This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft File: WLtuKTiiJR3EOE2vZe-lINwaWII.mft (raw, json) Hash identifier: /PxRrR+M6n4rle3vLfoROeMBiUgcPeFJ1bUZ/zXstBk= Subject key identifier: 51:B4:8F:43:31:8F:EE:A9:3D:41:0F:80:63:E8:50:9C:45:10:5B:90 Authority key identifier: 58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 Certificate issuer: /CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Certificate serial: 019B5B64771A6A6F47BEB5D3977EC0F3BB5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 16:01:09 +0000 Manifest this update: Fri 26 Dec 2025 16:01:09 +0000 Manifest next update: Sat 27 Dec 2025 16:01:09 +0000 Files and hashes: 1: KyLINVTTqdvXuj7Fj90bgruawzY.roa (hash: cok5H5wGuOmXEJz7bKUxFi+mFBkwx9emz6VKC+7X5HQ=) 2: WLtuKTiiJR3EOE2vZe-lINwaWII.crl (hash: POy8rZLLEOped0PeE44K9S1zv//NWGgA/j82iAnM7aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:77:1a:6a:6f:47:be:b5:d3:97:7e:c0:f3:bb:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58bb6e2938a2251dc4384daf65efa520dc1a5882 Validity Not Before: Dec 26 16:01:09 2025 GMT Not After : Dec 27 16:01:09 2025 GMT Subject: CN=51b48f43318feea93d410f8063e8509c45105b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:d7:05:f8:49:19:33:56:dc:5a:ec:3c:c2: bf:db:f6:6f:c2:8f:fb:c4:cd:99:83:ff:8a:4b:fc: 51:6f:e5:55:2a:47:99:26:15:94:c4:24:fe:03:4b: bc:9a:8f:6d:a5:4b:b0:fc:1f:a3:9a:03:20:d9:df: 52:fc:05:e7:1e:4e:0c:95:ea:22:ce:02:0b:34:18: d1:d5:3e:5a:96:f9:92:bb:64:0b:20:80:0b:e7:10: 5e:3e:58:7f:42:bf:44:a6:07:4f:65:b3:a9:60:ac: 79:f4:f1:a8:0c:f5:32:e0:b7:0e:f7:77:e5:1b:94: 81:14:c6:aa:68:a1:26:55:cc:73:bf:f1:f0:68:77: 63:22:6a:92:83:7c:be:c3:de:c4:64:aa:70:d4:01: d2:85:d6:6e:43:12:8a:46:4c:f0:6d:d6:a7:e1:01: a9:50:b5:43:48:74:23:d6:81:b8:d0:1f:bc:93:5f: 59:da:5a:1c:7f:c4:99:bc:78:d1:5e:b7:85:35:90: 09:b5:58:3d:1a:95:7c:36:5c:04:24:2a:93:fe:3c: 36:ce:22:56:8b:d3:0e:96:4b:1d:6b:be:e9:94:46: d6:bc:05:05:06:1b:c9:dc:b7:4b:0f:41:b7:63:07: 54:c8:d9:95:8c:2d:64:d3:f8:30:48:53:6c:d3:56: 7b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B4:8F:43:31:8F:EE:A9:3D:41:0F:80:63:E8:50:9C:45:10:5B:90 X509v3 Authority Key Identifier: keyid:58:BB:6E:29:38:A2:25:1D:C4:38:4D:AF:65:EF:A5:20:DC:1A:58:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLtuKTiiJR3EOE2vZe-lINwaWII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/20dd04-abec-44c3-95eb-5e37d5587be5/1/WLtuKTiiJR3EOE2vZe-lINwaWII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:37:f5:c5:2a:cf:ea:22:30:9e:9e:c4:f9:ab:5c:87:04:0e: 