This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft File: WVskOnIz5XHDwXPrgkkRGQYyYBk.mft (raw, json) Hash identifier: Np1qWTlBw3bcGbJreye+dl2Bf0oJvabGleg0yA3v76o= Subject key identifier: 40:F6:82:05:BE:60:F4:33:AE:E0:85:99:69:90:C5:66:FD:C5:7C:66 Authority key identifier: 59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19 Certificate issuer: /CN=595b243a7233e571c3c173eb8249111906326019 Certificate serial: 019B65E7D14A9FFBCE9D6F4B95FB42A2EA8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft Manifest number: 1718 Signing time: Sun 28 Dec 2025 17:00:49 +0000 Manifest this update: Sun 28 Dec 2025 17:00:49 +0000 Manifest next update: Mon 29 Dec 2025 17:00:49 +0000 Files and hashes: 1: 2580DhDO7oRxSgRoTYqJtzmDRZ8.roa (hash: 4RUkkYY+CZ3xO00bJ4wL39GFuDvJP7M2BRc09JQ7DH4=) 2: WVskOnIz5XHDwXPrgkkRGQYyYBk.crl (hash: sbcmrVlT2yyiP7UpTdT7FyTgFM7h7pVfHzyXmi2WZ30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:d1:4a:9f:fb:ce:9d:6f:4b:95:fb:42:a2:ea:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=595b243a7233e571c3c173eb8249111906326019 Validity Not Before: Dec 28 17:00:49 2025 GMT Not After : Dec 29 17:00:49 2025 GMT Subject: CN=40f68205be60f433aee085996990c566fdc57c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cd:3e:7d:66:89:79:bd:41:0d:a6:6d:c5:1b: f4:05:4e:73:b6:ff:bf:0c:72:36:7c:95:ac:e1:51: 2f:8a:65:c0:f0:62:06:f9:b9:ce:47:fa:f4:88:c3: 70:e4:97:ba:0a:6d:44:c8:dc:01:01:22:27:e5:5f: 0a:3f:d3:fc:9e:e1:2c:0d:7a:22:3c:cb:13:cf:56: 30:eb:7c:cc:87:ec:ec:41:55:41:e9:8f:38:08:ed: ec:00:1f:b5:71:2a:1f:04:86:ad:71:39:32:ea:03: b4:c4:60:30:e0:cd:c5:6e:a6:ab:18:d7:b8:a8:54: 4c:16:ab:79:25:e3:57:a3:34:ce:cb:fc:cc:7c:02: cf:f7:91:50:76:18:e5:c4:ba:28:ab:d8:85:d8:56: 17:33:c5:fe:8c:32:1d:db:fc:09:67:e5:3e:21:b1: 9e:ad:f8:80:7b:4a:a1:4c:cb:2c:c5:6f:0a:69:65: f2:bb:5f:7c:c8:c5:fa:b2:e8:9c:b9:1e:dd:88:9f: b5:c8:b5:76:13:ef:b5:3b:67:57:ed:34:b8:89:f3: 0d:90:dc:c3:db:e6:4b:1d:a8:e8:ef:3c:37:2d:1e: 47:cd:52:93:cc:64:ca:27:d8:35:96:ed:1f:6e:69: 1e:62:bf:fa:e6:53:75:72:b6:98:0e:fe:7e:65:54: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F6:82:05:BE:60:F4:33:AE:E0:85:99:69:90:C5:66:FD:C5:7C:66 X509v3 Authority Key Identifier: keyid:59:5B:24:3A:72:33:E5:71:C3:C1:73:EB:82:49:11:19:06:32:60:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVskOnIz5XHDwXPrgkkRGQYyYBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e9e087-e768-44d8-9ec8-88e4466915f8/1/WVskOnIz5XHDwXPrgkkRGQYyYBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:1a:5f:ef:42:98:c9:49:c4:fb:c9:0a:5e:23:85:43:58:bc: 