This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json) Hash identifier: Ye+VHMLXgwqMz1nu8hRujAAuuEml6IjA55HGZezh9Os= Subject key identifier: B0:53:C9:23:7D:8A:AF:1B:A8:A8:C2:46:12:D5:3F:8B:2B:3D:FF:1F Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411 Certificate serial: 019B3A2233C3BCD277C94FBEF144A656E98C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft Manifest number: 1782 Signing time: Sat 20 Dec 2025 05:01:18 +0000 Manifest this update: Sat 20 Dec 2025 05:01:18 +0000 Manifest next update: Sun 21 Dec 2025 05:01:18 +0000 Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: nu9kyLD3pzHhBWkIE8cWD0ZGsrcK4hb7g8ej3/Uk1t8=) 2: a9JHCjYfw7Z6c79opyhmwTytJDE.roa (hash: YtP+XrFe44fVRI42n0stYBQvN0/zhE07g6u41GgESnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:33:c3:bc:d2:77:c9:4f:be:f1:44:a6:56:e9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411 Validity Not Before: Dec 20 05:01:18 2025 GMT Not After : Dec 21 05:01:18 2025 GMT Subject: CN=b053c9237d8aaf1ba8a8c24612d53f8b2b3dff1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7e:3e:3c:3d:d2:18:7c:73:14:4a:24:d1:1c: 1e:24:20:90:aa:9c:db:b6:8d:57:1f:51:00:cd:ec: 1d:05:43:eb:40:9e:65:82:cb:29:c6:21:f6:8b:24: c7:fb:56:ff:cb:53:ca:89:d3:c0:d7:57:57:5e:8c: 0c:c9:09:bf:e5:de:07:f2:e6:79:2a:c3:3e:e1:77: 97:c5:78:50:c9:e4:9a:dd:d1:0a:74:d9:da:ce:a9: 75:db:1b:00:9d:a8:62:34:85:dc:88:44:74:f2:1c: e4:c3:24:35:9c:7c:3d:dc:10:e5:83:bf:15:bb:75: f0:e3:70:07:c4:06:44:27:55:42:20:3a:de:8a:c5: 10:ac:87:fc:f8:a5:30:77:05:90:da:61:ad:5c:aa: 92:6b:f5:4b:86:14:d5:12:be:97:cb:f9:2a:d1:39: 7e:3f:11:4d:3c:27:63:20:ac:2c:98:80:28:f6:47: 25:a5:e6:df:5d:83:0c:2e:40:c5:6f:2d:49:80:0e: 75:35:18:3a:51:74:39:f6:ff:99:47:fb:02:eb:53: 06:61:b8:11:ff:f6:cd:3b:d9:c8:64:2c:48:ec:5c: 7b:b6:0a:9d:45:ba:3d:0d:59:6c:af:eb:ee:5a:88: 7f:aa:f3:db:ae:92:96:8b:87:a5:36:ac:84:8d:5a: 97:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:53:C9:23:7D:8A:AF:1B:A8:A8:C2:46:12:D5:3F:8B:2B:3D:FF:1F X509v3 Authority Key Identifier: keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3a:1d:ed:6d:7f:c8:28:a0:e4:44:fb:bd:0a:1c:d6:31:b1: 1c:c5:b2:9f:0c:94:70:84:41:3f:98:1e:25:ed:20:43:45:34: 8c:27:cc:1f:af:57:51:ca:00:ce:49:a7:2c:67:8d:0d:b6:e7: 4d:ed:d6:f3:fd:b6:fb:a7:77:94:2a:fd:58:66:d2:40:e7:fa: 8a:f0:0f:99:e4:97:9c:98:ce:15:c8:94:32:3a:7d:bb:30:42: ae:1a:56:45:28:79:17:f1:bf:f2:b8:fe:70:ca:81:b3:dd:48: ac:a4:a2:ae:db:44:67:0a:3c:1a:44:e9:3a:6e:39:0a:64:d2: e6:53:c8:b5:64:3b:3b:fa:b2:67:d3:66:9f:57:38:87:51:9d: 7e:0f:c1:86:bc:41:22:4d:b4:82:11:d1:54:ea:2a:d7:0c:cb: 09:a9:cd:96:a4:b8:a6:1a:6b:a9:38:98:07:e0:f4:f8:ed:9b: eb:9a:f5:d1:91:96:7e:ba:9b:35:7b:a0:72:a6:21:7b:f3:70: 29:c1:f0:49:2c:e4:9d:82:93:e4:a3:cb:37:3d:a6:cf:79:0d: 78:7d:68:2c:8f:91:6a:af:49:3c:35:f8:f0:d2:39:ca:d0:18: 86:2f:82:53:d2:d2:11:e1:d6:47:f8:27:81:8e:c9:d2:f6:fd: fb:d3:54:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IjPDvNJ3yU++8USmVumMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1 NzQ0MTEwHhcNMjUxMjIwMDUwMTE4WhcNMjUxMjIxMDUwMTE4WjAzMTEwLwYDVQQD EyhiMDUzYzkyMzdkOGFhZjFiYThhOGMyNDYxMmQ1M2Y4YjJiM2RmZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX4+PD3SGHxzFEok0RweJCCQqpzb to1XH1EAzewdBUPrQJ5lgsspxiH2iyTH+1b/y1PKidPA11dXXowMyQm/5d4H8uZ5 KsM+4XeXxXhQyeSa3dEKdNnazql12xsAnahiNIXciER08hzkwyQ1nHw93BDlg78V u3Xw43AHxAZEJ1VCIDreisUQrIf8+KUwdwWQ2mGtXKqSa/VLhhTVEr6Xy/kq0Tl+ PxFNPCdjIKwsmIAo9kclpebfXYMMLkDFby1JgA51NRg6UXQ59v+ZR/sC61MGYbgR //bNO9nIZCxI7Fx7tgqdRbo9DVlsr+vuWoh/qvPbrpKWi4elNqyEjVqXawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBTySN9iq8bqKjCRhLVP4srPf8fMB8GA1UdIwQY MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct ODliNWI2N2I3MjM0LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0 LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzod7W1/ yCig5ET7vQoc1jGxHMWynwyUcIRBP5geJe0gQ0U0jCfMH69XUcoAzkmnLGeNDbbn Te3W8/22+6d3lCr9WGbSQOf6ivAPmeSXnJjOFciUMjp9uzBCrhpWRSh5F/G/8rj+ cMqBs91IrKSirttEZwo8GkTpOm45CmTS5lPItWQ7O/qyZ9Nmn1c4h1Gdfg/BhrxB Ik20ghHRVOoq1wzLCanNlqS4phprqTiYB+D0+O2b65r10ZGWfrqbNXugcqYhe/Nw KcHwSSzknYKT5KPLNz2mz3kNeH1oLI+Raq9JPDX48NI5ytAYhi+CU9LSEeHWR/gn gY7J0vb9+9NUgw== -----END CERTIFICATE-----Generated at Sat Dec 20 12:44:02 2025 by rpki-client