This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json) Hash identifier: GdozaWXeDDXSpTiZgdRBu5l7wx/qaquGOqDLfM4GdMA= Subject key identifier: 2E:56:A8:08:17:E2:84:3F:91:52:6D:CE:F9:8F:8A:A8:59:E5:CA:31 Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Certificate serial: 019B405BB3D97BBEC5FCB39388C7D2DD630F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft Manifest number: 070D Signing time: Sun 21 Dec 2025 10:01:50 +0000 Manifest this update: Sun 21 Dec 2025 10:01:50 +0000 Manifest next update: Mon 22 Dec 2025 10:01:50 +0000 Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: /XTy94uL2FoLVYyBsrPhHt8rPWPtOS0EVvRejj1HL7g=) 2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:b3:d9:7b:be:c5:fc:b3:93:88:c7:d2:dd:63:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Validity Not Before: Dec 21 10:01:50 2025 GMT Not After : Dec 22 10:01:50 2025 GMT Subject: CN=2e56a80817e2843f91526dcef98f8aa859e5ca31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:1e:67:6f:4a:9c:c6:c4:cc:7e:37:f5:d9:92: 4d:d3:30:74:c1:84:9b:e6:86:46:82:2f:27:76:29: 4c:f8:0d:59:79:d4:1a:d2:2b:c6:94:cd:8e:47:da: d1:5a:c1:f4:36:89:e4:8f:c6:3e:52:64:75:1e:40: f4:e3:1b:23:4d:eb:0e:df:90:49:f4:60:f6:d9:8e: 38:39:0d:2c:92:02:7f:99:56:36:5a:a7:c9:d2:b8: 40:e7:99:90:45:97:33:d6:37:a3:e3:77:aa:2c:80: 23:5b:46:11:03:0d:cb:f4:a4:18:01:db:d0:d0:41: 49:49:23:1c:f1:2c:bd:b3:ea:a9:56:ca:54:03:28: 00:7c:72:7a:b1:86:44:70:29:36:7d:64:14:c0:ea: e8:f9:5f:c6:50:5e:23:8f:11:20:34:dd:9e:f8:fb: 60:ac:03:a1:67:bc:57:df:c7:55:a0:08:2a:eb:8c: 66:fc:25:48:b4:a8:52:e0:0e:34:ff:db:fb:42:ef: df:ad:cc:51:37:63:6c:cb:31:45:4c:10:7e:7b:d7: 6a:e7:11:c5:26:08:8d:b2:92:b1:93:f4:10:06:62: fd:60:1e:df:60:1b:8f:b1:69:9f:21:dd:2a:5e:16: 31:a9:6a:ae:40:97:1a:45:46:b3:14:fe:0b:27:5f: 3b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:56:A8:08:17:E2:84:3F:91:52:6D:CE:F9:8F:8A:A8:59:E5:CA:31 X509v3 Authority Key Identifier: keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fc:0f:6d:8d:54:6c:13:fd:e1:fd:14:bf:05:01:a9:77:31: f5:81:d2:7e:3f:4f:b3:6e:ee:ef:de:89:e4:c5:d4:0a:33:50: 0a:39:92:ee:00:86:a3:2e:42:b1:4e:e4:08:17:9d:9b:03:0d: 16:00:cc:63:13:69:43:25:96:32:14:2d:1e:29:f7:86:a9:56: ac:1a:ea:12:ca:c1:57:37:81:72:48:c2:d9:24:70:06:b1:53: 92:ac:1c:de:1e:12:ea:8a:8e:c4:d5:be:00:ce:f0:4a:90:e9: 84:a3:ae:a6:8d:ec:07:4d:cf:51:f9:77:82:50:4d:22:ba:8b: 9f:07:0a:04:be:89:a4:39:48:48:be:3b:42:e8:54:2a:e2:cb: 3a:03:b8:0a:c9:7b:95:82:82:4d:ba:27:aa:c9:8a:f7:a6:57: a2:55:d8:25:05:5f:4a:2f:74:a6:04:00:46:d6:70:51:36:fd: 9e:bc:5a:81:ca:d0:f8:75:b8:db:7d:17:89:df:af:89:92:5d: 65:06:31:7c:cd:d4:6f:2d:7e:7c:cd:51:3c:70:0f:9b:0e:4b: 3d:8e:91:9b:7c:db:5d:2c:ad:c7:3e:9b:ff:73:18:f0:fe:65: d2:c4:57:c5:2a:48:1c:6e:bc:bb:cc:f0:2b:7b:ce:1c:c7:38: 15:b5:e0:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW7PZe77F/LOTiMfS3WMPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy NmI1ZDMwHhcNMjUxMjIxMTAwMTUwWhcNMjUxMjIyMTAwMTUwWjAzMTEwLwYDVQQD EygyZTU2YTgwODE3ZTI4NDNmOTE1MjZkY2VmOThmOGFhODU5ZTVjYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+B5nb0qcxsTMfjf12ZJN0zB0wYSb 5oZGgi8ndilM+A1ZedQa0ivGlM2OR9rRWsH0Nonkj8Y+UmR1HkD04xsjTesO35BJ 9GD22Y44OQ0skgJ/mVY2WqfJ0rhA55mQRZcz1jej43eqLIAjW0YRAw3L9KQYAdvQ 0EFJSSMc8Sy9s+qpVspUAygAfHJ6sYZEcCk2fWQUwOro+V/GUF4jjxEgNN2e+Ptg rAOhZ7xX38dVoAgq64xm/CVItKhS4A40/9v7Qu/frcxRN2NsyzFFTBB+e9dq5xHF JgiNspKxk/QQBmL9YB7fYBuPsWmfId0qXhYxqWquQJcaRUazFP4LJ187DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5WqAgX4oQ/kVJtzvmPiqhZ5coxMB8GA1UdIwQY MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjPwPbY1U bBP94f0UvwUBqXcx9YHSfj9Ps27u796J5MXUCjNQCjmS7gCGoy5CsU7kCBedmwMN FgDMYxNpQyWWMhQtHin3hqlWrBrqEsrBVzeBckjC2SRwBrFTkqwc3h4S6oqOxNW+ AM7wSpDphKOupo3sB03PUfl3glBNIrqLnwcKBL6JpDlISL47QuhUKuLLOgO4Csl7 lYKCTbonqsmK96ZXolXYJQVfSi90pgQARtZwUTb9nrxagcrQ+HW4230Xid+viZJd ZQYxfM3Uby1+fM1RPHAPmw5LPY6Rm3zbXSytxz6b/3MY8P5l0sRXxSpIHG68u8zw K3vOHMc4FbXgKw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:23:50 2025 by rpki-client