This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json) Hash identifier: 4QL36Epnil3eIUW1LojIGb18Zctxe1bYtvexlcn7iZs= Subject key identifier: 7B:4C:92:F3:B7:34:54:E3:14:E4:E0:16:8C:B4:8C:6A:7D:79:F4:E9 Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Certificate serial: 019B4FCE44F387A498D0AA79D6FA72E99018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 10:01:16 +0000 Manifest this update: Wed 24 Dec 2025 10:01:16 +0000 Manifest next update: Thu 25 Dec 2025 10:01:16 +0000 Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=) 2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: wFt+/sYLLx/e47toB5p5o4a3SX5KC/19wWjula4PDBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:44:f3:87:a4:98:d0:aa:79:d6:fa:72:e9:90:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Validity Not Before: Dec 24 10:01:16 2025 GMT Not After : Dec 25 10:01:16 2025 GMT Subject: CN=7b4c92f3b73454e314e4e0168cb48c6a7d79f4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:d3:92:f3:79:6f:f6:65:cc:e5:53:80:0a: 89:0b:60:71:b5:c7:24:d3:d2:17:8e:fa:12:47:e9: 37:33:3f:fe:38:a1:fd:be:95:44:e8:41:bb:d9:86: e1:8b:3d:4f:8f:3a:87:8b:98:b9:77:70:11:4b:54: 30:f1:34:67:e0:4a:2e:94:b2:a5:7a:2b:16:66:7a: 2b:c5:c3:c8:24:93:49:70:fc:10:c6:d3:05:e3:e4: f6:23:76:31:d0:23:a8:3d:4c:42:c3:c9:b1:3a:01: 89:ed:d1:6b:46:8b:41:2f:88:86:89:02:0b:8a:62: f3:c5:32:f4:67:68:01:33:f9:55:5f:f0:96:4d:5d: 60:fd:e6:3f:e4:a6:52:e6:9c:20:a8:27:6c:e8:b0: 50:22:af:73:3f:7c:55:ce:bf:2e:7c:90:d1:10:ef: 8f:96:05:5d:be:45:19:40:e4:1b:b0:5a:37:aa:44: 1f:0e:0d:0a:c1:19:87:c2:e5:bc:2d:87:80:b5:d8: a2:e3:a0:24:18:e0:c8:dd:14:60:11:c9:84:44:b3: a8:7e:41:f4:88:87:3e:2e:fa:18:23:2a:07:7a:96: 6d:c7:ff:72:b9:9a:99:b7:5c:08:62:dd:d0:d2:72: cc:55:d6:13:17:06:50:61:39:7d:e1:2b:58:b6:5b: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4C:92:F3:B7:34:54:E3:14:E4:E0:16:8C:B4:8C:6A:7D:79:F4:E9 X509v3 Authority Key Identifier: keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:84:83:24:6f:82:0b:57:61:00:62:68:87:d4:cb:96:cb:89: 66:1c:10:a2:f8:e8:c3:71:1c:89:2f:0c:1a:30:ae:c0:92:32: 00:20:cd:e5:48:0f:3e:b0:ed:bd:55:6c:58:02:26:0d:73:6b: fc:f6:b2:b5:14:f2:86:46:8a:8f:f2:15:5a:b2:41:0a:db:72: 3f:8f:69:f6:1e:7f:36:fc:45:e2:01:ec:41:f6:9f:d4:93:07: 54:5b:42:c8:a6:e2:6b:ba:6f:56:52:2c:d7:aa:08:24:c1:9d: fc:85:54:eb:95:1b:5f:72:2f:05:e6:6c:53:37:3e:bf:cd:3d: d2:d9:eb:33:f4:f7:cd:30:ec:31:bd:56:f4:39:44:bb:db:d3: af:97:89:85:7b:b2:fa:29:03:e2:8b:a7:5f:fd:55:d5:1a:e7: ea:05:91:09:98:92:cc:88:c8:cb:2d:45:20:26:39:0c:78:3b: 5d:f2:05:45:1b:7e:2b:dd:cc:32:16:01:26:2a:d7:79:05:92: e5:3c:71:c4:a3:92:21:ae:66:1d:1c:02:87:fb:a3:62:c2:5a: 84:e7:d6:53:3d:d5:73:90:3c:66:cb:17:a6:09:6b:e8:b2:f1: cd:da:44:35:87:8f:f5:ed:72:6e:65:dd:a4:7a:ac:5b:8d:31: f9:e5:b7:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzkTzh6SY0Kp51vpy6ZAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh OWY2MTAwHhcNMjUxMjI0MTAwMTE2WhcNMjUxMjI1MTAwMTE2WjAzMTEwLwYDVQQD Eyg3YjRjOTJmM2I3MzQ1NGUzMTRlNGUwMTY4Y2I0OGM2YTdkNzlmNGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2HTkvN5b/ZlzOVTgAqJC2Bxtcck 09IXjvoSR+k3Mz/+OKH9vpVE6EG72Ybhiz1PjzqHi5i5d3ARS1Qw8TRn4EoulLKl eisWZnorxcPIJJNJcPwQxtMF4+T2I3Yx0COoPUxCw8mxOgGJ7dFrRotBL4iGiQIL imLzxTL0Z2gBM/lVX/CWTV1g/eY/5KZS5pwgqCds6LBQIq9zP3xVzr8ufJDREO+P lgVdvkUZQOQbsFo3qkQfDg0KwRmHwuW8LYeAtdii46AkGODI3RRgEcmERLOofkH0 iIc+LvoYIyoHepZtx/9yuZqZt1wIYt3Q0nLMVdYTFwZQYTl94StYtluE5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtMkvO3NFTjFOTgFoy0jGp9efTpMB8GA1UdIwQY MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt ZWYzODkxNGE4YWIwLzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALoSDJG+C C1dhAGJoh9TLlsuJZhwQovjow3EciS8MGjCuwJIyACDN5UgPPrDtvVVsWAImDXNr /PaytRTyhkaKj/IVWrJBCttyP49p9h5/NvxF4gHsQfaf1JMHVFtCyKbia7pvVlIs 16oIJMGd/IVU65UbX3IvBeZsUzc+v8090tnrM/T3zTDsMb1W9DlEu9vTr5eJhXuy +ikD4ounX/1V1Rrn6gWRCZiSzIjIyy1FICY5DHg7XfIFRRt+K93MMhYBJirXeQWS 5TxxxKOSIa5mHRwCh/ujYsJahOfWUz3Vc5A8ZssXpglr6LLxzdpENYeP9e1ybmXd pHqsW40x+eW3GA== -----END CERTIFICATE-----Generated at Wed Dec 24 12:33:47 2025 by rpki-client