This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft File: WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json) Hash identifier: xxMCpOaI+FPx+oMn5Pom9k6DMqiJIHO9M6Xs/d1tvcI= Subject key identifier: F7:EF:4B:E2:B0:06:59:9A:86:31:F4:1B:CF:54:56:B8:54:D1:D5:0B Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D Certificate issuer: /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d Certificate serial: 019B5A522F1FFA658BD42C8F23A4FA43DB2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft Manifest number: 02F7 Signing time: Fri 26 Dec 2025 11:01:33 +0000 Manifest this update: Fri 26 Dec 2025 11:01:33 +0000 Manifest next update: Sat 27 Dec 2025 11:01:33 +0000 Files and hashes: 1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: fzON+xBq4kLM2gUPt1/QNbltrt3Uoy07LyJPZPCTNbc=) 2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:2f:1f:fa:65:8b:d4:2c:8f:23:a4:fa:43:db:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d Validity Not Before: Dec 26 11:01:33 2025 GMT Not After : Dec 27 11:01:33 2025 GMT Subject: CN=f7ef4be2b006599a8631f41bcf5456b854d1d50b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:70:f9:8c:ba:1a:1d:69:d5:11:f4:25:bb: 11:b0:90:9f:b0:bb:af:f4:9b:ae:b7:99:9e:1e:96: 17:bd:fb:5c:dd:a9:d9:24:d3:3f:83:54:e7:13:01: 85:8b:6f:2f:ac:bb:5d:0e:b8:80:f8:53:36:36:13: fe:d3:a8:41:aa:d2:e8:58:3f:67:01:70:b8:63:b3: ec:3a:93:05:c4:8b:9e:fd:c4:aa:9b:f5:08:cf:1e: 1b:3b:c6:cd:8e:e1:b2:ca:be:fc:26:41:28:fd:b8: de:5d:e0:2f:e9:a8:01:50:82:cd:72:72:98:6e:98: 77:55:6a:40:9e:aa:52:74:a9:aa:c2:f7:70:2a:da: 4c:60:6d:8e:97:ba:92:aa:b1:a2:9f:e7:42:08:ea: 02:a3:9a:d5:dc:e5:23:f7:0e:1c:10:81:d5:78:60: d5:9f:a3:52:82:c9:ba:8b:29:87:17:63:c9:41:cb: f8:b6:c7:b8:17:19:81:e5:0e:0f:ba:e5:90:4f:7c: cf:0f:10:69:a2:73:e1:83:9a:7a:09:04:ad:8a:bc: 7a:d8:42:b7:f4:d6:9a:3b:93:49:e0:e1:f0:00:1d: 84:d6:b4:b8:8a:10:a2:2d:d7:67:51:8d:98:22:c6: 2c:e0:d4:5c:bf:66:c1:43:4b:67:a2:b6:cc:72:18: c3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:4B:E2:B0:06:59:9A:86:31:F4:1B:CF:54:56:B8:54:D1:D5:0B X509v3 Authority Key Identifier: keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:46:73:4c:bd:75:a8:c8:0d:11:28:15:e1:c5:5e:5d:d4:f2: d7:8e:2b:e6:32:b7:28:64:fa:60:0d:c8:50:df:e6:66:b6:23: ba:f9:05:09:e7:3e:7f:05:63:78:9b:fc:6e:f0:b0:c9:80:a8: 00:1a:fb:89:10:39:e5:41:85:a3:be:a6:a9:55:09:7e:79:09: f1:1d:33:4e:18:50:cb:d1:70:ef:31:09:8f:f5:9e:cf:a8:91: 72:df:53:86:34:d5:b5:39:77:fd:85:f9:ab:21:e2:9c:22:ea: fa:c0:40:6c:06:d8:53:f3:7f:dc:64:b4:27:c5:00:17:fd:a8: 26:76:f8:59:9a:10:b8:73:9d:98:73:6a:96:8b:8d:0e:28:4a: e7:8b:c4:7d:5c:3e:49:d1:7a:10:da:2d:4a:96:f8:d1:49:a1: 33:f4:24:79:80:79:17:12:df:41:87:ab:f7:82:07:8b:ed:e2: d0:e5:a6:5a:0d:bb:ab:36:7b:7f:bd:eb:9d:9e:6c:7a:f2:28: 77:45:7a:eb:85:38:14:b4:dc:1d:33:df:18:a5:99:56:ac:d6: f4:d5:f6:49:9b:cb:45:e2:d7:f9:71:fc:13:26:8a:89:44:17: ed:5d:00:f7:3a:52:2f:65:bc:8b:77:76:28:cb:47:80:44:d9: 9e:de:16:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUi8f+mWL1CyPI6T6Q9suMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTRkNDFjZmE5NDNkYTE5ZjI3NzhhMGQzNzNkZDJhNzc0 MWQwNmQwHhcNMjUxMjI2MTEwMTMzWhcNMjUxMjI3MTEwMTMzWjAzMTEwLwYDVQQD EyhmN2VmNGJlMmIwMDY1OTlhODYzMWY0MWJjZjU0NTZiODU0ZDFkNTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXBw+Yy6Gh1p1RH0JbsRsJCfsLuv 9Juut5meHpYXvftc3anZJNM/g1TnEwGFi28vrLtdDriA+FM2NhP+06hBqtLoWD9n AXC4Y7PsOpMFxIue/cSqm/UIzx4bO8bNjuGyyr78JkEo/bjeXeAv6agBUILNcnKY bph3VWpAnqpSdKmqwvdwKtpMYG2Ol7qSqrGin+dCCOoCo5rV3OUj9w4cEIHVeGDV n6NSgsm6iymHF2PJQcv4tse4FxmB5Q4PuuWQT3zPDxBponPhg5p6CQStirx62EK3 9NaaO5NJ4OHwAB2E1rS4ihCiLddnUY2YIsYs4NRcv2bBQ0tnorbMchjD0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfvS+KwBlmahjH0G89UVrhU0dULMB8GA1UdIwQY MBaAFFgU1Bz6lD2hnyd4oNNz3Sp3QdBtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMt MGUwZGY2OGNkZTAzLzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9hNTBhYTQtZTA5Mi00ZDhjLTlkODMtMGUwZGY2OGNkZTAz LzEvV0JUVUhQcVVQYUdmSjNpZzAzUGRLbmRCMEcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUZzTL11 qMgNESgV4cVeXdTy144r5jK3KGT6YA3IUN/mZrYjuvkFCec+fwVjeJv8bvCwyYCo ABr7iRA55UGFo76mqVUJfnkJ8R0zThhQy9Fw7zEJj/Wez6iRct9ThjTVtTl3/YX5 qyHinCLq+sBAbAbYU/N/3GS0J8UAF/2oJnb4WZoQuHOdmHNqlouNDihK54vEfVw+ SdF6ENotSpb40UmhM/QkeYB5FxLfQYer94IHi+3i0OWmWg27qzZ7f73rnZ5sevIo d0V664U4FLTcHTPfGKWZVqzW9NX2SZvLReLX+XH8EyaKiUQX7V0A9zpSL2W8i3d2 KMtHgETZnt4WYg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:08 2025 by rpki-client