This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft File: WSh1E_SesUCO5BsoHIsnczB6iRA.mft (raw, json) Hash identifier: 14VpYauAx4I774p+r0E5CPVTkxkRwwLmRibPMDCLQuk= Subject key identifier: 5A:A8:7C:22:77:B5:86:F3:E5:98:A3:B4:D4:47:94:72:15:AF:9C:0D Authority key identifier: 59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 Certificate issuer: /CN=59287513f49eb1408ee41b281c8b2773307a8910 Certificate serial: 019B35327D0D1FD8F4143ADAF1F813350CA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 06:00:59 +0000 Manifest this update: Fri 19 Dec 2025 06:00:59 +0000 Manifest next update: Sat 20 Dec 2025 06:00:59 +0000 Files and hashes: 1: WSh1E_SesUCO5BsoHIsnczB6iRA.crl (hash: Vu/6wwwX8iTygX0cBQochYptEp7v9WGg7Q2GxYtNhJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:7d:0d:1f:d8:f4:14:3a:da:f1:f8:13:35:0c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59287513f49eb1408ee41b281c8b2773307a8910 Validity Not Before: Dec 19 06:00:59 2025 GMT Not After : Dec 20 06:00:59 2025 GMT Subject: CN=5aa87c2277b586f3e598a3b4d447947215af9c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ec:90:73:f4:11:17:79:ff:61:c6:a0:56:60: b6:75:af:e2:8c:10:f6:37:46:39:36:b8:7b:73:13: 21:be:1b:ad:ef:35:46:8f:bb:78:17:10:f3:e1:1a: e3:7e:af:85:5f:c8:15:f9:e0:be:55:80:75:5e:68: ca:11:c1:b0:19:25:1e:12:d5:1f:1b:d4:a8:8c:6d: a8:31:0c:36:3c:f8:7b:f4:53:5b:61:9f:d0:8c:9c: b9:37:f8:6e:f7:35:8a:61:28:cd:2b:69:10:43:27: 7a:7e:e4:b8:61:3b:cb:2b:a6:d6:72:ba:4e:50:82: ac:40:dd:cb:76:e0:e3:93:ab:b1:75:23:8f:08:02: fb:aa:b1:1e:14:44:ba:b9:ad:68:18:a8:ba:c5:c0: 3e:51:f7:ef:be:0f:47:40:4f:06:b7:f7:97:de:a5: 73:bf:88:ea:7b:a1:e6:6d:42:85:63:70:1c:17:0e: 70:a9:91:db:42:cc:b0:3a:05:72:45:b0:2f:0e:cc: ac:ef:38:84:9f:4c:ce:9c:3d:1c:91:5b:b6:ab:a0: 7e:5a:f1:53:d2:d0:e6:80:0a:01:90:8f:e2:30:88: 8c:0b:3f:32:cc:28:b6:6a:f7:30:cc:12:e8:ef:15: bd:7c:ca:77:fa:07:94:e0:70:48:62:8e:82:b8:92: e8:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:7C:22:77:B5:86:F3:E5:98:A3:B4:D4:47:94:72:15:AF:9C:0D X509v3 Authority Key Identifier: keyid:59:28:75:13:F4:9E:B1:40:8E:E4:1B:28:1C:8B:27:73:30:7A:89:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSh1E_SesUCO5BsoHIsnczB6iRA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/895117-a0f8-4145-bdaa-88cec2f95513/1/WSh1E_SesUCO5BsoHIsnczB6iRA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:28:49:95:78:b1:1a:5b:c7:00:7e:4e:a9:6e:4a:66:3a:0d: 