This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json) Hash identifier: 11dqGpKdf1iLsKc9XZppTD7lwj98y6N3+5zaIVt4vAk= Subject key identifier: 71:4D:87:9A:B0:B8:47:2A:72:7D:15:70:5F:1E:19:68:C0:F1:E2:38 Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8 Certificate serial: 019B544FE5CB6918DEECE01E42FF898CB246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft Manifest number: 1565 Signing time: Thu 25 Dec 2025 07:01:20 +0000 Manifest this update: Thu 25 Dec 2025 07:01:20 +0000 Manifest next update: Fri 26 Dec 2025 07:01:20 +0000 Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=) 2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=) 3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: +ZOBt6GvS+YnKKRmDy3JdMTq2tdAYBqAmRfu75Plh4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:4f:e5:cb:69:18:de:ec:e0:1e:42:ff:89:8c:b2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Validity Not Before: Dec 25 07:01:20 2025 GMT Not After : Dec 26 07:01:20 2025 GMT Subject: CN=714d879ab0b8472a727d15705f1e1968c0f1e238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:15:03:f0:b3:82:00:3b:98:14:71:25:ea:32: e4:1b:ea:48:8c:d7:51:a0:35:b7:a8:3a:7c:0e:4b: de:38:34:87:2f:d7:91:e2:f8:b8:ed:0c:20:70:59: c4:d8:ab:23:9c:bf:55:51:39:6f:97:81:2f:b3:18: 1b:db:12:32:23:e1:53:1c:1d:57:b5:6f:9e:b1:23: fd:dd:e1:2b:0a:40:ee:ef:de:de:db:24:13:38:82: e5:0d:6e:af:31:bb:54:51:6c:e8:dc:5d:f7:80:7d: a2:fd:f0:78:f5:35:e7:e9:1f:0a:fc:d2:de:5c:f4: 5d:29:b5:29:74:76:0f:0d:2b:3c:89:1f:11:85:fb: aa:23:ec:18:63:b6:ca:09:9e:b1:ff:5c:f0:d4:89: 49:cb:1f:6a:38:4b:07:68:2a:e1:e3:d4:a3:bf:01: a4:c2:11:0f:a9:71:8e:52:ad:16:1f:5c:37:70:8a: 09:17:6b:d6:b3:81:56:66:c4:18:6c:f9:6f:df:2b: 8e:b8:35:84:ba:33:a5:2b:2d:fb:01:38:90:83:04: 2d:98:f6:28:62:7f:b8:70:de:74:91:c5:26:bd:bc: a6:0f:be:12:3d:c7:86:58:b0:4f:6e:ca:fc:fb:21: 11:81:08:3f:b0:e1:eb:da:95:54:ee:fc:10:12:6b: e0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4D:87:9A:B0:B8:47:2A:72:7D:15:70:5F:1E:19:68:C0:F1:E2:38 X509v3 Authority Key Identifier: keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:8e:7d:10:f9:15:68:99:2b:45:1c:b6:dc:94:0b:b6:2a:6b: 0a:4a:b8:64:c7:08:b7:f8:54:24:c8:56:b0:8b:eb:6d:03:e6: e7:43:de:6c:81:d7:88:e5:8d:14:b4:34:88:ba:81:6a:44:1b: 65:fa:eb:0f:26:8e:df:ae:29:01:f4:b4:10:9f:e3:40:f7:36: b3:b8:d2:e8:6b:5e:db:7c:7b:d7:44:e2:3e:49:e3:67:d0:99: d2:dd:d8:00:7e:d0:1e:54:a1:5b:2d:70:3e:cc:a7:dc:b7:31: 11:20:66:4d:6d:ec:86:c8:da:6c:f1:10:17:30:ef:11:a9:dd: 04:a6:7e:e1:3d:ec:6d:a0:d7:68:69:78:10:92:1a:f5:d1:b0: 1c:1b:18:53:29:be:45:3c:de:af:d4:5b:14:ae:c6:cf:f6:05: 71:e8:7a:a2:81:c7:a3:06:86:93:30:47:d1:16:15:53:88:a1: 0f:83:0e:d7:e2:11:8c:40:47:dd:f9:f2:2e:cb:28:1a:a6:4a: 10:3a:5c:ad:00:b9:02:23:d5:55:a7:fb:fe:28:78:df:1e:41: 6a:17:11:20:a8:ed:a6:ae:1c:56:54:e2:8a:4b:88:b0:a1:61: 80:d8:dc:f4:b4:75:68:bf:ef:f2:fd:7d:ba:91:6e:c5:cb:21: 46:66:2c:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUT+XLaRje7OAeQv+JjLJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5 YjNiYTgwHhcNMjUxMjI1MDcwMTIwWhcNMjUxMjI2MDcwMTIwWjAzMTEwLwYDVQQD Eyg3MTRkODc5YWIwYjg0NzJhNzI3ZDE1NzA1ZjFlMTk2OGMwZjFlMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBUD8LOCADuYFHEl6jLkG+pIjNdR oDW3qDp8DkveODSHL9eR4vi47QwgcFnE2KsjnL9VUTlvl4Evsxgb2xIyI+FTHB1X tW+esSP93eErCkDu797e2yQTOILlDW6vMbtUUWzo3F33gH2i/fB49TXn6R8K/NLe XPRdKbUpdHYPDSs8iR8RhfuqI+wYY7bKCZ6x/1zw1IlJyx9qOEsHaCrh49SjvwGk whEPqXGOUq0WH1w3cIoJF2vWs4FWZsQYbPlv3yuOuDWEujOlKy37ATiQgwQtmPYo Yn+4cN50kcUmvbymD74SPceGWLBPbsr8+yERgQg/sOHr2pVU7vwQEmvgSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFNh5qwuEcqcn0VcF8eGWjA8eI4MB8GA1UdIwQY MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAho59EPkV aJkrRRy23JQLtiprCkq4ZMcIt/hUJMhWsIvrbQPm50PebIHXiOWNFLQ0iLqBakQb ZfrrDyaO364pAfS0EJ/jQPc2s7jS6Gte23x710TiPknjZ9CZ0t3YAH7QHlShWy1w Psyn3LcxESBmTW3shsjabPEQFzDvEandBKZ+4T3sbaDXaGl4EJIa9dGwHBsYUym+ RTzer9RbFK7Gz/YFceh6ooHHowaGkzBH0RYVU4ihD4MO1+IRjEBH3fnyLssoGqZK EDpcrQC5AiPVVaf7/ih43x5BahcRIKjtpq4cVlTiikuIsKFhgNjc9LR1aL/v8v19 upFuxcshRmYsOg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:18:04 2025 by rpki-client