This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft File: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json) Hash identifier: EjXS7gpb51j7eT0LAo0IRuwWpMsNYRVw9Pcqti1L5/8= Subject key identifier: 26:FB:41:20:71:AB:3C:93:0B:0D:8A:FB:83:EE:F8:76:06:EA:9B:D3 Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC Certificate issuer: /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc Certificate serial: 019B3D597F187C56E5155E3F226EE5492FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft Manifest number: 0A59 Signing time: Sat 20 Dec 2025 20:00:33 +0000 Manifest this update: Sat 20 Dec 2025 20:00:33 +0000 Manifest next update: Sun 21 Dec 2025 20:00:33 +0000 Files and hashes: 1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: UJhx9Thhu0hcvenHnVA3utuinWk3hZoR2lCtuR94kL4=) 2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:7f:18:7c:56:e5:15:5e:3f:22:6e:e5:49:2f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc Validity Not Before: Dec 20 20:00:33 2025 GMT Not After : Dec 21 20:00:33 2025 GMT Subject: CN=26fb412071ab3c930b0d8afb83eef87606ea9bd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:0e:0e:c0:33:4c:25:f7:06:36:6f:0e:95: 38:d1:83:2f:74:7b:05:36:fe:bb:19:0f:2a:64:af: d4:bc:84:bb:04:e8:1e:41:a4:d3:a3:0a:e8:51:1a: 19:dd:81:26:df:de:97:85:7c:33:70:1a:53:90:95: 4e:71:3b:90:0c:31:0a:e8:20:82:13:63:0e:ad:f1: 98:21:28:ce:68:4a:e7:db:31:be:0e:dd:db:f7:90: 3e:18:bc:ea:12:df:c0:20:97:8d:d2:fb:a8:2f:5d: f3:c3:88:c2:d4:ca:2a:10:c6:e9:68:e0:c0:82:25: eb:7d:65:45:78:34:b7:db:5d:f4:f9:82:67:7d:6e: 1b:c6:55:df:3f:b3:29:ed:9f:85:e7:ec:6e:45:85: b4:3e:7e:8d:a2:0f:f7:30:62:de:1d:09:08:44:6f: 4f:99:30:a9:bf:99:4b:fb:68:4d:e6:14:1a:7d:2b: 71:73:73:f2:e7:7c:29:dd:be:c6:55:a2:8c:f9:46: 3a:f6:48:b3:4c:ab:b7:f2:95:2e:3a:0b:6b:12:11: 7c:fa:56:e8:5d:4a:d2:29:ec:60:3d:38:94:73:b7: b6:c2:07:c3:a0:7d:34:4e:d9:e5:d3:b1:19:f3:b3: 7b:61:d5:77:59:75:f3:f4:b9:a6:05:8b:3f:6e:b8: df:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:FB:41:20:71:AB:3C:93:0B:0D:8A:FB:83:EE:F8:76:06:EA:9B:D3 X509v3 Authority Key Identifier: keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:ee:29:bc:bf:81:2c:51:39:51:af:66:7b:23:f9:6e:3f:7a: 27:fb:f9:26:94:d8:14:99:f6:17:ea:e0:da:6f:f0:8d:7f:75: 71:f0:a0:c3:b5:2f:e9:41:0e:07:af:d3:4a:43:89:8b:44:cf: 89:fe:0a:5c:e1:d2:a0:78:e5:95:5b:9a:27:7d:ec:12:16:da: e9:d9:2a:92:8b:b5:df:d5:3f:04:9c:0b:c5:a2:dc:f3:31:53: e4:ec:83:58:56:87:f5:6b:c6:ac:1f:47:78:ec:c0:89:44:93: 8f:40:a5:02:72:13:4f:ae:1e:21:be:2e:9c:50:7f:cf:17:2a: 26:2f:34:c6:52:99:0c:30:0c:24:5f:66:cc:cc:f2:0d:87:28: 86:c3:40:2d:b3:6c:07:04:59:13:72:7b:bc:c6:0a:f4:65:74: 1d:32:d1:23:00:0b:a5:17:1c:a7:f0:83:34:f0:d5:61:79:dd: 74:7f:c2:80:33:85:14:f6:95:2e:ed:69:47:c2:a0:f0:82:f9: 84:91:f4:1d:1b:7e:de:b6:39:70:b6:f9:6e:76:34:c2:bc:26: 14:31:35:67:ec:00:44:88:5f:18:dd:c1:a0:0e:c0:79:20:63: 81:b6:04:e9:3c:48:6c:15:ef:d9:72:c9:2e:d1:f7:86:cc:bd: a0:9a:94:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WX8YfFblFV4/Im7lSS/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDJjYTgxYjlmMGE5NzEzYjA5OTY4N2RjODE1NTFjNDVl M2Y4ZmMwHhcNMjUxMjIwMjAwMDMzWhcNMjUxMjIxMjAwMDMzWjAzMTEwLwYDVQQD EygyNmZiNDEyMDcxYWIzYzkzMGIwZDhhZmI4M2VlZjg3NjA2ZWE5YmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGEODsAzTCX3BjZvDpU40YMvdHsF Nv67GQ8qZK/UvIS7BOgeQaTTowroURoZ3YEm396XhXwzcBpTkJVOcTuQDDEK6CCC E2MOrfGYISjOaErn2zG+Dt3b95A+GLzqEt/AIJeN0vuoL13zw4jC1MoqEMbpaODA giXrfWVFeDS32130+YJnfW4bxlXfP7Mp7Z+F5+xuRYW0Pn6Nog/3MGLeHQkIRG9P mTCpv5lL+2hN5hQafStxc3Py53wp3b7GVaKM+UY69kizTKu38pUuOgtrEhF8+lbo XUrSKexgPTiUc7e2wgfDoH00Ttnl07EZ87N7YdV3WXXz9LmmBYs/brjfywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCb7QSBxqzyTCw2K+4Pu+HYG6pvTMB8GA1UdIwQY MBaAFFoCyoG58KlxOwmWh9yBVRxF4/j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2Mt NDU5ZGRjNjMxYmNjLzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2MtNDU5ZGRjNjMxYmNj LzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABu4pvL+B LFE5Ua9meyP5bj96J/v5JpTYFJn2F+rg2m/wjX91cfCgw7Uv6UEOB6/TSkOJi0TP if4KXOHSoHjllVuaJ33sEhba6dkqkou139U/BJwLxaLc8zFT5OyDWFaH9WvGrB9H eOzAiUSTj0ClAnITT64eIb4unFB/zxcqJi80xlKZDDAMJF9mzMzyDYcohsNALbNs BwRZE3J7vMYK9GV0HTLRIwALpRccp/CDNPDVYXnddH/CgDOFFPaVLu1pR8Kg8IL5 hJH0HRt+3rY5cLb5bnY0wrwmFDE1Z+wARIhfGN3BoA7AeSBjgbYE6TxIbBXv2XLJ LtH3hsy9oJqUHg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:26 2025 by rpki-client