This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft File: WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json) Hash identifier: v5JoKCzFGEGROvAZk1Q2SZciHnXjcj9czHSWh8PPWu8= Subject key identifier: D3:15:D8:FC:EB:F3:21:3A:99:0F:37:DB:48:54:DA:F8:47:DD:9A:E3 Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A Certificate issuer: /CN=59785a21e2d07c68ff317558c69ef118cc75805a Certificate serial: 019B2364562F7DD424BF1936A1398ED7B8F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft Manifest number: 0E1F Signing time: Mon 15 Dec 2025 19:02:16 +0000 Manifest this update: Mon 15 Dec 2025 19:02:16 +0000 Manifest next update: Tue 16 Dec 2025 19:02:16 +0000 Files and hashes: 1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: imo4rtmV1G4NnY0pBQBzLzEqwP5moWwV7V3QvRDJT8E=) 2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:64:56:2f:7d:d4:24:bf:19:36:a1:39:8e:d7:b8:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a Validity Not Before: Dec 15 19:02:16 2025 GMT Not After : Dec 16 19:02:16 2025 GMT Subject: CN=d315d8fcebf3213a990f37db4854daf847dd9ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b5:c1:19:80:be:b7:f5:d7:a6:08:6c:f3:54: 35:c3:8c:4c:b7:76:e7:82:e5:4c:1a:e2:e6:73:ec: 29:20:d1:b7:23:21:9b:53:51:bf:cd:ca:eb:d1:35: 84:28:24:d0:72:5f:91:e5:95:e6:6e:ec:0c:7a:54: 2d:97:14:10:64:f3:5b:ac:c3:c7:7e:15:93:ba:93: ce:17:b7:51:aa:04:7a:89:83:f0:8c:d8:ff:4d:e6: 59:28:11:4b:45:73:40:f2:1a:fb:40:dd:23:91:a1: d4:eb:fe:04:87:eb:bf:16:34:f3:83:7a:42:4a:ef: a4:ea:ae:64:3b:07:96:ed:8f:a7:f3:59:17:cf:5e: e5:91:59:e9:09:25:5c:ce:51:da:e9:27:86:9a:9c: e2:7f:60:34:ca:e7:13:cb:ea:e4:86:0a:74:49:7f: 48:9f:00:88:e4:1b:79:d7:15:ee:84:7f:77:d8:62: 2d:7c:77:67:41:57:27:76:c0:b7:ff:d5:9d:25:63: 50:e7:57:28:af:0c:94:2c:13:e5:ff:e3:e1:68:77: 29:85:8b:72:af:f4:b9:3b:02:e5:f0:52:49:c4:96: 70:a8:cc:37:2e:2c:cd:f8:6a:7b:86:e8:e8:cc:10: 1c:78:54:d5:21:7a:78:8b:6c:d9:9e:8b:fa:46:93: 3b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:15:D8:FC:EB:F3:21:3A:99:0F:37:DB:48:54:DA:F8:47:DD:9A:E3 X509v3 Authority Key Identifier: keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f8:f4:50:80:2b:bd:94:15:34:1a:b8:8a:17:d3:b3:d1:1e: 98:69:a0:fe:43:07:6b:aa:ee:15:41:ab:c4:48:9e:d0:0e:e1: 44:99:0f:d8:fb:a2:50:95:66:26:95:49:ce:8c:cc:35:5e:4c: 64:2f:1a:45:16:30:fa:8d:bf:54:bc:a9:d1:97:92:c0:af:ec: ce:2d:2f:cc:e4:3e:b3:d6:16:49:fa:ba:1a:6d:90:c7:53:15: a8:64:00:74:9a:2f:fe:f3:78:1a:ee:bb:e7:9c:79:39:db:2e: 4b:0f:0d:e2:d2:1e:55:4a:de:29:10:f9:68:fa:51:ff:f8:09: 92:e3:af:63:f7:50:4b:70:26:95:2f:5d:5b:c5:0e:0c:f2:72: 7f:49:62:28:95:68:b1:c6:53:9b:ea:c7:f8:24:e4:51:4f:03: 83:83:81:8b:e0:b7:58:8d:50:ce:98:bf:05:8c:98:61:88:8c: 0e:dd:bb:6e:6b:8f:17:ce:2a:40:2a:64:c6:bf:ff:c9:a0:3e: 95:6e:b9:7a:1b:10:4a:e6:dc:0d:88:b6:bd:fa:04:a8:b2:67: 81:ac:f4:35:40:86:54:a0:ea:8f:f6:9e:07:78:14:3a:54:c7: a8:f3:9d:50:45:0b:73:0b:78:77:2a:11:21:14:8d:ed:dd:52: d5:61:fd:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjZFYvfdQkvxk2oTmO17j0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5Nzg1YTIxZTJkMDdjNjhmZjMxNzU1OGM2OWVmMTE4Y2M3 NTgwNWEwHhcNMjUxMjE1MTkwMjE2WhcNMjUxMjE2MTkwMjE2WjAzMTEwLwYDVQQD EyhkMzE1ZDhmY2ViZjMyMTNhOTkwZjM3ZGI0ODU0ZGFmODQ3ZGQ5YWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorXBGYC+t/XXpghs81Q1w4xMt3bn guVMGuLmc+wpING3IyGbU1G/zcrr0TWEKCTQcl+R5ZXmbuwMelQtlxQQZPNbrMPH fhWTupPOF7dRqgR6iYPwjNj/TeZZKBFLRXNA8hr7QN0jkaHU6/4Eh+u/FjTzg3pC Su+k6q5kOweW7Y+n81kXz17lkVnpCSVczlHa6SeGmpzif2A0yucTy+rkhgp0SX9I nwCI5Bt51xXuhH932GItfHdnQVcndsC3/9WdJWNQ51corwyULBPl/+PhaHcphYty r/S5OwLl8FJJxJZwqMw3LizN+Gp7hujozBAceFTVIXp4i2zZnov6RpM7QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMV2Pzr8yE6mQ8320hU2vhH3ZrjMB8GA1UdIwQY MBaAFFl4WiHi0Hxo/zF1WMae8RjMdYBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTct NzVmNGZjYTg2YWU0LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9lMzI2N2ItZjc4MC00MTg3LTgwNTctNzVmNGZjYTg2YWU0 LzEvV1hoYUllTFFmR2pfTVhWWXhwN3hHTXgxZ0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmvj0UIAr vZQVNBq4ihfTs9EemGmg/kMHa6ruFUGrxEie0A7hRJkP2PuiUJVmJpVJzozMNV5M ZC8aRRYw+o2/VLyp0ZeSwK/szi0vzOQ+s9YWSfq6Gm2Qx1MVqGQAdJov/vN4Gu67 55x5OdsuSw8N4tIeVUreKRD5aPpR//gJkuOvY/dQS3AmlS9dW8UODPJyf0liKJVo scZTm+rH+CTkUU8Dg4OBi+C3WI1Qzpi/BYyYYYiMDt27bmuPF84qQCpkxr//yaA+ lW65ehsQSubcDYi2vfoEqLJngaz0NUCGVKDqj/aeB3gUOlTHqPOdUEULcwt4dyoR IRSN7d1S1WH9oQ== -----END CERTIFICATE-----Generated at Tue Dec 16 05:01:43 2025 by rpki-client