This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json) Hash identifier: S/SW0qqJ18tsRgqdPkuozrfTBlWcA3XoAAh2qZ6RKJc= Subject key identifier: 48:31:FB:0E:88:FF:37:03:56:FC:F9:17:E1:CB:22:79:98:8E:81:0E Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Certificate serial: 019B3C7DC1DDE8E486ED30404AFE20FA4901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:00:33 +0000 Manifest this update: Sat 20 Dec 2025 16:00:33 +0000 Manifest next update: Sun 21 Dec 2025 16:00:33 +0000 Files and hashes: 1: KyLINVTTqdvXuj7Fj90bgruawzY.roa (hash: cok5H5wGuOmXEJz7bKUxFi+mFBkwx9emz6VKC+7X5HQ=) 2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: BdwHHSPidkkP08MzEirriEp75P42bzdt4ue02zz0aiI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:c1:dd:e8:e4:86:ed:30:40:4a:fe:20:fa:49:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Validity Not Before: Dec 20 16:00:33 2025 GMT Not After : Dec 21 16:00:33 2025 GMT Subject: CN=4831fb0e88ff370356fcf917e1cb2279988e810e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:58:89:8a:d9:ee:e0:8f:d7:90:56:6e:0f:02: fa:af:02:2d:47:7f:e8:e4:1f:13:e6:50:22:34:6a: 64:51:4d:91:4e:20:e2:8f:64:5c:a0:ac:7e:bd:12: 6e:9b:63:12:55:3a:3c:46:cd:60:b5:98:a4:da:bc: f8:ac:5e:c2:a2:3c:ae:ce:0e:9a:42:d3:a2:86:9c: 6b:55:1b:23:4c:53:59:5f:00:29:5a:4b:ba:ca:a6: 3a:92:9b:57:9f:00:42:45:d0:d9:db:96:ec:ed:55: bb:94:85:5a:4e:a7:06:37:25:3b:22:0e:46:9e:4b: 96:78:7f:bd:45:1b:f9:e1:88:0a:6e:2f:d2:d6:49: 1c:04:fb:a6:76:22:57:59:fa:a5:49:07:da:6b:bc: 1c:60:ac:61:00:6d:a1:03:de:97:99:e8:fb:f5:b9: 18:a2:27:b5:08:ea:d6:e1:cb:38:2b:68:4e:c0:ff: 9c:cb:bc:be:28:61:80:0d:d8:16:81:f4:87:e9:d1: 55:d8:ca:2f:b4:d2:7f:38:48:d9:b4:ce:9e:22:e1: 16:b2:43:ed:2a:18:85:7c:55:66:0b:83:1b:fe:ba: e5:6f:bc:23:c5:7b:83:de:a6:b7:42:90:93:7f:80: 05:1c:c3:de:67:38:b6:72:b5:b7:72:6a:93:49:c6: c8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:31:FB:0E:88:FF:37:03:56:FC:F9:17:E1:CB:22:79:98:8E:81:0E X509v3 Authority Key Identifier: keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:85:cc:27:69:2a:ac:6f:8b:02:61:13:34:47:be:05:fa:ef: 80:92:f9:d2:f9:54:39:37:bc:91:23:95:39:6d:35:da:d1:b5: 12:aa:da:8e:4c:8b:47:48:0a:be:70:a5:b8:a1:b1:bf:0f:35: 1a:29:33:0f:97:77:a3:2d:44:81:27:18:33:26:bd:79:ff:3a: cb:22:23:d5:e4:04:fe:85:d1:fd:dc:99:83:6e:1b:b9:cd:b8: f7:d8:63:72:86:bc:a8:a2:49:24:cb:55:15:b5:a5:50:91:6a: 86:14:8e:dc:d9:70:d5:bd:d5:26:8c:af:ee:7e:17:b3:73:83: cc:fc:21:f7:02:0a:d7:53:57:68:d2:f3:81:f8:a6:b4:35:33: 94:5f:40:4e:7b:6d:b7:21:2a:e6:ed:f4:88:bf:94:10:56:97: 97:cf:7a:c2:f8:81:ef:b0:d2:c8:1b:f3:f9:70:7c:c0:68:e5: 86:8d:aa:49:b0:1f:98:af:63:b4:4f:28:07:4e:14:bb:bf:c6: b0:7d:c7:a1:fe:d5:53:7b:09:f9:62:42:05:fd:2c:5f:c9:cd: d4:a1:f1:e9:b1:f1:5b:de:14:22:f6:c4:94:f1:6b:ff:87:76: 82:07:f9:52:02:e7:04:67:f0:05:6e:75:34:cb:3e:d5:01:c1: c5:b4:0d:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fcHd6OSG7TBASv4g+kkBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmI2ZTI5MzhhMjI1MWRjNDM4NGRhZjY1ZWZhNTIwZGMx YTU4ODIwHhcNMjUxMjIwMTYwMDMzWhcNMjUxMjIxMTYwMDMzWjAzMTEwLwYDVQQD Eyg0ODMxZmIwZTg4ZmYzNzAzNTZmY2Y5MTdlMWNiMjI3OTk4OGU4MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FiJitnu4I/XkFZuDwL6rwItR3/o 5B8T5lAiNGpkUU2RTiDij2RcoKx+vRJum2MSVTo8Rs1gtZik2rz4rF7Cojyuzg6a QtOihpxrVRsjTFNZXwApWku6yqY6kptXnwBCRdDZ25bs7VW7lIVaTqcGNyU7Ig5G nkuWeH+9RRv54YgKbi/S1kkcBPumdiJXWfqlSQfaa7wcYKxhAG2hA96Xmej79bkY oie1COrW4cs4K2hOwP+cy7y+KGGADdgWgfSH6dFV2MovtNJ/OEjZtM6eIuEWskPt KhiFfFVmC4Mb/rrlb7wjxXuD3qa3QpCTf4AFHMPeZzi2crW3cmqTScbIGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgx+w6I/zcDVvz5F+HLInmYjoEOMB8GA1UdIwQY MBaAFFi7bik4oiUdxDhNr2XvpSDcGliCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWIt NWUzN2Q1NTg3YmU1LzEvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWItNWUzN2Q1NTg3YmU1 LzEvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4XMJ2kq rG+LAmETNEe+BfrvgJL50vlUOTe8kSOVOW012tG1EqrajkyLR0gKvnCluKGxvw81 GikzD5d3oy1EgScYMya9ef86yyIj1eQE/oXR/dyZg24buc2499hjcoa8qKJJJMtV FbWlUJFqhhSO3Nlw1b3VJoyv7n4Xs3ODzPwh9wIK11NXaNLzgfimtDUzlF9ATntt tyEq5u30iL+UEFaXl896wviB77DSyBvz+XB8wGjlho2qSbAfmK9jtE8oB04Uu7/G sH3Hof7VU3sJ+WJCBf0sX8nN1KHx6bHxW94UIvbElPFr/4d2ggf5UgLnBGfwBW51 NMs+1QHBxbQNTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:14:35 2025 by rpki-client