This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft File: WF2Wj1vhzmceINWDHBcAAfNy090.mft (raw, json) Hash identifier: D6fuP/q9F6Efm1L4GMHJajFNza07IjMe3sBsc0ii+AU= Subject key identifier: 92:18:51:35:21:9D:C5:B5:E9:F8:51:37:E9:B2:78:B1:D9:11:71:76 Authority key identifier: 58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD Certificate issuer: /CN=585d968f5be1ce671e20d5831c170001f372d3dd Certificate serial: 019B10EEF953198D7A0DC2573051EAD0EE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft Manifest number: 1720 Signing time: Fri 12 Dec 2025 05:00:55 +0000 Manifest this update: Fri 12 Dec 2025 05:00:55 +0000 Manifest next update: Sat 13 Dec 2025 05:00:55 +0000 Files and hashes: 1: WF2Wj1vhzmceINWDHBcAAfNy090.crl (hash: kr1oljezApnuXCpCr1Q/KMzB0fL7lBIQPx/cdgAB71w=) 2: kMkaJavkPA06Y44CWRSY630HVLw.roa (hash: T85LjnoIHLJZIbJyI8O+ldJqpb1UlV1mAtOahfZHzpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:f9:53:19:8d:7a:0d:c2:57:30:51:ea:d0:ee:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585d968f5be1ce671e20d5831c170001f372d3dd Validity Not Before: Dec 12 05:00:55 2025 GMT Not After : Dec 13 05:00:55 2025 GMT Subject: CN=92185135219dc5b5e9f85137e9b278b1d9117176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:45:3d:ba:48:fc:85:1c:c4:dd:17:19:04:76: b6:bd:78:25:b0:2a:ec:24:cc:d4:c0:db:9f:18:13: 40:1f:1c:e1:40:80:f4:4b:3d:53:9e:bd:a4:b6:e2: df:47:41:1f:2a:31:2c:5e:f8:5d:48:cf:5f:1f:fc: 11:3f:b2:d5:e6:a0:2e:97:d6:09:4c:60:90:51:7f: cd:19:cd:f9:6c:ff:a8:4b:de:1b:15:f1:8d:f1:6b: 6d:1b:e8:f4:f4:8a:74:75:4a:62:2c:01:7c:36:67: 9c:3f:f2:8c:03:14:6d:67:fd:b1:8a:06:a9:df:8e: 88:be:45:23:2a:df:63:8e:42:08:11:22:48:63:2a: ca:97:27:b5:48:ad:8e:12:4f:e4:69:6a:f3:59:4d: 2a:2a:4e:90:54:20:dc:46:26:9b:cd:36:c3:79:5a: f5:72:da:56:0f:43:7a:68:0f:73:4c:a1:88:9e:cc: b0:cc:2b:3a:84:88:ec:f4:9f:10:bc:c3:7a:6f:6b: 50:61:8a:af:87:ad:87:2d:4a:c7:89:ca:ed:e6:f1: e5:c5:30:2d:46:fc:61:57:d7:0f:54:12:cf:bf:0d: 28:e7:14:a2:08:4d:9c:74:10:b5:0b:6d:70:bd:c7: 63:4e:13:26:26:c9:62:e4:2c:c4:f2:9b:15:75:8b: e0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:18:51:35:21:9D:C5:B5:E9:F8:51:37:E9:B2:78:B1:D9:11:71:76 X509v3 Authority Key Identifier: keyid:58:5D:96:8F:5B:E1:CE:67:1E:20:D5:83:1C:17:00:01:F3:72:D3:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF2Wj1vhzmceINWDHBcAAfNy090.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/acac1e-e690-41b0-83be-9ed35d5b3735/1/WF2Wj1vhzmceINWDHBcAAfNy090.