This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json) Hash identifier: A4EuNbjffY1WMCqHOi3W1HaHlg5yZS5ethfndzxuxHM= Subject key identifier: 42:20:84:76:05:74:CB:7B:21:61:F6:1B:81:38:76:8B:FE:32:7E:A3 Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd Certificate serial: 019B4136F7FB22983FAC44FE8C3585DDE4FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft Manifest number: 1739 Signing time: Sun 21 Dec 2025 14:01:20 +0000 Manifest this update: Sun 21 Dec 2025 14:01:20 +0000 Manifest next update: Mon 22 Dec 2025 14:01:20 +0000 Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: k4Cl/H1xYBQEwoO6PqUA78PC6oo184knBnsqENMyniU=) 2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:f7:fb:22:98:3f:ac:44:fe:8c:35:85:dd:e4:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd Validity Not Before: Dec 21 14:01:20 2025 GMT Not After : Dec 22 14:01:20 2025 GMT Subject: CN=422084760574cb7b2161f61b8138768bfe327ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:8f:b1:c7:58:26:24:fd:f6:a1:63:5b:db: 26:22:3c:36:e8:0f:4a:4b:a4:09:bc:ac:1d:4f:45: c0:9b:a1:89:42:7e:23:5c:e6:ee:3a:a4:d3:24:87: 55:02:6d:49:aa:ee:a8:e3:43:2e:02:06:e6:e9:d4: 8d:5f:9e:64:e9:e5:ee:2a:d7:4a:7c:6f:28:90:46: 64:9c:84:66:83:ae:1f:f0:0a:ec:05:93:b5:28:2e: 76:64:f0:83:50:51:20:d6:63:18:21:6d:eb:3c:54: 3c:36:e0:e9:19:e7:3f:0b:29:2b:29:bc:46:76:70: 65:26:66:55:45:55:45:0d:ee:4f:ca:2d:26:17:8e: e3:b7:cb:c1:55:a8:79:f5:d7:16:30:47:e7:c8:16: 70:7c:61:d5:57:0d:91:bd:b3:9c:62:e9:13:40:ba: c2:de:9f:0b:4e:39:22:10:a8:64:9f:c2:80:da:ac: d8:c9:10:be:9b:5b:f9:67:a0:18:3f:b2:d2:e1:0e: 72:0d:f2:b5:47:f8:79:4f:c1:0a:09:9d:2f:b8:ad: c6:29:cf:c5:e2:d3:19:5a:ef:bc:49:a4:e7:47:34: a8:9a:16:7b:b4:1f:b5:06:ba:ac:67:fc:64:5a:f0: 61:77:1a:1e:a0:bd:ad:4b:26:a1:92:a1:36:13:54: 68:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:20:84:76:05:74:CB:7B:21:61:F6:1B:81:38:76:8B:FE:32:7E:A3 X509v3 Authority Key Identifier: keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8a:fe:f9:13:4f:73:0b:d6:fd:f6:ce:15:19:95:d4:cf:d8: 75:99:01:18:59:ac:1e:d2:8f:8a:54:7f:c2:4e:07:6f:12:53: 79:24:83:eb:48:fc:74:35:dd:45:b2:68:0f:f7:55:c8:31:08: 02:f9:1b:9b:47:85:da:15:21:a8:f3:0f:f4:61:99:e7:65:9e: 4b:a6:fa:63:9e:bb:4b:a3:2a:64:a8:92:8c:f0:27:40:41:01: 50:a3:1d:b2:77:5c:9c:7f:b3:ac:f9:ba:01:d9:01:aa:88:82: 22:c6:96:a4:10:64:2b:6b:e4:e8:e3:bf:99:94:0f:78:35:8b: 51:79:13:2b:10:da:5b:79:bd:b6:ad:1f:10:83:28:05:4b:28: f5:88:47:d8:70:d2:01:66:a7:bb:6b:0b:91:bb:0a:02:a8:ab: 5b:13:a7:8d:ee:b1:cd:59:05:6f:3d:26:b0:40:89:62:05:4e: 28:1c:e8:cf:ba:06:85:d8:36:5c:a0:f8:ae:0b:bc:ff:7f:1e: be:e8:60:64:7b:f2:c8:90:16:05:15:52:3b:09:f6:9c:d0:f9: f3:58:11:af:c1:a2:2f:71:ec:11:3b:eb:e2:f8:46:bc:cd:bb: c9:b5:39:6f:42:b5:bb:8e:68:04:e8:11:c6:d9:03:cf:2e:06: 44:01:08:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNvf7Ipg/rET+jDWF3eT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWQ5NjhmNWJlMWNlNjcxZTIwZDU4MzFjMTcwMDAxZjM3 MmQzZGQwHhcNMjUxMjIxMTQwMTIwWhcNMjUxMjIyMTQwMTIwWjAzMTEwLwYDVQQD Eyg0MjIwODQ3NjA1NzRjYjdiMjE2MWY2MWI4MTM4NzY4YmZlMzI3ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/SPscdYJiT99qFjW9smIjw26A9K S6QJvKwdT0XAm6GJQn4jXObuOqTTJIdVAm1Jqu6o40MuAgbm6dSNX55k6eXuKtdK fG8okEZknIRmg64f8ArsBZO1KC52ZPCDUFEg1mMYIW3rPFQ8NuDpGec/CykrKbxG dnBlJmZVRVVFDe5Pyi0mF47jt8vBVah59dcWMEfnyBZwfGHVVw2RvbOcYukTQLrC 3p8LTjkiEKhkn8KA2qzYyRC+m1v5Z6AYP7LS4Q5yDfK1R/h5T8EKCZ0vuK3GKc/F 4tMZWu+8SaTnRzSomhZ7tB+1BrqsZ/xkWvBhdxoeoL2tSyahkqE2E1RofQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIghHYFdMt7IWH2G4E4dov+Mn6jMB8GA1UdIwQY MBaAFFhdlo9b4c5nHiDVgxwXAAHzctPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUt OWVkMzVkNWIzNzM1LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUtOWVkMzVkNWIzNzM1 LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIr++RNP cwvW/fbOFRmV1M/YdZkBGFmsHtKPilR/wk4HbxJTeSSD60j8dDXdRbJoD/dVyDEI Avkbm0eF2hUhqPMP9GGZ52WeS6b6Y567S6MqZKiSjPAnQEEBUKMdsndcnH+zrPm6 AdkBqoiCIsaWpBBkK2vk6OO/mZQPeDWLUXkTKxDaW3m9tq0fEIMoBUso9YhH2HDS AWanu2sLkbsKAqirWxOnje6xzVkFbz0msECJYgVOKBzoz7oGhdg2XKD4rgu8/38e vuhgZHvyyJAWBRVSOwn2nND581gRr8GiL3HsETvr4vhGvM27ybU5b0K1u45oBOgR xtkDzy4GRAEIbg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:05 2025 by rpki-client