This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json) Hash identifier: bQvjYgBNvPRm5DnXMxQu+lLyv2fDrqYX3PRIUNbGqDM= Subject key identifier: 96:DF:1F:CF:2F:FA:C6:C3:9B:40:50:AD:ED:8E:32:DA:96:F7:95:83 Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910 Certificate serial: 019B6768802E4C7687AC97E49D15261617D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft Manifest number: 179B Signing time: Mon 29 Dec 2025 00:01:00 +0000 Manifest this update: Mon 29 Dec 2025 00:01:00 +0000 Manifest next update: Tue 30 Dec 2025 00:01:00 +0000 Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: ibmGB74EsZOp6aSTa41Yt7r2LIMgZ4mPtABTN3uuvLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:80:2e:4c:76:87:ac:97:e4:9d:15:26:16:17:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910 Validity Not Before: Dec 29 00:01:00 2025 GMT Not After : Dec 30 00:01:00 2025 GMT Subject: CN=96df1fcf2ffac6c39b4050aded8e32da96f79583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f8:79:e8:7c:cb:5a:6d:e0:3c:29:c7:99:76: f3:1a:0e:9b:20:67:5e:c1:91:aa:e8:ff:e0:97:b6: 08:47:2f:b6:bd:b8:a7:c8:e7:9e:38:b8:7b:5a:2e: 7e:8f:58:5f:7c:7f:67:f7:8e:79:a5:61:ae:18:fd: ea:c7:27:f6:e2:f7:69:22:a2:d5:bf:6a:32:cc:4f: 31:4d:6a:ea:08:e0:0f:7d:d7:b2:1b:bc:95:f5:83: 77:e9:6f:18:4c:3f:89:4b:1e:a5:c2:ee:db:4f:b2: 52:e4:62:df:7e:fa:d6:a0:bb:d3:30:a3:ff:bc:98: 81:a1:9c:89:58:fc:dc:f1:a5:81:60:04:2a:ca:f2: a9:41:b8:3c:e3:01:6d:38:e3:71:f1:19:1f:64:bf: ec:96:76:b7:6d:74:9a:55:59:ce:ca:cd:43:19:18: 68:2d:f6:de:ea:3d:b4:c7:b5:d1:be:2a:4b:db:45: 12:11:53:4f:42:ef:6c:9d:0e:f5:14:51:f8:17:a3: 35:8b:a8:ef:51:43:37:e9:8f:f8:ca:d2:af:bd:b3: f6:75:50:21:36:50:60:96:ce:53:9a:a2:8a:91:d6: 54:05:51:ac:5b:17:e5:ec:07:f5:f7:63:37:cc:ee: 5b:fa:b4:2e:95:a8:ea:76:cf:68:92:aa:73:de:af: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:1F:CF:2F:FA:C6:C3:9B:40:50:AD:ED:8E:32:DA:96:F7:95:83 X509v3 Authority Key Identifier: keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:97:12:50:4c:19:c4:da:a1:d7:8b:c8:2a:74:c9:9a:62:24: 2c:69:65:92:c0:02:63:d9:b8:7b:17:f7:72:b5:f0:42:8e:c1: 80:65:5c:20:98:d5:e8:95:d3:4a:5b:e7:7f:c6:64:80:9b:8d: a1:94:ef:e1:70:1e:d7:48:0d:cb:52:fd:b0:1d:aa:3b:ad:1c: 17:ef:20:88:8d:fa:6c:42:5f:c4:de:31:d1:5b:ed:9b:92:4e: 5c:47:db:59:50:1f:47:de:76:5e:16:e0:b8:cb:20:45:61:c1: 1b:0c:29:69:e4:1f:9d:44:cf:60:d2:cf:20:5c:ad:f3:6c:96: 36:0f:12:4a:8e:1a:26:5c:58:12:c9:b1:e6:b5:da:5f:6b:96: f4:c5:95:92:00:fa:39:3f:41:d1:1f:75:8c:f4:e1:68:0e:bf: 2d:12:6c:31:41:14:34:05:2e:8f:57:2b:c3:db:d0:9c:c6:12: dc:14:7c:75:6f:90:bc:79:ae:28:76:f7:71:cb:1d:5f:9d:14: d7:4d:d2:5b:b8:34:9c:a8:ee:f9:99:75:4c:71:99:77:a7:82: d8:93:01:75:97:b1:11:fb:58:a7:08:82:ab:60:1f:18:39:c1: 35:22:50:5e:a4:49:31:d1:0d:07:e5:64:e7:17:bd:79:60:b2: b7:e3:75:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaIAuTHaHrJfknRUmFhfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Mjg3NTEzZjQ5ZWIxNDA4ZWU0MWIyODFjOGIyNzczMzA3 YTg5MTAwHhcNMjUxMjI5MDAwMTAwWhcNMjUxMjMwMDAwMTAwWjAzMTEwLwYDVQQD Eyg5NmRmMWZjZjJmZmFjNmMzOWI0MDUwYWRlZDhlMzJkYTk2Zjc5NTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPh56HzLWm3gPCnHmXbzGg6bIGde wZGq6P/gl7YIRy+2vbinyOeeOLh7Wi5+j1hffH9n9455pWGuGP3qxyf24vdpIqLV v2oyzE8xTWrqCOAPfdeyG7yV9YN36W8YTD+JSx6lwu7bT7JS5GLffvrWoLvTMKP/ vJiBoZyJWPzc8aWBYAQqyvKpQbg84wFtOONx8RkfZL/slna3bXSaVVnOys1DGRho Lfbe6j20x7XRvipL20USEVNPQu9snQ71FFH4F6M1i6jvUUM36Y/4ytKvvbP2dVAh NlBgls5TmqKKkdZUBVGsWxfl7Af192M3zO5b+rQulajqds9okqpz3q9tqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbfH88v+sbDm0BQre2OMtqW95WDMB8GA1UdIwQY MBaAFFkodRP0nrFAjuQbKByLJ3MweokQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEt ODhjZWMyZjk1NTEzLzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEtODhjZWMyZjk1NTEz LzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZcSUEwZ xNqh14vIKnTJmmIkLGllksACY9m4exf3crXwQo7BgGVcIJjV6JXTSlvnf8ZkgJuN oZTv4XAe10gNy1L9sB2qO60cF+8giI36bEJfxN4x0Vvtm5JOXEfbWVAfR952Xhbg uMsgRWHBGwwpaeQfnUTPYNLPIFyt82yWNg8SSo4aJlxYEsmx5rXaX2uW9MWVkgD6 OT9B0R91jPThaA6/LRJsMUEUNAUuj1crw9vQnMYS3BR8dW+QvHmuKHb3ccsdX50U 103SW7g0nKju+Zl1THGZd6eC2JMBdZexEftYpwiCq2AfGDnBNSJQXqRJMdENB+Vk 5xe9eWCyt+N1WA== -----END CERTIFICATE-----Generated at Mon Dec 29 05:26:32 2025 by rpki-client