This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft File: WEfx9Pa8sqR1isipl7wQgADkGNE.mft (raw, json) Hash identifier: OyBrQHNB4Bbc3mtGUm/brVxEC50kKrb6C+rk5z22u/c= Subject key identifier: 51:42:28:B2:04:EB:C4:F6:42:E2:8E:2C:C1:4C:6B:67:37:43:DC:DC Authority key identifier: 58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1 Certificate issuer: /CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1 Certificate serial: 019B5976C1C0F4E8A7D5982BAC52F9DFF502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft Manifest number: 0B21 Signing time: Fri 26 Dec 2025 07:01:53 +0000 Manifest this update: Fri 26 Dec 2025 07:01:53 +0000 Manifest next update: Sat 27 Dec 2025 07:01:53 +0000 Files and hashes: 1: WEfx9Pa8sqR1isipl7wQgADkGNE.crl (hash: vq0j+5amAkEWcJJCsNt/+RLwx8TsbPVHOmm9zelf66E=) 2: wIsKAJrVffRqz6laEWhWTAS6tTY.roa (hash: V1Qapun8icHJI/Zpv+MiEjbXSsE72DuavneqFQZT08I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:c1:c0:f4:e8:a7:d5:98:2b:ac:52:f9:df:f5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5847f1f4f6bcb2a4758ac8a997bc108000e418d1 Validity Not Before: Dec 26 07:01:53 2025 GMT Not After : Dec 27 07:01:53 2025 GMT Subject: CN=514228b204ebc4f642e28e2cc14c6b673743dcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ed:34:83:e9:9b:5a:23:07:4d:a0:3e:6e:a8: 1a:35:3c:21:59:d6:91:06:97:4d:53:db:96:34:c6: eb:fb:46:ab:ab:01:20:3a:80:3a:54:54:df:a1:d3: 26:40:2b:a6:32:af:fb:e6:c2:4f:b5:07:42:97:fc: 2e:05:9f:a1:93:3b:84:e5:d3:39:69:db:03:1a:93: 56:bd:e7:4f:4d:27:a3:81:83:b5:e3:8d:1e:11:e0: 68:dc:06:f1:8d:85:5e:f9:bf:32:bb:ad:11:19:0b: 9b:ac:4f:1a:d6:96:3e:69:3b:f9:80:cd:e2:87:cc: 60:6d:0d:d7:2d:f1:d8:38:aa:8b:4d:df:b5:2e:f7: 1e:42:ff:b5:ba:5c:4e:46:35:12:be:3c:cf:3e:1b: e5:99:22:7e:1e:7b:88:11:e6:b7:f7:a5:a6:05:61: 02:f1:0c:13:9c:23:e7:e8:7d:6a:3b:6a:da:2c:7b: f8:1e:aa:23:f4:54:34:28:51:8f:3d:3b:cb:82:4b: 08:bd:c8:33:13:37:e9:91:7e:f3:e6:82:ef:02:1f: e8:3b:0f:4d:4f:8a:66:00:b9:34:b1:42:a9:28:03: 0b:4c:e3:f4:64:64:53:62:ab:21:d0:e9:ef:9e:43: cd:d5:07:11:11:3b:f5:26:31:3e:6f:35:c7:41:49: 26:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:42:28:B2:04:EB:C4:F6:42:E2:8E:2C:C1:4C:6B:67:37:43:DC:DC X509v3 Authority Key Identifier: keyid:58:47:F1:F4:F6:BC:B2:A4:75:8A:C8:A9:97:BC:10:80:00:E4:18:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WEfx9Pa8sqR1isipl7wQgADkGNE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/38006f-fbfc-48aa-85ef-065bc28c2a52/1/WEfx9Pa8sqR1isipl7wQgADkGNE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6e:93:ae:bf:fc:bf:b4:07:99:a7:09:20:47:46:26:2c:5f: d0:8c:b3:0b:be:c1:43:6b:0c:a6:eb:35:b4:c5:39:f8:23:5a: d8:ad:da:c8:fb:09:53:d5:9f:b0:9f:56:7b:5b:a4:e7:ae:48: f5:4b:db:40:9f:00:ab:33:c6:8f:25:33:dd:ee:d4:fe:ec:ed: 28:08:e8:55:7c:a6:84:0c:e5:b7:2a:ad:e1:5c:2c:cf:d6:66: 09:2f:ae:9f:65:1a:d9:4c:80:08:92:c6:8c:d6:9c:d9:ac:08: 7d:b8:52:6e:be:52:4f:bb:ef:d7:6a:ba:28:1c:87:22:4a:32: 8d:27:54:05:65:94:3d:fa:61:bf:31:fa:d5:a2:65:31:ec:bb: c2:57:33:e8:99:ce:97:b1:0e:53:cc:66:8f:c6:9d:5d:b5:02: 49:68:3d:86:b8:e4:f3:c5:b3:76:d7:26:d9:bd:03:16:7e:53: 9a:5b:75:22:5c:81:ac:8d:e5:37:d7:4c:ce:32:2c:35:76:4d: e9:bd:7b:fb:b9:d8:e9:3e:67:4b:09:20:9b:3f:9d:cf:9b:2d: 98:7b:a1:2a:6e:42:59:f4:b3:53:c3:38:0e:e4:d7:81:63:31: ac:1b:72:31:1a:72:b8:e6:07:4a:76:e1:dd:05:9a:56:3b:ab: 2d:a0:06:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdsHA9Oin1ZgrrFL53/UCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NDdmMWY0ZjZiY2IyYTQ3NThhYzhhOTk3YmMxMDgwMDBl NDE4ZDEwHhcNMjUxMjI2MDcwMTUzWhcNMjUxMjI3MDcwMTUzWjAzMTEwLwYDVQQD Eyg1MTQyMjhiMjA0ZWJjNGY2NDJlMjhlMmNjMTRjNmI2NzM3NDNkY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+00g+mbWiMHTaA+bqgaNTwhWdaR BpdNU9uWNMbr+0arqwEgOoA6VFTfodMmQCumMq/75sJPtQdCl/wuBZ+hkzuE5dM5 adsDGpNWvedPTSejgYO1440eEeBo3AbxjYVe+b8yu60RGQubrE8a1pY+aTv5gM3i h8xgbQ3XLfHYOKqLTd+1LvceQv+1ulxORjUSvjzPPhvlmSJ+HnuIEea396WmBWEC 8QwTnCPn6H1qO2raLHv4Hqoj9FQ0KFGPPTvLgksIvcgzEzfpkX7z5oLvAh/oOw9N T4pmALk0sUKpKAMLTOP0ZGRTYqsh0OnvnkPN1QcRETv1JjE+bzXHQUkmywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFCKLIE68T2QuKOLMFMa2c3Q9zcMB8GA1UdIwQY MBaAFFhH8fT2vLKkdYrIqZe8EIAA5BjRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYt MDY1YmMyOGMyYTUyLzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8zODAwNmYtZmJmYy00OGFhLTg1ZWYtMDY1YmMyOGMyYTUy LzEvV0VmeDlQYThzcVIxaXNpcGw3d1FnQURrR05FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiW6Trr/8 v7QHmacJIEdGJixf0IyzC77BQ2sMpus1tMU5+CNa2K3ayPsJU9WfsJ9We1uk565I 9UvbQJ8AqzPGjyUz3e7U/uztKAjoVXymhAzltyqt4Vwsz9ZmCS+un2Ua2UyACJLG jNac2awIfbhSbr5ST7vv12q6KByHIkoyjSdUBWWUPfphvzH61aJlMey7wlcz6JnO l7EOU8xmj8adXbUCSWg9hrjk88Wzdtcm2b0DFn5Tmlt1IlyBrI3lN9dMzjIsNXZN 6b17+7nY6T5nSwkgmz+dz5stmHuhKm5CWfSzU8M4DuTXgWMxrBtyMRpyuOYHSnbh 3QWaVjurLaAGJA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:26 2025 by rpki-client