This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json) Hash identifier: Kq8uqTG/PYdVRxPeP0dSPvQAqblJcShlwRbT0xxxLZU= Subject key identifier: 11:91:C2:14:12:C8:07:99:A8:3E:1E:30:F2:85:39:96:D5:89:3B:0A Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Certificate serial: 019AF31C35686C366AA071AA28EB185E3005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:43 +0000 Manifest this update: Sat 06 Dec 2025 10:01:43 +0000 Manifest next update: Sun 07 Dec 2025 10:01:43 +0000 Files and hashes: 1: KyLINVTTqdvXuj7Fj90bgruawzY.roa (hash: cok5H5wGuOmXEJz7bKUxFi+mFBkwx9emz6VKC+7X5HQ=) 2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: XDa4PFiWsPo9ewkCSe85rvrme77c94Enx0I3UuID1rI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:35:68:6c:36:6a:a0:71:aa:28:eb:18:5e:30:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Validity Not Before: Dec 6 10:01:43 2025 GMT Not After : Dec 7 10:01:43 2025 GMT Subject: CN=1191c21412c80799a83e1e30f2853996d5893b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:aa:c6:09:86:66:bd:46:ca:dc:0b:4b:11: d0:67:a8:11:12:f5:fd:74:b8:a8:dd:10:2d:26:bd: 64:f4:26:5c:bc:e5:15:aa:e6:61:9e:2a:cd:2e:e2: 12:97:5b:79:66:c7:8e:16:c6:64:b8:a5:b8:ff:7e: b8:d6:0b:76:43:bb:43:3b:2f:8d:77:4f:2d:60:3c: 05:b3:0a:4d:a3:0e:a6:48:3a:b2:27:5e:92:64:49: 9a:78:65:83:4c:05:08:43:bd:13:db:05:ba:a4:ca: 46:a4:6e:54:5c:3c:4b:aa:01:10:4b:3f:13:e4:7d: 7e:49:4d:d1:6e:cd:90:e9:f7:9a:2b:b4:56:60:93: e4:d8:d2:85:0b:dc:d4:55:5e:04:25:9a:2f:4f:ae: 25:e3:a0:53:2b:69:f0:03:30:97:08:af:3b:91:d6: 9d:ad:0a:a5:41:51:85:ac:f8:c5:46:82:23:74:d4: c9:80:62:03:61:8d:2e:ec:5b:ec:14:8f:45:24:37: 8e:a0:c0:2d:33:55:c5:06:46:d7:0e:21:fe:37:53: b5:71:ac:4b:37:d6:d8:20:f0:dd:81:b6:d8:2e:79: 66:41:80:fb:3a:e3:87:c9:23:0d:07:92:a3:c3:3e: eb:fd:a4:f0:0f:e2:d4:47:72:c7:27:83:72:c3:51: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:91:C2:14:12:C8:07:99:A8:3E:1E:30:F2:85:39:96:D5:89:3B:0A X509v3 Authority Key Identifier: keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:32:b1:7a:7c:9c:ca:4f:16:41:42:77:3f:9c:7f:18:7a:c8: 72:ec:e4:0b:07:62:4a:44:66:b1:78:b6:3a:71:5d:12:c7:f6: e4:a7:97:0e:75:53:bd:3d:6a:7d:e2:12:01:52:d8:0a:79:d7: c2:a5:61:18:b7:fe:28:32:5f:81:fc:24:01:57:c8:9d:33:bb: 45:bc:db:8c:b9:f9:93:df:16:19:e9:39:cb:ce:ba:ed:1a:df: ae:83:a0:b5:69:d9:2a:4f:57:e5:b1:64:f8:6c:60:c8:54:cd: 24:92:96:fc:22:91:f4:f8:a6:89:5d:4d:af:6c:a1:82:1c:2d: 03:e9:12:0f:13:dd:e3:29:b3:f9:c5:b8:73:8f:ca:ae:39:c3: 67:fc:50:04:34:2a:59:e9:98:3e:81:c1:59:22:16:49:88:be: d4:76:ed:af:f2:50:8f:eb:a8:35:e8:38:fe:1f:96:16:9d:10: 85:de:4a:79:a2:54:80:9f:0f:be:8a:46:98:b6:e4:39:15:b7: e0:c6:7c:e6:b3:1b:61:d8:e6:70:28:fe:9d:eb:23:0d:9c:27: d5:20:86:9d:17:44:50:c1:66:04:98:e6:0c:21:03:a2:fc:d7: 1e:34:06:bc:bf:8a:14:97:ee:88:f5:a8:e4:6c:b8:3a:83:4e: 68:e7:95:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDVobDZqoHGqKOsYXjAFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmI2ZTI5MzhhMjI1MWRjNDM4NGRhZjY1ZWZhNTIwZGMx YTU4ODIwHhcNMjUxMjA2MTAwMTQzWhcNMjUxMjA3MTAwMTQzWjAzMTEwLwYDVQQD EygxMTkxYzIxNDEyYzgwNzk5YTgzZTFlMzBmMjg1Mzk5NmQ1ODkzYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBCqxgmGZr1GytwLSxHQZ6gREvX9 dLio3RAtJr1k9CZcvOUVquZhnirNLuISl1t5ZseOFsZkuKW4/3641gt2Q7tDOy+N d08tYDwFswpNow6mSDqyJ16SZEmaeGWDTAUIQ70T2wW6pMpGpG5UXDxLqgEQSz8T 5H1+SU3Rbs2Q6feaK7RWYJPk2NKFC9zUVV4EJZovT64l46BTK2nwAzCXCK87kdad rQqlQVGFrPjFRoIjdNTJgGIDYY0u7FvsFI9FJDeOoMAtM1XFBkbXDiH+N1O1caxL N9bYIPDdgbbYLnlmQYD7OuOHySMNB5Kjwz7r/aTwD+LUR3LHJ4Nyw1G7BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGRwhQSyAeZqD4eMPKFOZbViTsKMB8GA1UdIwQY MBaAFFi7bik4oiUdxDhNr2XvpSDcGliCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWIt NWUzN2Q1NTg3YmU1LzEvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWItNWUzN2Q1NTg3YmU1 LzEvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALzKxenyc yk8WQUJ3P5x/GHrIcuzkCwdiSkRmsXi2OnFdEsf25KeXDnVTvT1qfeISAVLYCnnX wqVhGLf+KDJfgfwkAVfInTO7RbzbjLn5k98WGek5y8667RrfroOgtWnZKk9X5bFk +GxgyFTNJJKW/CKR9PimiV1Nr2yhghwtA+kSDxPd4ymz+cW4c4/KrjnDZ/xQBDQq WemYPoHBWSIWSYi+1Hbtr/JQj+uoNeg4/h+WFp0Qhd5KeaJUgJ8PvopGmLbkORW3 4MZ85rMbYdjmcCj+nesjDZwn1SCGnRdEUMFmBJjmDCEDovzXHjQGvL+KFJfuiPWo 5Gy4OoNOaOeVnA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:47 2025 by rpki-client