This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft File: WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json) Hash identifier: hDhD8csNGmRorbtf7jN4QSo1UO1KOk+/3w21Ew5NPWw= Subject key identifier: D9:1A:31:43:09:24:54:3A:BD:A4:24:7D:31:6E:2C:CD:5A:6C:A6:94 Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD Certificate issuer: /CN=594b79990f616a8344c860148fc922910e154dad Certificate serial: 019AF509FB5613459D262A18E324EDE6B041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft Manifest number: 0FA9 Signing time: Sat 06 Dec 2025 19:01:03 +0000 Manifest this update: Sat 06 Dec 2025 19:01:03 +0000 Manifest next update: Sun 07 Dec 2025 19:01:03 +0000 Files and hashes: 1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: jfecyjotEx6TWih5ZDGBteKbNbiY0si5YJoDhj+74yA=) 2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:fb:56:13:45:9d:26:2a:18:e3:24:ed:e6:b0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=594b79990f616a8344c860148fc922910e154dad Validity Not Before: Dec 6 19:01:03 2025 GMT Not After : Dec 7 19:01:03 2025 GMT Subject: CN=d91a31430924543abda4247d316e2ccd5a6ca694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:81:1d:f6:c3:82:dc:83:30:84:3e:df:66:79: 11:0d:b3:5e:5c:fd:31:6d:ad:9e:4f:83:4c:03:77: d6:2f:95:35:54:f4:3d:76:03:ab:74:88:9a:23:42: 47:d6:a1:89:7f:9e:99:21:32:1d:75:11:7f:d2:44: 1c:b1:58:01:25:5c:98:83:2a:37:bd:97:72:d7:b3: 80:d2:cc:ac:4f:e3:1c:76:9f:1f:a7:32:30:2e:fb: a5:6e:7b:e5:6a:e4:b8:8c:6e:21:9d:d1:5c:2b:17: cc:63:15:c0:29:39:5c:89:da:fd:df:c0:b4:c5:83: 9c:00:bc:42:0d:c1:f3:b5:e8:2c:3b:4b:cd:fc:e4: af:d3:64:e5:25:32:f3:f9:16:47:89:8a:b6:4f:44: ee:f4:e9:8d:30:0c:ba:93:07:06:02:98:66:9c:2d: 6c:74:a4:ea:1e:1b:7f:a7:b3:de:c4:14:03:e5:b9: 79:7d:09:0e:fb:d3:6b:10:d3:50:56:bd:ed:2f:ae: 31:af:3a:d5:cf:f4:22:e9:69:59:c1:1b:fb:6a:1e: 69:fd:52:a6:ef:46:33:71:a6:ed:3b:5b:ae:c2:22: fe:43:fa:eb:44:55:39:94:0d:89:2d:6f:d3:54:8e: 7c:2f:ea:eb:1a:c2:f6:d4:39:c2:d4:90:db:5f:d1: 70:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:1A:31:43:09:24:54:3A:BD:A4:24:7D:31:6E:2C:CD:5A:6C:A6:94 X509v3 Authority Key Identifier: keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e1:ba:e4:f3:08:8a:60:ac:c7:c0:80:6b:8d:9b:8c:cc:3e: d4:f2:c8:ad:4c:f3:72:96:b8:0d:92:40:41:64:b1:59:f8:b8: ae:bd:af:94:e9:f0:fd:a8:c5:fd:c4:66:89:7b:29:65:d7:ce: d6:b6:27:06:f0:11:c2:18:33:ff:4e:5c:c1:b2:ec:0f:0b:d2: c8:10:35:9e:08:97:07:71:d0:3a:c1:9f:e3:27:5b:4c:1e:36: 3c:fb:12:94:2f:5e:b9:5e:40:ac:8c:91:92:52:09:f9:df:04: 8c:84:6e:7b:7c:74:c7:95:75:7a:46:f3:94:ca:24:b6:7b:0f: 2a:9c:35:ce:8f:df:d3:d4:77:dd:7f:93:8b:ce:75:d3:8f:e7: d4:b5:0a:1c:63:66:96:0d:0d:b8:62:87:40:7b:6b:90:6c:8c: 43:33:6a:28:53:0f:da:bd:1a:20:ed:bc:8d:cf:1d:fd:96:c4: 67:ff:7f:96:83:dd:0d:26:32:94:7d:5a:14:a6:94:50:98:c9: 0b:5f:9c:6c:95:56:8c:ec:d8:d1:c0:54:be:f2:c7:38:39:d1: 8c:8e:19:8d:66:69:1e:ef:a9:26:a0:5f:25:83:3d:73:48:89: 54:44:e3:f8:7c:3e:09:9a:b4:ab:6b:25:eb:55:c2:66:27:49: a5:e7:7b:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CftWE0WdJioY4yTt5rBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NGI3OTk5MGY2MTZhODM0NGM4NjAxNDhmYzkyMjkxMGUx NTRkYWQwHhcNMjUxMjA2MTkwMTAzWhcNMjUxMjA3MTkwMTAzWjAzMTEwLwYDVQQD EyhkOTFhMzE0MzA5MjQ1NDNhYmRhNDI0N2QzMTZlMmNjZDVhNmNhNjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYEd9sOC3IMwhD7fZnkRDbNeXP0x ba2eT4NMA3fWL5U1VPQ9dgOrdIiaI0JH1qGJf56ZITIddRF/0kQcsVgBJVyYgyo3 vZdy17OA0sysT+Mcdp8fpzIwLvulbnvlauS4jG4hndFcKxfMYxXAKTlcidr938C0 xYOcALxCDcHztegsO0vN/OSv02TlJTLz+RZHiYq2T0Tu9OmNMAy6kwcGAphmnC1s dKTqHht/p7PexBQD5bl5fQkO+9NrENNQVr3tL64xrzrVz/Qi6WlZwRv7ah5p/VKm 70YzcabtO1uuwiL+Q/rrRFU5lA2JLW/TVI58L+rrGsL21DnC1JDbX9FwawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkaMUMJJFQ6vaQkfTFuLM1abKaUMB8GA1UdIwQY MBaAFFlLeZkPYWqDRMhgFI/JIpEOFU2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yNjY0MWEtYjRmOS00ZmJhLTg2N2Qt ZjdmMzY0NTc4NzRlLzEvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yNjY0MWEtYjRmOS00ZmJhLTg2N2QtZjdmMzY0NTc4NzRl LzEvV1V0NW1ROWhhb05FeUdBVWo4a2lrUTRWVGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+G65PMI imCsx8CAa42bjMw+1PLIrUzzcpa4DZJAQWSxWfi4rr2vlOnw/ajF/cRmiXspZdfO 1rYnBvARwhgz/05cwbLsDwvSyBA1ngiXB3HQOsGf4ydbTB42PPsSlC9euV5ArIyR klIJ+d8EjIRue3x0x5V1ekbzlMoktnsPKpw1zo/f09R33X+Ti85104/n1LUKHGNm lg0NuGKHQHtrkGyMQzNqKFMP2r0aIO28jc8d/ZbEZ/9/loPdDSYylH1aFKaUUJjJ C1+cbJVWjOzY0cBUvvLHODnRjI4ZjWZpHu+pJqBfJYM9c0iJVETj+Hw+CZq0q2sl 61XCZidJped7pQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:23:44 2025 by rpki-client