This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json) Hash identifier: uPQs9DMKaH2jqX5xlkLoZxHFmjRBmUxZKyb9GHrxo6Q= Subject key identifier: E4:E8:97:7F:43:50:80:8B:BA:3F:C2:A6:D3:8F:8C:4B:22:B7:B5:3D Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef Certificate serial: 019B2F67BA21E2E67BDDB2FAD60BA027B57A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft Manifest number: 10FF Signing time: Thu 18 Dec 2025 03:01:25 +0000 Manifest this update: Thu 18 Dec 2025 03:01:25 +0000 Manifest next update: Fri 19 Dec 2025 03:01:25 +0000 Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: JvcVgTU991FeJqOgd6gIbk7x98n0/hPXyrGCbZgxg1M=) 2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:ba:21:e2:e6:7b:dd:b2:fa:d6:0b:a0:27:b5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef Validity Not Before: Dec 18 03:01:25 2025 GMT Not After : Dec 19 03:01:25 2025 GMT Subject: CN=e4e8977f4350808bba3fc2a6d38f8c4b22b7b53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:1c:3c:d7:5f:c1:f2:e7:65:ee:ed:e4:0c: bb:a5:37:14:67:e1:8f:87:3d:aa:28:7d:12:91:5e: a1:32:ce:86:7e:1b:12:ae:f6:85:9e:f6:9b:a1:8b: a6:4e:26:bd:33:83:04:d5:19:f0:97:c1:01:f9:b9: fd:f7:6c:d3:72:cf:3b:15:59:19:2a:37:ce:8d:a8: 54:f2:4d:5f:7e:bb:02:c2:54:88:ae:f1:5c:80:bb: 65:ef:97:f2:14:90:d5:5b:24:bd:cf:d1:c2:b1:94: 7b:4d:36:9c:f6:19:da:a7:f6:63:8f:40:6c:44:83: 80:7b:e3:68:f0:0e:7a:ca:47:c3:3a:3e:e8:70:f7: 94:69:eb:7f:fe:06:4a:16:46:72:86:e5:6b:c3:c2: 20:14:b9:4f:36:8e:fc:51:36:2d:7f:58:41:eb:89: 1f:65:c0:81:ec:46:e6:c0:98:99:d2:32:52:e0:03: 94:19:d5:e6:8b:31:bc:64:f7:a1:47:bb:f7:cc:22: 27:28:f0:3b:46:2c:cb:6d:a9:37:32:a6:29:8b:5a: 73:1f:a7:57:f1:76:4e:d3:4c:30:a4:d1:8b:91:ac: 5b:31:50:34:09:33:e3:e5:01:83:ee:cd:75:2e:8d: 99:a4:d4:d4:1a:33:09:b0:d7:31:c1:22:c9:b4:92: de:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E8:97:7F:43:50:80:8B:BA:3F:C2:A6:D3:8F:8C:4B:22:B7:B5:3D X509v3 Authority Key Identifier: keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:d9:21:49:bf:df:7f:67:ea:6d:d4:b9:f6:9e:b0:9e:c8:4b: b8:82:a6:f6:e7:21:3b:fc:3d:dc:1e:f0:2e:ef:4f:f7:2b:0a: 27:20:62:27:14:fc:82:1d:a9:9b:9e:06:44:fe:b7:dd:b0:84: 98:08:6b:79:5e:7b:4c:f3:90:4b:0e:73:8d:f8:91:3b:47:87: c9:98:cc:3b:d0:9e:56:4d:d2:f9:9f:26:1e:dd:ec:d9:7c:a4: 94:9e:ed:b9:87:3c:0d:a9:04:34:63:45:90:f9:74:42:4e:b0: 11:ae:9f:1b:44:59:1e:3b:65:12:2f:0b:62:87:12:5a:ed:20: bd:38:fd:e4:bd:70:23:98:9c:b1:e4:ad:e9:bf:c7:66:9a:3c: f4:96:d5:34:0c:05:19:36:5f:c0:70:ab:ce:b6:4c:e9:29:3c: 55:87:2d:ae:85:4b:bc:dd:34:88:af:4a:ab:8c:1c:bd:62:2e: 29:a0:a6:d8:ae:30:a4:a9:55:04:0e:3e:ee:15:4f:dd:4f:c0: 69:64:bf:eb:5b:93:fb:92:84:fe:3e:c8:32:e4:ad:8b:42:4c: 6e:e5:e3:38:2d:68:64:43:86:57:55:5a:fc:0f:1b:0a:65:41: e9:91:e5:f6:00:cb:75:e2:9e:34:ce:49:3e:50:d1:b9:e7:67: 7e:36:ab:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ7oh4uZ73bL61gugJ7V6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3 MmViZWYwHhcNMjUxMjE4MDMwMTI1WhcNMjUxMjE5MDMwMTI1WjAzMTEwLwYDVQQD EyhlNGU4OTc3ZjQzNTA4MDhiYmEzZmMyYTZkMzhmOGM0YjIyYjdiNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweUcPNdfwfLnZe7t5Ay7pTcUZ+GP hz2qKH0SkV6hMs6GfhsSrvaFnvaboYumTia9M4ME1Rnwl8EB+bn992zTcs87FVkZ KjfOjahU8k1ffrsCwlSIrvFcgLtl75fyFJDVWyS9z9HCsZR7TTac9hnap/Zjj0Bs RIOAe+No8A56ykfDOj7ocPeUaet//gZKFkZyhuVrw8IgFLlPNo78UTYtf1hB64kf ZcCB7EbmwJiZ0jJS4AOUGdXmizG8ZPehR7v3zCInKPA7RizLbak3MqYpi1pzH6dX 8XZO00wwpNGLkaxbMVA0CTPj5QGD7s11Lo2ZpNTUGjMJsNcxwSLJtJLeaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTol39DUICLuj/CptOPjEsit7U9MB8GA1UdIwQY MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdkhSb/f f2fqbdS59p6wnshLuIKm9uchO/w93B7wLu9P9ysKJyBiJxT8gh2pm54GRP633bCE mAhreV57TPOQSw5zjfiRO0eHyZjMO9CeVk3S+Z8mHt3s2XyklJ7tuYc8DakENGNF kPl0Qk6wEa6fG0RZHjtlEi8LYocSWu0gvTj95L1wI5icseSt6b/HZpo89JbVNAwF GTZfwHCrzrZM6Sk8VYctroVLvN00iK9Kq4wcvWIuKaCm2K4wpKlVBA4+7hVP3U/A aWS/61uT+5KE/j7IMuSti0JMbuXjOC1oZEOGV1Va/A8bCmVB6ZHl9gDLdeKeNM5J PlDRuednfjarQw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:16:28 2025 by rpki-client