This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft File: WN0QF8U0V6ipIUGWh73oqLjrVhE.mft (raw, json) Hash identifier: wfRxDExjgg5FftNVa5HlWn6wwEDISGqq8OzMq/Z0H40= Subject key identifier: FD:02:BA:7A:FE:6E:80:F0:4C:1F:74:DC:36:40:58:E0:C9:A1:5B:7B Authority key identifier: 58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11 Certificate issuer: /CN=58dd1017c53457a8a921419687bde8a8b8eb5611 Certificate serial: 019B59AD1A382C2B252DEC985772E203ADA9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft Manifest number: 0E3A Signing time: Fri 26 Dec 2025 08:01:15 +0000 Manifest this update: Fri 26 Dec 2025 08:01:15 +0000 Manifest next update: Sat 27 Dec 2025 08:01:15 +0000 Files and hashes: 1: WN0QF8U0V6ipIUGWh73oqLjrVhE.crl (hash: rfxpEnHfSEOhunUU7xnTQ+PRMFkaAaTmusfgaK54N1Q=) 2: jywZ9UYkMiz97kwCY4FM3q95-aY.roa (hash: u66se+BAVSb1YHlBvMoU6Y/uC6cRzOafh9TsvAog2jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:1a:38:2c:2b:25:2d:ec:98:57:72:e2:03:ad:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58dd1017c53457a8a921419687bde8a8b8eb5611 Validity Not Before: Dec 26 08:01:15 2025 GMT Not After : Dec 27 08:01:15 2025 GMT Subject: CN=fd02ba7afe6e80f04c1f74dc364058e0c9a15b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8e:eb:81:6f:60:99:06:7c:f9:e2:d6:0f:63: 83:eb:f9:4f:7e:19:28:95:ab:cd:5a:42:69:9c:20: b3:94:4b:07:9c:32:78:00:83:b5:3e:5b:bd:e4:2c: 1c:55:25:9c:a1:b6:31:89:2a:e9:7e:c9:2b:40:ad: 0a:63:f0:54:3a:9d:5b:ea:01:58:4c:aa:0c:0b:b5: b6:b0:67:55:a2:8d:24:f7:90:2b:5f:cc:37:52:31: c0:4b:2e:60:0e:e3:b9:e6:04:8f:3c:f1:3d:7f:76: ed:6d:14:6c:1f:c6:b5:2d:bf:8e:35:53:d5:13:1c: d7:4e:82:61:9a:04:f9:81:ec:3a:c3:97:7f:33:4a: 30:2e:69:6d:64:0b:93:a1:5f:9c:2b:1f:43:2f:e6: d9:ab:7a:ac:e2:f4:4b:99:e3:ca:81:56:b5:f8:0e: 4d:cd:b3:8a:c6:9a:1d:f3:b6:3a:d5:8e:ca:8e:8a: cd:ab:a0:9f:43:80:ed:28:58:bf:01:06:44:54:b5: 1a:e1:44:94:d0:53:68:a5:e0:de:98:75:71:42:a2: 5b:2a:9d:63:91:14:77:09:a7:b2:78:86:3b:b2:b4: 5d:c6:80:dd:cd:0b:5d:96:c1:1f:19:d4:b6:24:7d: f8:49:70:52:71:49:72:a4:1e:59:e9:9a:1e:74:dc: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:02:BA:7A:FE:6E:80:F0:4C:1F:74:DC:36:40:58:E0:C9:A1:5B:7B X509v3 Authority Key Identifier: keyid:58:DD:10:17:C5:34:57:A8:A9:21:41:96:87:BD:E8:A8:B8:EB:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN0QF8U0V6ipIUGWh73oqLjrVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/606dde-fc51-456e-b5f1-dcaf7ef7ae3a/1/WN0QF8U0V6ipIUGWh73oqLjrVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e8:26:a9:b3:cd:56:49:56:d0:97:0e:f7:c3:ef:26:36:55: 