This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json) Hash identifier: UuLYZkSIsxRxxR8IVnI7prCwbCQKxsZ+0hxaoKHGX3M= Subject key identifier: F2:26:21:38:5F:9E:E2:08:6C:96:74:65:55:26:B1:EC:4A:79:0E:13 Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Certificate serial: 019B3B348E7158AB03E40D8B57695C2DA017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft Manifest number: 1208 Signing time: Sat 20 Dec 2025 10:00:58 +0000 Manifest this update: Sat 20 Dec 2025 10:00:58 +0000 Manifest next update: Sun 21 Dec 2025 10:00:58 +0000 Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=) 2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=) 3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: YpQE6BKLVm/Qm6yuou2ZH5SPfjIwTq03uAqU0zX5bQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:8e:71:58:ab:03:e4:0d:8b:57:69:5c:2d:a0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Validity Not Before: Dec 20 10:00:58 2025 GMT Not After : Dec 21 10:00:58 2025 GMT Subject: CN=f22621385f9ee2086c9674655526b1ec4a790e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ee:4a:25:cb:88:a5:e0:a8:4c:5b:12:d5:16: bd:4a:4f:e2:73:09:90:f7:97:d9:d5:3b:e9:c2:c0: d0:a6:47:92:4b:ae:a6:ad:79:39:a6:a6:05:0d:e3: 92:a8:b3:a9:77:2e:77:80:c8:b3:fa:68:50:8b:be: 44:76:73:3e:7e:7b:e8:a7:a5:ae:1a:57:c9:5e:ef: 3e:dd:5d:f6:7d:e4:c2:7a:56:cc:74:ba:75:78:aa: 4a:2f:36:02:e9:2c:f5:65:29:01:2e:60:84:fb:8b: 27:ec:00:6f:c7:23:ac:49:0e:e7:7d:46:71:de:01: fe:74:5a:39:52:5a:d5:19:a1:85:a5:da:f0:00:dc: b9:33:ec:c3:1a:fe:93:1d:b0:5e:be:a3:49:ce:29: e2:3a:2e:30:9d:70:fe:c6:d8:11:46:83:9a:7e:11: b5:37:40:41:30:e0:20:73:81:4c:66:e4:46:0b:0e: dd:2e:01:e3:0f:95:44:02:7d:bf:ff:3b:68:fd:a6: 93:c0:47:1a:6c:08:f0:37:96:1f:b8:d5:a5:72:75: 3f:bd:85:15:5d:01:27:98:d5:80:3e:17:fa:ee:7a: 48:ef:17:04:e2:03:3c:58:87:b8:e1:84:fb:1b:35: c1:5e:3d:68:2f:90:f6:f3:5c:39:a7:62:3d:90:1d: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:26:21:38:5F:9E:E2:08:6C:96:74:65:55:26:B1:EC:4A:79:0E:13 X509v3 Authority Key Identifier: keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:42:ca:43:dd:31:b4:77:57:c0:2c:ac:04:34:fe:42:10:92: 96:7e:14:df:db:ad:a9:e3:88:f5:61:5c:4f:19:95:ea:e1:3d: ed:07:57:67:18:a6:af:8a:68:9b:ef:6c:71:7c:de:a6:e9:73: 00:61:f1:fa:f5:04:ee:e4:a3:fd:2a:ed:52:14:33:ea:48:16: 55:f8:b1:7f:b3:40:c0:dd:60:69:af:50:ba:59:f6:48:1e:c5: 1d:b8:c1:ec:94:62:0f:68:5f:85:87:07:ce:73:55:0e:9f:7f: 1d:0c:91:26:22:4e:df:d5:09:47:a0:99:d0:f3:6d:de:fd:5d: 74:9c:d2:1b:f6:0f:21:1c:58:75:2f:38:99:7b:d0:e1:86:53: b5:e1:d7:a1:db:c4:f9:60:e9:47:c6:e7:5b:24:03:1d:d0:d1: 3a:b9:b2:23:ad:d1:d6:43:3c:43:a2:31:1e:8f:2f:89:95:f1: d0:b6:0f:b6:51:27:04:66:ef:2e:e1:21:c5:54:fd:ae:92:67: 12:f2:98:06:e6:90:85:c1:b3:a2:4e:a9:2e:9d:cb:f3:96:4c: 81:99:02:49:d3:d4:0d:46:77:af:be:01:b3:84:d3:44:64:38: ee:81:25:40:30:3d:56:7b:2a:1e:f0:72:80:fe:a8:cc:da:c6: 36:43:97:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NI5xWKsD5A2LV2lcLaAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm NmM5YzUwHhcNMjUxMjIwMTAwMDU4WhcNMjUxMjIxMTAwMDU4WjAzMTEwLwYDVQQD EyhmMjI2MjEzODVmOWVlMjA4NmM5Njc0NjU1NTI2YjFlYzRhNzkwZTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e5KJcuIpeCoTFsS1Ra9Sk/icwmQ 95fZ1TvpwsDQpkeSS66mrXk5pqYFDeOSqLOpdy53gMiz+mhQi75EdnM+fnvop6Wu GlfJXu8+3V32feTCelbMdLp1eKpKLzYC6Sz1ZSkBLmCE+4sn7ABvxyOsSQ7nfUZx 3gH+dFo5UlrVGaGFpdrwANy5M+zDGv6THbBevqNJziniOi4wnXD+xtgRRoOafhG1 N0BBMOAgc4FMZuRGCw7dLgHjD5VEAn2//zto/aaTwEcabAjwN5YfuNWlcnU/vYUV XQEnmNWAPhf67npI7xcE4gM8WIe44YT7GzXBXj1oL5D281w5p2I9kB2nKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPImIThfnuIIbJZ0ZVUmsexKeQ4TMB8GA1UdIwQY MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARULKQ90x tHdXwCysBDT+QhCSln4U39utqeOI9WFcTxmV6uE97QdXZximr4pom+9scXzepulz AGHx+vUE7uSj/SrtUhQz6kgWVfixf7NAwN1gaa9Quln2SB7FHbjB7JRiD2hfhYcH znNVDp9/HQyRJiJO39UJR6CZ0PNt3v1ddJzSG/YPIRxYdS84mXvQ4YZTteHXodvE +WDpR8bnWyQDHdDROrmyI63R1kM8Q6IxHo8viZXx0LYPtlEnBGbvLuEhxVT9rpJn EvKYBuaQhcGzok6pLp3L85ZMgZkCSdPUDUZ3r74Bs4TTRGQ47oElQDA9VnsqHvBy gP6ozNrGNkOXTg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:12:34 2025 by rpki-client