This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft File: WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json) Hash identifier: khZi78fHAsRgG7OSXKUvIIKSwhkC2fYxmtS9ZTwwX6E= Subject key identifier: D9:D7:6F:6E:BC:E3:5F:7C:CF:E0:01:69:97:71:83:89:84:36:C6:C6 Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Certificate serial: 019B424AB3CC12002B475396450C13F030D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft Manifest number: 1574 Signing time: Sun 21 Dec 2025 19:02:30 +0000 Manifest this update: Sun 21 Dec 2025 19:02:30 +0000 Manifest next update: Mon 22 Dec 2025 19:02:30 +0000 Files and hashes: 1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=) 2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=) 3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: F/KBcXNYCIfSs8asVhqFcfVsRkhDRuPHgWMY41ec/lI=) 4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=) 5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=) 6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:b3:cc:12:00:2b:47:53:96:45:0c:13:f0:30:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Validity Not Before: Dec 21 19:02:30 2025 GMT Not After : Dec 22 19:02:30 2025 GMT Subject: CN=d9d76f6ebce35f7ccfe00169977183898436c6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:9c:77:10:3c:96:6f:30:77:e4:ef:80:e7: 7f:15:41:03:f6:ea:80:15:7f:5b:0e:21:79:e4:5f: cc:f2:df:4e:f5:d1:37:bd:e7:39:38:8b:c7:e2:c3: 04:2e:5e:7f:db:4f:e8:6a:5f:f2:98:3e:fa:3a:cb: 41:c2:68:18:34:1e:e3:e9:ca:e6:55:07:0e:78:cf: 7a:8c:9d:b7:4f:b2:83:82:bd:b5:f5:8f:b6:4b:01: 47:04:f0:52:60:78:ed:61:c2:27:5c:1a:4f:b2:55: c1:5d:14:17:ae:bb:c4:22:56:97:2d:b0:3c:aa:b8: 94:21:48:19:aa:5b:09:aa:ce:90:d8:1f:01:ee:d3: 92:78:77:18:4e:6b:40:20:a5:44:72:f0:4f:03:a1: 1b:a4:f1:cc:5a:02:38:d7:ff:1c:69:16:5d:ea:c0: 6e:8e:c9:5e:5c:b6:52:08:b4:9b:a3:ff:42:a8:c2: 31:56:69:b9:82:b6:58:40:a2:27:fb:9a:30:b6:34: f9:b1:af:9a:b3:62:ee:54:64:2d:11:c7:c4:6a:a2: 73:58:9d:44:0c:a0:14:04:17:ff:81:e1:5f:b6:94: fc:48:54:d8:22:ea:ce:46:e9:b4:ab:6d:f6:8b:29: b0:2c:47:d9:e6:46:86:2c:58:e3:b6:d1:07:8e:c3: 1a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D7:6F:6E:BC:E3:5F:7C:CF:E0:01:69:97:71:83:89:84:36:C6:C6 X509v3 Authority Key Identifier: keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:15:f0:2e:f8:db:e8:b4:36:9a:df:62:43:9c:0f:09:1f:71: 18:e7:28:09:8b:e7:90:d7:96:64:b5:1c:dc:d9:f2:b6:74:6e: 15:9a:53:d3:b4:4f:1a:62:06:fe:a1:3c:5f:a7:48:a6:9c:75: b1:30:96:8e:48:e6:f8:a9:74:03:ae:11:0d:fe:71:fd:60:12: 00:1c:b7:a2:b5:18:85:2c:a6:e1:0e:d5:59:b0:d3:b5:f4:34: 19:42:d1:1d:3b:14:f7:15:4f:2d:e8:82:5c:3f:3b:70:0f:e2: 61:88:79:43:e4:ae:fd:09:50:73:9a:b3:3b:f4:ea:51:98:17: 84:83:c5:dc:37:3b:2c:f8:dc:63:e5:1f:74:e5:bc:80:c6:12: d4:68:fa:3a:7c:4f:f6:e6:d0:cb:f7:8c:38:ea:95:8f:bd:da: bf:2b:76:b7:e1:65:b1:3e:ec:17:c0:35:c5:f9:1b:ea:e6:33: 5e:84:2d:b8:af:f6:3c:af:4e:ee:99:e6:69:38:bc:45:52:33: 2e:37:28:d3:da:c4:2b:3b:5a:35:76:34:9e:41:2d:0b:d6:fd: 27:63:c1:b2:29:03:91:83:c1:dd:37:21:75:a0:90:50:52:6c: bd:37:90:b3:8c:02:83:6d:92:2f:7a:dd:9e:b1:40:19:a5:f8: 01:62:8e:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSrPMEgArR1OWRQwT8DDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk MzUyZWYwHhcNMjUxMjIxMTkwMjMwWhcNMjUxMjIyMTkwMjMwWjAzMTEwLwYDVQQD EyhkOWQ3NmY2ZWJjZTM1ZjdjY2ZlMDAxNjk5NzcxODM4OTg0MzZjNmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymGcdxA8lm8wd+TvgOd/FUED9uqA FX9bDiF55F/M8t9O9dE3vec5OIvH4sMELl5/20/oal/ymD76OstBwmgYNB7j6crm VQcOeM96jJ23T7KDgr219Y+2SwFHBPBSYHjtYcInXBpPslXBXRQXrrvEIlaXLbA8 qriUIUgZqlsJqs6Q2B8B7tOSeHcYTmtAIKVEcvBPA6EbpPHMWgI41/8caRZd6sBu jsleXLZSCLSbo/9CqMIxVmm5grZYQKIn+5owtjT5sa+as2LuVGQtEcfEaqJzWJ1E DKAUBBf/geFftpT8SFTYIurORum0q232iymwLEfZ5kaGLFjjttEHjsMaNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnXb2684198z+ABaZdxg4mENsbGMB8GA1UdIwQY MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct NmIwMDY1NTA4OTk2LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2 LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxXwLvjb 6LQ2mt9iQ5wPCR9xGOcoCYvnkNeWZLUc3NnytnRuFZpT07RPGmIG/qE8X6dIppx1 sTCWjkjm+Kl0A64RDf5x/WASABy3orUYhSym4Q7VWbDTtfQ0GULRHTsU9xVPLeiC XD87cA/iYYh5Q+Su/QlQc5qzO/TqUZgXhIPF3Dc7LPjcY+UfdOW8gMYS1Gj6OnxP 9ubQy/eMOOqVj73avyt2t+FlsT7sF8A1xfkb6uYzXoQtuK/2PK9O7pnmaTi8RVIz Ljco09rEKztaNXY0nkEtC9b9J2PBsikDkYPB3TchdaCQUFJsvTeQs4wCg22SL3rd nrFAGaX4AWKOhQ== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:55 2025 by rpki-client