This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json) Hash identifier: RRB/jrdkr1eglY+S9WR70jFlWcwaqm8B/r1obfW68as= Subject key identifier: 4B:C6:55:35:80:31:FB:B6:E1:1E:6A:F2:4C:99:16:91:6A:27:48:65 Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Certificate serial: 019B36B4844010883A615C81DA81AC5BB53A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft Manifest number: 1147 Signing time: Fri 19 Dec 2025 13:02:38 +0000 Manifest this update: Fri 19 Dec 2025 13:02:38 +0000 Manifest next update: Sat 20 Dec 2025 13:02:38 +0000 Files and hashes: 1: 7UOjyf-6bS8r8zJDoqOo76_7Llk.roa (hash: M/fakT1uObMb7UW5IWYfhtUN1rDOGMnXTsxFWM6dOkk=) 2: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: DMgpPRz2H9gEbB0tKSFNedZnDL0LZP9dsUms9z+KMGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:84:40:10:88:3a:61:5c:81:da:81:ac:5b:b5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Validity Not Before: Dec 19 13:02:38 2025 GMT Not After : Dec 20 13:02:38 2025 GMT Subject: CN=4bc655358031fbb6e11e6af24c9916916a274865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1d:ae:e0:fe:1d:96:c7:19:3c:9c:7b:df:9e: 66:0f:c3:68:fb:bb:88:96:95:99:95:d4:c1:f4:f3: 39:17:c9:0a:e8:b5:b1:b1:3d:1a:cb:a0:0f:ed:4b: 2f:2d:ba:5e:15:78:c7:81:4a:a4:c0:c0:f8:ea:3a: cb:a0:73:13:3b:9c:db:63:ab:3c:a9:8f:21:81:e2: cf:b0:9e:66:59:8d:61:46:57:2b:0a:d1:5a:91:56: b5:d0:04:e0:ac:b0:64:99:ce:82:f1:30:7e:66:0d: ff:d6:3c:a2:00:c4:19:08:25:47:87:b1:3e:30:11: 7b:00:49:49:75:83:1f:b9:53:85:ab:a9:a3:66:7f: 97:bc:c3:af:1d:b6:90:f7:14:ed:5e:8b:ad:f2:67: 9e:be:2b:2d:ce:5f:f3:9c:5b:bb:b0:57:52:c5:76: 6c:f5:58:98:ed:b9:fe:af:20:e6:b7:7b:a4:ba:4e: 42:38:ec:bc:6c:88:23:56:6a:fd:3e:95:2a:2c:bd: 46:d0:da:98:88:f8:26:ae:af:65:53:74:e2:38:1f: b5:c8:4c:dc:a2:26:f6:90:dc:08:89:b9:1b:1b:52: 7d:9c:d0:94:56:17:20:75:b6:4a:1c:6f:e9:7d:d5: 0f:c4:e9:61:32:af:81:6d:0e:96:24:db:69:ee:6d: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C6:55:35:80:31:FB:B6:E1:1E:6A:F2:4C:99:16:91:6A:27:48:65 X509v3 Authority Key Identifier: keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:12:07:7e:53:ae:54:c1:3d:36:ee:ca:18:44:f9:71:4f:3a: 06:8b:e7:f8:f2:b4:40:87:2f:7b:97:4d:3d:7d:a3:7d:1e:07: 55:44:06:51:c4:91:ff:71:4e:c1:a3:88:e2:9b:52:c4:ff:ac: 53:f4:4b:b6:1b:48:d6:40:4c:29:35:72:69:9c:35:14:fd:54: a4:86:6c:59:80:e5:5d:82:42:20:1b:70:ad:89:ad:cd:4b:d2: ee:29:00:43:1e:55:ce:59:a8:8c:a5:f2:41:a7:f2:d4:b2:10: f8:e9:31:4a:ab:f9:7d:60:0d:81:10:30:62:19:1f:70:92:76: b2:fe:9c:3e:bd:85:8e:6e:b4:6d:41:9c:3f:81:8e:c1:19:39: 9c:0d:ad:45:27:c3:b2:89:bd:1b:a5:71:e0:9c:1c:4e:4b:c8: 6a:e7:fe:77:14:86:52:68:3b:65:1e:83:14:32:ac:2c:a6:37: a8:7f:21:6c:c4:59:5d:fe:ab:c3:20:cc:be:df:32:d0:33:1c: 31:d5:9a:b2:fb:a6:59:7a:f4:1f:53:06:64:35:80:e1:91:25: 2d:5d:e0:77:1e:bf:bd:cc:73:20:5e:bd:7b:e5:54:6e:e2:4e: 03:c0:a3:27:8d:af:8f:66:65:a3:77:df:f9:bc:e0:7a:86:fc: 26:62:72:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tIRAEIg6YVyB2oGsW7U6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjVjNjJmMTBjMjVlN2E3ZWYxODM1NjgzM2FhNGY5Yjk4 NDJjNmEwHhcNMjUxMjE5MTMwMjM4WhcNMjUxMjIwMTMwMjM4WjAzMTEwLwYDVQQD Eyg0YmM2NTUzNTgwMzFmYmI2ZTExZTZhZjI0Yzk5MTY5MTZhMjc0ODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh2u4P4dlscZPJx7355mD8No+7uI lpWZldTB9PM5F8kK6LWxsT0ay6AP7UsvLbpeFXjHgUqkwMD46jrLoHMTO5zbY6s8 qY8hgeLPsJ5mWY1hRlcrCtFakVa10ATgrLBkmc6C8TB+Zg3/1jyiAMQZCCVHh7E+ MBF7AElJdYMfuVOFq6mjZn+XvMOvHbaQ9xTtXout8meevistzl/znFu7sFdSxXZs 9ViY7bn+ryDmt3ukuk5COOy8bIgjVmr9PpUqLL1G0NqYiPgmrq9lU3TiOB+1yEzc oib2kNwIibkbG1J9nNCUVhcgdbZKHG/pfdUPxOlhMq+BbQ6WJNtp7m2obQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvGVTWAMfu24R5q8kyZFpFqJ0hlMB8GA1UdIwQY MBaAFFllxi8Qwl56fvGDVoM6pPm5hCxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEt NmNhN2M1NDI2M2I5LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEtNmNhN2M1NDI2M2I5 LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxIHflOu VME9Nu7KGET5cU86Bovn+PK0QIcve5dNPX2jfR4HVUQGUcSR/3FOwaOI4ptSxP+s U/RLthtI1kBMKTVyaZw1FP1UpIZsWYDlXYJCIBtwrYmtzUvS7ikAQx5VzlmojKXy Qafy1LIQ+OkxSqv5fWANgRAwYhkfcJJ2sv6cPr2Fjm60bUGcP4GOwRk5nA2tRSfD som9G6Vx4JwcTkvIauf+dxSGUmg7ZR6DFDKsLKY3qH8hbMRZXf6rwyDMvt8y0DMc MdWasvumWXr0H1MGZDWA4ZElLV3gdx6/vcxzIF69e+VUbuJOA8CjJ42vj2Zlo3ff +bzgeob8JmJy2g== -----END CERTIFICATE-----Generated at Fri Dec 19 19:19:37 2025 by rpki-client