This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json) Hash identifier: O+oJnzDDhBn9jVSi9CfD8YldA4nTitG0L5t30HVO7wg= Subject key identifier: 59:C3:2E:D9:BA:77:C0:21:E3:79:42:A0:4C:0F:26:23:C3:7E:B3:FD Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Certificate serial: 019B22195401611D4D8BB97D66944B17C6DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft Manifest number: 11FB Signing time: Mon 15 Dec 2025 13:00:43 +0000 Manifest this update: Mon 15 Dec 2025 13:00:43 +0000 Manifest next update: Tue 16 Dec 2025 13:00:43 +0000 Files and hashes: 1: 4jM0JVjRqyqNZv5MXvbIPvqtPak.roa (hash: esLYhdOdh3leFG/PbeUzrVs3Llk7R0kG4kYUF7ITJVs=) 2: Fk-RTc_x_EZ5p-h1OUyJsVVtDV0.roa (hash: oolZPOnT9pMIdCNLzjvt7CZ7qXkkFGvNdRAoF9kj0Tw=) 3: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: Jw5Sc4XgEvSNx3ieseNdzG6SXb1fhcLxhz49Fzvb8Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:54:01:61:1d:4d:8b:b9:7d:66:94:4b:17:c6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Validity Not Before: Dec 15 13:00:43 2025 GMT Not After : Dec 16 13:00:43 2025 GMT Subject: CN=59c32ed9ba77c021e37942a04c0f2623c37eb3fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:69:6a:bb:90:57:b7:de:8b:68:46:1e:70:65: 3f:10:f1:00:d3:ee:fd:fb:f4:f4:39:b8:65:5a:5b: e9:a0:37:37:c2:47:0b:6b:cc:af:9e:b8:33:d1:0a: 0a:6c:e8:d8:d3:7c:4d:35:01:8d:26:f8:ef:47:15: 02:ca:7b:05:79:a5:04:57:1e:fc:d3:6f:57:be:40: 48:5b:f1:16:55:f5:3a:33:0c:d6:b0:84:fe:7a:03: 79:51:2c:a9:61:48:ba:6f:a5:23:71:eb:03:44:fa: c0:16:46:e7:c5:58:00:08:22:85:95:40:ce:da:a2: 1f:50:67:39:1c:35:21:3b:8d:9c:f7:52:01:e3:91: 0d:ea:3b:63:7f:a7:cf:c3:4c:84:b4:bc:ba:75:ec: 3f:90:e5:a4:cf:7c:9b:9b:a7:9d:a1:d6:50:24:4c: e4:9d:e1:70:8c:ff:ec:e3:bc:2f:65:23:a6:b3:3d: d6:85:0f:8c:8f:13:16:fc:26:15:4f:2a:d1:c5:96: 90:9d:36:e9:60:56:b6:47:49:c5:f0:4b:58:d9:53: 58:3c:22:4f:86:0b:b0:3e:2d:49:57:4a:1d:2f:00: c6:a7:8d:65:2c:b0:15:a2:61:74:cb:8e:a7:c5:a7: db:5a:b0:a9:ac:93:50:f7:7a:2e:63:57:b0:85:81: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C3:2E:D9:BA:77:C0:21:E3:79:42:A0:4C:0F:26:23:C3:7E:B3:FD X509v3 Authority Key Identifier: keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1a:e9:ec:cc:b5:d3:e8:b0:1c:b6:fe:1b:72:20:0c:2a:ea: e7:85:3f:85:9b:47:36:93:e7:89:2d:9e:13:72:89:bc:86:e7: cf:38:e5:bc:a7:0b:bb:2b:08:19:fe:c7:83:1b:74:56:9f:f1: 81:55:58:e2:b0:2b:27:fc:8d:b4:65:0d:89:b8:b6:8b:c6:79: 82:38:eb:47:ef:59:7e:41:7b:28:f7:9f:f2:b0:17:f4:ff:28: de:58:13:93:58:88:6d:ba:c1:fc:61:21:f7:55:b5:40:0b:78: 99:a6:53:2a:cc:e9:34:47:76:8f:f5:2a:91:94:d9:54:2f:9f: fe:e7:1f:bd:17:1d:84:23:92:86:29:a1:42:45:0c:8f:ef:b8: 55:91:f5:4f:9a:99:67:00:99:4f:ac:79:52:f5:a2:ea:bc:7b: dd:cf:37:a5:cd:bc:95:d1:e8:2d:63:b0:b1:55:b9:33:91:e0: 28:01:46:27:b1:4a:5c:8d:b8:c8:20:3e:79:78:64:23:61:6f: f0:f7:b7:73:18:eb:60:2c:0a:7e:81:98:91:5b:95:da:38:c1: 66:a7:51:a8:57:2e:7d:86:a9:3b:fa:1b:a9:c3:95:d6:dc:8a: 31:e9:31:0c:63:3a:15:ec:5b:10:f1:9b:63:c5:03:2f:9c:61: ca:a8:be:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGVQBYR1Ni7l9ZpRLF8beMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm NmM5YzUwHhcNMjUxMjE1MTMwMDQzWhcNMjUxMjE2MTMwMDQzWjAzMTEwLwYDVQQD Eyg1OWMzMmVkOWJhNzdjMDIxZTM3OTQyYTA0YzBmMjYyM2MzN2ViM2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomlqu5BXt96LaEYecGU/EPEA0+79 +/T0ObhlWlvpoDc3wkcLa8yvnrgz0QoKbOjY03xNNQGNJvjvRxUCynsFeaUEVx78 029XvkBIW/EWVfU6MwzWsIT+egN5USypYUi6b6UjcesDRPrAFkbnxVgACCKFlUDO 2qIfUGc5HDUhO42c91IB45EN6jtjf6fPw0yEtLy6dew/kOWkz3ybm6edodZQJEzk neFwjP/s47wvZSOmsz3WhQ+MjxMW/CYVTyrRxZaQnTbpYFa2R0nF8EtY2VNYPCJP hguwPi1JV0odLwDGp41lLLAVomF0y46nxafbWrCprJNQ93ouY1ewhYEKWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnDLtm6d8Ah43lCoEwPJiPDfrP9MB8GA1UdIwQY MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRrp7My1 0+iwHLb+G3IgDCrq54U/hZtHNpPniS2eE3KJvIbnzzjlvKcLuysIGf7Hgxt0Vp/x gVVY4rArJ/yNtGUNibi2i8Z5gjjrR+9ZfkF7KPef8rAX9P8o3lgTk1iIbbrB/GEh 91W1QAt4maZTKszpNEd2j/UqkZTZVC+f/ucfvRcdhCOShimhQkUMj++4VZH1T5qZ ZwCZT6x5UvWi6rx73c83pc28ldHoLWOwsVW5M5HgKAFGJ7FKXI24yCA+eXhkI2Fv 8Pe3cxjrYCwKfoGYkVuV2jjBZqdRqFcufYapO/obqcOV1tyKMekxDGM6FexbEPGb Y8UDL5xhyqi+hw== -----END CERTIFICATE-----Generated at Mon Dec 15 14:49:52 2025 by rpki-client