This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json) Hash identifier: fN6CdYzgLjDIjXYvF/jxzjEAOvBUmabo+KEtRAHbtto= Subject key identifier: EC:92:CE:41:63:BF:7C:E9:13:08:BE:D0:60:17:B7:F6:19:71:1A:FE Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0 Certificate serial: 019AF2AD8BEDC54BC63CAD1B244C759D89B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft Manifest number: 0CB0 Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: zDLAp15Jyo2QSSXO1ZxLkHlRxTs6DjP+KqxciJwqQ7E=) 2: ZpykCbVPiyWDmZYOTfO_ZDkVQS8.roa (hash: dMJ7baRxj0geuiw7R0CU8VhA5Y/WfKmOFau3mkt++fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8b:ed:c5:4b:c6:3c:ad:1b:24:4c:75:9d:89:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=ec92ce4163bf7ce91308bed06017b7f619711afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:25:72:d6:f6:83:1e:83:ae:f0:f5:cb:9d: 04:6d:49:db:9a:5f:13:3f:b2:0e:35:f5:1f:17:35: e2:6b:f4:aa:36:b5:52:cd:4e:e1:56:fa:e8:a5:b4: 56:dd:73:1d:38:a7:03:8a:e4:c5:60:ca:ae:81:d0: b0:57:7f:c2:54:8d:53:ea:e1:c9:9e:14:66:f7:af: 16:23:51:68:1c:72:04:ed:38:02:c2:8e:6d:e5:9c: b2:82:7a:37:99:b2:6c:4a:17:7d:62:30:44:8e:8c: 81:05:14:09:62:96:d5:90:4a:64:6b:9b:c0:51:3a: ba:21:50:96:a5:6d:9c:70:cc:aa:40:41:5e:90:f0: 2b:6d:de:34:aa:10:bd:c4:ae:19:fa:55:64:5d:7a: ca:40:4f:60:f8:df:3a:76:d4:d4:70:50:0a:35:e3: ec:02:59:7e:da:be:e0:49:13:91:75:bf:57:c5:85: 98:c0:a4:d4:1b:38:b8:88:4c:c8:ac:9c:48:6d:6d: 5b:c3:93:07:8d:65:7d:d0:88:f7:ca:31:0c:b0:07: d0:dd:a2:0b:e4:0e:70:de:6a:d5:37:93:94:b4:da: 49:e8:d1:29:78:78:df:90:31:7d:a9:50:0e:3e:ec: 9e:cc:79:63:bd:d9:78:85:80:64:22:00:62:fe:15: 18:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:92:CE:41:63:BF:7C:E9:13:08:BE:D0:60:17:B7:F6:19:71:1A:FE X509v3 Authority Key Identifier: keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:0e:e1:1d:ae:01:a3:d8:1b:3c:ee:bd:3f:7c:c7:19:74:fc: 6b:ed:35:be:76:4e:19:87:28:99:a1:d0:23:de:bb:85:ee:5f: 88:15:9b:96:e7:53:d7:db:11:f4:f0:34:bd:a2:0a:12:e5:d6: 4e:ac:77:ea:c5:fb:0e:5d:32:e3:de:a1:51:7b:98:f6:ce:5c: db:56:2f:55:01:98:9f:2e:5f:9e:8f:38:77:99:b1:74:a3:05: 96:7a:ac:d0:dc:c2:ce:b2:57:22:6f:90:68:62:6f:dd:cf:0f: 33:40:d6:44:52:84:41:fc:0a:ea:f4:d3:05:e5:88:01:81:53: 77:67:be:a4:3a:6c:56:61:8f:b1:82:d0:b6:bd:0e:0f:23:36: fa:3d:db:7b:f6:8c:cb:fb:58:86:3d:4c:04:97:83:d1:8d:55: 48:01:cd:54:b0:c7:bc:8c:80:26:f6:2f:e0:82:02:69:a4:1c: 1f:65:5d:6c:54:b0:e7:2e:de:9e:0f:88:c8:11:6e:bf:6e:51: d6:f0:66:53:97:a9:8f:bf:11:a6:14:c1:c9:0d:8e:e9:aa:51: 87:4a:20:37:0c:c4:2d:19:dc:43:49:85:46:98:cb:05:23:f7: fa:24:9b:63:c9:d7:af:35:74:52:53:98:f6:b1:8c:8b:d6:77: 70:1e:ac:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrYvtxUvGPK0bJEx1nYm1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz NDg5YjAwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD EyhlYzkyY2U0MTYzYmY3Y2U5MTMwOGJlZDA2MDE3YjdmNjE5NzExYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWYlctb2gx6DrvD1y50EbUnbml8T P7IONfUfFzXia/SqNrVSzU7hVvropbRW3XMdOKcDiuTFYMqugdCwV3/CVI1T6uHJ nhRm968WI1FoHHIE7TgCwo5t5Zyygno3mbJsShd9YjBEjoyBBRQJYpbVkEpka5vA UTq6IVCWpW2ccMyqQEFekPArbd40qhC9xK4Z+lVkXXrKQE9g+N86dtTUcFAKNePs All+2r7gSRORdb9XxYWYwKTUGzi4iEzIrJxIbW1bw5MHjWV90Ij3yjEMsAfQ3aIL 5A5w3mrVN5OUtNpJ6NEpeHjfkDF9qVAOPuyezHljvdl4hYBkIgBi/hUYnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOySzkFjv3zpEwi+0GAXt/YZcRr+MB8GA1UdIwQY MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt MDk4ZjdjNWZkOTc1LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1 LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYw7hHa4B o9gbPO69P3zHGXT8a+01vnZOGYcomaHQI967he5fiBWbludT19sR9PA0vaIKEuXW Tqx36sX7Dl0y496hUXuY9s5c21YvVQGYny5fno84d5mxdKMFlnqs0NzCzrJXIm+Q aGJv3c8PM0DWRFKEQfwK6vTTBeWIAYFTd2e+pDpsVmGPsYLQtr0ODyM2+j3be/aM y/tYhj1MBJeD0Y1VSAHNVLDHvIyAJvYv4IICaaQcH2VdbFSw5y7eng+IyBFuv25R 1vBmU5epj78RphTByQ2O6apRh0ogNwzELRncQ0mFRpjLBSP3+iSbY8nXrzV0UlOY 9rGMi9Z3cB6seQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:50:18 2025 by rpki-client