This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft File: WP3E4ivstTWhxX9LjcRBtTMWd-M.mft (raw, json) Hash identifier: 63FeE/faTLJl95pZylF4iiWi0dWyJiSNCeValMAZlrg= Subject key identifier: 44:F0:F5:4E:92:64:27:97:78:7F:BD:9D:02:78:2B:C4:AC:AE:33:0F Authority key identifier: 58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3 Certificate issuer: /CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3 Certificate serial: 019B43258E6B5E4ABF93FF6E868B2CDFD2F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft Manifest number: 14CE Signing time: Sun 21 Dec 2025 23:01:33 +0000 Manifest this update: Sun 21 Dec 2025 23:01:33 +0000 Manifest next update: Mon 22 Dec 2025 23:01:33 +0000 Files and hashes: 1: WP3E4ivstTWhxX9LjcRBtTMWd-M.crl (hash: Jm1DDOY/boetFZ5WwoZ/7UFp3GSMOcvSkZqGLA36gZM=) 2: taQy9HpaIR-B5wNPU72M0d1f0co.roa (hash: GppUCw9ptPGs5O818rWaJoPW+Ulu8uS+JiuUV5bM6v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:8e:6b:5e:4a:bf:93:ff:6e:86:8b:2c:df:d2:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58fdc4e22becb535a1c57f4b8dc441b5331677e3 Validity Not Before: Dec 21 23:01:33 2025 GMT Not After : Dec 22 23:01:33 2025 GMT Subject: CN=44f0f54e92642797787fbd9d02782bc4acae330f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:19:23:5d:19:68:f6:54:31:f8:f3:f8:0a:05: fa:7b:82:35:78:a4:ec:e6:a9:b6:7d:e5:6e:f0:a9: e5:45:42:77:5e:4d:c4:30:3a:06:42:7e:31:ec:24: 6f:29:3c:81:cd:00:7d:ab:17:0d:2c:e3:e8:a4:f1: 79:7f:5a:fe:d3:2a:9a:b0:6d:14:2e:3b:b0:8e:4d: 46:ef:35:17:0e:36:b1:de:06:52:30:e4:d4:a7:5f: 04:c9:78:b6:bd:02:c2:34:43:66:c9:86:5f:4d:a9: 47:48:10:78:a7:37:fb:8b:e7:5c:dd:b1:d5:80:d3: e8:57:5e:bc:df:13:3f:83:72:41:3c:6f:63:dc:34: df:78:05:47:19:a6:14:6f:65:43:3f:34:1b:b1:4b: ab:7a:08:10:a0:71:b1:36:e9:03:85:54:70:25:e6: fb:31:96:a3:9c:87:7f:78:90:ca:9d:7a:48:c1:ec: 27:8a:7b:a6:52:87:ae:7c:e9:dc:a7:03:ed:dd:96: 9d:d7:13:45:58:ad:14:fc:e1:5c:c3:fe:0c:98:5a: 07:08:44:e1:22:3b:82:67:74:4c:f5:ff:a2:03:67: 9a:c7:2b:bd:b2:bb:b6:f7:16:96:6d:23:a9:75:26: af:e8:43:85:24:82:79:1f:42:1c:d5:fb:54:9d:da: 04:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F0:F5:4E:92:64:27:97:78:7F:BD:9D:02:78:2B:C4:AC:AE:33:0F X509v3 Authority Key Identifier: keyid:58:FD:C4:E2:2B:EC:B5:35:A1:C5:7F:4B:8D:C4:41:B5:33:16:77:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP3E4ivstTWhxX9LjcRBtTMWd-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ef060c-c726-4b99-8360-b53f27130d78/1/WP3E4ivstTWhxX9LjcRBtTMWd-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:f4:6e:82:40:f0:7d:d9:7c:8a:d3:e3:3a:a9:e3:31:ca:43: 