This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json) Hash identifier: OBxQUchl50ApopzhaxxjccufRClw3XFdLBIAK+4MOHg= Subject key identifier: AB:65:23:08:C8:FF:60:E3:3D:08:69:DB:76:63:BF:82:B0:D1:FC:5F Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Certificate serial: 019B1014AE183265062A2402C67C5120F95F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 01:02:29 +0000 Manifest this update: Fri 12 Dec 2025 01:02:29 +0000 Manifest next update: Sat 13 Dec 2025 01:02:29 +0000 Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=) 2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: BICfASU6EvazCpE177SVYSiDVoTcaWQQumnSiTtjlG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:ae:18:32:65:06:2a:24:02:c6:7c:51:20:f9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Validity Not Before: Dec 12 01:02:29 2025 GMT Not After : Dec 13 01:02:29 2025 GMT Subject: CN=ab652308c8ff60e33d0869db7663bf82b0d1fc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:26:88:a8:a8:cf:5e:40:89:5a:ef:9c:8a: 4b:ed:d1:a6:4d:df:b2:95:f1:d2:d8:f7:14:dc:9e: 31:dc:8c:be:c5:3a:c6:dd:78:2b:3a:13:f3:d6:d6: 0f:e5:5f:c4:1b:25:20:e3:2f:55:4d:64:30:52:46: 0f:ac:27:81:93:05:46:fd:89:b8:f9:52:dd:29:39: 0f:f5:60:f7:f3:55:d8:48:d7:fb:3c:6d:f0:51:f8: 36:7f:42:e6:72:d7:c7:be:e8:91:2c:4a:77:da:5f: 24:7b:fe:61:61:5f:5e:a6:84:56:0d:22:03:ed:9b: 40:9a:d0:dc:16:ac:9f:08:4b:b3:f0:2c:19:19:5f: fc:47:11:2d:cb:81:65:23:45:fe:2b:e4:de:2d:77: a3:3e:2b:27:84:ff:a5:49:1e:b9:b2:8e:9c:66:e6: d1:cc:f1:e0:e1:6d:b1:d6:49:82:f9:3e:8d:aa:aa: dd:06:5a:c0:19:e1:83:7d:e1:93:f6:32:82:5c:db: 8e:5a:36:28:7d:57:67:96:e9:86:d1:58:fe:c8:5e: 62:e5:23:28:2f:23:b6:42:20:eb:ec:1e:7a:94:f9: 44:fa:ba:97:43:c5:75:2b:5a:39:8b:e3:9b:e1:26: 1d:1b:14:e3:19:4c:1e:69:8c:f3:3c:4f:8f:01:e1: 2d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:65:23:08:C8:FF:60:E3:3D:08:69:DB:76:63:BF:82:B0:D1:FC:5F X509v3 Authority Key Identifier: keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:20:aa:2a:51:1b:b4:5e:06:d4:8d:8d:e3:dd:d7:23:e4:04: ad:af:7f:80:1c:d0:e4:e6:f1:98:cc:90:64:a8:47:03:80:3c: 4a:9f:18:17:f2:26:c1:6f:ef:c4:ea:9b:0b:40:96:f8:0c:c3: 30:e6:85:18:01:f4:07:b1:19:75:38:0a:15:d4:2f:a7:9a:e6: 56:44:ed:50:b1:15:e1:88:5c:00:51:db:47:1c:1b:14:8f:1f: 14:8f:a7:2f:ba:5e:d8:51:48:71:fb:94:c8:d8:4e:be:ea:0c: 5d:5a:65:09:58:d5:7b:bd:0b:81:db:ee:4a:41:f0:19:4d:a0: 1a:8f:7e:24:7f:de:81:a9:03:eb:60:0e:30:c9:04:71:36:c0: a4:81:5a:1b:43:12:d7:3c:49:ca:c8:3a:57:1f:2c:16:a3:3f: 80:40:6b:16:fe:dd:2c:38:c6:0d:93:8b:34:fe:19:92:a1:e4: 85:26:10:4a:9b:48:c1:3b:dd:77:e9:2f:ce:37:44:b9:62:30: c8:f2:e0:96:5d:33:a7:f8:f4:b7:12:95:61:71:cc:28:4b:0e: d4:fe:c9:17:ef:a5:af:b7:04:f8:8e:36:a2:68:4d:06:18:8a: ea:94:3c:c6:e3:9b:5f:3b:a3:1b:01:37:74:5a:57:61:6c:38: 01:fb:4a:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFK4YMmUGKiQCxnxRIPlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh OWY2MTAwHhcNMjUxMjEyMDEwMjI5WhcNMjUxMjEzMDEwMjI5WjAzMTEwLwYDVQQD EyhhYjY1MjMwOGM4ZmY2MGUzM2QwODY5ZGI3NjYzYmY4MmIwZDFmYzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB8miKioz15AiVrvnIpL7dGmTd+y lfHS2PcU3J4x3Iy+xTrG3XgrOhPz1tYP5V/EGyUg4y9VTWQwUkYPrCeBkwVG/Ym4 +VLdKTkP9WD381XYSNf7PG3wUfg2f0LmctfHvuiRLEp32l8ke/5hYV9epoRWDSID 7ZtAmtDcFqyfCEuz8CwZGV/8RxEty4FlI0X+K+TeLXejPisnhP+lSR65so6cZubR zPHg4W2x1kmC+T6NqqrdBlrAGeGDfeGT9jKCXNuOWjYofVdnlumG0Vj+yF5i5SMo LyO2QiDr7B56lPlE+rqXQ8V1K1o5i+Ob4SYdGxTjGUweaYzzPE+PAeEtJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtlIwjI/2DjPQhp23Zjv4Kw0fxfMB8GA1UdIwQY MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt ZWYzODkxNGE4YWIwLzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACSCqKlEb tF4G1I2N493XI+QEra9/gBzQ5ObxmMyQZKhHA4A8Sp8YF/ImwW/vxOqbC0CW+AzD MOaFGAH0B7EZdTgKFdQvp5rmVkTtULEV4YhcAFHbRxwbFI8fFI+nL7pe2FFIcfuU yNhOvuoMXVplCVjVe70LgdvuSkHwGU2gGo9+JH/egakD62AOMMkEcTbApIFaG0MS 1zxJysg6Vx8sFqM/gEBrFv7dLDjGDZOLNP4ZkqHkhSYQSptIwTvdd+kvzjdEuWIw yPLgll0zp/j0txKVYXHMKEsO1P7JF++lr7cE+I42omhNBhiK6pQ8xuObXzujGwE3 dFpXYWw4AftKdw== -----END CERTIFICATE-----Generated at Fri Dec 12 09:25:39 2025 by rpki-client