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9b:cf:2e:46:06:12:eb:63:9e:9d:00:fe:4d:66:33:5d:d7: 6e:10:5e:d5:03:7c:9f:45:0d:8c:33:d9:b1:a4:8f:4a:46:0e: 70:00:81:9b:5d:de:94:08:42:71:6a:02:7a:8a:4d:39:49:56: 50:c6:77:45:4a:a0:b9:1a:93:23:7b:15:75:b3:77:62:ee:ef: 84:de:f8:27:d8:be:56:0c:e8:69:2a:27:dd:08:e5:d3:83:00: 0f:23:39:34:5b:8c:e1:bf:93:4e:26:9e:c7:7d:fc:ce:ce:23: f7:e4:e9:e9:83:cb:74:ec:43:ba:fa:16:12:ab:85:de:05:73: f3:da:29:70:42:ac:de:da:c2:10:86:ff:c8:1e:e2:bc:19:4e: 6b:09:20:9b:76:5b:74:56:83:67:45:47:0a:18:5d:7a:3f:d3: e5:29:a5:32:0e:28:14:d6:3a:b8:ec:d6:6d:67:12:50:37:c5: 5d:48:46:b5:75:c0:38:79:d7:a2:b1:27:32:89:0d:65:f5:f8: 83:25:14:7a:49:60:e3:68:f3:ef:d4:54:78:7a:6f:64:5b:de: af:95:8f:c4:d4:2c:e2:da:99:43:62:2d:35:00:7e:13:59:80: ef:96:b8:37:b3:97:85:07:48:d8:29:af:42:56:e4:ee:31:bf: f2:7c:8c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7vlTGY16DcJXMFHq0O4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWQ5NjhmNWJlMWNlNjcxZTIwZDU4MzFjMTcwMDAxZjM3 MmQzZGQwHhcNMjUxMjEyMDUwMDU1WhcNMjUxMjEzMDUwMDU1WjAzMTEwLwYDVQQD Eyg5MjE4NTEzNTIxOWRjNWI1ZTlmODUxMzdlOWIyNzhiMWQ5MTE3MTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kU9ukj8hRzE3RcZBHa2vXglsCrs JMzUwNufGBNAHxzhQID0Sz1Tnr2ktuLfR0EfKjEsXvhdSM9fH/wRP7LV5qAul9YJ TGCQUX/NGc35bP+oS94bFfGN8WttG+j09Ip0dUpiLAF8NmecP/KMAxRtZ/2xigap 346IvkUjKt9jjkIIESJIYyrKlye1SK2OEk/kaWrzWU0qKk6QVCDcRiabzTbDeVr1 ctpWD0N6aA9zTKGInsywzCs6hIjs9J8QvMN6b2tQYYqvh62HLUrHicrt5vHlxTAt RvxhV9cPVBLPvw0o5xSiCE2cdBC1C21wvcdjThMmJsli5CzE8psVdYvgqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIYUTUhncW16fhRN+myeLHZEXF2MB8GA1UdIwQY MBaAFFhdlo9b4c5nHiDVgxwXAAHzctPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUt OWVkMzVkNWIzNzM1LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9hY2FjMWUtZTY5MC00MWIwLTgzYmUtOWVkMzVkNWIzNzM1 LzEvV0YyV2oxdmh6bWNlSU5XREhCY0FBZk55MDkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEJvPLkYG Eutjnp0A/k1mM13XbhBe1QN8n0UNjDPZsaSPSkYOcACBm13elAhCcWoCeopNOUlW UMZ3RUqguRqTI3sVdbN3Yu7vhN74J9i+VgzoaSon3Qjl04MADyM5NFuM4b+TTiae x338zs4j9+Tp6YPLdOxDuvoWEquF3gVz89opcEKs3trCEIb/yB7ivBlOawkgm3Zb dFaDZ0VHChhdej/T5SmlMg4oFNY6uOzWbWcSUDfFXUhGtXXAOHnXorEnMokNZfX4 gyUUeklg42jz79RUeHpvZFver5WPxNQs4tqZQ2ItNQB+E1mA75a4N7OXhQdI2Cmv Qlbk7jG/8nyMtw== -----END CERTIFICATE-----Generated at Fri Dec 12 14:40:11 2025 by rpki-client