This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft File: WAbICbdgX21c4Se9LYt2dDULixE.mft (raw, json) Hash identifier: aPm0N5vaOOL8cZQ6JsZqYLpa7KOkubtTzBK9Xs9heUw= Subject key identifier: 90:84:9C:20:FD:2F:2C:F3:8D:41:BE:A8:13:3F:D4:6C:81:C9:99:5F Authority key identifier: 58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11 Certificate issuer: /CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11 Certificate serial: 019B0E25D2BEF413D07CD1E2D3847467EB94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft Manifest number: 0682 Signing time: Thu 11 Dec 2025 16:01:58 +0000 Manifest this update: Thu 11 Dec 2025 16:01:58 +0000 Manifest next update: Fri 12 Dec 2025 16:01:58 +0000 Files and hashes: 1: NWoXdf60qAqmSr6FbuL52Si_7kM.roa (hash: t2UKYAGI3HyRjneErifjXt9lNGLGftAOePJsseePFFE=) 2: WAbICbdgX21c4Se9LYt2dDULixE.crl (hash: c1d9SOsVwbHEGO3xDo0W/mS2bnvpHAV9od/OejAYfqA=) 3: WCa02rex0sd9sPiC2XX_JjOTVXw.roa (hash: A7EWT3mURBDpeD/IQOh3v6v33IvqR3HU4O/X883nOww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:d2:be:f4:13:d0:7c:d1:e2:d3:84:74:67:eb:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806c809b7605f6d5ce127bd2d8b7674350b8b11 Validity Not Before: Dec 11 16:01:58 2025 GMT Not After : Dec 12 16:01:58 2025 GMT Subject: CN=90849c20fd2f2cf38d41bea8133fd46c81c9995f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f3:a1:df:1e:70:96:54:e3:a2:78:77:0a:87: 99:9d:f5:56:d6:c7:65:8e:d4:7e:70:09:f0:96:94: b7:7e:fc:4a:02:25:77:be:9c:e5:13:55:b6:7d:85: b2:a8:7e:90:98:67:bc:39:13:47:d2:c1:e7:f7:33: 82:88:ce:be:26:be:3f:b2:6d:02:cc:50:ee:ad:ba: 68:9d:80:82:33:3c:c8:8c:27:14:94:fb:c9:1a:1b: ab:e9:91:52:47:3e:b3:4f:16:53:05:48:6b:0c:61: b4:2a:ae:8f:07:5a:f2:60:74:7b:33:41:ae:07:90: 7b:29:86:aa:a7:51:7b:bf:65:fc:63:b2:3a:94:bf: c2:32:4e:cc:58:21:9a:29:e5:e5:e5:8c:08:fb:93: 9d:6a:85:cb:96:87:63:17:42:c6:aa:d0:09:c8:bf: f5:2c:ff:c9:7f:06:bf:c4:db:ea:f2:2d:f2:03:60: 64:a4:55:82:a6:a4:0b:35:cb:94:6e:8f:cc:42:45: 1f:65:a2:62:24:95:9f:0e:36:28:9a:25:ee:d0:e9: 0c:bd:35:dd:82:23:5c:dc:00:b7:23:73:1b:62:33: 9d:3e:9f:c4:9c:60:c7:1b:59:7e:83:0c:db:0b:cc: bf:c5:4c:af:7a:48:ca:13:31:e1:d2:cf:b5:24:d3: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:84:9C:20:FD:2F:2C:F3:8D:41:BE:A8:13:3F:D4:6C:81:C9:99:5F X509v3 Authority Key Identifier: keyid:58:06:C8:09:B7:60:5F:6D:5C:E1:27:BD:2D:8B:76:74:35:0B:8B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbICbdgX21c4Se9LYt2dDULixE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/168f4a-12b4-4737-8e27-c30664aeec14/1/WAbICbdgX21c4Se9LYt2dDULixE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:b3:82:c1:3f:d9:25:76:cc:db:01:7c:ab:b4:d7:4f:b4:a2: 5c:12:45:b5:aa:e9:06:a1:ac:1c:94:f2:5d:ee:78:91:f1:da: ab:bb:fd:6a:43:5c:a7:d3:7d:e6:43:b7:dd:29:34:75:b7:24: 7f:63:06:40:ca:07:b5:6e:23:45:da:69:20:ba:d8:7d:ba:bb: 25:d1:14:0f:66:80:7b:7b:88:a9:10:dc:6c:6b:de:6a:fa:01: 86:9b:51:98:fd:0b:3f:0a:dd:8a:24:46:78:4a:0a:eb:d3:f4: 10:25:2f:07:eb:b1:10:9f:84:17:0e:41:8c:dc:f9:4a:2b:0b: 94:a2:e8:83:9f:7a:c1:62:69:06:b8:4d:98:54:22:64:ec:27: cd:8d:49:46:f2:ae:c3:37:69:30:6c:8c:87:3f:c1:f5:a5:a7: 80:90:4b:bf:20:d9:4f:02:ef:7a:40:b5:93:c5:8b:64:a4:78: a5:a9:45:78:fc:7e:c2:8e:2c:39:4c:24:21:82:d8:cf:2b:9f: aa:85:6d:88:f4:40:91:e5:03:2a:98:17:ee:37:78:29:ed:2b: 8b:93:5d:8b:93:b2:a6:1f:ad:a7:02:24:4a:57:3a:e5:8a:76: 89:01:37:8d:64:f9:3c:c7:20:29:58:5b:53:0a:f2:f1:34:02: 2d:41:bf:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJdK+9BPQfNHi04R0Z+uUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZjODA5Yjc2MDVmNmQ1Y2UxMjdiZDJkOGI3Njc0MzUw YjhiMTEwHhcNMjUxMjExMTYwMTU4WhcNMjUxMjEyMTYwMTU4WjAzMTEwLwYDVQQD Eyg5MDg0OWMyMGZkMmYyY2YzOGQ0MWJlYTgxMzNmZDQ2YzgxYzk5OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfOh3x5wllTjonh3CoeZnfVW1sdl jtR+cAnwlpS3fvxKAiV3vpzlE1W2fYWyqH6QmGe8ORNH0sHn9zOCiM6+Jr4/sm0C zFDurbponYCCMzzIjCcUlPvJGhur6ZFSRz6zTxZTBUhrDGG0Kq6PB1ryYHR7M0Gu B5B7KYaqp1F7v2X8Y7I6lL/CMk7MWCGaKeXl5YwI+5OdaoXLlodjF0LGqtAJyL/1 LP/Jfwa/xNvq8i3yA2BkpFWCpqQLNcuUbo/MQkUfZaJiJJWfDjYomiXu0OkMvTXd giNc3AC3I3MbYjOdPp/EnGDHG1l+gwzbC8y/xUyvekjKEzHh0s+1JNNvsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCEnCD9LyzzjUG+qBM/1GyByZlfMB8GA1UdIwQY MBaAFFgGyAm3YF9tXOEnvS2LdnQ1C4sRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjct YzMwNjY0YWVlYzE0LzEvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNjhmNGEtMTJiNC00NzM3LThlMjctYzMwNjY0YWVlYzE0 LzEvV0FiSUNiZGdYMjFjNFNlOUxZdDJkRFVMaXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj7OCwT/Z JXbM2wF8q7TXT7SiXBJFtarpBqGsHJTyXe54kfHaq7v9akNcp9N95kO33Sk0dbck f2MGQMoHtW4jRdppILrYfbq7JdEUD2aAe3uIqRDcbGveavoBhptRmP0LPwrdiiRG eEoK69P0ECUvB+uxEJ+EFw5BjNz5SisLlKLog596wWJpBrhNmFQiZOwnzY1JRvKu wzdpMGyMhz/B9aWngJBLvyDZTwLvekC1k8WLZKR4palFePx+wo4sOUwkIYLYzyuf qoVtiPRAkeUDKpgX7jd4Ke0ri5Ndi5Oyph+tpwIkSlc65Yp2iQE3jWT5PMcgKVhb Uwry8TQCLUG/pg== -----END CERTIFICATE-----Generated at Thu Dec 11 21:38:02 2025 by rpki-client