7b:49:0d:bc:56:70:4b:8e:44:56:72:f9:33:49:43:75:fb:7a: d2:92:7b:a0:2e:15:c4:f8:87:53:f5:8a:1f:b6:10:da:05:08: b0:2e:29:f1:3d:b7:3e:fb:43:a0:b6:b4:51:c3:b4:a9:50:14: 5e:dd:0d:30:b6:73:82:6f:bd:31:fa:00:58:0d:4b:f0:9a:0e: 35:e7:e2:c7:89:7f:77:6a:6d:90:e4:4b:30:81:30:6b:1f:0c: e6:5f:15:cc:74:d9:9e:b3:90:b0:0b:19:24:ff:aa:8f:0c:05: d8:5a:eb:16:2e:57:d8:9d:e5:0e:6d:86:fa:2f:67:89:9e:77: 03:62:b3:79:f1:3c:d2:c1:92:98:86:e2:8b:03:5c:52:01:5d: 96:21:92:be:11:d2:ad:d2:aa:bc:f6:99:77:a5:cb:38:93:47: af:3e:df:60:9e:f5:a7:27:8a:01:03:df:05:3d:a0:87:f7:90: de:35:55:0f:08:1e:04:f3:a3:0f:03:63:b3:5f:f0:8b:60:0e: 10:fa:35:5a:46:cf:e3:2e:df:db:49:1a:80:de:69:fc:ed:dd: 83:b2:dc:b0:14:e9:52:3f:09:61:fc:9e:e6:0b:1e:d2:e7:93: 1a:39:fa:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mn0NH9j0FDra8fgTNQyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Mjg3NTEzZjQ5ZWIxNDA4ZWU0MWIyODFjOGIyNzczMzA3 YTg5MTAwHhcNMjUxMjE5MDYwMDU5WhcNMjUxMjIwMDYwMDU5WjAzMTEwLwYDVQQD Eyg1YWE4N2MyMjc3YjU4NmYzZTU5OGEzYjRkNDQ3OTQ3MjE1YWY5YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOyQc/QRF3n/YcagVmC2da/ijBD2 N0Y5Nrh7cxMhvhut7zVGj7t4FxDz4Rrjfq+FX8gV+eC+VYB1XmjKEcGwGSUeEtUf G9SojG2oMQw2PPh79FNbYZ/QjJy5N/hu9zWKYSjNK2kQQyd6fuS4YTvLK6bWcrpO UIKsQN3LduDjk6uxdSOPCAL7qrEeFES6ua1oGKi6xcA+Uffvvg9HQE8Gt/eX3qVz v4jqe6HmbUKFY3AcFw5wqZHbQsywOgVyRbAvDsys7ziEn0zOnD0ckVu2q6B+WvFT 0tDmgAoBkI/iMIiMCz8yzCi2avcwzBLo7xW9fMp3+geU4HBIYo6CuJLoaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqofCJ3tYbz5ZijtNRHlHIVr5wNMB8GA1UdIwQY MBaAFFkodRP0nrFAjuQbKByLJ3MweokQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEt ODhjZWMyZjk1NTEzLzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi84OTUxMTctYTBmOC00MTQ1LWJkYWEtODhjZWMyZjk1NTEz LzEvV1NoMUVfU2VzVUNPNUJzb0hJc25jekI2aVJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyhJlXix GlvHAH5OqW5KZjoNe0kNvFZwS45EVnL5M0lDdft60pJ7oC4VxPiHU/WKH7YQ2gUI sC4p8T23PvtDoLa0UcO0qVAUXt0NMLZzgm+9MfoAWA1L8JoONefix4l/d2ptkORL MIEwax8M5l8VzHTZnrOQsAsZJP+qjwwF2FrrFi5X2J3lDm2G+i9niZ53A2KzefE8 0sGSmIbiiwNcUgFdliGSvhHSrdKqvPaZd6XLOJNHrz7fYJ71pyeKAQPfBT2gh/eQ 3jVVDwgeBPOjDwNjs1/wi2AOEPo1WkbP4y7f20kagN5p/O3dg7LcsBTpUj8JYfye 5gse0ueTGjn6wA== -----END CERTIFICATE-----Generated at Fri Dec 19 07:50:20 2025 by rpki-client