This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft File: WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft (raw, json) Hash identifier: fFItHMdmh/I9e48oAFLjwDwEErgypu6MjwZvjq5u5lE= Subject key identifier: D9:78:51:49:3F:F5:AB:C9:70:21:C2:AD:A4:D3:88:B3:8C:DA:95:8C Authority key identifier: 58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B Certificate issuer: /CN=586936266e980dd203b2cbeb1c9c4570604b911b Certificate serial: 019B695724D6D7F9CCEE0C4B22D902A8669F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft Manifest number: 15A3 Signing time: Mon 29 Dec 2025 09:01:17 +0000 Manifest this update: Mon 29 Dec 2025 09:01:17 +0000 Manifest next update: Tue 30 Dec 2025 09:01:17 +0000 Files and hashes: 1: 7ZSQXgt-PmtduDM7YooPy16ZmCA.roa (hash: 4ZKvXpP93XbeUM0ug27/05HPgIPnBDcdNtO2BcvXF/8=) 2: 8selzdDBcWCOuVgfCsfOfBE5_CU.roa (hash: p2O5tRV4Q6XqdGNl3EZYTg9FiLjgZdrbbWtNR0sxUHQ=) 3: WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl (hash: Ypc2QJmZ3rQU0f/7hOXYsd2IRtMsilhCJAS46KiEaV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:57:24:d6:d7:f9:cc:ee:0c:4b:22:d9:02:a8:66:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586936266e980dd203b2cbeb1c9c4570604b911b Validity Not Before: Dec 29 09:01:17 2025 GMT Not After : Dec 30 09:01:17 2025 GMT Subject: CN=d97851493ff5abc97021c2ada4d388b38cda958c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3d:80:47:fd:7e:1e:23:f4:cd:2f:ae:2a:84: 83:78:c6:88:49:de:47:00:88:93:c5:24:20:7d:d3: e3:80:5e:89:4e:3d:cf:2d:35:78:e0:e0:a6:9b:0d: 92:4d:c7:9b:09:3c:be:a2:45:ee:de:3b:df:e0:fd: 0f:ac:11:0a:f2:02:5e:4a:26:52:c6:60:c6:10:a7: 67:fa:dc:a8:70:d7:f7:ac:a6:92:c3:ad:a3:b2:26: 19:69:f6:8f:81:1d:9f:cc:5f:98:ee:54:ba:01:bf: a0:8b:2e:92:b2:7c:a3:e8:60:b2:c9:7b:4d:7f:8c: 97:af:25:8b:ec:0e:d4:8f:18:e1:7a:95:97:df:5c: b3:e9:66:39:bb:66:54:9e:65:96:54:6b:c5:d4:99: f6:6a:be:98:e6:da:cb:b0:11:d3:71:4e:6f:12:a2: 24:b6:58:e9:33:4a:93:82:81:12:57:b0:6c:5c:66: 1b:ba:b7:f1:a0:b3:f2:cb:40:d9:69:f9:6b:e7:9e: cd:55:dc:9e:5c:d8:df:a8:dc:c3:9d:9b:3b:ea:48: ff:9d:43:c6:76:d3:8f:fd:12:6e:65:1d:1c:38:b6: ef:f0:ad:52:0e:2c:0c:df:e0:60:26:41:26:de:03: ea:bd:bd:81:2d:c8:d8:1e:24:93:3d:a2:19:10:91: 2f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:78:51:49:3F:F5:AB:C9:70:21:C2:AD:A4:D3:88:B3:8C:DA:95:8C X509v3 Authority Key Identifier: keyid:58:69:36:26:6E:98:0D:D2:03:B2:CB:EB:1C:9C:45:70:60:4B:91:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGk2Jm6YDdIDssvrHJxFcGBLkRs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/4c66cc-fa9a-4f58-ad21-7da183eff115/1/WGk2Jm6YDdIDssvrHJxFcGBLkRs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:55:38:be:7b:3e:13:2b:af:ba:a9:bb:d7:a4:87:a8:e2:d4: cb:fc:03:bb:0e:de:f7:4c:6a:1a:a8:f5:b7:fb:2a:dd:03:69: 13:7f:83:a7:07:63:f2:15:68:8f:ad:68:fb:16:08:14:2c:ac: 9d:36:c0:26:5b:e6:f3:18:1f:d2:5d:6f:ec:80:da:40:7f:35: 49:4f:5d:f8:50:8b:d7:f2:47:7f:d0:3e:b9:7d:18:1f:88:5f: 0d:4d:52:99:a4:b0:f7:e4:f8:90:f0:ce:09:96:b3:e9:07:e5: 18:41:24:97:dd:47:8b:69:27:f9:60:1d:0a:79:89:64:b5:6c: 9e:25:55:76:82:51:7c:3b:3b:d7:74:66:e7:33:25:ad:75:aa: 97:ed:3f:78:b3:a6:bc:98:82:ca:e8:6e:ec:99:4a:2d:03:db: be:e7:f1:49:fd:89:5a:fb:83:2b:04:c9:7c:ac:ff:bd:d5:d6: 73:7d:f5:d3:37:67:da:9e:5f:53:1e:c6:b3:c5:9d:f5:b8:00: 22:1c:48:1e:45:f7:0d:77:bc:dd:42:b8:b6:8b:08:db:74:c9: 2b:de:99:29:7e:df:0a:14:e7:48:92:10:2b:08:80:33:63:ca: 34:1c:f3:19:a7:7b:15:e3:51:df:2f:c2:38:65:f0:06:78:78: c4:9a:f9:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpVyTW1/nM7gxLItkCqGafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjkzNjI2NmU5ODBkZDIwM2IyY2JlYjFjOWM0NTcwNjA0 YjkxMWIwHhcNMjUxMjI5MDkwMTE3WhcNMjUxMjMwMDkwMTE3WjAzMTEwLwYDVQQD EyhkOTc4NTE0OTNmZjVhYmM5NzAyMWMyYWRhNGQzODhiMzhjZGE5NThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj2AR/1+HiP0zS+uKoSDeMaISd5H AIiTxSQgfdPjgF6JTj3PLTV44OCmmw2STcebCTy+okXu3jvf4P0PrBEK8gJeSiZS xmDGEKdn+tyocNf3rKaSw62jsiYZafaPgR2fzF+Y7lS6Ab+giy6Ssnyj6GCyyXtN f4yXryWL7A7UjxjhepWX31yz6WY5u2ZUnmWWVGvF1Jn2ar6Y5trLsBHTcU5vEqIk tljpM0qTgoESV7BsXGYburfxoLPyy0DZaflr557NVdyeXNjfqNzDnZs76kj/nUPG dtOP/RJuZR0cOLbv8K1SDiwM3+BgJkEm3gPqvb2BLcjYHiSTPaIZEJEvuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNl4UUk/9avJcCHCraTTiLOM2pWMMB8GA1UdIwQY MBaAFFhpNiZumA3SA7LL6xycRXBgS5EbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEt N2RhMTgzZWZmMTE1LzEvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS80YzY2Y2MtZmE5YS00ZjU4LWFkMjEtN2RhMTgzZWZmMTE1 LzEvV0drMkptNllEZElEc3N2ckhKeEZjR0JMa1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyVU4vns+ Eyuvuqm716SHqOLUy/wDuw7e90xqGqj1t/sq3QNpE3+Dpwdj8hVoj61o+xYIFCys nTbAJlvm8xgf0l1v7IDaQH81SU9d+FCL1/JHf9A+uX0YH4hfDU1SmaSw9+T4kPDO CZaz6QflGEEkl91Hi2kn+WAdCnmJZLVsniVVdoJRfDs713Rm5zMlrXWql+0/eLOm vJiCyuhu7JlKLQPbvufxSf2JWvuDKwTJfKz/vdXWc3310zdn2p5fUx7Gs8Wd9bgA IhxIHkX3DXe83UK4tosI23TJK96ZKX7fChTnSJIQKwiAM2PKNBzzGad7FeNR3y/C OGXwBnh4xJr5Xw== -----END CERTIFICATE-----Generated at Mon Dec 29 17:41:53 2025 by rpki-client