This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json) Hash identifier: yeKTt9hmk4+BiS4qXVvQGd6WE/DYZTHeXO6LxvXgT6g= Subject key identifier: C1:BA:EE:E9:3D:D4:0F:4F:F1:C2:7D:6B:0D:DA:6E:F1:D0:2E:E3:4C Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Certificate serial: 019B481474423EE6EB1D5FD8CBE634859B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft Manifest number: 0711 Signing time: Mon 22 Dec 2025 22:00:58 +0000 Manifest this update: Mon 22 Dec 2025 22:00:58 +0000 Manifest next update: Tue 23 Dec 2025 22:00:58 +0000 Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: rqikkMxiCzJb/rm6Tsb3fmb+q/rnCtd3bEFqCH6CsZ0=) 2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:74:42:3e:e6:eb:1d:5f:d8:cb:e6:34:85:9b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Validity Not Before: Dec 22 22:00:58 2025 GMT Not After : Dec 23 22:00:58 2025 GMT Subject: CN=c1baeee93dd40f4ff1c27d6b0dda6ef1d02ee34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2a:dc:93:23:a7:fc:12:49:77:b0:1e:7e:59: 50:ed:eb:eb:f7:8e:e5:fb:fd:35:6c:d1:d8:a5:9a: 68:3b:c0:aa:10:37:64:53:23:04:0c:83:36:b4:26: c2:bf:94:e9:69:f9:af:7c:f0:79:06:9c:c3:6d:33: 46:dc:94:0f:a7:01:c3:d9:ec:33:7a:d3:ce:ad:35: 62:29:5e:8e:af:a5:c1:6a:5c:72:05:25:6e:81:a2: fd:f5:98:47:cf:df:1e:61:07:60:fe:85:a4:93:c7: f5:b3:6b:31:15:35:b2:ee:35:18:8e:fe:8c:03:cd: 2d:01:27:e9:cc:c0:6a:46:4a:ef:b5:a7:90:ad:63: c7:85:8d:69:9a:57:46:41:0b:bc:72:b1:26:4d:3a: ec:b5:ab:7d:db:fc:f0:a2:f7:d1:4c:a2:17:08:ef: 02:5f:be:6e:fa:a7:78:5c:e2:81:3f:e0:1e:2c:f9: 05:08:48:cf:af:3c:83:da:f5:e1:91:33:e1:fe:a1: a0:7d:0a:28:b1:78:e0:cf:10:42:26:83:30:58:c6: c5:de:fa:39:c1:13:13:25:89:53:4d:89:23:ad:1d: 11:cf:8c:37:8f:7f:ac:b0:4b:22:c8:c5:e4:de:79: 27:36:78:3d:e3:47:8a:26:f4:39:74:cb:52:8e:7d: 23:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BA:EE:E9:3D:D4:0F:4F:F1:C2:7D:6B:0D:DA:6E:F1:D0:2E:E3:4C X509v3 Authority Key Identifier: keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:12:49:d8:64:6e:ab:02:19:12:e9:d2:16:ed:d0:1b:58:d9: b8:95:ae:2f:90:59:ff:6b:18:d6:ca:23:be:46:22:99:0c:65: 71:a1:f9:2c:72:c8:56:41:ba:b2:40:4b:df:72:fa:d1:a2:58: 06:82:a9:cf:05:10:97:2b:c1:dc:71:ee:87:05:0b:a2:67:c3: da:b4:1b:40:8c:ac:22:1d:e7:f1:83:d3:0f:36:43:11:db:86: ae:ad:cd:f9:e2:2e:df:87:d6:19:7a:fd:63:8d:ec:42:3c:a2: e5:9e:ec:47:3d:1e:2c:f6:a8:51:57:0c:ad:73:6e:63:38:22: 52:a3:3c:22:72:01:fe:83:1e:d1:85:69:2e:ac:7a:ea:5c:ce: 09:a6:64:a9:48:9b:a9:2a:02:63:80:2a:5a:a6:18:4f:c6:0f: da:59:00:fe:62:59:3c:7d:04:81:d3:0a:fb:de:21:e3:fa:9c: 2e:d2:85:0e:af:e8:9b:3f:48:a8:00:2e:64:51:f0:23:e9:9e: c7:fa:01:b5:5f:92:a1:77:df:82:36:97:ba:ec:30:b0:6f:b2: 52:64:41:ef:5d:9d:77:fc:8a:fc:35:4a:d3:c5:ca:a8:79:af: 6b:dc:a5:a0:30:3b:08:f7:1d:a3:fa:d2:26:de:c6:d9:d7:59: 9e:e9:21:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFHRCPubrHV/Yy+Y0hZs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy NmI1ZDMwHhcNMjUxMjIyMjIwMDU4WhcNMjUxMjIzMjIwMDU4WjAzMTEwLwYDVQQD EyhjMWJhZWVlOTNkZDQwZjRmZjFjMjdkNmIwZGRhNmVmMWQwMmVlMzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyrckyOn/BJJd7AefllQ7evr947l +/01bNHYpZpoO8CqEDdkUyMEDIM2tCbCv5TpafmvfPB5BpzDbTNG3JQPpwHD2ewz etPOrTViKV6Or6XBalxyBSVugaL99ZhHz98eYQdg/oWkk8f1s2sxFTWy7jUYjv6M A80tASfpzMBqRkrvtaeQrWPHhY1pmldGQQu8crEmTTrstat92/zwovfRTKIXCO8C X75u+qd4XOKBP+AeLPkFCEjPrzyD2vXhkTPh/qGgfQoosXjgzxBCJoMwWMbF3vo5 wRMTJYlTTYkjrR0Rz4w3j3+ssEsiyMXk3nknNng940eKJvQ5dMtSjn0jzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMG67uk91A9P8cJ9aw3abvHQLuNMMB8GA1UdIwQY MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxJJ2GRu qwIZEunSFu3QG1jZuJWuL5BZ/2sY1sojvkYimQxlcaH5LHLIVkG6skBL33L60aJY BoKpzwUQlyvB3HHuhwULomfD2rQbQIysIh3n8YPTDzZDEduGrq3N+eIu34fWGXr9 Y43sQjyi5Z7sRz0eLPaoUVcMrXNuYzgiUqM8InIB/oMe0YVpLqx66lzOCaZkqUib qSoCY4AqWqYYT8YP2lkA/mJZPH0EgdMK+94h4/qcLtKFDq/omz9IqAAuZFHwI+me x/oBtV+SoXffgjaXuuwwsG+yUmRB712dd/yK/DVK08XKqHmva9yloDA7CPcdo/rS Jt7G2ddZnukhSA== -----END CERTIFICATE-----Generated at Tue Dec 23 07:52:40 2025 by rpki-client