This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft File: WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json) Hash identifier: qBbsm66iUnP92BdLWAFDKjPf/Qj7Yi+mTB06yBQRISo= Subject key identifier: 5B:9E:83:EC:4E:FC:50:43:BB:FF:AC:37:28:48:13:69:65:61:75:EB Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A Certificate issuer: /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a Certificate serial: 019B5D535966C34F4F7A87C7D8838CDACF24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft Manifest number: 0891 Signing time: Sat 27 Dec 2025 01:01:42 +0000 Manifest this update: Sat 27 Dec 2025 01:01:42 +0000 Manifest next update: Sun 28 Dec 2025 01:01:42 +0000 Files and hashes: 1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: VWgNo/0l4o6bfvPQtf4Fm2aAHr4zXCmRplKvR49WmT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:59:66:c3:4f:4f:7a:87:c7:d8:83:8c:da:cf:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a Validity Not Before: Dec 27 01:01:42 2025 GMT Not After : Dec 28 01:01:42 2025 GMT Subject: CN=5b9e83ec4efc5043bbffac3728481369656175eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:fb:e4:e0:37:86:4a:ab:29:bf:e0:e7:ae:00: 79:f0:cf:75:d8:1b:9c:56:e7:d4:fd:84:49:98:cd: f4:3c:d7:70:2f:18:0f:bc:79:89:42:27:df:e8:a8: fd:51:9b:5e:84:f1:fd:38:26:42:a0:1b:11:92:2e: 11:0d:f5:61:ed:6f:48:2d:19:fd:c8:bb:75:79:07: d4:1e:de:37:db:65:24:04:b6:0f:e2:e4:46:5e:74: 03:cd:95:61:e9:10:70:57:df:d8:ac:40:ac:e6:63: ca:af:83:29:10:c7:82:bc:3b:0a:35:87:e0:b1:55: bb:ef:10:16:bb:f6:9f:a4:d6:bd:c9:13:fb:1d:af: c9:22:9a:43:4a:9f:7f:74:6b:1a:6a:99:7b:d9:b8: b0:8f:fe:14:d6:ad:11:8b:6c:30:bb:ed:a6:9c:49: fd:f8:74:f0:cd:bd:6b:98:36:20:01:9a:b8:57:dd: 00:85:20:f0:86:f5:01:16:99:bf:51:87:7e:6e:28: 4f:04:2d:c6:03:7f:f5:e1:f9:58:30:4b:1e:65:25: 9f:22:58:88:bb:ca:1d:c2:e9:83:8d:3d:4c:4b:e9: c7:ea:27:99:b1:cc:b3:ce:bc:7d:7f:b8:18:e4:21: f6:58:c7:09:85:fb:3f:07:90:13:13:f0:35:3d:42: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9E:83:EC:4E:FC:50:43:BB:FF:AC:37:28:48:13:69:65:61:75:EB X509v3 Authority Key Identifier: keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:3b:f9:17:ee:e1:03:ae:cb:9d:e6:d7:88:0a:70:15:49:e1: 3b:8a:65:ea:5f:7d:1e:9f:f3:79:b4:cd:e8:fd:12:cf:7f:8b: 32:7a:53:b6:2a:93:30:5d:10:09:0c:b8:65:00:09:5c:4e:ca: 52:bf:3e:e1:96:72:8b:a8:1c:34:56:6f:9f:01:7c:47:e3:01: 47:97:d1:c5:3e:a0:e2:21:0c:05:e1:90:77:f4:d2:e4:be:78: d2:6f:ea:92:c2:f5:05:ff:a0:27:85:26:c2:75:fa:9b:e8:8c: 80:60:04:c2:a7:d2:2f:2b:76:d1:ca:6d:34:d8:13:97:eb:29: da:be:e4:fd:6c:50:2f:7c:6b:c9:a7:cd:80:34:41:9e:29:f0: 64:d3:ef:31:1d:20:08:71:33:6a:67:97:26:9d:d4:51:c9:c7: 15:0d:1a:cd:d4:ee:d1:52:f2:a1:4d:12:1f:53:f7:55:80:56: 87:ef:06:dd:66:9f:43:eb:f9:4b:6b:b5:f7:c1:7f:49:d5:de: c7:b4:1e:a4:36:c3:09:2f:63:79:8b:69:50:d4:3c:6b:63:3d: dc:00:2e:f8:95:1a:7b:94:68:93:92:fa:d2:a4:23:8c:f6:a7: d2:cc:6b:e1:ad:36:a6:80:be:2f:1d:79:4b:f3:ef:11:c6:62: 48:80:ff:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdU1lmw09PeofH2IOM2s8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZThlY2JlNjk1NTEyZGE0ZTBmMDJiNmRjMGU3YmRhOTYw ZGMzM2EwHhcNMjUxMjI3MDEwMTQyWhcNMjUxMjI4MDEwMTQyWjAzMTEwLwYDVQQD Eyg1YjllODNlYzRlZmM1MDQzYmJmZmFjMzcyODQ4MTM2OTY1NjE3NWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vvk4DeGSqspv+DnrgB58M912Buc VufU/YRJmM30PNdwLxgPvHmJQiff6Kj9UZtehPH9OCZCoBsRki4RDfVh7W9ILRn9 yLt1eQfUHt4322UkBLYP4uRGXnQDzZVh6RBwV9/YrECs5mPKr4MpEMeCvDsKNYfg sVW77xAWu/afpNa9yRP7Ha/JIppDSp9/dGsaapl72biwj/4U1q0Ri2wwu+2mnEn9 +HTwzb1rmDYgAZq4V90AhSDwhvUBFpm/UYd+bihPBC3GA3/14flYMEseZSWfIliI u8odwumDjT1MS+nH6ieZscyzzrx9f7gY5CH2WMcJhfs/B5ATE/A1PUJ7VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFueg+xO/FBDu/+sNyhIE2llYXXrMB8GA1UdIwQY MBaAFFro7L5pVRLaTg8CttwOe9qWDcM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMjdhM2ItYWNmOC00NjY4LTk4OWYt ODNjZjQ2Njg5Mzc1LzEvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iMjdhM2ItYWNmOC00NjY4LTk4OWYtODNjZjQ2Njg5Mzc1 LzEvV3Vqc3ZtbFZFdHBPRHdLMjNBNTcycFlOd3pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTv5F+7h A67LnebXiApwFUnhO4pl6l99Hp/zebTN6P0Sz3+LMnpTtiqTMF0QCQy4ZQAJXE7K Ur8+4ZZyi6gcNFZvnwF8R+MBR5fRxT6g4iEMBeGQd/TS5L540m/qksL1Bf+gJ4Um wnX6m+iMgGAEwqfSLyt20cptNNgTl+sp2r7k/WxQL3xryafNgDRBninwZNPvMR0g CHEzameXJp3UUcnHFQ0azdTu0VLyoU0SH1P3VYBWh+8G3WafQ+v5S2u198F/SdXe x7QepDbDCS9jeYtpUNQ8a2M93AAu+JUae5Rok5L60qQjjPan0sxr4a02poC+Lx15 S/PvEcZiSID/HA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:48:00 2025 by rpki-client