ypm7Uedsi84HM8j/0Cs= Subject key identifier: CE:E5:8D:7C:58:C1:28:53:8D:B4:3E:56:3D:9B:33:5C:A5:18:EE:5F Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411 Certificate serial: 019AF0BF918F20AB52FB7D3BE17A105870CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft Manifest number: 175C Signing time: Fri 05 Dec 2025 23:01:17 +0000 Manifest this update: Fri 05 Dec 2025 23:01:17 +0000 Manifest next update: Sat 06 Dec 2025 23:01:17 +0000 Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: FnVFdQvO9zvZwUzxB/GGP71+Igr9mb/K5MnfQsdNCVY=) 2: a9JHCjYfw7Z6c79opyhmwTytJDE.roa (hash: YtP+XrFe44fVRI42n0stYBQvN0/zhE07g6u41GgESnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:91:8f:20:ab:52:fb:7d:3b:e1:7a:10:58:70:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411 Validity Not Before: Dec 5 23:01:17 2025 GMT Not After : Dec 6 23:01:17 2025 GMT Subject: CN=cee58d7c58c128538db43e563d9b335ca518ee5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c1:73:0c:0c:0b:9b:72:88:3d:89:89:e1:06: 03:bc:30:80:3d:ab:ff:77:cf:e0:80:67:2b:4a:36: 43:d1:0a:29:47:ad:73:df:f4:67:f8:d2:30:12:4a: a5:a4:59:92:1a:f4:4e:d4:88:40:a6:ba:50:42:ed: c9:4f:16:a3:49:58:86:1e:8c:e8:c9:ca:d8:8d:35: 93:8a:23:b2:6f:0e:32:52:88:e7:de:00:a9:10:37: 5c:19:d0:bf:31:ca:30:a7:cf:33:96:bc:23:aa:da: 62:68:c0:86:61:97:76:c6:40:f5:6d:02:1b:3a:e6: 23:75:24:db:a6:93:61:6d:10:18:80:54:57:1c:82: ec:0a:62:ff:4e:f8:30:1e:3b:5e:d1:14:0d:ce:8e: ee:33:3a:a3:3f:16:7b:54:58:43:cf:6c:d3:5f:f2: 28:4e:4a:c8:9a:1a:9b:bd:33:53:b1:ac:6c:cf:5d: 8b:5f:c0:ed:ee:87:59:b5:18:b8:e3:73:1c:e4:93: 33:0b:73:cc:b9:e6:92:9f:2e:b5:68:a7:90:8d:31: 38:4a:f1:86:bb:77:7e:01:f4:c2:02:31:19:e3:fd: 46:f3:04:d5:d5:15:a3:ca:4d:6a:9e:8b:53:d3:3c: 01:7e:d4:fb:23:0d:e5:8c:d4:72:65:49:f1:b1:5d: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:E5:8D:7C:58:C1:28:53:8D:B4:3E:56:3D:9B:33:5C:A5:18:EE:5F X509v3 Authority Key Identifier: keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a0:dd:ea:9d:21:57:ef:91:bb:4f:db:e0:46:81:6c:5d:5d: b1:b3:81:7b:3d:7c:df:ce:03:e4:eb:57:cd:2b:f8:a0:ab:56: 23:65:49:fb:00:bf:7d:64:57:42:73:86:a5:e8:d2:ff:0d:b7: 2a:3d:c6:10:2f:f9:15:f3:ed:bc:fb:c4:10:1c:d4:da:f4:9b: 7d:a3:21:23:3f:da:a2:c0:10:6c:ec:79:6f:10:e1:c4:ec:68: d7:5c:5a:9a:2e:56:5f:de:d8:6b:77:32:3d:ce:af:50:a9:f9: 00:dd:c0:e6:d2:22:c1:71:9b:0c:8a:26:ba:f7:b2:a2:90:31: c0:93:e8:55:22:e1:e3:a4:13:e6:57:63:9a:38:ac:24:b1:c5: 20:c5:9c:1d:7d:9b:86:02:ef:ed:bf:7c:5c:a0:34:d6:2e:bd: 40:6d:22:75:db:e0:da:f8:66:f2:05:20:67:32:5d:1f:cf:f7: ec:a3:e0:31:f0:42:e1:8b:b0:5b:e9:a2:d1:15:00:3e:00:ea: 73:f0:c4:99:62:92:b9:66:85:87:dd:56:9f:0d:61:89:31:6f: f1:4c:9e:39:d1:ad:60:fd:63:22:33:7d:2c:58:13:e5:2c:1b: 79:39:b8:d7:55:e3:c3:3d:e2:ae:fa:2e:2d:bd:ec:13:5c:80: b1:0a:9b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5GPIKtS+3074XoQWHDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1 NzQ0MTEwHhcNMjUxMjA1MjMwMTE3WhcNMjUxMjA2MjMwMTE3WjAzMTEwLwYDVQQD EyhjZWU1OGQ3YzU4YzEyODUzOGRiNDNlNTYzZDliMzM1Y2E1MThlZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8FzDAwLm3KIPYmJ4QYDvDCAPav/ d8/ggGcrSjZD0QopR61z3/Rn+NIwEkqlpFmSGvRO1IhAprpQQu3JTxajSViGHozo ycrYjTWTiiOybw4yUojn3gCpEDdcGdC/Mcowp88zlrwjqtpiaMCGYZd2xkD1bQIb OuYjdSTbppNhbRAYgFRXHILsCmL/TvgwHjte0RQNzo7uMzqjPxZ7VFhDz2zTX/Io TkrImhqbvTNTsaxsz12LX8Dt7odZtRi443Mc5JMzC3PMueaSny61aKeQjTE4SvGG u3d+AfTCAjEZ4/1G8wTV1RWjyk1qnotT0zwBftT7Iw3ljNRyZUnxsV2rNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7ljXxYwShTjbQ+Vj2bM1ylGO5fMB8GA1UdIwQY MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct ODliNWI2N2I3MjM0LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0 LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm6Dd6p0h V++Ru0/b4EaBbF1dsbOBez18384D5OtXzSv4oKtWI2VJ+wC/fWRXQnOGpejS/w23 Kj3GEC/5FfPtvPvEEBzU2vSbfaMhIz/aosAQbOx5bxDhxOxo11xami5WX97Ya3cy Pc6vUKn5AN3A5tIiwXGbDIomuveyopAxwJPoVSLh46QT5ldjmjisJLHFIMWcHX2b hgLv7b98XKA01i69QG0iddvg2vhm8gUgZzJdH8/37KPgMfBC4YuwW+mi0RUAPgDq c/DEmWKSuWaFh91Wnw1hiTFv8UyeOdGtYP1jIjN9LFgT5SwbeTm411Xjwz3irvou Lb3sE1yAsQqb2A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:24 2025 by rpki-client