This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json) Hash identifier: VsEb5J3GLbsTC5jAWWg61d7f2tvYGxp5jp75EFupLiI= Subject key identifier: 35:71:76:C3:1C:FB:52:95:B2:08:78:BB:FB:4B:07:84:9C:97:F0:87 Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57 Certificate serial: 019B3F1143CDECA8501215811CD2D4C3323B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft Manifest number: 0897 Signing time: Sun 21 Dec 2025 04:00:54 +0000 Manifest this update: Sun 21 Dec 2025 04:00:54 +0000 Manifest next update: Mon 22 Dec 2025 04:00:54 +0000 Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=) 2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: 7qjEbrkXArR7cW9Fa6n3V8DS2AJBnVkBiQhGxh97C5Q=) 3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:43:cd:ec:a8:50:12:15:81:1c:d2:d4:c3:32:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57 Validity Not Before: Dec 21 04:00:54 2025 GMT Not After : Dec 22 04:00:54 2025 GMT Subject: CN=357176c31cfb5295b20878bbfb4b07849c97f087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:93:de:55:7b:99:63:b6:7b:fd:70:fc:88:f2: 1d:4f:89:47:65:1d:6f:92:fb:d2:88:01:02:7a:a3: 93:ed:c6:e2:84:a0:8c:86:24:ab:5a:5d:cf:45:8b: f9:cd:b7:4a:1c:2e:0e:6d:a2:90:93:66:e4:6b:8b: c7:9e:2d:96:12:bc:c5:ec:4d:40:27:42:0f:a5:44: 67:d9:77:bb:ee:f3:1c:d9:ce:8c:ec:95:b4:59:a9: 0b:62:b6:b9:e5:ba:d7:1b:ee:84:85:7f:a9:a7:ca: 25:72:c7:c9:45:6e:1c:f6:b0:5f:d6:f6:a6:1a:a6: 2d:4c:2b:c4:c0:0e:58:42:c4:ae:48:44:ed:dd:d5: 5e:56:ce:b0:be:c4:85:63:18:3a:3d:c2:a0:55:bd: d6:d9:3b:63:42:e1:87:d1:02:3b:f9:70:db:58:af: 91:24:6b:b7:4f:03:3b:9c:34:26:d1:23:da:6d:47: b9:26:d3:a8:b4:71:ef:13:a4:6e:57:ed:e6:a8:12: c2:14:b9:d1:76:3d:c8:4d:27:e9:e3:b2:a7:3e:37: 42:93:9d:ae:c5:d8:76:d4:c0:d5:d8:ea:cb:9a:1d: 2b:ac:49:32:16:9a:8a:6e:94:56:de:b1:a7:ff:4e: 33:78:ab:d0:9e:aa:c2:84:0b:ef:24:81:d3:0f:e8: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:71:76:C3:1C:FB:52:95:B2:08:78:BB:FB:4B:07:84:9C:97:F0:87 X509v3 Authority Key Identifier: keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:5d:eb:07:dc:0b:70:69:53:c5:a3:03:81:b5:60:89:cd:ef: ed:72:68:30:ca:02:50:dc:1a:8b:94:a0:23:c3:34:e0:12:58: 94:fa:d5:06:d7:ee:b3:1d:da:48:e2:75:1d:94:82:11:b6:6f: 4c:56:5d:b8:81:3b:77:16:30:27:38:45:00:d1:47:90:e4:db: b1:10:78:d3:a8:ff:17:f9:70:27:1d:87:c0:d7:f2:d1:42:29: fb:7d:75:f0:bc:a8:d8:40:75:78:23:76:8d:38:fe:06:1f:c3: fa:58:ea:ab:e4:0c:84:1d:49:e5:d3:a5:a4:9b:32:db:8b:79: 90:8f:ef:fc:45:cb:e6:f7:62:05:a1:37:72:11:bf:37:f4:ad: f9:6d:4c:c3:7e:7c:56:ee:f1:70:2b:3b:95:37:75:d9:f8:2d: 40:81:b2:0e:e6:3f:e1:f1:50:ce:f8:ef:f7:6f:97:77:dd:da: d9:1b:cc:c8:00:27:c2:48:8f:8d:46:e8:a4:14:a1:db:42:14: 0a:41:04:aa:76:8d:4a:af:cd:ae:e5:8f:34:91:43:80:e1:99: c4:73:8e:ad:9e:6d:dc:7e:8a:cb:50:ef:55:4d:12:d0:3b:ef: 1f:f3:63:c4:00:08:75:74:94:dc:3b:d6:d3:63:73:3c:fb:69: ec:3f:52:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EUPN7KhQEhWBHNLUwzI7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTEyNzQ1M2RmYmExN2UxMGMzNDdmYTM0YmJlYmFiMTQ5 MDVhNTcwHhcNMjUxMjIxMDQwMDU0WhcNMjUxMjIyMDQwMDU0WjAzMTEwLwYDVQQD EygzNTcxNzZjMzFjZmI1Mjk1YjIwODc4YmJmYjRiMDc4NDljOTdmMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75PeVXuZY7Z7/XD8iPIdT4lHZR1v kvvSiAECeqOT7cbihKCMhiSrWl3PRYv5zbdKHC4ObaKQk2bka4vHni2WErzF7E1A J0IPpURn2Xe77vMc2c6M7JW0WakLYra55brXG+6EhX+pp8olcsfJRW4c9rBf1vam GqYtTCvEwA5YQsSuSETt3dVeVs6wvsSFYxg6PcKgVb3W2TtjQuGH0QI7+XDbWK+R JGu3TwM7nDQm0SPabUe5JtOotHHvE6RuV+3mqBLCFLnRdj3ITSfp47KnPjdCk52u xdh21MDV2OrLmh0rrEkyFpqKbpRW3rGn/04zeKvQnqrChAvvJIHTD+g6NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVxdsMc+1KVsgh4u/tLB4Scl/CHMB8GA1UdIwQY MBaAFFihJ0U9+6F+EMNH+jS766sUkFpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2Yt ZGE5NjAxOWQ0YzIwLzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2YtZGE5NjAxOWQ0YzIw LzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATF3rB9wL cGlTxaMDgbVgic3v7XJoMMoCUNwai5SgI8M04BJYlPrVBtfusx3aSOJ1HZSCEbZv TFZduIE7dxYwJzhFANFHkOTbsRB406j/F/lwJx2HwNfy0UIp+3118Lyo2EB1eCN2 jTj+Bh/D+ljqq+QMhB1J5dOlpJsy24t5kI/v/EXL5vdiBaE3chG/N/St+W1Mw358 Vu7xcCs7lTd12fgtQIGyDuY/4fFQzvjv92+Xd93a2RvMyAAnwkiPjUbopBSh20IU CkEEqnaNSq/NruWPNJFDgOGZxHOOrZ5t3H6Ky1DvVU0S0DvvH/NjxAAIdXSU3DvW 02NzPPtp7D9S0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:07:21 2025 by rpki-client