This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft File: WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft (raw, json) Hash identifier: p4lMYD/fP9SAenlUNvThXzBs7TeU/TQgm8LsLStIo48= Subject key identifier: 09:AB:9D:83:EC:D0:FE:76:3E:C1:4A:AD:E5:CA:D4:0F:19:1E:F8:15 Authority key identifier: 58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 Certificate issuer: /CN=58a127453dfba17e10c347fa34bbebab14905a57 Certificate serial: 019B42EE0CEC1FDA34CC9F05896734333DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft Manifest number: 0899 Signing time: Sun 21 Dec 2025 22:00:55 +0000 Manifest this update: Sun 21 Dec 2025 22:00:55 +0000 Manifest next update: Mon 22 Dec 2025 22:00:55 +0000 Files and hashes: 1: 2symQxt9tiTp5JPRu9SVrhpHnoI.roa (hash: ETxwfWEk5Ji119X6QNRzmnwtDjfSz5qCO5WUq2I4qpI=) 2: WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl (hash: fQUkMO5rL0ST3zNWgx2BLdmwrt+HT/MHVEPu+ooN4W8=) 3: aiepDcInSC7XQM1NAo38Ltggcos.roa (hash: 6COc/WNOkQasZPkjRm4nKC/vd3bNAbojTsGDQ+J1+tY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:0c:ec:1f:da:34:cc:9f:05:89:67:34:33:3d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a127453dfba17e10c347fa34bbebab14905a57 Validity Not Before: Dec 21 22:00:55 2025 GMT Not After : Dec 22 22:00:55 2025 GMT Subject: CN=09ab9d83ecd0fe763ec14aade5cad40f191ef815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e3:3a:86:db:c4:74:e4:87:b7:1c:fe:e9:1b: 73:bd:ee:fb:19:f3:2b:e6:5d:5c:bc:69:3c:93:0b: f9:ea:86:06:a1:05:4f:81:43:21:1d:e5:67:91:34: 67:a5:99:05:39:06:6f:76:32:20:fc:e6:d5:69:79: 0c:b4:b5:a5:9b:0c:82:37:c6:f2:7b:07:36:cc:ee: 77:91:8c:22:14:24:28:a2:53:8e:f5:5b:c2:8a:fd: 93:da:13:fd:68:39:5b:90:59:ae:39:03:d9:f4:9c: ff:4b:c6:01:fc:ad:66:19:7e:8f:df:3d:22:61:ae: 7a:c2:db:c5:c2:36:12:4b:51:85:0b:46:3b:e0:bb: b6:70:69:54:16:42:8d:be:1b:51:95:43:0e:d9:50: 33:62:89:92:36:8f:a2:c4:37:49:83:c5:ef:27:ed: 62:93:90:36:d9:ad:7b:0b:b5:98:c0:5c:68:9d:e1: 69:35:48:08:84:18:d7:12:82:92:9c:21:fb:73:03: 9b:cd:89:36:b4:f1:62:6e:53:49:0e:cd:b4:0b:22: db:0a:11:8c:67:e9:61:c2:fd:fb:98:74:b1:e6:89: 36:08:f4:7d:3b:d2:00:28:be:4b:5c:e1:d4:32:d3: e5:7e:8e:44:66:78:04:1d:69:eb:4e:fe:ca:24:cd: b3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AB:9D:83:EC:D0:FE:76:3E:C1:4A:AD:E5:CA:D4:0F:19:1E:F8:15 X509v3 Authority Key Identifier: keyid:58:A1:27:45:3D:FB:A1:7E:10:C3:47:FA:34:BB:EB:AB:14:90:5A:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKEnRT37oX4Qw0f6NLvrqxSQWlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f1dfe3-2609-46b8-b03f-da96019d4c20/1/WKEnRT37oX4Qw0f6NLvrqxSQWlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:aa:3f:fc:58:a0:e4:1a:a4:d5:6c:1c:af:f8:dd:72:eb:9a: 92:5a:ae:94:e2:a9:84:96:2b:3b:5b:50:84:85:7f:47:30:c9: 62:08:63:3b:65:46:18:21:fe:d9:ab:97:84:86:2a:5f:25:f1: 3a:9d:78:7a:a9:6b:f0:26:17:7c:e9:95:93:73:f3:ca:12:e3: 26:a2:80:a9:55:ac:66:04:12:0d:fe:95:d3:fe:de:60:91:78: 78:35:f4:ac:e3:82:5a:98:56:1f:fc:6c:f5:ce:20:f8:a4:66: fb:66:9a:e1:4e:a1:61:16:b9:89:7b:81:49:a5:18:dc:05:d5: 2c:64:5d:62:02:4d:12:1b:8d:db:e4:ab:00:81:63:3a:db:36: ae:28:a9:7d:88:26:c0:4f:a1:a3:f6:fc:14:24:f2:d7:ae:96: 4c:29:c2:e3:2a:c0:44:3d:be:bb:f5:f9:57:74:a1:91:9e:24: e1:c9:e4:86:f1:5f:99:58:54:87:7f:ea:9b:4a:ec:53:33:d5: f8:36:31:e4:da:38:1d:f7:62:4d:c0:d1:29:d3:64:01:d4:c5: a0:3a:9c:2d:87:dd:c1:e0:c0:09:ec:49:d3:d0:2f:83:41:56: cd:06:2b:3c:92:2e:a5:d6:3d:37:df:8f:62:ee:b1:96:88:6a: 15:e6:60:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7gzsH9o0zJ8FiWc0Mz33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTEyNzQ1M2RmYmExN2UxMGMzNDdmYTM0YmJlYmFiMTQ5 MDVhNTcwHhcNMjUxMjIxMjIwMDU1WhcNMjUxMjIyMjIwMDU1WjAzMTEwLwYDVQQD EygwOWFiOWQ4M2VjZDBmZTc2M2VjMTRhYWRlNWNhZDQwZjE5MWVmODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OM6htvEdOSHtxz+6Rtzve77GfMr 5l1cvGk8kwv56oYGoQVPgUMhHeVnkTRnpZkFOQZvdjIg/ObVaXkMtLWlmwyCN8by ewc2zO53kYwiFCQoolOO9VvCiv2T2hP9aDlbkFmuOQPZ9Jz/S8YB/K1mGX6P3z0i Ya56wtvFwjYSS1GFC0Y74Lu2cGlUFkKNvhtRlUMO2VAzYomSNo+ixDdJg8XvJ+1i k5A22a17C7WYwFxoneFpNUgIhBjXEoKSnCH7cwObzYk2tPFiblNJDs20CyLbChGM Z+lhwv37mHSx5ok2CPR9O9IAKL5LXOHUMtPlfo5EZngEHWnrTv7KJM2zmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmrnYPs0P52PsFKreXK1A8ZHvgVMB8GA1UdIwQY MBaAFFihJ0U9+6F+EMNH+jS766sUkFpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2Yt ZGE5NjAxOWQ0YzIwLzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mMWRmZTMtMjYwOS00NmI4LWIwM2YtZGE5NjAxOWQ0YzIw LzEvV0tFblJUMzdvWDRRdzBmNk5MdnJxeFNRV2xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqo//Fig 5Bqk1Wwcr/jdcuuaklqulOKphJYrO1tQhIV/RzDJYghjO2VGGCH+2auXhIYqXyXx Op14eqlr8CYXfOmVk3PzyhLjJqKAqVWsZgQSDf6V0/7eYJF4eDX0rOOCWphWH/xs 9c4g+KRm+2aa4U6hYRa5iXuBSaUY3AXVLGRdYgJNEhuN2+SrAIFjOts2riipfYgm wE+ho/b8FCTy166WTCnC4yrARD2+u/X5V3ShkZ4k4cnkhvFfmVhUh3/qm0rsUzPV +DYx5No4HfdiTcDRKdNkAdTFoDqcLYfdweDACexJ09Avg0FWzQYrPJIupdY9N9+P Yu6xlohqFeZg5g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:24:20 2025 by rpki-client