This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft File: WLKee4oN25w2xuDj9JV3gXsOo6Y.mft (raw, json) Hash identifier: m9BChDjwIrd8VjAvtDPQKO6qSskLX/YbMdnHel7Vkug= Subject key identifier: 35:81:F7:18:E1:34:F9:17:81:85:17:23:27:84:DC:87:51:39:3E:A6 Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6 Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6 Certificate serial: 019B3D911810712C81FB6A3833AC18728CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft Manifest number: 0D2C Signing time: Sat 20 Dec 2025 21:01:17 +0000 Manifest this update: Sat 20 Dec 2025 21:01:17 +0000 Manifest next update: Sun 21 Dec 2025 21:01:17 +0000 Files and hashes: 1: WLKee4oN25w2xuDj9JV3gXsOo6Y.crl (hash: +/sHm4YcS0XvqxT1v04jYz4HcPTIV7wzK8+AH8M/wqE=) 2: sPVz6CXeimsgpxuXKMYY5ra1yXI.roa (hash: uGVCkdoP9XZVNq6UA53Y8OgwaBktr5jNaHV/XYvmoPk=) 3: zkc2uOHfImVjREc_qVShC0g8NMk.roa (hash: 5EZkcIVSam+MTu3rBIkIbCkGEAsWno08pV+ytgZsspg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:18:10:71:2c:81:fb:6a:38:33:ac:18:72:8c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6 Validity Not Before: Dec 20 21:01:17 2025 GMT Not After : Dec 21 21:01:17 2025 GMT Subject: CN=3581f718e134f917818517232784dc8751393ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:29:1a:c6:68:d2:c0:a1:c0:8f:45:47:c4: c0:09:eb:8f:48:29:b1:0a:0b:a1:d2:24:9c:1a:4c: 22:71:8e:e2:2a:46:a0:8c:a6:d6:21:bb:dd:c3:3b: ee:72:50:2c:62:d6:81:66:c7:01:5c:76:b6:42:09: 03:18:04:1b:df:f6:46:9e:40:dc:e5:3e:58:40:4a: 22:16:8d:b2:8b:37:b1:ca:81:d4:db:72:39:71:ea: 9c:07:74:ae:f9:2b:d9:0e:af:96:24:f0:23:48:cf: a6:a2:db:e9:c8:c7:0b:35:c2:50:bd:5e:e9:2f:ba: 11:77:3a:52:2d:97:74:f6:bf:cd:a5:39:cc:01:66: 18:b4:0c:c7:20:d5:22:5c:76:1e:da:d5:60:d9:1b: 32:44:81:ba:1c:af:ce:26:22:76:f3:8a:28:a5:0e: 0d:d3:91:93:57:e4:54:4a:58:38:6e:f2:fd:c1:18: a9:c8:a8:cd:ec:50:26:4f:e2:a9:fa:d3:3d:8e:93: 13:d1:41:7e:88:14:7e:0c:76:cc:df:c8:3f:b1:dc: ee:e7:8d:8c:f8:62:a0:91:d0:10:c9:b7:29:34:d4: 5b:d7:10:e2:6f:95:8e:43:63:cd:1d:6a:be:52:9d: 1f:d6:2b:e9:56:07:9c:d9:76:be:6d:2d:0e:f8:d9: c7:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:81:F7:18:E1:34:F9:17:81:85:17:23:27:84:DC:87:51:39:3E:A6 X509v3 Authority Key Identifier: keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ee:e8:42:70:a1:93:1f:5f:8c:78:66:1b:f6:93:2e:fb:4c: a5:2f:6e:6d:e6:77:06:97:1c:67:37:19:d3:01:64:8a:53:2d: ed:39:db:83:25:49:90:ed:be:9c:85:76:17:22:e9:8e:89:23: ca:0c:5e:25:31:fe:56:c5:cf:a8:22:d3:f7:44:67:dd:30:3b: 88:e3:83:2a:95:5c:53:b5:82:e9:5d:e2:45:b4:f8:f7:52:79: 32:ec:09:f2:e0:aa:5c:27:11:05:26:c8:74:57:c6:80:4e:77: 40:4f:ff:81:b4:84:9a:52:5a:a5:e2:0f:5c:de:ca:fe:8c:0c: 40:1f:6c:20:48:74:a9:fb:4e:3d:f9:ab:b3:4f:d4:f1:4e:16: 8f:5c:e4:29:44:58:e9:f8:e7:73:54:9c:a1:fb:72:fa:c8:4f: 5c:b6:9b:a8:b0:f2:bf:c3:a6:51:c6:bc:99:f7:9c:71:3d:45: 4b:67:33:c5:25:62:45:c0:68:26:78:57:00:36:39:e7:28:87: 5a:b3:21:12:27:da:68:39:ca:2f:b2:4e:2c:c4:0f:b8:8d:46: 35:de:a7:74:80:9f:72:91:0c:83:15:27:97:8e:2c:84:45:85: ea:e8:ef:02:01:98:04:57:d3:1d:69:ae:98:90:91:8d:05:6f: e8:52:d1:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRgQcSyB+2o4M6wYcozxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjI5ZTdiOGEwZGRiOWMzNmM2ZTBlM2Y0OTU3NzgxN2Iw ZWEzYTYwHhcNMjUxMjIwMjEwMTE3WhcNMjUxMjIxMjEwMTE3WjAzMTEwLwYDVQQD EygzNTgxZjcxOGUxMzRmOTE3ODE4NTE3MjMyNzg0ZGM4NzUxMzkzZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv34pGsZo0sChwI9FR8TACeuPSCmx Cguh0iScGkwicY7iKkagjKbWIbvdwzvuclAsYtaBZscBXHa2QgkDGAQb3/ZGnkDc 5T5YQEoiFo2yizexyoHU23I5ceqcB3Su+SvZDq+WJPAjSM+motvpyMcLNcJQvV7p L7oRdzpSLZd09r/NpTnMAWYYtAzHINUiXHYe2tVg2RsyRIG6HK/OJiJ284oopQ4N 05GTV+RUSlg4bvL9wRipyKjN7FAmT+Kp+tM9jpMT0UF+iBR+DHbM38g/sdzu542M +GKgkdAQybcpNNRb1xDib5WOQ2PNHWq+Up0f1ivpVgec2Xa+bS0O+NnH5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDWB9xjhNPkXgYUXIyeE3IdROT6mMB8GA1UdIwQY MBaAFFiynnuKDducNsbg4/SVd4F7DqOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUt ZWU3M2ZlMjFlZDIzLzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUtZWU3M2ZlMjFlZDIz LzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANe7oQnCh kx9fjHhmG/aTLvtMpS9ubeZ3BpccZzcZ0wFkilMt7TnbgyVJkO2+nIV2FyLpjokj ygxeJTH+VsXPqCLT90Rn3TA7iOODKpVcU7WC6V3iRbT491J5MuwJ8uCqXCcRBSbI dFfGgE53QE//gbSEmlJapeIPXN7K/owMQB9sIEh0qftOPfmrs0/U8U4Wj1zkKURY 6fjnc1Scofty+shPXLabqLDyv8OmUca8mfeccT1FS2czxSViRcBoJnhXADY55yiH WrMhEifaaDnKL7JOLMQPuI1GNd6ndICfcpEMgxUnl44shEWF6ujvAgGYBFfTHWmu mJCRjQVv6FLRYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:26:53 2025 by rpki-client