This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
File: wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft (raw, json)
Hash identifier: g4fz0L5hVSkzFdOlCSwcdlUAcr40tBGZ0uFbQNlX2ds=
Subject key identifier: 78:49:8E:1C:6B:F0:20:07:27:F1:D6:C6:3D:C7:DA:2F:95:92:B3:A7
Authority key identifier: C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
Certificate issuer: /CN=c20897c1dbd606929137e672bad0c1f67e637d16
Certificate serial: 019B378F1C559E9D7C9D746147982A9FD2F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
Manifest number: 13A8
Signing time: Fri 19 Dec 2025 17:01:24 +0000
Manifest this update: Fri 19 Dec 2025 17:01:24 +0000
Manifest next update: Sat 20 Dec 2025 17:01:24 +0000
Files and hashes: 1: Fbynj4C6zdRgu6gIq2-WxH6T_LA.roa (hash: 1G7T6CHRBzMTi8lz6sG9TXAsvyynmWFubPkkTd5+Xfk=)
2: wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl (hash: JMznzGIE9gqEe+K81opaPER5nzG0DJrjRkFoZ+0GU/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:37:8f:1c:55:9e:9d:7c:9d:74:61:47:98:2a:9f:d2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c20897c1dbd606929137e672bad0c1f67e637d16
Validity
Not Before: Dec 19 17:01:24 2025 GMT
Not After : Dec 20 17:01:24 2025 GMT
Subject: CN=78498e1c6bf0200727f1d6c63dc7da2f9592b3a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7d:f6:e0:42:63:23:63:79:93:b4:87:ca:22:
59:ce:7c:c2:b9:75:cb:77:74:7a:b7:a6:77:9a:5a:
c2:ff:86:56:c4:fc:24:77:f7:ce:80:5c:e8:3d:55:
1a:8b:11:3e:03:55:fa:21:1f:d3:4e:84:bd:5a:7c:
eb:8b:e2:29:39:40:67:71:fd:e8:ac:96:be:35:2b:
6b:0c:32:dc:93:77:04:a0:07:fc:c5:0f:96:57:ee:
18:b7:1f:c7:74:c5:06:43:cd:9d:e6:3d:bc:30:9a:
df:97:cf:a5:a3:93:f8:21:d0:44:b0:aa:5a:43:85:
a5:db:89:8f:71:04:0b:84:47:17:f0:c8:15:b5:b7:
f6:23:fa:f9:97:9e:f5:40:b1:c2:fb:8e:8d:f6:a4:
29:02:21:0b:52:79:a0:ac:fe:70:42:06:41:05:6f:
38:d7:ae:73:0d:9e:aa:a8:3d:73:e3:63:81:66:07:
7a:0c:6f:66:6b:c7:dd:07:61:d2:36:dd:cc:db:be:
ec:2e:82:b2:0a:97:54:47:94:b2:8e:4f:d3:02:00:
62:12:b0:65:81:8c:d2:f8:ed:82:e7:24:79:e1:a1:
b4:79:97:d6:7f:31:37:a5:9a:72:58:f9:dc:09:33:
c7:63:95:a1:d0:4d:21:60:31:f4:43:ed:d5:03:39:
63:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:8E:1C:6B:F0:20:07:27:F1:D6:C6:3D:C7:DA:2F:95:92:B3:A7
X509v3 Authority Key Identifier:
keyid:C2:08:97:C1:DB:D6:06:92:91:37:E6:72:BA:D0:C1:F6:7E:63:7D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgiXwdvWBpKRN-ZyutDB9n5jfRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/1f8cb4-1712-4e53-8d24-c91bf50104b9/1/wgiXwdvWBpKRN-ZyutDB9n5jfRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:13:1a:22:4a:bd:58:ae:75:59:73:66:34:83:34:7e:ee:6b:
