This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft File: WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft (raw, json) Hash identifier: iguZua7yXljEQwxAgi0T+WwM0G7szm6ZY1GRurIzWi4= Subject key identifier: 88:C9:20:0A:21:CA:04:EC:2F:3B:05:2E:90:AA:CA:42:92:43:88:B8 Authority key identifier: 58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80 Certificate issuer: /CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80 Certificate serial: 019AF6F91779D752FDDE1E962E44B42586CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft Manifest number: 06C8 Signing time: Sun 07 Dec 2025 04:01:50 +0000 Manifest this update: Sun 07 Dec 2025 04:01:50 +0000 Manifest next update: Mon 08 Dec 2025 04:01:50 +0000 Files and hashes: 1: HdQg4z2Zf1RFHyfPIhhO8wU76o4.roa (hash: 6V9zMRoiTuGwCa4UmUjRFtWch8Ql0rvMtNhWDgEc7Wc=) 2: WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl (hash: 9X6dYVM87QxrbY+HErBNaQHgHTUWPw9jbbNDO+SeQVE=) 3: rztsTufSoR-W_P1Ii78nFC4FuTk.roa (hash: xuo1Ar7awubUSeGyu2ODhUDhZtyEioCr27uE58GVZok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:17:79:d7:52:fd:de:1e:96:2e:44:b4:25:86:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582c74fc59b7ab096a257d3b6299d2f6fda46a80 Validity Not Before: Dec 7 04:01:50 2025 GMT Not After : Dec 8 04:01:50 2025 GMT Subject: CN=88c9200a21ca04ec2f3b052e90aaca42924388b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:55:8e:69:12:49:ee:3d:93:a5:bc:24:8d: 5a:50:9f:f9:9b:2f:a5:62:77:e1:b6:19:9c:13:ff: b5:d8:96:b7:cb:8b:6e:fb:7f:44:61:82:20:e5:d9: 4e:f1:64:46:0f:5c:b4:53:8e:76:b2:ab:d2:2b:9d: 94:d8:ac:6e:c5:28:4d:fc:36:b9:80:35:a4:01:a6: 10:f7:c9:1d:a2:75:2c:78:ad:75:58:d4:c1:2e:e6: 4a:33:77:ca:a3:ca:d0:34:d9:31:3a:a2:1a:02:f1: a5:93:3a:6d:6f:15:52:90:02:b8:72:c2:7c:08:60: b5:ab:3b:3d:49:95:52:43:bc:41:a1:0d:f5:3e:62: 34:3d:e0:bc:9c:f9:f1:b6:22:87:10:d2:02:e2:90: d0:c4:5d:e1:90:c3:77:8b:f5:d4:b7:49:e7:c2:3a: d6:6a:77:8e:9b:15:1f:58:8c:60:1c:6b:f5:0e:62: b3:17:67:53:55:ea:2b:59:46:49:a3:25:ed:da:56: ad:0d:b9:fb:a7:08:52:05:06:97:11:00:3f:72:46: 18:3c:25:79:45:a1:cf:40:66:62:24:4d:6d:aa:d0: e2:39:63:2e:79:db:58:28:b1:3e:a0:fe:86:06:6e: 81:7e:19:99:f3:94:2e:4d:38:85:4e:12:32:b3:a4: 84:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:C9:20:0A:21:CA:04:EC:2F:3B:05:2E:90:AA:CA:42:92:43:88:B8 X509v3 Authority Key Identifier: keyid:58:2C:74:FC:59:B7:AB:09:6A:25:7D:3B:62:99:D2:F6:FD:A4:6A:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCx0_Fm3qwlqJX07YpnS9v2kaoA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b15851-a83b-415c-aee5-f9efc0457fb9/1/WCx0_Fm3qwlqJX07YpnS9v2kaoA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:20:0a:c3:2b:cf:2c:39:0f:48:6f:d5:52:86:44:0f:54:81: c5:50:99:e5:8f:06:cd:b7:19:e8:de:18:a2:84:24:ab:d9:37: 87:f3:f4:fe:43:38:73:c3:32:f0:c4:b2:64:f7:7f:5a:2b:35: dd:af:09:60:d7:c6:35:c6:4b:2e:e5:06:49:af:c4:2d:00:8f: 79:46:0c:cd:d9:a3:b6:a2:27:b6:2f:bd:06:0a:22:d5:ec:ba: c5:07:7e:e3:9d:43:b6:32:78:e6:b9:cb:8b:ec:c9:a9:0a:56: 2f:87:2f:61:d5:c7:05:82:61:ea:59:7b:d6:9b:d6:79:8f:69: 3c:35:e6:76:ae:35:d6:5c:ad:4a:9b:46:97:09:55:11:11:89: 18:79:d4:b8:30:12:f8:96:b6:b1:10:6f:66:46:b5:10:41:eb: d9:c6:5d:e3:16:8b:1b:bf:b1:eb:02:6b:40:e7:21:ab:56:56: 03:51:a2:08:bf:3d:bc:45:97:97:39:4f:17:47:e1:0f:eb:65: 0a:83:58:27:d9:71:ed:0f:fa:85:b0:f0:49:95:e4:26:82:43: b5:bc:73:d9:da:8e:ed:bd:99:14:d1:fc:82:8e:c3:8e:d2:13: 5d:eb:97:ba:16:6f:f8:27:e2:ea:2c:b9:59:9a:9b:13:95:e5: 95:9d:83:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+Rd511L93h6WLkS0JYbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MmM3NGZjNTliN2FiMDk2YTI1N2QzYjYyOTlkMmY2ZmRh NDZhODAwHhcNMjUxMjA3MDQwMTUwWhcNMjUxMjA4MDQwMTUwWjAzMTEwLwYDVQQD Eyg4OGM5MjAwYTIxY2EwNGVjMmYzYjA1MmU5MGFhY2E0MjkyNDM4OGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+RVjmkSSe49k6W8JI1aUJ/5my+l YnfhthmcE/+12Ja3y4tu+39EYYIg5dlO8WRGD1y0U452sqvSK52U2KxuxShN/Da5 gDWkAaYQ98kdonUseK11WNTBLuZKM3fKo8rQNNkxOqIaAvGlkzptbxVSkAK4csJ8 CGC1qzs9SZVSQ7xBoQ31PmI0PeC8nPnxtiKHENIC4pDQxF3hkMN3i/XUt0nnwjrW aneOmxUfWIxgHGv1DmKzF2dTVeorWUZJoyXt2latDbn7pwhSBQaXEQA/ckYYPCV5 RaHPQGZiJE1tqtDiOWMuedtYKLE+oP6GBm6BfhmZ85QuTTiFThIys6SE6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjJIAohygTsLzsFLpCqykKSQ4i4MB8GA1UdIwQY MBaAFFgsdPxZt6sJaiV9O2KZ0vb9pGqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUt ZjllZmMwNDU3ZmI5LzEvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9iMTU4NTEtYTgzYi00MTVjLWFlZTUtZjllZmMwNDU3ZmI5 LzEvV0N4MF9GbTNxd2xxSlgwN1lwblM5djJrYW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCAKwyvP LDkPSG/VUoZED1SBxVCZ5Y8GzbcZ6N4YooQkq9k3h/P0/kM4c8My8MSyZPd/Wis1 3a8JYNfGNcZLLuUGSa/ELQCPeUYMzdmjtqInti+9Bgoi1ey6xQd+451DtjJ45rnL i+zJqQpWL4cvYdXHBYJh6ll71pvWeY9pPDXmdq411lytSptGlwlVERGJGHnUuDAS +Ja2sRBvZka1EEHr2cZd4xaLG7+x6wJrQOchq1ZWA1GiCL89vEWXlzlPF0fhD+tl CoNYJ9lx7Q/6hbDwSZXkJoJDtbxz2dqO7b2ZFNH8go7DjtITXeuXuhZv+Cfi6iy5 WZqbE5XllZ2Dnw== -----END CERTIFICATE-----Generated at Sun Dec 7 12:02:29 2025 by rpki-client