This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft File: WSxpn4_svshH0zkLRljdPLIcUrM.mft (raw, json) Hash identifier: JnbVd8LDNfIltuoaUDbtWdFYBIFoIP0SbZ8tdq1dgB8= Subject key identifier: A7:4E:C9:A6:64:E9:8C:49:34:14:45:69:20:CB:9D:D0:50:B2:84:23 Authority key identifier: 59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3 Certificate issuer: /CN=592c699f8fecbec847d3390b4658dd3cb21c52b3 Certificate serial: 019B42B75B262C2F69892D0060E7DC0B59E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft Manifest number: 0537 Signing time: Sun 21 Dec 2025 21:01:11 +0000 Manifest this update: Sun 21 Dec 2025 21:01:11 +0000 Manifest next update: Mon 22 Dec 2025 21:01:11 +0000 Files and hashes: 1: JGGUZFFW6mkhM2spC4Om8Sl5Ik0.roa (hash: dqTj/vaS7gUXIm5IFoD4OZy7eNLtptQVc2/Kh4P7oE4=) 2: WSxpn4_svshH0zkLRljdPLIcUrM.crl (hash: 7+Vf32/1e21YXdlkCVCZjx2idiZldRbNXGnsgbO9qS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:5b:26:2c:2f:69:89:2d:00:60:e7:dc:0b:59:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592c699f8fecbec847d3390b4658dd3cb21c52b3 Validity Not Before: Dec 21 21:01:11 2025 GMT Not After : Dec 22 21:01:11 2025 GMT Subject: CN=a74ec9a664e98c493414456920cb9dd050b28423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:37:63:d6:66:e4:b7:2e:bb:73:b0:3f:18: 79:a8:99:62:10:30:27:10:f7:74:d3:b2:b1:d9:e1: c7:94:eb:2b:aa:36:ab:65:83:86:ec:b3:68:af:b7: 70:85:c3:08:66:e6:39:1a:89:64:67:9a:6b:e3:3c: 3d:d6:59:40:5f:7c:13:a9:92:9b:4d:fb:fc:9e:16: 82:57:3e:50:b1:76:a8:0d:1a:7f:0f:92:ee:86:d8: 25:17:e6:cc:56:ad:c5:22:bd:a1:6b:39:96:07:de: f0:a7:64:1e:79:90:d1:72:18:65:50:07:0f:9a:b3: 0b:eb:e0:80:eb:f8:7d:07:8d:36:8c:ca:46:b7:91: a3:fc:72:ca:d5:8c:56:fe:bc:9b:ac:6b:07:08:8f: 1b:60:e4:44:7e:b0:cd:e4:be:cc:7e:1e:8e:06:a3: 93:7a:df:1a:8b:8a:a9:04:39:f2:61:5a:7c:5b:97: d9:18:8d:4f:c4:87:4b:7a:75:13:45:e6:fc:14:21: 96:9b:5c:a0:5e:87:c0:23:5f:2b:ab:f3:7a:cd:60: 6f:28:0c:47:e7:6d:2b:b3:a1:70:83:3d:d0:62:85: b7:7a:73:d6:d1:90:1a:55:08:1c:da:c7:6b:96:fc: ad:5e:80:28:78:49:73:e2:9f:dc:9c:a1:ea:cb:b9: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:C9:A6:64:E9:8C:49:34:14:45:69:20:CB:9D:D0:50:B2:84:23 X509v3 Authority Key Identifier: keyid:59:2C:69:9F:8F:EC:BE:C8:47:D3:39:0B:46:58:DD:3C:B2:1C:52:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSxpn4_svshH0zkLRljdPLIcUrM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c06781-d5d7-4548-9dfa-b28c3c8c9909/1/WSxpn4_svshH0zkLRljdPLIcUrM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:4e:c6:8d:25:43:fc:a6:40:34:33:e3:c3:12:10:1c:e9:90: 