This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft File: WGesaYXMCz_qIWlFyS6y6TIYlAM.mft (raw, json) Hash identifier: UqhBZjVF7pPSyduGiVlDghlENswO6UDyMNiT5sb6kBc= Subject key identifier: 9C:50:14:F4:3D:AF:AC:D4:45:65:67:79:04:87:40:F9:30:3A:20:13 Authority key identifier: 58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 Certificate issuer: /CN=5867ac6985cc0b3fea216945c92eb2e932189403 Certificate serial: 019B5A1A568F05B70622BE8177AB1E2C2F1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft Manifest number: 0976 Signing time: Fri 26 Dec 2025 10:00:34 +0000 Manifest this update: Fri 26 Dec 2025 10:00:34 +0000 Manifest next update: Sat 27 Dec 2025 10:00:34 +0000 Files and hashes: 1: WGesaYXMCz_qIWlFyS6y6TIYlAM.crl (hash: ysmul8708yKepsBNICOxySi8SsfHSWjeLbnC9vs4klY=) 2: bnhhztuxFibvur8FNpe0Q4uP7wo.roa (hash: KQsITvPg/PJVER0mAbZoTouNCOSRyBSHFqtg7Z3silI=) 3: hPuuxvG6wf_iyGajLZm0PrPRNTE.roa (hash: SqhFWrnGhewNDVxVRZLbY/mjVnrnZ6zHK448/hSwl8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:56:8f:05:b7:06:22:be:81:77:ab:1e:2c:2f:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5867ac6985cc0b3fea216945c92eb2e932189403 Validity Not Before: Dec 26 10:00:34 2025 GMT Not After : Dec 27 10:00:34 2025 GMT Subject: CN=9c5014f43dafacd445656779048740f9303a2013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:52:be:50:84:60:79:bf:65:75:d4:af:30: 0f:fe:0f:eb:3d:30:ac:fa:7c:f0:44:aa:02:4d:f1: 9c:9f:06:d0:84:d1:d1:88:d9:b4:2d:57:19:21:91: f9:4f:69:72:ab:d4:94:f0:7c:70:ca:ce:e4:03:e2: dc:3c:41:e0:0b:69:52:e6:25:21:8e:d4:82:49:b0: e5:54:a0:fb:c3:9a:55:c2:5f:8f:07:7a:0b:1b:19: fa:a8:d5:56:9b:4e:af:e4:0b:a4:3b:f4:13:e9:a1: 47:86:11:1e:c7:a1:e6:2d:29:23:b5:58:b0:23:49: 43:ee:f2:83:d5:08:3c:35:86:26:e3:61:ad:12:25: 69:de:e1:3f:5f:fd:9b:a5:6a:bb:b4:d5:67:de:07: 16:50:5e:4c:a1:2d:90:13:a4:00:8f:58:b8:d3:40: a1:a6:11:14:83:70:59:42:61:3f:48:08:99:bb:b1: 09:95:4f:28:33:94:4a:8b:83:1a:12:ae:a4:13:82: b7:7e:cc:27:b8:b8:88:ff:8f:f8:86:17:09:c8:77: 99:4d:c8:76:73:7d:d9:37:1e:a5:72:b8:89:ec:74: e3:49:78:b5:57:da:09:53:8b:5a:2f:eb:93:e1:4f: e0:a6:ed:d0:1b:c5:42:08:9f:b4:21:69:ac:bf:d0: 62:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:50:14:F4:3D:AF:AC:D4:45:65:67:79:04:87:40:F9:30:3A:20:13 X509v3 Authority Key Identifier: keyid:58:67:AC:69:85:CC:0B:3F:EA:21:69:45:C9:2E:B2:E9:32:18:94:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGesaYXMCz_qIWlFyS6y6TIYlAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f4827b-3d1d-4acb-a773-cb168afdb343/1/WGesaYXMCz_qIWlFyS6y6TIYlAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b7:96:4b:40:ab:8b:1a:b3:10:5b:8e:6b:d4:e9:2b:fd:fb: 75:28:7c:b5:4d:2f:7f:14:cc:4a:56:00:f5:ed:19:fb:03:e2: ff:23:72:7e:d1:3d:0d:53:9e:f8:ec:fb:52:89:73:3d:a9:df: f1:6b:1c:70:8c:4b:aa:ac:5f:8a:c9:31:67:a1:0b:60:46:67: a9:85:37:71:01:5b:2a:69:f7:8a:e4:52:ab:76:06:81:63:d6: 01:f8:eb:c6:85:3c:c0:3d:48:a3:e4:1b:72:82:6d:91:0d:ad: 45:92:54:b5:13:1d:3c:1b:16:84:c9:08:ec:37:d2:d0:10:6a: b2:3e:4a:43:d2:41:28:05:97:8a:21:03:4f:b9:b2:1a:ae:c4: ee:c6:14:a4:ef:f5:04:a4:7c:37:30:5b:d3:b2:7b:2c:db:07: c0:2c:10:4d:0d:de:8e:0d:6b:bb:ec:ac:b9:9f:13:34:49:dc: c1:d9:dd:10:5f:c1:52:ce:63:0b:31:4c:ae:1b:72:ad:18:b6: 0b:58:2a:f4:ab:2e:27:72:0d:1f:26:f4:0a:dc:b2:74:b4:48: ea:e2:7c:92:88:2e:88:50:72:62:a0:0d:3e:da:16:2f:cb:9b: 90:1e:a7:8f:36:47:1a:d5:85:90:76:b9:5a:ff:8f:5c:13:7a: 3e:00:78:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlaPBbcGIr6Bd6seLC8dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjdhYzY5ODVjYzBiM2ZlYTIxNjk0NWM5MmViMmU5MzIx ODk0MDMwHhcNMjUxMjI2MTAwMDM0WhcNMjUxMjI3MTAwMDM0WjAzMTEwLwYDVQQD Eyg5YzUwMTRmNDNkYWZhY2Q0NDU2NTY3NzkwNDg3NDBmOTMwM2EyMDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcRSvlCEYHm/ZXXUrzAP/g/rPTCs +nzwRKoCTfGcnwbQhNHRiNm0LVcZIZH5T2lyq9SU8Hxwys7kA+LcPEHgC2lS5iUh jtSCSbDlVKD7w5pVwl+PB3oLGxn6qNVWm06v5AukO/QT6aFHhhEex6HmLSkjtViw I0lD7vKD1Qg8NYYm42GtEiVp3uE/X/2bpWq7tNVn3gcWUF5MoS2QE6QAj1i400Ch phEUg3BZQmE/SAiZu7EJlU8oM5RKi4MaEq6kE4K3fswnuLiI/4/4hhcJyHeZTch2 c33ZNx6lcriJ7HTjSXi1V9oJU4taL+uT4U/gpu3QG8VCCJ+0IWmsv9Bi5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxQFPQ9r6zURWVneQSHQPkwOiATMB8GA1UdIwQY MBaAFFhnrGmFzAs/6iFpRckusukyGJQDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMt Y2IxNjhhZmRiMzQzLzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mNDgyN2ItM2QxZC00YWNiLWE3NzMtY2IxNjhhZmRiMzQz LzEvV0dlc2FZWE1Del9xSVdsRnlTNnk2VElZbEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7eWS0Cr ixqzEFuOa9TpK/37dSh8tU0vfxTMSlYA9e0Z+wPi/yNyftE9DVOe+Oz7UolzPanf 8WsccIxLqqxfiskxZ6ELYEZnqYU3cQFbKmn3iuRSq3YGgWPWAfjrxoU8wD1Io+Qb coJtkQ2tRZJUtRMdPBsWhMkI7DfS0BBqsj5KQ9JBKAWXiiEDT7myGq7E7sYUpO/1 BKR8NzBb07J7LNsHwCwQTQ3ejg1ru+ysuZ8TNEncwdndEF/BUs5jCzFMrhtyrRi2 C1gq9KsuJ3INHyb0CtyydLRI6uJ8koguiFByYqANPtoWL8ubkB6njzZHGtWFkHa5 Wv+PXBN6PgB4oQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:16 2025 by rpki-client