4a:5a:e7:2f:3c:09:b4:f8:4f:20:6b:c4:19:16:a8:e8:85:1c:
0d:43:87:b3:17:c9:f4:78:83:6c:7b:ef:f8:0d:2e:2a:99:8b:
c2:a9:92:ce:2a:5d:11:00:1c:5e:22:e2:3f:53:fa:1f:3a:69:
ff:59:6a:21:75:05:5a:d7:fd:56:fe:25:86:5a:06:fb:6b:6f:
22:f2:39:8d:88:f1:e7:02:e2:36:9e:e8:ae:ba:3b:6a:3a:a9:
94:df:f4:13:86:2d:14:f1:ef:26:70:c0:a0:b7:6f:85:18:e1:
1b:eb:a7:b2:fd:04:27:23:5a:35:e5:c6:c7:d0:93:b8:a4:3c:
4a:1d:70:b7:bf:cb:5b:45:42:cf:59:7b:fa:77:80:6c:44:d5:
8e:9e:a7:57:ee:a0:e0:31:aa:29:3c:be:01:ea:d0:f8:e6:fd:
45:4e:b4:4f:38:f0:d5:27:07:d7:4f:32:dd:de:bb:f6:c0:a4:
88:db:48:38:83:cd:7f:df:45:6a:36:46:5b:c1:da:f7:3c:6c:
61:de:92:b8:98:a9:46:f5:af:ed:0b:af:53:92:cd:31:6e:8c:
d9:e4:b8:ea:05:89:d8:13:aa:75:54:e2:cf:5a:f1:c7:23:aa:
5a:1c:80:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs3jxxVnp18nXRhR5gqn9L4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMDg5N2MxZGJkNjA2OTI5MTM3ZTY3MmJhZDBjMWY2N2U2
MzdkMTYwHhcNMjUxMjE5MTcwMTI0WhcNMjUxMjIwMTcwMTI0WjAzMTEwLwYDVQQD
Eyg3ODQ5OGUxYzZiZjAyMDA3MjdmMWQ2YzYzZGM3ZGEyZjk1OTJiM2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH324EJjI2N5k7SHyiJZznzCuXXL
d3R6t6Z3mlrC/4ZWxPwkd/fOgFzoPVUaixE+A1X6IR/TToS9Wnzri+IpOUBncf3o
rJa+NStrDDLck3cEoAf8xQ+WV+4Ytx/HdMUGQ82d5j28MJrfl8+lo5P4IdBEsKpa
Q4Wl24mPcQQLhEcX8MgVtbf2I/r5l571QLHC+46N9qQpAiELUnmgrP5wQgZBBW84
165zDZ6qqD1z42OBZgd6DG9ma8fdB2HSNt3M277sLoKyCpdUR5Syjk/TAgBiErBl
gYzS+O2C5yR54aG0eZfWfzE3pZpyWPncCTPHY5Wh0E0hYDH0Q+3VAzlj6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhJjhxr8CAHJ/HWxj3H2i+VkrOnMB8GA1UdIwQY
MBaAFMIIl8Hb1gaSkTfmcrrQwfZ+Y30WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQt
YzkxYmY1MDEwNGI5LzEvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi8xZjhjYjQtMTcxMi00ZTUzLThkMjQtYzkxYmY1MDEwNGI5
LzEvd2dpWHdkdldCcEtSTi1aeXV0REI5bjVqZlJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJhMaIkq9
WK51WXNmNIM0fu5rSlrnLzwJtPhPIGvEGRao6IUcDUOHsxfJ9HiDbHvv+A0uKpmL
wqmSzipdEQAcXiLiP1P6Hzpp/1lqIXUFWtf9Vv4lhloG+2tvIvI5jYjx5wLiNp7o
rro7ajqplN/0E4YtFPHvJnDAoLdvhRjhG+unsv0EJyNaNeXGx9CTuKQ8Sh1wt7/L
W0VCz1l7+neAbETVjp6nV+6g4DGqKTy+AerQ+Ob9RU60Tzjw1ScH108y3d679sCk
iNtIOIPNf99FajZGW8Ha9zxsYd6SuJipRvWv7QuvU5LNMW6M2eS46gWJ2BOqdVTi
z1rxxyOqWhyACQ==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:29:35 2025 by rpki-client