This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft File: WSgL6bNNnGabgCDlTdakheMX1y8.mft (raw, json) Hash identifier: 1Ex7X5yn2z9jiOzwCYoeyDlIZUnBGoSw8BqWxXpoHqE= Subject key identifier: EB:2E:E0:81:4A:9C:B0:23:2B:0A:FC:4B:D2:B7:76:71:9D:AF:20:A7 Authority key identifier: 59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F Certificate issuer: /CN=59280be9b34d9c669b8020e54dd6a485e317d72f Certificate serial: 019B13EFA2ED0035F6DD144C6C4BD8AC05FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft Manifest number: 0365 Signing time: Fri 12 Dec 2025 19:00:30 +0000 Manifest this update: Fri 12 Dec 2025 19:00:30 +0000 Manifest next update: Sat 13 Dec 2025 19:00:30 +0000 Files and hashes: 1: WSgL6bNNnGabgCDlTdakheMX1y8.crl (hash: RfvzKZFSzhQ5kaN0tUo73PSRkdUqomQKazpaUh8zHPY=) 2: z-jEZ2GeDlqh8l0l3lIAlNgwWk4.roa (hash: J1d9uUMaCClXsN8LZbNyKK5FGLxWIxUYNiRDjBx501g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:ef:a2:ed:00:35:f6:dd:14:4c:6c:4b:d8:ac:05:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59280be9b34d9c669b8020e54dd6a485e317d72f Validity Not Before: Dec 12 19:00:30 2025 GMT Not After : Dec 13 19:00:30 2025 GMT Subject: CN=eb2ee0814a9cb0232b0afc4bd2b776719daf20a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:bc:55:ca:1a:91:f1:e0:3d:84:78:71:ef: d9:3f:f3:8f:ba:0d:26:0e:6c:a4:38:ef:72:0a:3e: dc:ad:c9:04:a3:20:09:e1:12:93:d8:45:a1:ab:f5: 55:75:c6:ba:be:34:c7:9b:44:2d:12:fa:cc:95:92: 28:a4:fa:ac:c1:50:5d:10:8d:73:6f:a9:53:27:3a: 4d:76:6a:9e:99:f5:09:01:24:51:83:61:8d:e6:64: e8:ec:f9:14:f5:6f:31:46:cb:94:f9:b6:d3:dc:19: 2b:f8:4c:31:eb:21:e8:be:92:65:5e:ba:eb:0d:43: fa:96:90:0b:a0:c2:3d:a6:5c:98:6d:28:ca:bf:99: 0b:33:da:62:c6:3c:31:89:93:19:b4:fb:ca:94:4f: 09:51:8c:1c:26:d0:1e:0a:96:42:68:41:c3:f9:bf: 6f:bb:95:c7:ec:57:8d:46:93:d5:63:92:b8:d9:6e: 01:aa:52:dc:d2:37:0b:9a:4b:51:85:3b:cb:59:e2: 71:d5:d0:55:b8:15:c0:d2:71:75:97:74:af:94:45: c8:05:9d:81:16:61:d5:ea:9a:5f:57:dd:5d:57:7a: 84:98:0e:ac:ba:71:55:b3:87:8f:82:c8:98:6a:57: 82:5b:96:b0:e6:7e:f3:e7:3c:40:ed:51:85:ad:95: 85:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2E:E0:81:4A:9C:B0:23:2B:0A:FC:4B:D2:B7:76:71:9D:AF:20:A7 X509v3 Authority Key Identifier: keyid:59:28:0B:E9:B3:4D:9C:66:9B:80:20:E5:4D:D6:A4:85:E3:17:D7:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSgL6bNNnGabgCDlTdakheMX1y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ec5842-6559-48af-80e0-e0a045075984/1/WSgL6bNNnGabgCDlTdakheMX1y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:92:a1:37:95:68:da:31:96:7b:a2:66:44:cf:1b:4f:cb:6d: 