This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json) Hash identifier: rklPA46RrdQ7WJ+Ro8BKnUEZpjUfM43hTrzAhH6uPzo= Subject key identifier: FD:6B:4D:DE:20:2D:13:EA:22:99:F4:95:FC:BF:C5:65:FE:1C:F9:9A Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Certificate serial: 019B0B91A6E77A4E1E1FBDC4DFA51C5CEBF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft Manifest number: 0371 Signing time: Thu 11 Dec 2025 04:00:53 +0000 Manifest this update: Thu 11 Dec 2025 04:00:53 +0000 Manifest next update: Fri 12 Dec 2025 04:00:53 +0000 Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=) 2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: GvooUFdoRY3p/lkMOblSU3VOQCYHB9dMW4GOQ3Jypug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0b:91:a6:e7:7a:4e:1e:1f:bd:c4:df:a5:1c:5c:eb:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Validity Not Before: Dec 11 04:00:53 2025 GMT Not After : Dec 12 04:00:53 2025 GMT Subject: CN=fd6b4dde202d13ea2299f495fcbfc565fe1cf99a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:48:9f:7b:6f:c1:c6:f5:6d:19:be:cc:a8:28: 5b:8f:08:ca:92:41:55:ee:95:0e:72:1c:85:4a:92: 8b:44:a4:37:6a:a7:ea:6b:90:ff:45:46:31:5c:0d: 28:71:d3:9a:30:9c:2f:d8:37:a2:4d:d2:5b:4f:37: 8d:3c:42:7b:0f:53:2f:94:fc:c5:9b:44:5a:e1:33: 83:e8:5f:40:db:b2:9d:ac:65:46:e2:cf:24:f0:d0: af:60:55:ec:64:15:bd:30:19:f3:fe:82:50:dc:ab: 93:76:f5:a8:7d:ce:46:ed:73:f7:ce:56:79:6e:8b: 07:5f:db:94:85:b3:73:13:72:72:c5:f4:0d:3e:73: 63:12:ad:b4:f9:6c:4f:6f:08:05:49:01:d3:d2:2f: 14:39:95:50:a8:44:a3:b5:65:6c:fd:b5:a9:2e:a6: 67:09:b3:03:37:cd:bf:c2:bc:25:3b:92:71:34:36: 81:c9:de:7d:5c:1b:11:13:60:e1:12:3e:e4:93:41: a2:30:53:41:16:5d:97:5d:91:aa:95:97:eb:93:5e: b0:d6:52:24:0e:54:41:83:1b:1e:a7:5c:ec:cc:b9: 3c:59:0b:63:95:33:dc:ea:10:4c:8a:a9:d7:d9:7d: 26:4e:bf:5d:4c:d1:2a:f3:a7:ef:1a:a5:8f:f8:c1: 3e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6B:4D:DE:20:2D:13:EA:22:99:F4:95:FC:BF:C5:65:FE:1C:F9:9A X509v3 Authority Key Identifier: keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a7:98:69:b9:35:5a:77:48:73:0f:86:70:8f:69:30:19:3a: dd:02:53:2a:14:e3:6f:40:f8:3d:a4:23:72:72:13:81:da:f5: 56:bd:3b:64:cc:6a:cc:e4:77:05:4f:07:8a:1b:a9:ea:ab:c7: 85:c3:f2:9c:75:56:19:11:a1:3b:3d:bc:5c:7c:be:92:c4:be: c7:c0:d6:4f:59:c3:52:61:18:e9:c4:21:e9:d4:ab:5a:95:08: f8:13:ec:53:a8:6f:87:8d:80:a5:4d:c8:28:a2:f4:e5:e5:28: d2:71:ef:cf:e1:ed:85:25:cd:6f:38:91:b3:c9:c1:d7:ac:b7: 0a:a2:4d:b1:38:6f:a0:ed:91:75:d9:63:f8:c8:07:8a:82:25: 4d:40:da:ce:be:1f:5c:44:0f:b4:8c:c9:8a:bb:df:9a:12:64: 0b:d6:e6:99:0c:a8:2c:c0:06:3f:1e:c7:46:73:c7:c1:ce:95: c8:8f:2b:69:ab:3e:26:66:1c:b1:fa:52:a9:20:43:e4:5e:87: 36:98:06:0e:ab:6e:41:35:22:8d:a5:a3:40:1d:58:ac:8e:df: e5:cb:62:cf:cf:0f:85:d0:be:fa:14:1d:e0:87:1b:99:49:84: 32:7f:b2:2d:4a:00:bb:4d:16:9b:83:6a:6b:45:c9:9a:f9:a3: 44:25:19:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsLkabnek4eH73E36UcXOv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk NjcxMTgwHhcNMjUxMjExMDQwMDUzWhcNMjUxMjEyMDQwMDUzWjAzMTEwLwYDVQQD EyhmZDZiNGRkZTIwMmQxM2VhMjI5OWY0OTVmY2JmYzU2NWZlMWNmOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0ife2/BxvVtGb7MqChbjwjKkkFV 7pUOchyFSpKLRKQ3aqfqa5D/RUYxXA0ocdOaMJwv2DeiTdJbTzeNPEJ7D1MvlPzF m0Ra4TOD6F9A27KdrGVG4s8k8NCvYFXsZBW9MBnz/oJQ3KuTdvWofc5G7XP3zlZ5 bosHX9uUhbNzE3JyxfQNPnNjEq20+WxPbwgFSQHT0i8UOZVQqESjtWVs/bWpLqZn CbMDN82/wrwlO5JxNDaByd59XBsRE2DhEj7kk0GiMFNBFl2XXZGqlZfrk16w1lIk DlRBgxsep1zszLk8WQtjlTPc6hBMiqnX2X0mTr9dTNEq86fvGqWP+ME+fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1rTd4gLRPqIpn0lfy/xWX+HPmaMB8GA1UdIwQY MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraeYabk1 WndIcw+GcI9pMBk63QJTKhTjb0D4PaQjcnITgdr1Vr07ZMxqzOR3BU8Hihup6qvH hcPynHVWGRGhOz28XHy+ksS+x8DWT1nDUmEY6cQh6dSrWpUI+BPsU6hvh42ApU3I KKL05eUo0nHvz+HthSXNbziRs8nB16y3CqJNsThvoO2Rddlj+MgHioIlTUDazr4f XEQPtIzJirvfmhJkC9bmmQyoLMAGPx7HRnPHwc6VyI8raas+JmYcsfpSqSBD5F6H NpgGDqtuQTUijaWjQB1YrI7f5ctiz88PhdC++hQd4IcbmUmEMn+yLUoAu00Wm4Nq a0XJmvmjRCUZxg== -----END CERTIFICATE-----Generated at Thu Dec 11 07:03:30 2025 by rpki-client