This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json) Hash identifier: zSk2nznJ09xkM7taMigcuxyqAygb2MJiIZCMaTD+ks4= Subject key identifier: 33:55:CC:57:91:C5:29:0F:00:2D:A5:27:D1:1F:08:D0:90:1D:01:54 Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B3569C14C0A8ADA04F02587CFA0ECACD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft Manifest number: 1799 Signing time: Fri 19 Dec 2025 07:01:21 +0000 Manifest this update: Fri 19 Dec 2025 07:01:21 +0000 Manifest next update: Sat 20 Dec 2025 07:01:21 +0000 Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=) 2: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=) 3: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: gbhgZJoZjCLFXXQo0mky8XfJy0w3QXXRHCBDC6IpDx8=) 4: deip-a1nKqtxdR8MxNP4CLXk9DQ.roa (hash: MuDORlB5KKMApbLSzyMuwBEYboiHiJyqO3SnrsnY1ps=) 5: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=) 6: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=) 7: mcfFx0Wb6NuDWnlUvsxDmFga9i0.roa (hash: OdsGFptNtjlJ7JmhEzxm/t0Cz+2j+Ta4zs8y6b8C4bU=) 8: nrPQs8zaNxBymroioM8igUcwELI.roa (hash: VR7Hvj6PagX2e2gWWlhJoQowQbhnCL7ZdCxoWqsmQjg=) 9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:c1:4c:0a:8a:da:04:f0:25:87:cf:a0:ec:ac:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Dec 19 07:01:21 2025 GMT Not After : Dec 20 07:01:21 2025 GMT Subject: CN=3355cc5791c5290f002da527d11f08d0901d0154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:af:57:50:2e:ef:8f:77:e9:ca:7f:67:69:36: 50:18:ba:53:48:96:d8:f7:2d:0c:23:dc:e8:35:c0: dd:e5:a5:46:8b:c2:ce:ef:b4:91:3f:2b:dd:0a:af: 6f:48:b4:ae:b3:8d:a4:94:1c:46:05:18:dd:d8:33: 0e:78:fa:3b:2c:da:f5:b9:0b:ee:7d:b3:f0:23:51: db:78:93:5e:b2:4e:fa:c2:69:d1:df:73:78:0e:26: d8:01:19:a7:c6:7d:7d:0b:48:51:84:69:9d:c0:4d: 93:4a:be:c2:24:e6:a1:3b:c6:b6:0e:cb:a1:db:4b: 2c:9f:5a:5f:ef:8d:d6:8c:4e:2b:b4:30:6a:b1:93: 0f:a7:78:fd:e1:fa:41:4a:18:44:31:42:16:25:2c: 7d:b8:2a:17:5a:2e:17:4e:e4:04:a6:aa:9d:2c:2f: 18:cd:50:e7:ca:bb:72:f9:7e:6b:c3:e9:4c:39:29: b9:f3:98:b8:4b:34:b3:f3:40:32:de:8a:f5:a5:c4: 9c:5a:22:db:91:55:4d:87:30:49:02:7e:be:48:d7: 56:89:8a:a6:72:6b:d0:a5:27:ae:4f:95:0a:42:2e: b5:ae:0b:fd:82:58:f0:7e:ce:9c:78:d6:71:f1:da: 69:f2:cd:ff:e9:05:d0:bc:6e:11:e6:bc:df:3c:43: b6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:55:CC:57:91:C5:29:0F:00:2D:A5:27:D1:1F:08:D0:90:1D:01:54 X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:93:a5:c7:69:fa:cc:81:da:f6:d7:14:45:78:d8:4b:20:22: 51:ba:31:b6:1e:24:d9:63:7f:aa:5b:28:a3:e3:9e:6f:7a:bd: b0:83:51:b7:06:38:b4:f1:28:d9:8a:bc:78:83:46:3f:e7:85: 33:e0:41:ed:98:af:f1:dd:4e:4e:1a:56:79:b0:44:fb:af:ee: 5c:d5:ba:a7:18:d2:b5:ad:ff:1a:4a:58:6f:6c:bc:fa:72:f5: 08:46:77:38:a5:45:da:14:78:da:4e:47:9d:60:79:df:ec:5d: 81:32:99:2a:68:cd:3c:24:cc:75:7e:75:01:eb:86:40:d7:b5: 6a:d7:b2:4b:17:47:b0:63:3b:95:84:03:ad:22:2c:01:9a:81: 47:46:bf:5e:a3:e5:b4:61:24:7b:18:19:8b:40:b7:f9:0c:bc: ba:67:e8:99:1b:9e:40:90:c8:22:33:5e:17:d8:75:42:6b:8a: b4:a7:65:21:60:75:8e:70:ba:f1:8a:c5:6f:e6:fc:ca:e9:45: 40:f2:c2:49:93:55:6a:d9:8c:dd:0c:08:92:06:85:91:bb:c8: c7:d8:1a:9e:0b:e9:05:a8:d3:14:ab:10:fa:b3:f6:e7:d2:05: e8:17:5d:d4:04:ba:d2:39:d9:75:38:13:7c:f1:11:17:3c:8d: 4f:e6:6f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1acFMCoraBPAlh8+g7KzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjUxMjE5MDcwMTIxWhcNMjUxMjIwMDcwMTIxWjAzMTEwLwYDVQQD EygzMzU1Y2M1NzkxYzUyOTBmMDAyZGE1MjdkMTFmMDhkMDkwMWQwMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK9XUC7vj3fpyn9naTZQGLpTSJbY 9y0MI9zoNcDd5aVGi8LO77SRPyvdCq9vSLSus42klBxGBRjd2DMOePo7LNr1uQvu fbPwI1HbeJNesk76wmnR33N4DibYARmnxn19C0hRhGmdwE2TSr7CJOahO8a2Dsuh 20ssn1pf743WjE4rtDBqsZMPp3j94fpBShhEMUIWJSx9uCoXWi4XTuQEpqqdLC8Y zVDnyrty+X5rw+lMOSm585i4SzSz80Ay3or1pcScWiLbkVVNhzBJAn6+SNdWiYqm cmvQpSeuT5UKQi61rgv9gljwfs6ceNZx8dpp8s3/6QXQvG4R5rzfPEO23QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNVzFeRxSkPAC2lJ9EfCNCQHQFUMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlpOlx2n6 zIHa9tcURXjYSyAiUboxth4k2WN/qlsoo+Oeb3q9sINRtwY4tPEo2Yq8eINGP+eF M+BB7Ziv8d1OThpWebBE+6/uXNW6pxjSta3/GkpYb2y8+nL1CEZ3OKVF2hR42k5H nWB53+xdgTKZKmjNPCTMdX51AeuGQNe1ateySxdHsGM7lYQDrSIsAZqBR0a/XqPl tGEkexgZi0C3+Qy8umfomRueQJDIIjNeF9h1QmuKtKdlIWB1jnC68YrFb+b8yulF QPLCSZNVatmM3QwIkgaFkbvIx9gangvpBajTFKsQ+rP259IF6Bdd1AS60jnZdTgT fPERFzyNT+Zv1g== -----END CERTIFICATE-----Generated at Fri Dec 19 09:41:39 2025 by rpki-client