This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json) Hash identifier: VFfnJnkh38J5WxK5HQ2lkuhMBuzcT77tmmKSinTj2sE= Subject key identifier: 4E:22:BF:37:AE:C4:EC:AC:0A:D2:4C:D2:61:8F:34:2B:05:34:11:18 Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8 Certificate serial: 019AF5AE800FEF478FCEE626C38BD6910251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft Manifest number: 1534 Signing time: Sat 06 Dec 2025 22:00:45 +0000 Manifest this update: Sat 06 Dec 2025 22:00:45 +0000 Manifest next update: Sun 07 Dec 2025 22:00:45 +0000 Files and hashes: 1: 36vP2RZocex6kBCMTbzrkEU173I.roa (hash: aEiOZj8YmAwZwpDXXxUuOkmJFeM2AJc91e5CxmnRxTk=) 2: Orz1byvi4W2gEs0XQxLqSRV1Cd0.roa (hash: uqVz+HdI8skKqSoIO5b4CKUGzxdeiewseboy6iVD14g=) 3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: GFkLJsVEdzUkvjmHk0xl4+OH8z45CYHdrRmejeAGf7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:80:0f:ef:47:8f:ce:e6:26:c3:8b:d6:91:02:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Validity Not Before: Dec 6 22:00:45 2025 GMT Not After : Dec 7 22:00:45 2025 GMT Subject: CN=4e22bf37aec4ecac0ad24cd2618f342b05341118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4f:8d:c5:f1:a1:50:36:77:09:33:89:7a:81: 7b:c3:ab:f1:fc:19:1a:40:36:bd:0c:eb:c9:28:10: 8b:63:a7:73:ba:62:3e:16:64:d5:a4:69:dd:0e:6d: 48:b8:ca:1b:66:fd:9c:cd:de:7a:71:f9:50:97:c9: f7:ee:04:31:56:48:d6:f1:86:1a:81:ab:77:e0:aa: 5c:fe:27:b8:a3:0b:24:8c:e5:d6:71:1b:93:e8:ab: c2:49:af:a9:fe:ef:ea:f9:b1:fa:21:cd:07:50:b7: de:8d:54:35:94:68:2b:04:70:1d:a3:0c:93:f8:3d: c3:c0:06:b9:e6:d4:39:2f:2b:74:36:c0:d9:8b:e8: ef:e8:16:96:0d:a4:98:93:d4:48:fc:0e:1a:ec:64: bd:cf:5a:b4:f1:f0:9f:97:83:26:a5:50:0b:0d:1c: b3:0d:a8:c8:ca:d8:1e:e7:77:e4:64:cc:99:1a:1b: de:c6:1e:fd:5b:db:37:ad:74:7d:df:20:84:3b:d4: 4c:76:e1:d6:46:6f:56:a0:5b:12:a3:40:08:64:f3: a8:e7:87:1d:8d:00:0c:80:be:1f:4e:eb:d1:5a:23: 25:b5:75:68:37:e2:2b:3c:26:ea:fd:0b:14:42:ae: 5c:bf:2f:07:58:b4:7e:ca:12:3b:e0:29:ce:96:f5: 27:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:BF:37:AE:C4:EC:AC:0A:D2:4C:D2:61:8F:34:2B:05:34:11:18 X509v3 Authority Key Identifier: keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bf:17:cf:aa:03:73:4d:77:24:90:d5:3d:48:6c:e0:d8:4f: 85:12:b8:bb:f5:41:d8:84:52:6a:3a:c4:2d:81:d7:5e:f2:61: 61:0b:ad:f7:81:18:44:d1:a0:d5:e5:21:ea:70:ea:20:bb:68: 3c:42:e0:4e:ec:f1:e2:fe:71:af:85:a7:9e:80:a2:70:1f:cf: ab:8c:7d:30:62:51:20:87:76:1f:11:36:44:33:3a:85:b9:11: f8:03:ac:54:d7:48:58:fa:a9:29:b4:4f:b3:7e:65:00:92:65: d2:27:c4:9e:0e:35:cb:c1:f5:69:a7:68:dd:ef:6b:d7:20:0b: b3:4c:06:65:68:7a:03:0f:7e:77:41:4d:c1:0d:d0:fc:0e:80: 5f:d1:31:f9:c5:7c:14:da:bc:45:b7:26:59:04:f3:e5:51:58: 14:af:12:d3:c0:5f:ef:b1:7a:e9:e3:bd:82:56:2b:4b:c2:01: 84:3d:e3:a3:15:51:82:a6:f1:c8:79:f4:4b:81:c1:b3:f0:11: f1:15:d5:87:d3:8e:9c:aa:84:5d:f1:8f:27:59:d3:cb:71:46: c1:60:83:ad:26:72:37:bf:5c:f1:ef:e8:f3:0a:e4:79:92:57: b1:8a:6c:60:02:68:93:d4:b9:94:45:3b:a0:c4:c8:39:39:1a: 7b:64:8e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1roAP70ePzuYmw4vWkQJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5 YjNiYTgwHhcNMjUxMjA2MjIwMDQ1WhcNMjUxMjA3MjIwMDQ1WjAzMTEwLwYDVQQD Eyg0ZTIyYmYzN2FlYzRlY2FjMGFkMjRjZDI2MThmMzQyYjA1MzQxMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU+NxfGhUDZ3CTOJeoF7w6vx/Bka QDa9DOvJKBCLY6dzumI+FmTVpGndDm1IuMobZv2czd56cflQl8n37gQxVkjW8YYa gat34Kpc/ie4owskjOXWcRuT6KvCSa+p/u/q+bH6Ic0HULfejVQ1lGgrBHAdowyT +D3DwAa55tQ5Lyt0NsDZi+jv6BaWDaSYk9RI/A4a7GS9z1q08fCfl4MmpVALDRyz DajIytge53fkZMyZGhvexh79W9s3rXR93yCEO9RMduHWRm9WoFsSo0AIZPOo54cd jQAMgL4fTuvRWiMltXVoN+IrPCbq/QsUQq5cvy8HWLR+yhI74CnOlvUnGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4ivzeuxOysCtJM0mGPNCsFNBEYMB8GA1UdIwQY MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFr8Xz6oD c013JJDVPUhs4NhPhRK4u/VB2IRSajrELYHXXvJhYQut94EYRNGg1eUh6nDqILto PELgTuzx4v5xr4WnnoCicB/Pq4x9MGJRIId2HxE2RDM6hbkR+AOsVNdIWPqpKbRP s35lAJJl0ifEng41y8H1aado3e9r1yALs0wGZWh6Aw9+d0FNwQ3Q/A6AX9Ex+cV8 FNq8RbcmWQTz5VFYFK8S08Bf77F66eO9glYrS8IBhD3joxVRgqbxyHn0S4HBs/AR 8RXVh9OOnKqEXfGPJ1nTy3FGwWCDrSZyN79c8e/o8wrkeZJXsYpsYAJok9S5lEU7 oMTIOTkae2SO8g== -----END CERTIFICATE-----Generated at Sun Dec 7 06:04:33 2025 by rpki-client