80:05:56:7e:15:fd:bb:a1:7a:bc:87:56:c8:a4:f7:c0:6e:77: d9:ae:e5:76:76:4b:38:02:4d:36:2a:f2:6c:33:8e:f1:39:51: 5e:07:27:e6:9f:58:37:e5:f8:7e:8e:f8:5e:2c:ce:58:9e:54: 8c:72:98:a5:0b:ff:04:98:a4:4e:3b:08:05:de:ef:c4:51:7a: f8:57:b1:e5:95:af:72:9b:d5:64:10:2f:f4:79:93:03:d1:dd: dc:93:14:19:11:63:18:96:55:12:ee:63:97:e6:f1:7b:b8:1c: de:de:20:e9:43:a0:af:5a:69:68:03:41:e9:ee:63:24:c1:36: 25:b8:9f:c0:78:d9:f9:1d:4c:13:fa:4a:3e:d3:ee:a9:a1:e8: f5:5b:3e:39:1a:be:ba:36:38:0d:6d:0c:0b:8a:ab:2d:41:4d: f0:89:a8:42:e6:0b:a8:df:81:d6:4d:c7:1c:2c:be:57:ea:59: 27:9b:13:85:f8:e5:87:3f:3b:6d:2a:50:72:2e:15:be:35:44: 31:80:18:26:69:3f:3a:4f:d9:f5:2c:8d:41:86:dc:28:de:15: a1:21:77:72:57:ec:a1:d4:a7:54:ce:42:4f:2e:f7:5e:27:5f: 75:7c:54:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrRo4LCslLeyYV3LiA62pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGQxMDE3YzUzNDU3YThhOTIxNDE5Njg3YmRlOGE4Yjhl YjU2MTEwHhcNMjUxMjI2MDgwMTE1WhcNMjUxMjI3MDgwMTE1WjAzMTEwLwYDVQQD EyhmZDAyYmE3YWZlNmU4MGYwNGMxZjc0ZGMzNjQwNThlMGM5YTE1YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY7rgW9gmQZ8+eLWD2OD6/lPfhko lavNWkJpnCCzlEsHnDJ4AIO1Plu95CwcVSWcobYxiSrpfskrQK0KY/BUOp1b6gFY TKoMC7W2sGdVoo0k95ArX8w3UjHASy5gDuO55gSPPPE9f3btbRRsH8a1Lb+ONVPV ExzXToJhmgT5gew6w5d/M0owLmltZAuToV+cKx9DL+bZq3qs4vRLmePKgVa1+A5N zbOKxpod87Y61Y7KjorNq6CfQ4DtKFi/AQZEVLUa4USU0FNopeDemHVxQqJbKp1j kRR3CaeyeIY7srRdxoDdzQtdlsEfGdS2JH34SXBScUlypB5Z6ZoedNzj7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0Cunr+boDwTB903DZAWODJoVt7MB8GA1UdIwQY MBaAFFjdEBfFNFeoqSFBloe96Ki461YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEt ZGNhZjdlZjdhZTNhLzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC82MDZkZGUtZmM1MS00NTZlLWI1ZjEtZGNhZjdlZjdhZTNh LzEvV04wUUY4VTBWNmlwSVVHV2g3M29xTGpyVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsegmqbPN VklW0JcO98PvJjZVgAVWfhX9u6F6vIdWyKT3wG532a7ldnZLOAJNNirybDOO8TlR Xgcn5p9YN+X4fo74XizOWJ5UjHKYpQv/BJikTjsIBd7vxFF6+Fex5ZWvcpvVZBAv 9HmTA9Hd3JMUGRFjGJZVEu5jl+bxe7gc3t4g6UOgr1ppaANB6e5jJME2JbifwHjZ +R1ME/pKPtPuqaHo9Vs+ORq+ujY4DW0MC4qrLUFN8ImoQuYLqN+B1k3HHCy+V+pZ J5sThfjlhz87bSpQci4VvjVEMYAYJmk/Ok/Z9SyNQYbcKN4VoSF3clfsodSnVM5C Ty73XidfdXxUag== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:45 2025 by rpki-client