This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft File: WUGkBv3_7iWThJa-WsmlPhu5xlk.mft (raw, json) Hash identifier: 3kKNCLAgeIFwRkiQWdkxE/J8fYrCAz0fNPDvhh1Xe/s= Subject key identifier: A3:0D:C9:DE:C1:DB:BA:0D:85:C2:B3:88:47:A3:9F:76:41:ED:22:D9 Authority key identifier: 59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59 Certificate issuer: /CN=5941a406fdffee25938496be5ac9a53e1bb9c659 Certificate serial: 019B4FCF51316916328526CF1182D6EDD762 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft Manifest number: 043F Signing time: Wed 24 Dec 2025 10:02:25 +0000 Manifest this update: Wed 24 Dec 2025 10:02:25 +0000 Manifest next update: Thu 25 Dec 2025 10:02:25 +0000 Files and hashes: 1: EEGZcBqsJai0qQqLe2F9AaWLFpk.roa (hash: FRcwu/tuv02SNpOdxXx1YsnWA5ggNN2a8+sJiuIasIw=) 2: WUGkBv3_7iWThJa-WsmlPhu5xlk.crl (hash: o9wAfLDH3kq5WfjSMZ287suxkNuCk/gA/wyGYG+SE/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:51:31:69:16:32:85:26:cf:11:82:d6:ed:d7:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5941a406fdffee25938496be5ac9a53e1bb9c659 Validity Not Before: Dec 24 10:02:25 2025 GMT Not After : Dec 25 10:02:25 2025 GMT Subject: CN=a30dc9dec1dbba0d85c2b38847a39f7641ed22d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f2:7f:28:f7:a8:5d:12:af:b2:6d:05:80:90: 9d:66:49:11:74:b2:74:75:d1:17:7d:22:ce:3b:36: c2:a4:28:de:a3:ad:2f:3f:b8:da:85:04:8a:46:dc: 65:64:ad:8b:b6:d6:f5:cc:e5:97:7c:61:a2:08:2b: d9:c9:cb:b4:8c:20:d2:e0:cb:50:9e:63:f4:a9:9c: 46:2a:49:6d:44:f5:79:73:ce:c3:fa:eb:4a:1b:93: 58:91:92:e3:92:ae:ba:5c:82:27:20:68:f5:d2:fc: f0:00:b7:d8:12:da:f4:da:a3:a0:97:08:1e:34:fb: ef:55:38:6a:24:6d:0d:4e:9e:b7:2d:9c:84:68:e1: b6:46:22:0a:6c:af:d5:24:c6:9e:46:9d:8b:e2:03: 4d:e9:2e:54:5f:df:bb:c2:68:f2:48:69:1e:50:1a: a6:03:01:32:43:e9:bf:7a:4e:af:6d:29:14:12:14: d4:67:df:81:0a:61:3e:b8:95:d2:17:26:32:58:79: ce:70:f7:97:a5:01:56:82:3d:c1:2a:6b:5c:5b:dc: f0:fe:70:ab:7a:75:d0:94:5a:ad:dc:9a:b9:d2:ad: 9f:c3:a1:a2:c5:81:c6:e6:cb:c6:19:35:78:f8:23: 78:23:05:8b:1b:1b:40:9b:e0:c6:8b:f2:50:c3:90: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:0D:C9:DE:C1:DB:BA:0D:85:C2:B3:88:47:A3:9F:76:41:ED:22:D9 X509v3 Authority Key Identifier: keyid:59:41:A4:06:FD:FF:EE:25:93:84:96:BE:5A:C9:A5:3E:1B:B9:C6:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUGkBv3_7iWThJa-WsmlPhu5xlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84f589-b6aa-4549-a62e-9b4ffd08e048/1/WUGkBv3_7iWThJa-WsmlPhu5xlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:52:94:eb:fe:b8:21:90:52:7c:22:c5:ae:d8:15:4a:0e:42: bd:9c:29:df:73:2e:24:09:f2:23:af:04:eb:30:07:29:8a:5f: 1d:9b:0d:8f:11:fa:8c:a3:2d:5c:e1:93:0f:fc:8c:16:08:0c: 2e:b5:23:21:17:f6:8b:43:76:c1:80:23:c3:20:5f:68:94:3d: e7:0a:43:0d:bd:13:25:ab:c8:54:4f:32:df:c9:83:71:7e:98: 18:7b:43:9d:b2:3f:b8:8f:bb:fb:88:18:56:7b:1d:b4:15:bc: d7:51:87:13:90:20:c4:b7:61:25:aa:de:ed:e5:5c:b0:db:58: e2:4c:2e:e0:98:1e:07:25:da:46:b1:ef:68:46:23:ca:af:ed: 8f:52:1d:dc:1c:00:cc:37:f8:7a:bc:89:bb:55:33:7e:4b:7e: fe:83:dc:6e:d2:35:fb:fe:bb:5a:c3:8c:22:5d:46:0a:1b:6f: 77:f3:71:27:17:89:69:2f:09:3a:42:09:e6:39:ea:af:88:c7: 63:e5:af:74:2c:e4:81:5e:3b:33:ef:03:c3:61:d2:c2:72:1e: c3:99:89:af:28:6a:da:9c:77:52:19:76:7e:56:7b:22:c4:0c: 12:35:72:be:de:ab:bd:bd:6c:78:02:90:a6:99:23:ef:c5:24: 43:c0:20:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz1ExaRYyhSbPEYLW7ddiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDFhNDA2ZmRmZmVlMjU5Mzg0OTZiZTVhYzlhNTNlMWJi OWM2NTkwHhcNMjUxMjI0MTAwMjI1WhcNMjUxMjI1MTAwMjI1WjAzMTEwLwYDVQQD EyhhMzBkYzlkZWMxZGJiYTBkODVjMmIzODg0N2EzOWY3NjQxZWQyMmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fJ/KPeoXRKvsm0FgJCdZkkRdLJ0 ddEXfSLOOzbCpCjeo60vP7jahQSKRtxlZK2Lttb1zOWXfGGiCCvZycu0jCDS4MtQ nmP0qZxGKkltRPV5c87D+utKG5NYkZLjkq66XIInIGj10vzwALfYEtr02qOglwge NPvvVThqJG0NTp63LZyEaOG2RiIKbK/VJMaeRp2L4gNN6S5UX9+7wmjySGkeUBqm AwEyQ+m/ek6vbSkUEhTUZ9+BCmE+uJXSFyYyWHnOcPeXpQFWgj3BKmtcW9zw/nCr enXQlFqt3Jq50q2fw6GixYHG5svGGTV4+CN4IwWLGxtAm+DGi/JQw5DtXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMNyd7B27oNhcKziEejn3ZB7SLZMB8GA1UdIwQY MBaAFFlBpAb9/+4lk4SWvlrJpT4bucZZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUt OWI0ZmZkMDhlMDQ4LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy84NGY1ODktYjZhYS00NTQ5LWE2MmUtOWI0ZmZkMDhlMDQ4 LzEvV1VHa0J2M183aVdUaEphLVdzbWxQaHU1eGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1KU6/64 IZBSfCLFrtgVSg5CvZwp33MuJAnyI68E6zAHKYpfHZsNjxH6jKMtXOGTD/yMFggM LrUjIRf2i0N2wYAjwyBfaJQ95wpDDb0TJavIVE8y38mDcX6YGHtDnbI/uI+7+4gY VnsdtBW811GHE5AgxLdhJare7eVcsNtY4kwu4JgeByXaRrHvaEYjyq/tj1Id3BwA zDf4eryJu1Uzfkt+/oPcbtI1+/67WsOMIl1GChtvd/NxJxeJaS8JOkIJ5jnqr4jH Y+WvdCzkgV47M+8Dw2HSwnIew5mJryhq2px3Uhl2flZ7IsQMEjVyvt6rvb1seAKQ ppkj78UkQ8AgzA== -----END CERTIFICATE-----Generated at Wed Dec 24 15:12:42 2025 by rpki-client