This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json) Hash identifier: ovCVOymcyjQMhytekesX4Z5dn2i9Blt0GpGcCPwxbYM= Subject key identifier: 80:F2:06:52:4E:D2:F4:3C:09:FC:82:D4:61:74:C5:A5:85:5A:47:BA Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403 Certificate serial: 019B3D22EFC039DC2256200D7F6CB7709A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft Manifest number: 0967 Signing time: Sat 20 Dec 2025 19:00:58 +0000 Manifest this update: Sat 20 Dec 2025 19:00:58 +0000 Manifest next update: Sun 21 Dec 2025 19:00:58 +0000 Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: cMu33v0Ri7qOCeXFnL22+pPbmGY25wXaUWJHOXLBmHc=) 2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=) 3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:ef:c0:39:dc:22:56:20:0d:7f:6c:b7:70:9a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403 Validity Not Before: Dec 20 19:00:58 2025 GMT Not After : Dec 21 19:00:58 2025 GMT Subject: CN=80f206524ed2f43c09fc82d46174c5a5855a47ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:32:18:ed:51:65:c9:a8:7e:f5:17:67:2a:73: 66:a2:62:43:d1:c4:c6:4c:9b:c0:25:fe:0d:06:9f: ea:86:9a:4a:71:cf:6c:98:bb:24:c0:a9:79:2f:c2: f7:ca:11:3a:55:80:91:4a:63:60:c5:94:20:32:34: cd:c9:e0:c1:71:50:29:e6:a7:4b:47:e3:fd:07:34: e2:05:1d:89:1e:67:12:1b:6c:d4:06:75:ba:01:bc: d5:8f:e7:e9:f3:e6:38:ed:9f:27:4f:74:4f:b8:f5: 7d:b5:ed:97:58:2b:02:02:96:92:6a:e4:53:ab:a2: b6:a5:e6:18:50:e4:79:3d:6f:fc:88:77:bc:27:f8: 7d:0a:94:e1:4d:1d:0e:32:04:cb:c6:cd:0b:4f:67: 0d:45:51:80:83:7f:7b:79:b9:3b:b9:53:46:99:3c: 82:a4:d4:51:db:93:da:d7:66:e2:82:1c:85:04:0c: 87:68:29:6f:37:58:2f:54:9a:cc:f4:39:34:8e:0a: 36:9d:06:6a:1f:6d:d4:aa:ba:65:48:ed:5e:ff:a6: b0:d4:9a:e1:90:f6:10:1d:b8:d7:e9:78:b4:fb:1c: fa:63:85:3d:05:3d:04:f6:ac:ad:05:10:ae:bf:eb: 02:f3:e6:a7:21:b2:f3:ec:fc:45:b9:ab:b3:18:83: 6a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F2:06:52:4E:D2:F4:3C:09:FC:82:D4:61:74:C5:A5:85:5A:47:BA X509v3 Authority Key Identifier: keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:3e:4f:a4:96:5a:99:1a:21:ce:2b:cf:4a:64:32:2d:73:f0: 9f:89:6d:18:63:29:2f:dc:c7:af:19:6c:32:09:fe:53:0a:d8: 13:94:7b:f2:f5:d3:92:b7:da:20:a5:45:82:3d:1c:1b:49:02: e0:6c:b9:7e:21:2a:b1:16:ea:74:11:b7:6e:cc:1d:46:5a:77: 4c:6c:78:85:20:fd:ba:b1:5d:8f:2b:e7:af:74:6a:f4:79:5c: aa:4a:06:02:f1:20:21:ba:63:6e:3b:f7:7c:a8:a7:21:75:dc: f7:01:81:75:67:85:3b:af:0f:f0:96:c3:6f:31:69:0d:cc:de: 73:eb:38:e5:83:44:47:da:67:c3:ac:db:d3:6c:0a:6c:e5:63: 6d:13:47:e2:d8:c1:fc:93:31:07:17:8b:e6:a2:13:2c:3c:b1: 04:12:d0:38:ea:3a:7b:3c:6e:84:65:7d:2a:5b:c0:c4:45:a7: 9f:05:65:53:92:25:80:92:f0:9a:ef:24:46:75:aa:b1:d6:04: b2:93:a0:ec:25:74:2d:29:69:c2:6c:20:5e:ef:92:01:f9:6e: a7:16:8a:d9:98:50:8e:34:95:ca:5b:c7:0d:c8:ba:b8:ca:e1: d2:dd:df:f8:7d:5d:54:59:cc:5e:b2:5a:93:5d:97:b3:2a:e3: 08:9e:30:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Iu/AOdwiViANf2y3cJpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx ODk0MDMwHhcNMjUxMjIwMTkwMDU4WhcNMjUxMjIxMTkwMDU4WjAzMTEwLwYDVQQD Eyg4MGYyMDY1MjRlZDJmNDNjMDlmYzgyZDQ2MTc0YzVhNTg1NWE0N2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjIY7VFlyah+9RdnKnNmomJD0cTG TJvAJf4NBp/qhppKcc9smLskwKl5L8L3yhE6VYCRSmNgxZQgMjTNyeDBcVAp5qdL R+P9BzTiBR2JHmcSG2zUBnW6AbzVj+fp8+Y47Z8nT3RPuPV9te2XWCsCApaSauRT q6K2peYYUOR5PW/8iHe8J/h9CpThTR0OMgTLxs0LT2cNRVGAg397ebk7uVNGmTyC pNRR25Pa12bighyFBAyHaClvN1gvVJrM9Dk0jgo2nQZqH23UqrplSO1e/6aw1Jrh kPYQHbjX6Xi0+xz6Y4U9BT0E9qytBRCuv+sC8+anIbLz7PxFuauzGINqMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDyBlJO0vQ8CfyC1GF0xaWFWke6MB8GA1UdIwQY MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt Y2IxNjhhZmRiMzQzLzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWD5PpJZa mRohzivPSmQyLXPwn4ltGGMpL9zHrxlsMgn+UwrYE5R78vXTkrfaIKVFgj0cG0kC 4Gy5fiEqsRbqdBG3bswdRlp3TGx4hSD9urFdjyvnr3Rq9HlcqkoGAvEgIbpjbjv3 fKinIXXc9wGBdWeFO68P8JbDbzFpDczec+s45YNER9pnw6zb02wKbOVjbRNH4tjB /JMxBxeL5qITLDyxBBLQOOo6ezxuhGV9KlvAxEWnnwVlU5IlgJLwmu8kRnWqsdYE spOg7CV0LSlpwmwgXu+SAflupxaK2ZhQjjSVylvHDci6uMrh0t3f+H1dVFnMXrJa k12XsyrjCJ4wHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:18:20 2025 by rpki-client