This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json) Hash identifier: g6ChhmkGllqmt5jzcyff2Lx16DfBLCFvGsvZ1KrgiZg= Subject key identifier: CD:6E:38:F8:F4:95:94:0E:CA:AB:F0:B5:25:B4:EB:B0:D8:44:9A:80 Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Certificate serial: 019B42EE0A3442542C16CD09A495D6691150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft Manifest number: 120C Signing time: Sun 21 Dec 2025 22:00:54 +0000 Manifest this update: Sun 21 Dec 2025 22:00:54 +0000 Manifest next update: Mon 22 Dec 2025 22:00:54 +0000 Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=) 2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=) 3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: 9g6yJNi1UqFAGq72xmVzHoziXlFW0qe3dDjDFK/cu+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:0a:34:42:54:2c:16:cd:09:a4:95:d6:69:11:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Validity Not Before: Dec 21 22:00:54 2025 GMT Not After : Dec 22 22:00:54 2025 GMT Subject: CN=cd6e38f8f495940ecaabf0b525b4ebb0d8449a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:18:48:c3:06:30:c2:17:b8:dc:bd:3f:38:7e: 13:76:70:eb:f6:84:ab:6c:b4:9a:fa:f3:01:4d:27: b7:f0:77:44:1f:48:bb:3e:6d:b7:0b:91:36:63:61: f0:c7:22:8e:02:ee:1b:88:d7:c5:3a:fd:c6:ab:18: 67:89:f3:30:ee:d1:39:09:14:94:1d:3a:18:c3:eb: 5b:be:38:8d:c0:49:7a:46:c4:65:6c:06:a2:ea:cf: 44:91:bc:49:99:97:f2:c5:7e:0b:69:0f:72:46:0e: 49:40:aa:52:a4:e5:4c:d1:59:db:73:49:70:3e:92: b2:20:4e:8e:77:28:71:79:76:9f:3c:d0:c6:36:2f: ca:0a:9f:5e:b2:4a:ca:dd:5c:fd:dc:f7:67:c9:15: ff:d9:91:96:db:44:0d:3b:6f:c6:bb:77:35:59:39: 7c:09:4a:98:26:9f:aa:7d:5a:5d:33:49:7e:5d:6c: 39:3b:23:5f:d0:b1:9a:f4:01:5b:f5:ec:db:b1:a3: bf:da:d8:da:8c:a3:39:b2:9f:23:50:cb:a9:0e:e7: e6:1b:d3:11:23:9d:0d:64:d7:e4:4f:b6:ef:71:ec: 24:c7:93:1c:8a:f1:50:b0:4a:ad:ef:3c:14:10:a7: 84:9c:08:fa:b6:1d:16:d0:7c:f2:f0:fb:f5:04:bc: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:38:F8:F4:95:94:0E:CA:AB:F0:B5:25:B4:EB:B0:D8:44:9A:80 X509v3 Authority Key Identifier: keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:3b:dc:2a:8c:a9:f3:dd:f0:90:25:eb:a1:a0:de:6d:fa:a0: 7e:ba:2b:c0:4e:e1:89:48:9d:82:2d:36:86:15:e4:af:8c:db: 49:65:60:45:81:a3:57:1b:65:af:09:b6:cf:3b:da:1b:73:b0: 92:43:1d:f6:1d:93:61:6b:55:a9:50:f6:45:b8:40:38:23:a4: 0c:1e:bb:05:4b:80:5a:a9:a4:2c:a6:77:c8:2b:22:d0:aa:41: 8d:4d:8e:26:82:55:52:a3:29:48:34:58:a2:12:6b:66:ce:dc: 5f:99:3e:8c:9f:b2:98:0c:17:6e:e4:77:89:5d:24:18:b1:16: 38:8f:d1:39:b0:e3:bf:d5:25:4c:5d:79:15:8a:4e:41:ab:0b: 15:f9:f7:b6:2c:2c:2b:85:4b:07:5f:64:88:cd:01:4a:b0:5f: 9a:5f:bf:19:a1:7f:fb:d0:90:fc:b6:bf:1d:99:d5:01:77:bb: de:37:82:e1:3a:e8:9e:92:4f:da:bc:12:a5:a0:2c:b2:c9:45: e8:ca:6b:9b:f5:54:aa:2f:02:4d:76:50:df:2d:8e:76:22:5a: 04:1b:6e:39:07:f7:e3:9e:65:d2:dd:76:d4:3e:ff:b0:81:ec: f4:3e:f2:f9:5b:70:28:07:e6:7b:2a:43:42:40:29:2f:e5:08: 48:ca:51:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7go0QlQsFs0JpJXWaRFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm NmM5YzUwHhcNMjUxMjIxMjIwMDU0WhcNMjUxMjIyMjIwMDU0WjAzMTEwLwYDVQQD EyhjZDZlMzhmOGY0OTU5NDBlY2FhYmYwYjUyNWI0ZWJiMGQ4NDQ5YTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRhIwwYwwhe43L0/OH4TdnDr9oSr bLSa+vMBTSe38HdEH0i7Pm23C5E2Y2HwxyKOAu4biNfFOv3GqxhnifMw7tE5CRSU HToYw+tbvjiNwEl6RsRlbAai6s9EkbxJmZfyxX4LaQ9yRg5JQKpSpOVM0Vnbc0lw PpKyIE6OdyhxeXafPNDGNi/KCp9eskrK3Vz93PdnyRX/2ZGW20QNO2/Gu3c1WTl8 CUqYJp+qfVpdM0l+XWw5OyNf0LGa9AFb9ezbsaO/2tjajKM5sp8jUMupDufmG9MR I50NZNfkT7bvcewkx5McivFQsEqt7zwUEKeEnAj6th0W0Hzy8Pv1BLwrmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1uOPj0lZQOyqvwtSW067DYRJqAMB8GA1UdIwQY MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDvcKoyp 893wkCXroaDebfqgfrorwE7hiUidgi02hhXkr4zbSWVgRYGjVxtlrwm2zzvaG3Ow kkMd9h2TYWtVqVD2RbhAOCOkDB67BUuAWqmkLKZ3yCsi0KpBjU2OJoJVUqMpSDRY ohJrZs7cX5k+jJ+ymAwXbuR3iV0kGLEWOI/RObDjv9UlTF15FYpOQasLFfn3tiws K4VLB19kiM0BSrBfml+/GaF/+9CQ/La/HZnVAXe73jeC4TronpJP2rwSpaAssslF 6Mprm/VUqi8CTXZQ3y2OdiJaBBtuOQf3455l0t121D7/sIHs9D7y+VtwKAfmeypD QkApL+UISMpRFA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:25:15 2025 by rpki-client