This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft File: WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft (raw, json) Hash identifier: wPOpRGCoLAGWABp2pC/mfdj0yt45uOTAq0LqGIE9opI= Subject key identifier: 43:97:9D:75:7C:2E:7D:0C:0D:76:0B:58:C3:DD:86:E7:0F:0F:79:8E Authority key identifier: 5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 Certificate issuer: /CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Certificate serial: 019B405B41FE973804F1323268D13A45A36B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 10:01:20 +0000 Manifest this update: Sun 21 Dec 2025 10:01:20 +0000 Manifest next update: Mon 22 Dec 2025 10:01:20 +0000 Files and hashes: 1: N5lzNY_ASHzrKxE2-cr-dO0MhXU.roa (hash: Kidqbnzk9/6YevJVEsmBoo0YD5crOzBmyny1x/qR6+w=) 2: WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl (hash: x6TOSCJulMHC4Ky1O25xBS5Na8NcIoTHRXd6A0RLE+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:41:fe:97:38:04:f1:32:32:68:d1:3a:45:a3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a0532e8fda4b27a5615aebb8d7fd0fcafa9f610 Validity Not Before: Dec 21 10:01:20 2025 GMT Not After : Dec 22 10:01:20 2025 GMT Subject: CN=43979d757c2e7d0c0d760b58c3dd86e70f0f798e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:22:c4:83:79:ac:6c:06:5d:72:38:ac:7f:39: 78:a7:a8:ad:6a:9f:f0:5d:71:c7:4c:c4:3d:4c:bc: ac:5d:a2:d9:ce:62:8b:aa:d4:14:96:35:12:f8:8b: b5:ca:ec:a4:f7:25:aa:e1:e4:67:6a:5e:17:89:59: 1c:4d:57:85:03:10:de:1e:29:9e:f1:4f:68:3d:4c: 7a:6c:ff:99:38:9d:20:29:60:81:61:6c:da:c5:ad: a4:19:14:f4:88:1f:e9:85:37:07:ed:57:2a:af:b6: 8f:37:55:2a:86:5a:36:a6:20:81:2e:26:91:03:a2: b4:4a:31:c7:87:cb:22:76:d1:d4:d8:df:92:fc:8e: 6e:f2:bf:b0:e7:6c:0d:65:30:7f:f6:87:b8:03:61: 34:c2:99:80:65:82:80:4f:b3:46:cb:c0:cd:e8:4b: 2e:c1:15:05:d6:a7:d9:06:24:bf:b2:f7:1e:8a:89: c9:75:e9:88:9a:b3:49:53:c8:70:4f:36:32:f1:82: a2:55:b8:de:04:3d:64:4e:e2:5a:95:04:7d:ba:f0: 7a:dc:d2:31:66:d8:51:a8:fd:ed:51:b6:0d:23:14: 7d:5a:bd:0b:c0:d1:07:10:be:a9:41:4b:e1:43:f7: 46:03:f8:5f:4d:90:a8:b8:40:fe:2d:a1:e1:25:e7: f4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:97:9D:75:7C:2E:7D:0C:0D:76:0B:58:C3:DD:86:E7:0F:0F:79:8E X509v3 Authority Key Identifier: keyid:5A:05:32:E8:FD:A4:B2:7A:56:15:AE:BB:8D:7F:D0:FC:AF:A9:F6:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgUy6P2ksnpWFa67jX_Q_K-p9hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b266bb-1a3d-4e49-857c-ef38914a8ab0/1/WgUy6P2ksnpWFa67jX_Q_K-p9hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ba:b6:39:10:ba:18:cc:85:25:a2:96:30:ff:3a:f0:d8:25: 