This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json) Hash identifier: AwseTL7AqIa1kG7eK2fzi+UN5jdUILoSXIIHVJ1P4o0= Subject key identifier: 3D:0D:38:57:F0:72:D7:9E:C4:3C:30:59:C7:65:D2:00:FF:E9:86:CF Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Certificate serial: 019AF12EECF7060C617EE84ACF168C9EE214 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=) 2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: CYwwAoR+Xfc+Pe8JqaxkrAiJ8eL64Zi5PnCteXv91ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ec:f7:06:0c:61:7e:e8:4a:cf:16:8c:9e:e2:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=3d0d3857f072d79ec43c3059c765d200ffe986cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f1:17:9a:0d:e5:11:c8:41:16:f7:a2:6a:4b: 25:cc:62:33:43:b1:54:e7:7c:a0:21:10:01:db:ca: 02:a2:4c:56:95:19:29:ab:5b:af:93:a6:db:f5:35: 93:bd:91:c2:ad:1f:64:b5:40:9d:a9:b4:ec:1a:30: e7:60:4d:c6:05:fc:21:d3:29:80:07:66:ed:8b:f7: bf:5b:d4:da:77:50:fb:74:42:fb:7d:f9:06:a4:69: 60:85:22:d4:0d:9a:85:c9:6b:c3:28:81:89:c8:c2: 4e:6d:b0:98:93:84:f0:27:32:09:82:f7:72:e6:94: 05:02:ad:c7:8d:67:0e:ce:34:30:88:f1:ed:41:70: 04:59:3b:d2:ca:46:75:34:4b:8f:aa:1a:01:03:d3: 24:c6:4e:fa:6a:37:b0:4d:16:ac:52:16:cf:55:f1: 0b:19:64:c4:17:08:ff:44:87:d6:43:07:c3:b5:40: e6:54:9b:e1:e0:85:40:f5:26:f7:d3:e0:3b:f0:f8: a9:21:58:de:b2:7e:af:8c:d7:1f:72:3a:86:d1:8a: b2:b2:c2:d4:31:69:d6:50:86:d2:a2:0b:ab:9d:8b: 9b:cb:f2:1f:a0:77:da:ed:f7:6e:76:87:d9:20:7e: d7:aa:a1:d5:4e:de:05:5f:e7:a4:59:31:10:75:3b: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:38:57:F0:72:D7:9E:C4:3C:30:59:C7:65:D2:00:FF:E9:86:CF X509v3 Authority Key Identifier: keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:df:9b:85:45:28:f7:b9:65:12:b0:1a:51:36:87:08:5c:e6: 02:f3:6d:28:50:cd:7b:72:40:71:bb:58:cf:d3:31:08:3a:2d: 69:6a:4e:8d:06:34:94:de:d1:c9:f9:ed:03:53:c0:ed:f6:07: 98:2f:c6:47:b0:00:57:3a:81:c3:f1:a2:6f:ba:08:27:ca:08: 84:0a:9b:3b:aa:71:27:5b:df:92:33:86:7c:36:f7:9f:7d:61: ea:a5:59:73:25:96:c3:90:bf:38:bf:88:8f:2b:50:55:1a:3f: 15:fa:b3:1d:82:81:ef:1b:90:c1:1f:b1:d8:28:80:57:5e:fd: 11:55:3a:ac:df:51:95:21:02:36:4a:be:79:d9:0f:1f:ea:a3: ca:9a:f1:c1:17:68:a6:82:89:79:2d:e5:8a:77:2e:40:9d:06: e0:53:6f:38:3f:3b:88:ed:e8:47:8c:e1:06:a8:02:7f:f8:1a: e1:9b:bb:0e:2e:c7:75:63:cc:76:b7:11:43:fc:27:48:1c:3a: 01:a2:75:89:31:45:19:d5:85:82:a3:00:51:1e:10:30:45:2a: a0:9d:d8:41:2a:f3:9d:8a:34:41:4b:f2:5f:28:f7:32:76:51: 9e:c5:ca:bd:24:af:dd:ae:8e:52:d8:dd:84:c5:20:10:0b:04: 97:49:4a:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuz3BgxhfuhKzxaMnuIUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh OWY2MTAwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD EygzZDBkMzg1N2YwNzJkNzllYzQzYzMwNTljNzY1ZDIwMGZmZTk4NmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvEXmg3lEchBFveiakslzGIzQ7FU 53ygIRAB28oCokxWlRkpq1uvk6bb9TWTvZHCrR9ktUCdqbTsGjDnYE3GBfwh0ymA B2bti/e/W9Tad1D7dEL7ffkGpGlghSLUDZqFyWvDKIGJyMJObbCYk4TwJzIJgvdy 5pQFAq3HjWcOzjQwiPHtQXAEWTvSykZ1NEuPqhoBA9Mkxk76ajewTRasUhbPVfEL GWTEFwj/RIfWQwfDtUDmVJvh4IVA9Sb30+A78PipIVjesn6vjNcfcjqG0YqyssLU MWnWUIbSogurnYuby/IfoHfa7fdudofZIH7XqqHVTt4FX+ekWTEQdTtImwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0NOFfwcteexDwwWcdl0gD/6YbPMB8GA1UdIwQY MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt ZWYzODkxNGE4YWIwLzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYd+bhUUo 97llErAaUTaHCFzmAvNtKFDNe3JAcbtYz9MxCDotaWpOjQY0lN7RyfntA1PA7fYH mC/GR7AAVzqBw/Gib7oIJ8oIhAqbO6pxJ1vfkjOGfDb3n31h6qVZcyWWw5C/OL+I jytQVRo/FfqzHYKB7xuQwR+x2CiAV179EVU6rN9RlSECNkq+edkPH+qjyprxwRdo poKJeS3lincuQJ0G4FNvOD87iO3oR4zhBqgCf/ga4Zu7Di7HdWPMdrcRQ/wnSBw6 AaJ1iTFFGdWFgqMAUR4QMEUqoJ3YQSrznYo0QUvyXyj3MnZRnsXKvSSv3a6OUtjd hMUgEAsEl0lK5w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:30 2025 by rpki-client