This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json) Hash identifier: lJrYEDYNi6AAc0cSKvf83WUrOmN4GIgVN1PkyRfx//g= Subject key identifier: A3:D5:09:FD:18:3C:0C:77:E5:CC:04:ED:1D:DB:F1:36:B2:55:32:59 Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11 Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611 Certificate serial: 019B3CB551C9DA1AC6CF3F742439CD69F247 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft Manifest number: 0E2B Signing time: Sat 20 Dec 2025 17:01:14 +0000 Manifest this update: Sat 20 Dec 2025 17:01:14 +0000 Manifest next update: Sun 21 Dec 2025 17:01:14 +0000 Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: GtXhqVdkH6ZsGzatbFFWJmcUjieB5fw2GIeCe9yzbcw=) 2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:51:c9:da:1a:c6:cf:3f:74:24:39:cd:69:f2:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611 Validity Not Before: Dec 20 17:01:14 2025 GMT Not After : Dec 21 17:01:14 2025 GMT Subject: CN=a3d509fd183c0c77e5cc04ed1ddbf136b2553259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:bf:f2:4b:d9:3f:6a:d1:86:9c:92:c3:b6:04: 3e:5e:31:d2:25:6e:9f:0b:3a:a8:9c:b2:aa:e6:dd: 43:c4:9d:5a:ef:aa:bb:3d:7e:15:e5:ea:84:45:49: c5:f6:e2:95:04:b4:4d:fb:d3:b9:36:8e:03:de:a8: f8:5c:ec:2a:d7:ed:e7:62:2d:ba:98:87:47:78:f7: ac:26:fa:d5:f3:26:b2:45:3c:b2:7a:1f:dc:bd:a7: e7:ee:a1:60:b5:1c:f7:5c:7e:30:2c:49:a2:53:1c: 6c:b2:08:13:22:26:1f:f0:27:01:5b:ff:a0:0e:0e: 74:3f:d4:01:86:c7:91:ed:1c:70:48:09:7e:8c:4c: fd:b5:02:e3:b8:c3:92:78:08:e0:f5:fd:4f:13:d6: e1:f1:d1:37:e6:8e:5e:8b:12:17:29:76:26:10:eb: 43:c2:6c:44:25:68:cd:8c:b7:bb:f9:86:61:8d:e8: 11:ac:8d:f0:7f:e0:6e:c9:35:1b:8d:5a:e0:00:0c: 66:20:74:13:53:62:9c:82:32:2d:ec:cb:90:43:b9: f3:07:40:17:ec:b1:a8:04:6f:ee:15:ec:50:9e:7d: 20:54:67:3e:cb:bf:a5:66:66:97:8b:28:16:05:b0: 07:76:b6:c8:b8:bf:13:3e:93:1f:78:3b:86:e4:e0: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:09:FD:18:3C:0C:77:E5:CC:04:ED:1D:DB:F1:36:B2:55:32:59 X509v3 Authority Key Identifier: keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:a3:c7:d7:dc:e8:86:f2:ec:0a:6d:71:95:05:ae:c2:e9:cf: 6a:eb:45:74:5a:2d:9b:9a:60:cb:23:71:d6:af:bd:95:cd:e8: c8:1a:f8:9d:53:db:c9:3e:d6:5e:81:27:35:90:ea:3f:e9:42: 9f:eb:8d:98:d0:9c:83:2f:3f:5b:ae:47:e8:8f:f6:5d:10:38: 77:25:1e:e5:02:89:0c:83:28:29:5b:3a:3d:9d:ad:fa:a4:98: 55:2a:aa:7c:42:3c:96:ae:11:ae:bc:23:91:4f:c5:d0:96:08: 67:86:8e:32:ec:70:8b:61:34:fc:a2:6b:af:9f:8d:02:15:d8: e0:cf:81:89:89:74:60:94:45:70:e8:eb:9f:61:00:a9:82:d1: 01:f5:c3:44:0e:7f:09:b3:c0:64:25:38:6e:0a:29:59:4d:6b: b3:0d:32:ac:6f:91:b8:a9:43:4e:30:59:d0:d9:eb:39:59:ad: c5:14:8d:bd:e2:7e:9d:63:87:f5:67:8a:0d:9a:c1:a9:98:da: 86:e8:64:59:33:e3:bb:df:94:c1:85:c6:e8:27:4d:22:a5:30: e8:02:1f:d4:ce:6c:92:b4:93:22:a5:de:8f:38:dc:39:9d:07: 49:a3:fe:d1:8d:1c:1a:30:3e:65:49:67:3e:ff:05:77:79:3b: 9e:be:61:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tVHJ2hrGzz90JDnNafJHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGQxMDE3YzUzNDU3YThhOTIxNDE5Njg3YmRlOGE4Yjhl YjU2MTEwHhcNMjUxMjIwMTcwMTE0WhcNMjUxMjIxMTcwMTE0WjAzMTEwLwYDVQQD EyhhM2Q1MDlmZDE4M2MwYzc3ZTVjYzA0ZWQxZGRiZjEzNmIyNTUzMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4b/yS9k/atGGnJLDtgQ+XjHSJW6f CzqonLKq5t1DxJ1a76q7PX4V5eqERUnF9uKVBLRN+9O5No4D3qj4XOwq1+3nYi26 mIdHePesJvrV8yayRTyyeh/cvafn7qFgtRz3XH4wLEmiUxxssggTIiYf8CcBW/+g Dg50P9QBhseR7RxwSAl+jEz9tQLjuMOSeAjg9f1PE9bh8dE35o5eixIXKXYmEOtD wmxEJWjNjLe7+YZhjegRrI3wf+BuyTUbjVrgAAxmIHQTU2KcgjIt7MuQQ7nzB0AX 7LGoBG/uFexQnn0gVGc+y7+lZmaXiygWBbAHdrbIuL8TPpMfeDuG5ODNYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPVCf0YPAx35cwE7R3b8TayVTJZMB8GA1UdIwQY MBaAFFjdEBfFNFeoqSFBloe96Ki461YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEt ZGNhZjdlZjdhZTNhLzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEtZGNhZjdlZjdhZTNh LzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKPH19zo hvLsCm1xlQWuwunPautFdFotm5pgyyNx1q+9lc3oyBr4nVPbyT7WXoEnNZDqP+lC n+uNmNCcgy8/W65H6I/2XRA4dyUe5QKJDIMoKVs6PZ2t+qSYVSqqfEI8lq4Rrrwj kU/F0JYIZ4aOMuxwi2E0/KJrr5+NAhXY4M+BiYl0YJRFcOjrn2EAqYLRAfXDRA5/ CbPAZCU4bgopWU1rsw0yrG+RuKlDTjBZ0NnrOVmtxRSNveJ+nWOH9WeKDZrBqZja huhkWTPju9+UwYXG6CdNIqUw6AIf1M5skrSTIqXejzjcOZ0HSaP+0Y0cGjA+ZUln Pv8Fd3k7nr5h3g== -----END CERTIFICATE-----Generated at Sun Dec 21 01:33:35 2025 by rpki-client