8f:d1:b0:b5:5a:e9:fc:55:40:e5:eb:07:6a:a7:4e:08:34:49: 24:f9:d6:4f:88:54:96:dd:b7:59:f8:41:c7:8a:aa:fe:21:92: 00:53:e9:d3:61:2b:4d:c7:78:f1:d7:2c:fb:8b:62:50:86:2b: c6:dd:01:02:74:2f:2a:4d:d6:ab:9f:32:33:fb:3e:f1:dd:1d: e4:5d:08:34:2f:81:be:49:7c:ab:d7:4f:99:15:35:16:8d:65: a1:fe:a6:30:c0:26:61:8a:b4:00:27:39:1f:e1:1a:6b:d4:0e: 46:68:64:ce:09:31:55:a5:bd:e8:f6:1a:ea:3a:52:64:1f:0c: fa:25:8a:96:6d:77:5c:84:55:5a:9f:bf:bf:8a:e1:fa:15:76: 35:30:37:cb:a1:ae:d1:60:0a:60:71:3d:0b:9e:52:81:eb:f8: c2:9f:84:6d:d6:fe:16:fc:7b:14:21:3c:2a:63:08:6b:0c:38: c1:78:a9:71:0a:47:e5:4e:af:b7:3b:45:84:5d:2e:54:33:ca: d7:d8:d9:69:0c:04:b9:98:e0:6a:a7:bc:35:80:10:e3:e7:c4: e1:a6:27:9a:e6:2e:77:8e:cc:d4:ed:ff:4a:08:8a:02:4c:89: db:5a:14:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl59FKn/vOnW9LlftCouqOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NWIyNDNhNzIzM2U1NzFjM2MxNzNlYjgyNDkxMTE5MDYz MjYwMTkwHhcNMjUxMjI4MTcwMDQ5WhcNMjUxMjI5MTcwMDQ5WjAzMTEwLwYDVQQD Eyg0MGY2ODIwNWJlNjBmNDMzYWVlMDg1OTk2OTkwYzU2NmZkYzU3YzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c0+fWaJeb1BDaZtxRv0BU5ztv+/ DHI2fJWs4VEvimXA8GIG+bnOR/r0iMNw5Je6Cm1EyNwBASIn5V8KP9P8nuEsDXoi PMsTz1Yw63zMh+zsQVVB6Y84CO3sAB+1cSofBIatcTky6gO0xGAw4M3FbqarGNe4 qFRMFqt5JeNXozTOy/zMfALP95FQdhjlxLooq9iF2FYXM8X+jDId2/wJZ+U+IbGe rfiAe0qhTMssxW8KaWXyu198yMX6suicuR7diJ+1yLV2E++1O2dX7TS4ifMNkNzD 2+ZLHajo7zw3LR5HzVKTzGTKJ9g1lu0fbmkeYr/65lN1craYDv5+ZVSb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED2ggW+YPQzruCFmWmQxWb9xXxmMB8GA1UdIwQY MBaAFFlbJDpyM+Vxw8Fz64JJERkGMmAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgt ODhlNDQ2NjkxNWY4LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lOWUwODctZTc2OC00NGQ4LTllYzgtODhlNDQ2NjkxNWY4 LzEvV1Zza09uSXo1WEhEd1hQcmdra1JHUVl5WUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphpf70KY yUnE+8kKXiOFQ1i8j9GwtVrp/FVA5esHaqdOCDRJJPnWT4hUlt23WfhBx4qq/iGS AFPp02ErTcd48dcs+4tiUIYrxt0BAnQvKk3Wq58yM/s+8d0d5F0INC+Bvkl8q9dP mRU1Fo1lof6mMMAmYYq0ACc5H+Eaa9QORmhkzgkxVaW96PYa6jpSZB8M+iWKlm13 XIRVWp+/v4rh+hV2NTA3y6Gu0WAKYHE9C55Sgev4wp+Ebdb+Fvx7FCE8KmMIaww4 wXipcQpH5U6vtztFhF0uVDPK19jZaQwEuZjgaqe8NYAQ4+fE4aYnmuYud47M1O3/ SgiKAkyJ21oULg== -----END CERTIFICATE-----Generated at Sun Dec 28 21:57:50 2025 by rpki-client