This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft File: WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json) Hash identifier: KU7v/vNKWXD1VtsCxN3s7rGgvnvkwz9Z+TzW6OjZBNA= Subject key identifier: C7:1B:BC:A0:E2:12:D7:DB:B7:AF:3B:FB:F2:9B:26:AF:1A:59:4F:F3 Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE Certificate issuer: /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae Certificate serial: 019AF209980BCA8F7C28D751C1C37F1B51F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft Manifest number: 069B Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=) 2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: BrItSbPdOS3XBro98wYzN40aiLXVyTxbQif71wQxnRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:98:0b:ca:8f:7c:28:d7:51:c1:c3:7f:1b:51:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=c71bbca0e212d7dbb7af3bfbf29b26af1a594ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:af:bd:d8:1d:f5:d8:01:85:17:dc:d7:cb: 9e:9f:34:28:91:eb:96:84:44:98:09:80:ae:36:db: f0:c7:a3:0f:dc:b6:0f:33:0b:d1:e8:d4:6d:00:95: 78:69:0f:14:15:a1:e8:48:88:8d:0a:9f:38:7e:b1: 12:22:36:82:0e:33:69:6d:ab:90:51:44:d0:7c:3c: 0c:2f:91:35:5a:be:62:4c:7f:60:d3:fd:7f:cb:c7: d9:bd:9c:7f:64:0d:74:b3:2e:74:b7:44:f6:34:59: b7:6e:d4:06:d0:33:42:f7:22:d9:be:68:d6:77:08: 13:a5:7a:53:27:cc:c1:5f:03:3a:21:25:bf:4f:2f: f3:79:7d:d0:27:51:bb:b1:54:17:c3:49:5e:7a:1e: 50:19:1a:35:2b:60:49:a9:76:46:8c:85:3f:9c:be: 2c:38:60:00:59:1b:f7:b3:bd:f8:5c:8b:f1:78:89: 2f:21:45:04:02:14:0e:3f:2e:f2:ea:e2:12:a0:f4: b8:85:52:3d:8b:7c:a1:38:a6:53:de:a1:ad:8b:17: 4b:ce:0a:79:5e:08:0b:bd:2a:ed:e4:d8:30:4f:61: fe:3a:39:f4:06:14:48:93:7c:d7:dd:5f:d2:88:b3: bd:5d:b1:27:0f:19:99:02:a4:11:9a:e1:2e:48:ea: 4f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1B:BC:A0:E2:12:D7:DB:B7:AF:3B:FB:F2:9B:26:AF:1A:59:4F:F3 X509v3 Authority Key Identifier: keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:1f:76:6b:19:97:00:dc:51:53:82:5d:55:da:e4:bc:d6:a5: c9:9e:29:17:3b:d1:83:50:fb:51:df:36:92:f9:f0:bb:d0:73: 5e:55:b9:10:f4:bf:d0:c4:c3:6d:07:53:4e:e6:0e:bd:a0:69: 61:de:4c:02:a9:11:f3:4f:99:ec:16:0e:da:2f:90:39:c2:92: 64:ce:a7:38:2a:d7:c3:7d:2b:18:84:54:1a:db:fd:25:21:e0: 7a:a9:de:9f:9a:35:7c:f7:88:4d:65:b1:ee:17:32:05:4a:c3: 4b:aa:29:c0:ec:64:3c:60:ad:a3:8c:11:25:3b:ea:61:10:ca: 24:e7:95:ee:4d:21:5e:f7:27:ad:62:5f:20:48:07:be:48:7e: 0d:ab:d1:36:a6:80:81:b2:92:f5:29:48:a3:36:b9:3c:80:77: 64:51:82:00:38:24:27:35:a1:0d:30:6d:6c:56:90:ca:6b:e4: e2:f6:f6:36:74:9e:d2:2b:df:70:52:5c:d0:bb:1a:a7:e9:05: 51:a6:7f:1e:93:3c:eb:3e:e8:13:29:31:c1:ce:5f:8f:ce:6e: 7a:75:67:76:50:bb:7b:f1:fa:e5:79:54:2e:7a:5f:91:d7:ed: e0:83:e5:ee:f3:65:c1:dc:8c:aa:b5:10:ce:02:b1:6d:9f:8f: fa:3a:75:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZgLyo98KNdRwcN/G1H2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGU1MDQ0ZWQ4Mzg3NWM3ZTllZThlY2I4N2RkNmQzMWRk NWM0YWUwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD EyhjNzFiYmNhMGUyMTJkN2RiYjdhZjNiZmJmMjliMjZhZjFhNTk0ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYyvvdgd9dgBhRfc18uenzQokeuW hESYCYCuNtvwx6MP3LYPMwvR6NRtAJV4aQ8UFaHoSIiNCp84frESIjaCDjNpbauQ UUTQfDwML5E1Wr5iTH9g0/1/y8fZvZx/ZA10sy50t0T2NFm3btQG0DNC9yLZvmjW dwgTpXpTJ8zBXwM6ISW/Ty/zeX3QJ1G7sVQXw0leeh5QGRo1K2BJqXZGjIU/nL4s OGAAWRv3s734XIvxeIkvIUUEAhQOPy7y6uISoPS4hVI9i3yhOKZT3qGtixdLzgp5 XggLvSrt5NgwT2H+Ojn0BhRIk3zX3V/SiLO9XbEnDxmZAqQRmuEuSOpPCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcbvKDiEtfbt687+/KbJq8aWU/zMB8GA1UdIwQY MBaAFFjeUETtg4dcfp7o7Lh91tMd1cSuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQt YWE5NTg3ODhlZWJmLzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZDE2YTktMjc1Ny00MmIxLTg2NTQtYWE5NTg3ODhlZWJm LzEvV041UVJPMkRoMXgtbnVqc3VIM1cweDNWeEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABB92axmX ANxRU4JdVdrkvNalyZ4pFzvRg1D7Ud82kvnwu9BzXlW5EPS/0MTDbQdTTuYOvaBp Yd5MAqkR80+Z7BYO2i+QOcKSZM6nOCrXw30rGIRUGtv9JSHgeqnen5o1fPeITWWx 7hcyBUrDS6opwOxkPGCto4wRJTvqYRDKJOeV7k0hXvcnrWJfIEgHvkh+DavRNqaA gbKS9SlIoza5PIB3ZFGCADgkJzWhDTBtbFaQymvk4vb2NnSe0ivfcFJc0Lsap+kF UaZ/HpM86z7oEykxwc5fj85uenVndlC7e/H65XlULnpfkdft4IPl7vNlwdyMqrUQ zgKxbZ+P+jp1jg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:40 2025 by rpki-client