24:06:95:da:7a:0d:9d:7c:61:66:d5:97:3c:7a:4a:d5:e5:19: 87:53:eb:8c:6f:14:e0:fc:be:d6:27:7a:3d:41:a3:df:90:0d: 3f:f0:c6:ec:76:2d:6c:6f:e3:a8:e7:f0:b4:12:84:c7:41:00: ac:82:43:ff:01:dd:1e:70:be:93:87:3f:d1:e2:14:f1:3e:9d: 5d:91:f7:70:80:e0:e8:6d:28:bc:5b:0f:dc:d8:59:e2:ef:42: aa:cf:af:ab:e0:31:6c:8c:f9:c4:40:84:5d:75:c4:1c:35:9e: a2:4c:2e:3f:7a:5d:26:d4:37:12:47:6a:52:9b:4a:6e:31:74: e9:72:24:f2:be:bd:c1:ca:47:43:95:db:34:24:b8:c7:6f:9f: f8:a3:5e:31:96:51:aa:75:73:e0:c7:22:72:03:70:2a:a7:ea: f1:aa:36:08:7c:53:ae:9e:15:00:9e:d1:46:42:14:d5:99:cf: a1:3b:70:c4:2d:ae:42:fc:39:83:b5:55:9f:94:cb:6a:71:74: da:60:7b:ba:e1:c8:29:d7:77:31:83:60:9d:71:1a:5e:7a:28: 5a:e9:5c:a2:69:64:67:28:9d:4a:3a:d1:7e:bb:70:60:9d:2a: 39:dc:a2:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW0H+lzgE8TIyaNE6RaNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMDUzMmU4ZmRhNGIyN2E1NjE1YWViYjhkN2ZkMGZjYWZh OWY2MTAwHhcNMjUxMjIxMTAwMTIwWhcNMjUxMjIyMTAwMTIwWjAzMTEwLwYDVQQD Eyg0Mzk3OWQ3NTdjMmU3ZDBjMGQ3NjBiNThjM2RkODZlNzBmMGY3OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CLEg3msbAZdcjisfzl4p6itap/w XXHHTMQ9TLysXaLZzmKLqtQUljUS+Iu1yuyk9yWq4eRnal4XiVkcTVeFAxDeHime 8U9oPUx6bP+ZOJ0gKWCBYWzaxa2kGRT0iB/phTcH7Vcqr7aPN1Uqhlo2piCBLiaR A6K0SjHHh8sidtHU2N+S/I5u8r+w52wNZTB/9oe4A2E0wpmAZYKAT7NGy8DN6Esu wRUF1qfZBiS/svceionJdemImrNJU8hwTzYy8YKiVbjeBD1kTuJalQR9uvB63NIx ZthRqP3tUbYNIxR9Wr0LwNEHEL6pQUvhQ/dGA/hfTZCouED+LaHhJef0lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOXnXV8Ln0MDXYLWMPdhucPD3mOMB8GA1UdIwQY MBaAFFoFMuj9pLJ6VhWuu41/0PyvqfYQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2Mt ZWYzODkxNGE4YWIwLzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9iMjY2YmItMWEzZC00ZTQ5LTg1N2MtZWYzODkxNGE4YWIw LzEvV2dVeTZQMmtzbnBXRmE2N2pYX1FfSy1wOWhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7q2ORC6 GMyFJaKWMP868NglJAaV2noNnXxhZtWXPHpK1eUZh1PrjG8U4Py+1id6PUGj35AN P/DG7HYtbG/jqOfwtBKEx0EArIJD/wHdHnC+k4c/0eIU8T6dXZH3cIDg6G0ovFsP 3NhZ4u9Cqs+vq+AxbIz5xECEXXXEHDWeokwuP3pdJtQ3EkdqUptKbjF06XIk8r69 wcpHQ5XbNCS4x2+f+KNeMZZRqnVz4McicgNwKqfq8ao2CHxTrp4VAJ7RRkIU1ZnP oTtwxC2uQvw5g7VVn5TLanF02mB7uuHIKdd3MYNgnXEaXnooWulcomlkZyidSjrR frtwYJ0qOdyihg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:45:51 2025 by rpki-client