This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft File: WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json) Hash identifier: MKVTHr8Ugz9zBJddKt8xxccNht69sIJQA9OcBN4cF9s= Subject key identifier: 8E:AF:2E:3C:EF:30:A8:70:CB:F1:6C:46:DE:98:9C:9A:EA:43:BB:67 Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF Certificate issuer: /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Certificate serial: 019B4814B83B442EC6AEA4961B8464F6C161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft Manifest number: 1577 Signing time: Mon 22 Dec 2025 22:01:15 +0000 Manifest this update: Mon 22 Dec 2025 22:01:15 +0000 Manifest next update: Tue 23 Dec 2025 22:01:15 +0000 Files and hashes: 1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=) 2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=) 3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: ARdYvTYkRqfzKNTZNHvpU4W7RUrzIIGQmQmfOcgGhp8=) 4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=) 5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=) 6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:b8:3b:44:2e:c6:ae:a4:96:1b:84:64:f6:c1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef Validity Not Before: Dec 22 22:01:15 2025 GMT Not After : Dec 23 22:01:15 2025 GMT Subject: CN=8eaf2e3cef30a870cbf16c46de989c9aea43bb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:af:3f:ce:4d:f4:82:64:f5:f3:8d:b2:78:68: 23:a6:b7:74:10:f7:2f:7f:60:ed:7c:9b:21:7d:f2: 1a:da:2a:28:c8:91:06:3a:dc:47:41:80:80:d3:24: 68:2b:0c:96:40:f7:f1:a3:5c:3d:48:73:6e:5f:36: 64:d8:96:b1:e1:82:c5:c0:21:1c:86:83:89:d7:5d: da:5e:35:ed:b5:82:2c:62:0f:dd:c0:00:d5:7a:1d: 3f:04:7e:62:fd:04:2d:ed:5e:ff:ca:29:6c:70:81: 38:34:63:ca:b4:78:a4:8f:61:bb:76:58:da:0b:94: 8a:fc:3d:89:d1:14:c4:0d:0e:78:d7:65:2d:23:6d: d5:f3:54:fc:42:d8:1d:14:28:bf:32:e0:42:56:81: 4e:73:2d:87:5f:a5:ee:0f:21:55:d3:1e:69:69:d9: e4:d1:bd:1b:f4:b3:4e:c1:b1:e7:1b:a6:0f:e8:06: 20:57:74:7c:e5:82:c5:ed:f0:db:15:b0:d9:07:a0: d0:5f:73:f0:7b:e8:a5:53:a8:2a:80:9b:1e:5f:3b: 32:26:bf:81:59:0b:a4:25:3e:80:1c:d7:8a:63:27: de:a5:b7:5d:ff:56:6a:9d:fc:32:ff:88:ba:4c:ec: ab:bd:ac:9b:4a:d4:ed:5c:46:d0:80:f3:80:f2:40: 9f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AF:2E:3C:EF:30:A8:70:CB:F1:6C:46:DE:98:9C:9A:EA:43:BB:67 X509v3 Authority Key Identifier: keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d2:35:eb:94:6a:ee:7a:d7:57:4d:66:5b:25:65:54:c7:a0: a2:31:34:99:1b:89:49:60:0c:61:ea:7e:ae:7b:8b:87:f9:7e: c7:86:8f:d3:1c:da:6f:2a:ab:f3:78:38:28:cc:2f:ac:37:61: f1:96:54:1a:d2:1b:53:02:c9:fe:64:b0:25:f4:16:4e:83:89: 49:fc:43:91:39:fc:32:f0:d8:5a:75:49:0d:b2:f7:b2:d8:9a: 75:bb:27:5f:72:be:ac:d7:29:94:61:66:b3:11:1e:5d:62:a6: 00:dc:1c:3a:eb:06:d1:6f:1d:40:34:b4:e0:11:58:e8:8d:56: b0:4d:55:db:e2:40:18:d5:05:af:13:76:57:4a:a1:59:74:58: d1:b8:76:b7:12:3b:d2:ab:88:ac:98:dd:5b:ee:2c:89:22:ad: c6:d1:fe:90:1f:6b:f8:8c:76:90:6b:35:26:20:9a:e6:3d:1c: 31:ea:a4:0e:9e:33:4f:3e:80:b3:8a:28:5b:72:41:3d:db:10: ef:14:1d:b7:96:26:9a:0b:84:5a:d6:4a:f9:3a:8c:0a:e0:c9: 58:79:b5:27:6a:03:19:5d:ac:c4:1d:f0:eb:e7:d0:2c:14:d4: 06:0a:68:25:c4:33:3f:14:b0:fc:02:ce:11:ee:c0:75:76:83: 06:e2:be:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFLg7RC7GrqSWG4Rk9sFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk MzUyZWYwHhcNMjUxMjIyMjIwMTE1WhcNMjUxMjIzMjIwMTE1WjAzMTEwLwYDVQQD Eyg4ZWFmMmUzY2VmMzBhODcwY2JmMTZjNDZkZTk4OWM5YWVhNDNiYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq8/zk30gmT1842yeGgjprd0EPcv f2DtfJshffIa2iooyJEGOtxHQYCA0yRoKwyWQPfxo1w9SHNuXzZk2Jax4YLFwCEc hoOJ113aXjXttYIsYg/dwADVeh0/BH5i/QQt7V7/yilscIE4NGPKtHikj2G7dlja C5SK/D2J0RTEDQ5412UtI23V81T8QtgdFCi/MuBCVoFOcy2HX6XuDyFV0x5padnk 0b0b9LNOwbHnG6YP6AYgV3R85YLF7fDbFbDZB6DQX3Pwe+ilU6gqgJseXzsyJr+B WQukJT6AHNeKYyfepbdd/1Zqnfwy/4i6TOyrvaybStTtXEbQgPOA8kCfMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6vLjzvMKhwy/FsRt6YnJrqQ7tnMB8GA1UdIwQY MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct NmIwMDY1NTA4OTk2LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2 LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXtI165Rq 7nrXV01mWyVlVMegojE0mRuJSWAMYep+rnuLh/l+x4aP0xzabyqr83g4KMwvrDdh 8ZZUGtIbUwLJ/mSwJfQWToOJSfxDkTn8MvDYWnVJDbL3stiadbsnX3K+rNcplGFm sxEeXWKmANwcOusG0W8dQDS04BFY6I1WsE1V2+JAGNUFrxN2V0qhWXRY0bh2txI7 0quIrJjdW+4siSKtxtH+kB9r+Ix2kGs1JiCa5j0cMeqkDp4zTz6As4ooW3JBPdsQ 7xQdt5YmmguEWtZK+TqMCuDJWHm1J2oDGV2sxB3w6+fQLBTUBgpoJcQzPxSw/ALO Ee7AdXaDBuK+eg== -----END CERTIFICATE-----Generated at Tue Dec 23 05:49:03 2025 by rpki-client