18:40:fa:0e:f7:d9:63:07:f0:ab:18:a2:dd:43:7d:a3:09:df: 2e:83:22:e5:cc:70:fb:ec:ba:72:7d:2a:60:c9:d1:ae:82:2f: af:b2:7d:2f:40:5e:3c:12:91:90:22:35:f6:48:76:fc:a3:b6: a4:7c:1f:21:f6:b1:31:10:e3:df:a5:69:19:d5:ee:3c:ad:66: 52:d5:c4:fa:a8:19:65:06:ce:65:bf:28:d4:9a:a0:af:4a:67: 7b:ce:e6:ea:d1:ba:2d:54:90:04:58:36:6c:80:47:24:b4:fa: 4a:42:ef:4e:a9:58:0b:48:c7:3c:65:16:9c:c2:5c:f3:5f:48: 40:ee:5c:99:45:04:84:99:96:83:fa:30:a6:c8:aa:9f:66:b5: 95:1c:de:57:d3:d4:b1:d9:e7:09:09:ff:4f:e1:e0:45:ce:ca: 69:c7:f8:6a:60:f8:87:bd:fc:96:9f:42:bf:aa:69:be:ca:ca: f2:d9:58:2e:fb:e3:d8:7b:e8:98:64:07:b3:47:22:66:59:55: 50:45:87:b1:1d:8a:54:a8:b0:70:4b:45:39:f2:65:d8:46:a7: 13:45:54:26:b2:34:93:f5:f7:56:f1:d9:38:3f:47:1b:16:71: 61:c5:fc:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJY5rXkq/k/9uhoss39L1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZmRjNGUyMmJlY2I1MzVhMWM1N2Y0YjhkYzQ0MWI1MzMx Njc3ZTMwHhcNMjUxMjIxMjMwMTMzWhcNMjUxMjIyMjMwMTMzWjAzMTEwLwYDVQQD Eyg0NGYwZjU0ZTkyNjQyNzk3Nzg3ZmJkOWQwMjc4MmJjNGFjYWUzMzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRkjXRlo9lQx+PP4CgX6e4I1eKTs 5qm2feVu8KnlRUJ3Xk3EMDoGQn4x7CRvKTyBzQB9qxcNLOPopPF5f1r+0yqasG0U Ljuwjk1G7zUXDjax3gZSMOTUp18EyXi2vQLCNENmyYZfTalHSBB4pzf7i+dc3bHV gNPoV1683xM/g3JBPG9j3DTfeAVHGaYUb2VDPzQbsUureggQoHGxNukDhVRwJeb7 MZajnId/eJDKnXpIwewninumUoeufOncpwPt3Zad1xNFWK0U/OFcw/4MmFoHCETh IjuCZ3RM9f+iA2eaxyu9sru29xaWbSOpdSav6EOFJIJ5H0Ic1ftUndoE0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFETw9U6SZCeXeH+9nQJ4K8SsrjMPMB8GA1UdIwQY MBaAFFj9xOIr7LU1ocV/S43EQbUzFnfjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lZjA2MGMtYzcyNi00Yjk5LTgzNjAt YjUzZjI3MTMwZDc4LzEvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lZjA2MGMtYzcyNi00Yjk5LTgzNjAtYjUzZjI3MTMwZDc4 LzEvV1AzRTRpdnN0VFdoeFg5TGpjUkJ0VE1XZC1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk/RugkDw fdl8itPjOqnjMcpDGED6DvfZYwfwqxii3UN9ownfLoMi5cxw++y6cn0qYMnRroIv r7J9L0BePBKRkCI19kh2/KO2pHwfIfaxMRDj36VpGdXuPK1mUtXE+qgZZQbOZb8o 1Jqgr0pne87m6tG6LVSQBFg2bIBHJLT6SkLvTqlYC0jHPGUWnMJc819IQO5cmUUE hJmWg/owpsiqn2a1lRzeV9PUsdnnCQn/T+HgRc7Kacf4amD4h738lp9Cv6ppvsrK 8tlYLvvj2HvomGQHs0ciZllVUEWHsR2KVKiwcEtFOfJl2EanE0VUJrI0k/X3VvHZ OD9HGxZxYcX82Q== -----END CERTIFICATE-----Generated at Mon Dec 22 01:56:30 2025 by rpki-client