51:09:13:62:bb:51:5d:65:d2:26:ba:d2:d6:b6:48:d6:f9:fa: b0:68:01:5f:ce:b3:c4:30:97:03:d0:55:8f:ae:fd:57:2e:3e: 55:e7:18:da:b5:f8:9d:96:5c:bf:24:1e:17:0b:66:35:61:c0: e1:24:ad:f1:1e:51:6f:8f:86:b0:7c:5c:46:00:c6:23:0f:7a: a6:dd:7f:5c:15:e4:63:93:e5:5d:5d:f8:a3:2a:0e:27:7c:9f: af:05:95:52:77:b4:c0:ca:d8:fe:f9:b3:c2:ea:32:33:50:43: 0b:30:c5:16:41:e7:ce:1f:1b:e6:36:62:c6:35:4e:0a:0c:0f: 16:ad:13:32:bc:d3:5c:62:12:ab:a0:c4:f1:7b:37:3b:d7:9c: 0a:e9:51:d3:1d:c0:4b:03:48:69:ee:1b:9f:c1:1e:11:c8:26: 81:2c:9b:08:7c:fc:a6:f7:61:ab:95:9a:f0:11:af:52:b9:6c: 7a:cb:78:1a:86:52:1a:fd:45:74:34:09:98:8a:53:23:96:cd: 04:22:47:6e:8a:c6:7d:9e:07:0e:21:b2:e4:8d:14:6a:e7:79: 11:0c:56:b4:46:ac:b9:d6:9e:39:16:6a:6a:af:8c:d3:7a:3f: f7:33:6f:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsT76LtADX23RRMbEvYrAX8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MjgwYmU5YjM0ZDljNjY5YjgwMjBlNTRkZDZhNDg1ZTMx N2Q3MmYwHhcNMjUxMjEyMTkwMDMwWhcNMjUxMjEzMTkwMDMwWjAzMTEwLwYDVQQD EyhlYjJlZTA4MTRhOWNiMDIzMmIwYWZjNGJkMmI3NzY3MTlkYWYyMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzK8VcoakfHgPYR4ce/ZP/OPug0m DmykOO9yCj7crckEoyAJ4RKT2EWhq/VVdca6vjTHm0QtEvrMlZIopPqswVBdEI1z b6lTJzpNdmqemfUJASRRg2GN5mTo7PkU9W8xRsuU+bbT3Bkr+Ewx6yHovpJlXrrr DUP6lpALoMI9plyYbSjKv5kLM9pixjwxiZMZtPvKlE8JUYwcJtAeCpZCaEHD+b9v u5XH7FeNRpPVY5K42W4BqlLc0jcLmktRhTvLWeJx1dBVuBXA0nF1l3SvlEXIBZ2B FmHV6ppfV91dV3qEmA6sunFVs4ePgsiYaleCW5aw5n7z5zxA7VGFrZWF8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsu4IFKnLAjKwr8S9K3dnGdryCnMB8GA1UdIwQY MBaAFFkoC+mzTZxmm4Ag5U3WpIXjF9cvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAt ZTBhMDQ1MDc1OTg0LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYzU4NDItNjU1OS00OGFmLTgwZTAtZTBhMDQ1MDc1OTg0 LzEvV1NnTDZiTk5uR2FiZ0NEbFRkYWtoZU1YMXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJKhN5Vo 2jGWe6JmRM8bT8ttUQkTYrtRXWXSJrrS1rZI1vn6sGgBX86zxDCXA9BVj679Vy4+ VecY2rX4nZZcvyQeFwtmNWHA4SSt8R5Rb4+GsHxcRgDGIw96pt1/XBXkY5PlXV34 oyoOJ3yfrwWVUne0wMrY/vmzwuoyM1BDCzDFFkHnzh8b5jZixjVOCgwPFq0TMrzT XGISq6DE8Xs3O9ecCulR0x3ASwNIae4bn8EeEcgmgSybCHz8pvdhq5Wa8BGvUrls est4GoZSGv1FdDQJmIpTI5bNBCJHborGfZ4HDiGy5I0Uaud5EQxWtEasudaeORZq aq+M03o/9zNv3A== -----END CERTIFICATE-----Generated at Sat Dec 13 00:47:45 2025 by rpki-client