This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft File: WLuO46dH7YtXhlfN1HN1hvX9uTE.mft (raw, json) Hash identifier: +Zcij6hTwzFhuRiqJXDH2AezdkxSOaedAGTEy4/IoSM= Subject key identifier: BB:89:B5:BA:2E:42:2C:E1:FD:C4:55:CD:3F:63:2B:F4:A3:EA:9B:B6 Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31 Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931 Certificate serial: 019B69FB391208FFA8A121EB9E935373770B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 12:00:30 +0000 Manifest this update: Mon 29 Dec 2025 12:00:30 +0000 Manifest next update: Tue 30 Dec 2025 12:00:30 +0000 Files and hashes: 1: 7BY2Il5MQLxppADVL6UF8_ajsQA.roa (hash: l7Kov6RxqewCUOOJkbe9fRRYdDk1EYYz6xC9Vf7eE0k=) 2: BMAYKoufU7pujnEDum3l-Sh7Jm0.roa (hash: JCA/TWQlrOJKd5IE/d0Yfz64No5Tx1ptBD9+mN0UFqs=) 3: WLuO46dH7YtXhlfN1HN1hvX9uTE.crl (hash: YP1uYadg2LEPSCxBFK1tFpcfZApGIEdUWybiZ5CZc80=) 4: iP8tkc04d0icUEokihMRUC5rwT4.roa (hash: 5/Iqdr1UvAnjLWd8y1HWmURDX4laReyrD4iFzOipf+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:39:12:08:ff:a8:a1:21:eb:9e:93:53:73:77:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931 Validity Not Before: Dec 29 12:00:30 2025 GMT Not After : Dec 30 12:00:30 2025 GMT Subject: CN=bb89b5ba2e422ce1fdc455cd3f632bf4a3ea9bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:ed:31:6d:f7:e7:b7:cd:b1:06:69:8f:06: 9e:a2:98:fa:3e:b4:7f:e9:31:4b:fe:76:f0:5d:c3: 8c:55:de:c3:42:f5:95:a3:8e:11:e7:74:94:5a:04: c2:f1:94:cc:5a:90:07:50:d7:71:6b:57:13:1c:d0: 68:4f:55:a4:ae:5c:94:c8:d4:a5:8c:9b:7c:c3:b0: 57:46:9f:5c:07:05:42:d2:3b:d7:4d:a1:3d:9a:7a: bb:60:44:77:32:0a:07:42:4b:60:ee:8e:05:74:4e: f1:a9:91:22:68:7b:63:d0:fb:74:d2:e4:7f:2c:7e: bf:6a:85:ed:92:21:4c:74:30:ae:64:28:d6:9c:4f: dc:96:a3:e4:0b:8d:cd:ba:52:94:96:b1:b2:f8:87: 44:f3:d5:68:86:72:47:04:38:d4:64:d3:7d:d2:ff: 63:40:3f:dd:87:34:93:05:6d:b8:ea:d8:ac:16:88: f1:33:50:74:b2:43:77:35:3c:0a:ca:0f:4d:56:6f: a0:4e:0e:b6:50:e0:eb:bf:1c:42:0d:bb:42:c0:5c: 46:ac:d4:03:34:19:1c:f5:a2:1e:cb:ff:bc:91:41: 79:b5:4d:e9:ad:6f:18:7b:1f:27:c0:34:73:de:2a: b5:41:bb:77:9b:94:96:c2:6b:cd:4e:48:76:34:0c: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:B5:BA:2E:42:2C:E1:FD:C4:55:CD:3F:63:2B:F4:A3:EA:9B:B6 X509v3 Authority Key Identifier: keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:21:ff:36:dd:af:e6:c3:a7:17:af:bb:fc:69:02:f1:4b:94: a4:9e:b5:f6:3b:19:6c:a7:4f:08:e1:e6:98:8d:2e:2c:58:a7: 34:4f:10:35:56:20:2a:91:cc:33:65:8c:e4:fe:a0:2e:5d:72: 20:b2:bd:99:40:85:ad:63:14:a2:a7:29:5c:e1:77:99:ec:43: 0c:34:b2:f5:17:e1:23:4c:70:86:6c:1c:8f:b4:66:58:42:c6: a4:71:12:c7:e8:33:8b:32:79:8f:1f:7c:25:bb:17:21:0c:21: b3:85:89:92:1a:36:92:70:c4:51:62:24:52:c3:51:7d:76:00: 8b:48:28:c4:ae:b5:d1:fc:4d:2c:fd:6a:26:d9:87:c2:ec:35: 19:08:73:ed:bb:cc:02:ea:b3:22:5e:da:93:e3:77:bb:9e:c1: 47:13:9d:84:9a:bf:48:ed:ae:02:ca:9e:7e:52:14:e4:76:c4: d7:af:2d:90:73:14:e3:8e:1a:00:6e:62:5a:1e:2c:10:39:07: 53:69:21:85:48:69:d2:6d:1b:dc:81:0d:41:b1:10:ea:1b:a4: 46:a1:1d:bc:e2:2e:5e:da:85:60:4d:c7:52:2c:96:bb:34:d9: c3:d5:66:45:14:4a:3c:65:3c:5e:bb:71:47:d9:4a:3e:a2:1b: 54:45:a9:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+zkSCP+ooSHrnpNTc3cLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmI4ZWUzYTc0N2VkOGI1Nzg2NTdjZGQ0NzM3NTg2ZjVm ZGI5MzEwHhcNMjUxMjI5MTIwMDMwWhcNMjUxMjMwMTIwMDMwWjAzMTEwLwYDVQQD EyhiYjg5YjViYTJlNDIyY2UxZmRjNDU1Y2QzZjYzMmJmNGEzZWE5YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP7tMW3357fNsQZpjwaeopj6PrR/ 6TFL/nbwXcOMVd7DQvWVo44R53SUWgTC8ZTMWpAHUNdxa1cTHNBoT1WkrlyUyNSl jJt8w7BXRp9cBwVC0jvXTaE9mnq7YER3MgoHQktg7o4FdE7xqZEiaHtj0Pt00uR/ LH6/aoXtkiFMdDCuZCjWnE/clqPkC43NulKUlrGy+IdE89VohnJHBDjUZNN90v9j QD/dhzSTBW246tisFojxM1B0skN3NTwKyg9NVm+gTg62UODrvxxCDbtCwFxGrNQD NBkc9aIey/+8kUF5tU3prW8Yex8nwDRz3iq1Qbt3m5SWwmvNTkh2NAzSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuJtbouQizh/cRVzT9jK/Sj6pu2MB8GA1UdIwQY MBaAFFi7juOnR+2LV4ZXzdRzdYb1/bkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0x1TzQ2ZEg3WXRYaGxmTjFITjFodlg5dVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wM2E3MGItM2JjNi00MzM5LTllNDkt YTgzZjkxNDAzNWIzLzEvV0x1TzQ2ZEg3WXRYaGxmTjFITjFodlg5dVRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wM2E3MGItM2JjNi00MzM5LTllNDktYTgzZjkxNDAzNWIz LzEvV0x1TzQ2ZEg3WXRYaGxmTjFITjFodlg5dVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZSH/Nt2v 5sOnF6+7/GkC8UuUpJ619jsZbKdPCOHmmI0uLFinNE8QNVYgKpHMM2WM5P6gLl1y ILK9mUCFrWMUoqcpXOF3mexDDDSy9RfhI0xwhmwcj7RmWELGpHESx+gzizJ5jx98 JbsXIQwhs4WJkho2knDEUWIkUsNRfXYAi0goxK610fxNLP1qJtmHwuw1GQhz7bvM AuqzIl7ak+N3u57BRxOdhJq/SO2uAsqeflIU5HbE168tkHMU444aAG5iWh4sEDkH U2khhUhp0m0b3IENQbEQ6hukRqEdvOIuXtqFYE3HUiyWuzTZw9VmRRRKPGU8Xrtx R9lKPqIbVEWpiA== -----END CERTIFICATE-----Generated at Mon Dec 29 13:28:23 2025 by rpki-client