This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json) Hash identifier: ypVWppOtK8NpCLDZWAfgqa/9Xf5lx7gBvlPny1ac8pM= Subject key identifier: 5E:10:FD:59:F2:FF:3E:41:77:6F:AF:20:F3:07:24:E6:AC:0F:66:AC Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019B2408208A696EB9C25106D4E006A56CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft Manifest number: 1790 Signing time: Mon 15 Dec 2025 22:01:10 +0000 Manifest this update: Mon 15 Dec 2025 22:01:10 +0000 Manifest next update: Tue 16 Dec 2025 22:01:10 +0000 Files and hashes: 1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=) 2: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=) 3: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: MzNWjUodeGvP6UiNJiVfS1UEUYVbMEMFcl/MDghQ2Pg=) 4: deip-a1nKqtxdR8MxNP4CLXk9DQ.roa (hash: MuDORlB5KKMApbLSzyMuwBEYboiHiJyqO3SnrsnY1ps=) 5: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=) 6: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=) 7: mcfFx0Wb6NuDWnlUvsxDmFga9i0.roa (hash: OdsGFptNtjlJ7JmhEzxm/t0Cz+2j+Ta4zs8y6b8C4bU=) 8: nrPQs8zaNxBymroioM8igUcwELI.roa (hash: VR7Hvj6PagX2e2gWWlhJoQowQbhnCL7ZdCxoWqsmQjg=) 9: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:08:20:8a:69:6e:b9:c2:51:06:d4:e0:06:a5:6c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Dec 15 22:01:10 2025 GMT Not After : Dec 16 22:01:10 2025 GMT Subject: CN=5e10fd59f2ff3e41776faf20f30724e6ac0f66ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:34:62:49:a2:dd:3c:3f:d9:1b:05:87:70:ad: 30:f8:5e:4d:0a:8a:e2:90:a1:ec:d0:e3:00:29:1a: 1c:64:42:86:ee:e8:bc:10:28:ce:8c:e5:e5:d4:bb: 6b:b7:1d:17:be:b8:93:e5:a7:5f:41:68:cf:8e:3f: a8:2b:4a:ba:1a:24:82:4b:3a:b1:64:8f:a5:28:5a: 87:b9:7f:e3:00:dc:63:5e:9f:af:e4:31:1e:ca:19: 15:82:13:75:c4:69:7a:7c:32:b1:2a:1e:8e:f8:87: a0:00:f1:9a:be:99:1c:74:8b:10:91:d8:af:de:30: e0:2c:cd:35:57:f6:bd:a3:df:b1:5d:66:c2:9f:1b: 47:f6:f0:fe:83:16:e8:8c:27:0f:9d:b0:d6:17:cb: 61:bc:49:17:f0:54:5e:df:06:09:3c:b1:be:26:80: f8:9f:a7:f5:77:c7:5e:05:0e:7b:d5:7e:a7:3e:00: 47:cd:88:e4:5c:41:e5:46:56:fa:f4:88:6c:8c:1a: db:35:83:05:de:90:2b:e9:36:1a:2c:56:5c:23:87: a7:10:e4:f7:33:6f:6a:77:fa:f2:37:a3:b2:62:6a: 7e:14:16:7d:46:7c:a5:b1:aa:eb:7d:0d:19:0d:4e: 25:a1:ad:a0:e9:26:58:1a:39:e7:29:4e:c7:ec:14: d5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:10:FD:59:F2:FF:3E:41:77:6F:AF:20:F3:07:24:E6:AC:0F:66:AC X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0a:95:ae:ad:0e:42:bb:f9:10:18:0b:d0:b8:cc:15:7c:fd: 46:dc:31:1c:f4:31:c0:22:71:65:7a:6f:8a:83:ec:72:f7:0f: 5a:34:50:6b:ef:d5:46:f5:37:6a:5d:80:58:6f:ec:25:f4:2c: 34:e8:e4:a3:7b:b8:69:39:63:56:d4:01:22:c2:bd:47:22:12: 23:95:13:02:8d:5d:b6:d7:58:93:60:26:ee:52:81:eb:7a:64: 91:a5:10:c3:39:32:c5:10:fe:5b:64:8c:3b:c6:6f:0e:08:15: bf:e1:57:a1:09:90:dd:64:de:f1:c6:2a:99:f9:e9:7a:14:1c: 30:8d:1e:98:ac:0d:a3:6c:b2:e7:1f:99:b1:ce:90:84:6f:df: 1e:91:31:7c:c6:58:b0:f3:2a:fe:92:0f:74:41:82:bc:25:57: 6e:8c:b7:5e:c4:29:e8:df:07:a3:b8:2b:7d:f1:6b:e3:8b:4d: 7e:1d:7f:b9:f0:9b:b6:1b:2f:a8:b8:34:b7:49:85:a5:dc:48: 75:97:f8:e9:5c:11:2d:51:e7:05:d4:fc:b5:a8:48:e6:a6:72: e2:e2:64:c6:c1:a1:de:f8:ff:99:5a:39:77:71:c0:14:3a:b1: 3b:f7:b0:59:27:80:c8:45:27:38:91:9e:21:f2:3b:c0:67:8e: 12:97:8e:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskCCCKaW65wlEG1OAGpWy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjUxMjE1MjIwMTEwWhcNMjUxMjE2MjIwMTEwWjAzMTEwLwYDVQQD Eyg1ZTEwZmQ1OWYyZmYzZTQxNzc2ZmFmMjBmMzA3MjRlNmFjMGY2NmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jRiSaLdPD/ZGwWHcK0w+F5NCori kKHs0OMAKRocZEKG7ui8ECjOjOXl1Ltrtx0XvriT5adfQWjPjj+oK0q6GiSCSzqx ZI+lKFqHuX/jANxjXp+v5DEeyhkVghN1xGl6fDKxKh6O+IegAPGavpkcdIsQkdiv 3jDgLM01V/a9o9+xXWbCnxtH9vD+gxbojCcPnbDWF8thvEkX8FRe3wYJPLG+JoD4 n6f1d8deBQ571X6nPgBHzYjkXEHlRlb69IhsjBrbNYMF3pAr6TYaLFZcI4enEOT3 M29qd/ryN6OyYmp+FBZ9RnylsarrfQ0ZDU4loa2g6SZYGjnnKU7H7BTV0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4Q/Vny/z5Bd2+vIPMHJOasD2asMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbgqVrq0O Qrv5EBgL0LjMFXz9RtwxHPQxwCJxZXpvioPscvcPWjRQa+/VRvU3al2AWG/sJfQs NOjko3u4aTljVtQBIsK9RyISI5UTAo1dttdYk2Am7lKB63pkkaUQwzkyxRD+W2SM O8ZvDggVv+FXoQmQ3WTe8cYqmfnpehQcMI0emKwNo2yy5x+Zsc6QhG/fHpExfMZY sPMq/pIPdEGCvCVXboy3XsQp6N8Ho7grffFr44tNfh1/ufCbthsvqLg0t0mFpdxI dZf46VwRLVHnBdT8tahI5qZy4uJkxsGh3vj/mVo5d3HAFDqxO/ewWSeAyEUnOJGe IfI7wGeOEpeO9A== -----END CERTIFICATE-----Generated at Tue Dec 16 00:48:30 2025 by rpki-client