This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft File: WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json) Hash identifier: fK+GKiFg+nrKSHdqsYMQycb/KvmQacznZ+tEJuYT6nM= Subject key identifier: 82:26:8D:F0:93:3F:7C:07:00:10:8A:E1:2B:B5:0B:94:DF:AA:27:1A Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25 Certificate issuer: /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325 Certificate serial: 019B1C17E693CA2D2E8564CBD39C221C3843 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft Manifest number: 0E97 Signing time: Sun 14 Dec 2025 09:01:26 +0000 Manifest this update: Sun 14 Dec 2025 09:01:26 +0000 Manifest next update: Mon 15 Dec 2025 09:01:26 +0000 Files and hashes: 1: NpfRtoVnz3NxGuD-uEbggfqrJTM.roa (hash: tIkhKB+ig4LtT1LifK/STgZvceUuRWeXKrf22HpiIlA=) 2: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: KZRSNw5MGBnMCgBNoiBl2UlAZf6mK8m1soq6kSAB1kU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:17:e6:93:ca:2d:2e:85:64:cb:d3:9c:22:1c:38:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325 Validity Not Before: Dec 14 09:01:26 2025 GMT Not After : Dec 15 09:01:26 2025 GMT Subject: CN=82268df0933f7c0700108ae12bb50b94dfaa271a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:cf:9e:78:2e:cd:56:4d:a0:4b:89:c8:ea: 54:c5:fc:95:10:6a:dd:4e:89:7e:15:2b:c8:5c:dc: df:d4:47:62:cb:b2:08:07:b0:ce:86:c8:8c:0c:3a: 19:01:27:5a:49:c7:b3:b5:b5:5a:56:4a:ba:7f:6e: 0f:53:f2:5b:7c:7d:fd:1b:94:93:92:69:5e:9d:19: cf:e5:2e:6d:9f:32:b8:99:34:22:f1:c2:49:d1:65: 83:5c:f1:cc:af:03:9f:f0:b9:2d:83:c5:2f:b3:50: 6e:8d:91:29:fc:41:49:b1:c5:89:46:66:ff:17:10: ca:87:e2:08:9a:ae:a4:93:1a:23:75:47:e2:37:17: 21:0e:fa:fe:b7:03:d4:ff:bc:c5:eb:ad:d6:16:96: 4b:a8:a6:11:17:30:f7:81:a2:87:c1:0c:0c:ef:18: 35:4d:80:df:65:63:ac:9e:f3:26:df:a4:c2:cc:94: 96:50:ef:90:ca:15:0c:77:13:50:c1:d2:20:53:44: 47:1b:c5:5b:d3:85:61:1e:72:a8:95:3a:12:71:14: 8a:80:67:37:0c:78:0f:c0:a4:3f:bf:82:aa:90:22: f6:e1:92:46:ab:b1:40:71:1d:40:65:33:c3:07:94: f9:21:fd:3b:27:ab:a3:fa:f2:11:8d:e7:3a:48:bb: ab:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:26:8D:F0:93:3F:7C:07:00:10:8A:E1:2B:B5:0B:94:DF:AA:27:1A X509v3 Authority Key Identifier: keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:26:73:47:6c:b0:70:c6:10:82:de:c4:47:1f:29:17:00:b1: e8:76:61:5c:ad:2a:da:fb:d9:1a:ae:a2:3f:f8:df:b5:4d:b8: d8:49:3b:e1:6b:0c:02:2c:2f:59:da:36:cf:87:c3:14:cd:bb: 14:03:fc:85:38:6a:a6:91:f4:42:17:a9:e6:f2:ba:cb:64:f6: ed:5b:4c:bd:0e:6f:d7:10:ed:b5:5f:ba:2c:66:cd:68:b1:32: eb:14:c6:69:5f:02:b1:0b:19:9c:4c:0c:4a:08:ef:c1:04:47: 00:6d:b0:86:b3:a7:d9:7d:61:64:16:71:e5:d4:87:2c:f6:57: c0:18:b5:43:31:0b:5a:46:1e:27:08:44:56:14:be:6c:bb:cb: 45:93:68:6d:49:a9:25:e9:70:3b:0b:41:d5:d7:4f:f1:75:8b: 8e:db:14:35:c9:48:16:a4:e5:0c:13:a7:74:d6:c1:60:dd:6c: f7:40:51:69:1f:3b:25:0c:40:67:28:22:28:0d:22:6b:0c:dd: 35:d0:11:ea:84:18:fb:e1:06:39:2c:78:e1:0e:ab:4f:d6:5e: da:f0:04:48:a8:42:22:67:2e:ce:e2:56:9f:00:6b:bc:2c:72: 39:fe:d7:27:84:4c:b6:f6:e0:91:24:97:bc:aa:33:83:88:6e: c8:8c:69:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscF+aTyi0uhWTL05wiHDhDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTI2YzJiYzUwM2E3YzY4MTI4ZDJhZTFhYjRjZDM3ZGVi OTkzMjUwHhcNMjUxMjE0MDkwMTI2WhcNMjUxMjE1MDkwMTI2WjAzMTEwLwYDVQQD Eyg4MjI2OGRmMDkzM2Y3YzA3MDAxMDhhZTEyYmI1MGI5NGRmYWEyNzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjLPnnguzVZNoEuJyOpUxfyVEGrd Tol+FSvIXNzf1Ediy7IIB7DOhsiMDDoZASdaSceztbVaVkq6f24PU/JbfH39G5ST kmlenRnP5S5tnzK4mTQi8cJJ0WWDXPHMrwOf8Lktg8Uvs1BujZEp/EFJscWJRmb/ FxDKh+IImq6kkxojdUfiNxchDvr+twPU/7zF663WFpZLqKYRFzD3gaKHwQwM7xg1 TYDfZWOsnvMm36TCzJSWUO+QyhUMdxNQwdIgU0RHG8Vb04VhHnKolToScRSKgGc3 DHgPwKQ/v4KqkCL24ZJGq7FAcR1AZTPDB5T5If07J6uj+vIRjec6SLurOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIImjfCTP3wHABCK4Su1C5TfqicaMB8GA1UdIwQY MBaAFFiibCvFA6fGgSjSrhq0zTfeuZMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGIt YTlkM2VlZjA2YzY3LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGItYTlkM2VlZjA2YzY3 LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5CZzR2yw cMYQgt7ERx8pFwCx6HZhXK0q2vvZGq6iP/jftU242Ek74WsMAiwvWdo2z4fDFM27 FAP8hThqppH0Qhep5vK6y2T27VtMvQ5v1xDttV+6LGbNaLEy6xTGaV8CsQsZnEwM SgjvwQRHAG2whrOn2X1hZBZx5dSHLPZXwBi1QzELWkYeJwhEVhS+bLvLRZNobUmp JelwOwtB1ddP8XWLjtsUNclIFqTlDBOndNbBYN1s90BRaR87JQxAZygiKA0iawzd NdAR6oQY++EGOSx44Q6rT9Ze2vAESKhCImcuzuJWnwBrvCxyOf7XJ4RMtvbgkSSX vKozg4huyIxpqg== -----END CERTIFICATE-----Generated at Sun Dec 14 12:23:59 2025 by rpki-client