37:b1:b3:d0:6d:54:a4:54:6c:57:54:59:8d:d7:0a:fc:be:58: 23:e9:24:54:33:92:bb:d6:3e:34:86:44:23:e5:1c:f1:5c:0e: ac:b3:58:5c:05:24:fe:dc:a3:65:a4:0f:b5:55:89:45:18:f3: 9b:28:3e:9f:1c:ce:ab:e3:e8:cb:13:e4:f0:76:14:66:79:2b: 97:86:2e:47:8f:4b:c6:98:fc:c4:ee:fc:14:3f:e8:0e:a2:8f: 8e:74:1b:f3:ef:0a:dc:20:fa:ee:ce:f0:82:8b:62:ac:cf:8d: 8b:4e:00:c5:d2:34:31:df:b6:23:7a:25:db:0d:30:a7:d4:16: b8:23:33:5d:ff:a4:bb:1b:13:f5:f1:f4:5b:86:f0:a7:4b:75: ab:51:eb:d1:4c:64:08:e2:1b:04:8a:c6:e2:21:50:8f:be:79: a1:8a:75:3b:28:43:ee:4e:22:35:4a:64:01:f1:b3:bf:16:ad: 51:8d:35:61:40:fc:b7:0b:81:f3:4e:fe:9b:e8:31:13:89:4b: ab:6a:5b:a0:60:40:e8:5e:a4:f0:71:1e:90:63:c9:ff:94:e1: f4:82:0e:03:e2:63:3f:b4:ac:d5:d7:bc:a7:62:b6:9f:e2:cd: 83:05:46:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZHcaam9HvrXTl37A87tfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmI2ZTI5MzhhMjI1MWRjNDM4NGRhZjY1ZWZhNTIwZGMx YTU4ODIwHhcNMjUxMjI2MTYwMTA5WhcNMjUxMjI3MTYwMTA5WjAzMTEwLwYDVQQD Eyg1MWI0OGY0MzMxOGZlZWE5M2Q0MTBmODA2M2U4NTA5YzQ1MTA1YjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvXBfhJGTNW3FrsPMK/2/Zvwo/7 xM2Zg/+KS/xRb+VVKkeZJhWUxCT+A0u8mo9tpUuw/B+jmgMg2d9S/AXnHk4Mleoi zgILNBjR1T5alvmSu2QLIIAL5xBePlh/Qr9EpgdPZbOpYKx59PGoDPUy4LcO93fl G5SBFMaqaKEmVcxzv/HwaHdjImqSg3y+w97EZKpw1AHShdZuQxKKRkzwbdan4QGp ULVDSHQj1oG40B+8k19Z2locf8SZvHjRXreFNZAJtVg9GpV8NlwEJCqT/jw2ziJW i9MOlksda77plEbWvAUFBhvJ3LdLD0G3YwdUyNmVjC1k0/gwSFNs01Z74QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFG0j0Mxj+6pPUEPgGPoUJxFEFuQMB8GA1UdIwQY MBaAFFi7bik4oiUdxDhNr2XvpSDcGliCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWIt NWUzN2Q1NTg3YmU1LzEvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8yMGRkMDQtYWJlYy00NGMzLTk1ZWItNWUzN2Q1NTg3YmU1 LzEvV0x0dUtUaWlKUjNFT0UydlplLWxJTndhV0lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTf1xSrP 6iIwnp7E+atchwQON7Gz0G1UpFRsV1RZjdcK/L5YI+kkVDOSu9Y+NIZEI+Uc8VwO rLNYXAUk/tyjZaQPtVWJRRjzmyg+nxzOq+PoyxPk8HYUZnkrl4YuR49Lxpj8xO78 FD/oDqKPjnQb8+8K3CD67s7wgotirM+Ni04AxdI0Md+2I3ol2w0wp9QWuCMzXf+k uxsT9fH0W4bwp0t1q1Hr0UxkCOIbBIrG4iFQj755oYp1OyhD7k4iNUpkAfGzvxat UY01YUD8twuB807+m+gxE4lLq2pboGBA6F6k8HEekGPJ/5Th9IIOA+JjP7Ss1de8 p2K2n+LNgwVGug== -----END CERTIFICATE-----Generated at Fri Dec 26 21:02:41 2025 by rpki-client