96:f2:7d:fa:5b:68:a8:c3:39:df:2b:52:6e:d5:b8:24:56:f9: c5:81:17:b5:a1:59:09:87:6e:74:9e:d7:a3:96:0b:a8:57:1d: d0:74:02:33:62:6f:c3:ff:97:14:a0:2c:ca:ec:57:2a:1a:93: ab:8b:af:2c:11:ee:f7:83:a5:be:bf:2a:7f:e9:4e:41:1b:b0: ac:62:a5:45:c6:a5:84:be:55:4f:ca:75:13:5f:52:a0:3a:34: 04:17:e9:a2:58:e2:63:2a:06:25:b3:5b:6c:77:41:b6:2c:59: e1:83:08:97:06:fd:b7:5f:1d:8f:94:e5:f4:52:0d:9a:8d:e0: 99:fb:6a:14:14:94:ac:74:5b:66:c8:a7:dc:c5:80:81:a7:d6: 07:df:e8:7c:ab:d6:39:65:1c:64:6b:cf:6d:38:5e:6c:db:84: db:2f:70:ac:b3:f1:36:22:2e:cc:6e:25:40:da:f1:b2:17:59: 15:71:32:f3:e5:f4:ab:91:0f:00:c9:53:51:71:b9:30:4b:22: f4:5d:d3:28:6a:bd:f7:f3:db:b3:8b:ea:79:70:bf:7f:99:57: ab:db:a8:22:93:37:67:77:8e:9e:7d:29:e2:f8:fc:64:c8:6c: ee:40:e1:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1smLC9piS0AYOfcC1niMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmM2OTlmOGZlY2JlYzg0N2QzMzkwYjQ2NThkZDNjYjIx YzUyYjMwHhcNMjUxMjIxMjEwMTExWhcNMjUxMjIyMjEwMTExWjAzMTEwLwYDVQQD EyhhNzRlYzlhNjY0ZTk4YzQ5MzQxNDQ1NjkyMGNiOWRkMDUwYjI4NDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZw3Y9Zm5Lcuu3OwPxh5qJliEDAn EPd007Kx2eHHlOsrqjarZYOG7LNor7dwhcMIZuY5GolkZ5pr4zw91llAX3wTqZKb Tfv8nhaCVz5QsXaoDRp/D5LuhtglF+bMVq3FIr2hazmWB97wp2QeeZDRchhlUAcP mrML6+CA6/h9B402jMpGt5Gj/HLK1YxW/rybrGsHCI8bYOREfrDN5L7Mfh6OBqOT et8ai4qpBDnyYVp8W5fZGI1PxIdLenUTReb8FCGWm1ygXofAI18rq/N6zWBvKAxH 520rs6Fwgz3QYoW3enPW0ZAaVQgc2sdrlvytXoAoeElz4p/cnKHqy7lYHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdOyaZk6YxJNBRFaSDLndBQsoQjMB8GA1UdIwQY MBaAFFksaZ+P7L7IR9M5C0ZY3TyyHFKzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEt YjI4YzNjOGM5OTA5LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9jMDY3ODEtZDVkNy00NTQ4LTlkZmEtYjI4YzNjOGM5OTA5 LzEvV1N4cG40X3N2c2hIMHprTFJsamRQTEljVXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArk7GjSVD /KZANDPjwxIQHOmQlvJ9+ltoqMM53ytSbtW4JFb5xYEXtaFZCYdudJ7Xo5YLqFcd 0HQCM2Jvw/+XFKAsyuxXKhqTq4uvLBHu94Olvr8qf+lOQRuwrGKlRcalhL5VT8p1 E19SoDo0BBfpoljiYyoGJbNbbHdBtixZ4YMIlwb9t18dj5Tl9FINmo3gmftqFBSU rHRbZsin3MWAgafWB9/ofKvWOWUcZGvPbThebNuE2y9wrLPxNiIuzG4lQNrxshdZ FXEy8+X0q5EPAMlTUXG5MEsi9F3TKGq99/Pbs4vqeXC/f5lXq9uoIpM3Z3eOnn0p 4vj8ZMhs7kDh0A== -----END CERTIFICATE-----Generated at Mon Dec 22 00:26:34 2025 by rpki-client