This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json) Hash identifier: 5Lroa/XWeSzawIWHPtBcDWBBDkj5RwhvPAGnl9n2ifc= Subject key identifier: 9F:DF:23:B9:37:C8:01:EB:77:A9:78:38:DE:62:8C:F7:8A:6B:C3:20 Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6 Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6 Certificate serial: 019B38A21580808FFAD7B2C3A9EABF35C83C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 22:01:44 +0000 Manifest this update: Fri 19 Dec 2025 22:01:44 +0000 Manifest next update: Sat 20 Dec 2025 22:01:44 +0000 Files and hashes: 1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=) 2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: fM8Y55OchZjuU02WApdlhTa95PjdD487tUyoole2+Ao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:15:80:80:8f:fa:d7:b2:c3:a9:ea:bf:35:c8:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6 Validity Not Before: Dec 19 22:01:44 2025 GMT Not After : Dec 20 22:01:44 2025 GMT Subject: CN=9fdf23b937c801eb77a97838de628cf78a6bc320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e1:25:da:43:2b:10:eb:65:56:79:2f:83:33: c4:03:89:f3:05:74:df:4c:61:74:f1:39:3c:66:ba: 11:b2:e7:ff:5c:a2:a7:e8:a5:ce:19:e3:ed:9d:7c: 69:8c:0d:54:5f:11:fe:55:96:7c:bd:5c:f8:a3:c7: fa:ac:66:db:bd:1d:1c:15:50:77:37:37:d4:08:40: b7:19:90:2b:f7:b2:19:e2:b5:6d:da:65:3b:f2:77: 22:62:3c:3f:f2:65:31:35:57:c9:ea:be:9e:a9:27: 51:87:a4:3f:3b:b3:9a:10:83:10:70:52:3e:fc:44: 97:60:9a:0d:fe:86:00:03:7a:95:bc:53:22:be:62: 2e:ac:51:10:8b:d3:ac:de:87:df:07:6a:ee:a6:44: 17:a7:35:f2:31:fb:c4:fc:52:62:2d:89:c0:d9:7e: 53:9a:a1:1e:01:4d:df:76:b5:b1:ec:fd:27:ee:ce: 91:e2:59:c7:ea:f6:02:13:43:f2:20:46:aa:8e:78: f4:5f:fd:2f:31:c9:59:a4:06:f4:0a:49:d1:4a:51: e5:62:38:ff:7d:12:80:f1:43:14:fc:09:b4:0d:06: 69:35:49:45:a5:0a:32:4c:89:33:0e:aa:53:9d:da: 3e:a3:d3:bc:1f:9f:96:27:3f:5e:5c:6e:9f:b4:a2: a2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DF:23:B9:37:C8:01:EB:77:A9:78:38:DE:62:8C:F7:8A:6B:C3:20 X509v3 Authority Key Identifier: keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3c:60:e1:4d:8e:e4:62:b8:3b:2d:e6:96:62:d4:73:0d:a0: 40:df:4c:37:c2:f6:a2:f7:68:f3:61:51:34:cd:5d:d6:9d:7e: a5:b2:88:99:33:9c:65:5d:a8:00:e9:fb:83:d1:52:ef:8d:a6: 65:3b:69:b3:27:14:77:b2:92:0c:3c:e1:d1:0a:69:f6:a0:0a: 1b:6e:f6:08:b0:29:79:0f:70:53:b3:d8:ed:ea:04:70:cd:b4: 95:eb:11:83:c2:80:02:9c:c0:23:dd:5a:70:24:72:c6:05:73: 0d:be:ad:a5:5b:30:f2:cb:df:6b:74:da:7b:da:f0:1b:ef:aa: d0:f0:13:17:6a:00:22:a6:9b:49:65:a7:a1:db:c5:bc:21:d0: 11:28:0f:ff:57:13:fb:72:6e:02:b4:01:ad:1f:3f:bb:a7:cc: cf:2a:90:3d:d0:68:32:cd:c4:c7:5c:8a:aa:64:3e:34:08:4c: b4:50:0c:26:a1:62:6a:b1:bb:7b:e9:c0:ab:fc:30:61:b3:11: 8f:9f:f5:6c:80:8a:59:f0:f9:a5:43:5c:8e:8e:97:39:0d:48: b6:2b:8f:a0:74:bf:a6:7e:e8:26:8a:7a:01:8b:90:a5:4d:e8: 70:af:90:22:14:8a:e2:23:81:91:76:17:80:d4:1a:91:29:a1: f9:42:6f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ohWAgI/617LDqeq/Ncg8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzA1ZWNlNmM5MDhhZDg4ODI1MTNkYTNhMjVhMTYwNzAz YmI3ZjYwHhcNMjUxMjE5MjIwMTQ0WhcNMjUxMjIwMjIwMTQ0WjAzMTEwLwYDVQQD Eyg5ZmRmMjNiOTM3YzgwMWViNzdhOTc4MzhkZTYyOGNmNzhhNmJjMzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjeEl2kMrEOtlVnkvgzPEA4nzBXTf TGF08Tk8ZroRsuf/XKKn6KXOGePtnXxpjA1UXxH+VZZ8vVz4o8f6rGbbvR0cFVB3 NzfUCEC3GZAr97IZ4rVt2mU78nciYjw/8mUxNVfJ6r6eqSdRh6Q/O7OaEIMQcFI+ /ESXYJoN/oYAA3qVvFMivmIurFEQi9Os3offB2rupkQXpzXyMfvE/FJiLYnA2X5T mqEeAU3fdrWx7P0n7s6R4lnH6vYCE0PyIEaqjnj0X/0vMclZpAb0CknRSlHlYjj/ fRKA8UMU/Am0DQZpNUlFpQoyTIkzDqpTndo+o9O8H5+WJz9eXG6ftKKiXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ/fI7k3yAHrd6l4ON5ijPeKa8MgMB8GA1UdIwQY MBaAFMHAXs5skIrYiCUT2joloWBwO7f2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAt ZWJiNjNhNDU0YTkxLzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAtZWJiNjNhNDU0YTkx LzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzxg4U2O 5GK4Oy3mlmLUcw2gQN9MN8L2ovdo82FRNM1d1p1+pbKImTOcZV2oAOn7g9FS742m ZTtpsycUd7KSDDzh0Qpp9qAKG272CLApeQ9wU7PY7eoEcM20lesRg8KAApzAI91a cCRyxgVzDb6tpVsw8svfa3Tae9rwG++q0PATF2oAIqabSWWnodvFvCHQESgP/1cT +3JuArQBrR8/u6fMzyqQPdBoMs3Ex1yKqmQ+NAhMtFAMJqFiarG7e+nAq/wwYbMR j5/1bICKWfD5pUNcjo6XOQ1ItiuPoHS/pn7oJop6AYuQpU3ocK+QIhSK4iOBkXYX gNQakSmh+UJvuA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:39 2025 by rpki-client