This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json) Hash identifier: gQ8tnRNwDL1t2+6DFTUuSH59k/5uUE2Dod90bZZAdGM= Subject key identifier: B6:BD:44:5A:E3:22:FC:93:E6:CF:8A:CC:02:00:19:8D:B3:06:81:B5 Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Certificate serial: 019B41DB0579A81A3FA7D74D6BCFACF028C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft Manifest number: 0571 Signing time: Sun 21 Dec 2025 17:00:31 +0000 Manifest this update: Sun 21 Dec 2025 17:00:31 +0000 Manifest next update: Mon 22 Dec 2025 17:00:31 +0000 Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=) 2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: PdOc0auZcNwrwbJixtt9OT6hc7QCeoEZn/lXBwMb5xY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:05:79:a8:1a:3f:a7:d7:4d:6b:cf:ac:f0:28:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Validity Not Before: Dec 21 17:00:31 2025 GMT Not After : Dec 22 17:00:31 2025 GMT Subject: CN=b6bd445ae322fc93e6cf8acc0200198db30681b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:21:25:37:95:cf:d8:cb:af:d5:39:31:db: fd:95:54:41:b3:8f:b2:ec:52:d3:39:f8:b2:9a:51: 98:da:47:ad:68:68:41:4e:b1:51:32:ef:75:ab:81: e2:e1:30:d1:15:86:a0:19:ec:78:f4:d7:c8:1a:e4: 30:84:70:84:65:53:7b:2d:e2:0a:80:b9:e6:ee:36: 15:97:5b:56:37:6d:fd:5d:ea:a4:09:55:87:dc:f9: 16:59:21:6b:97:74:a3:3a:80:9e:3d:e6:b6:8f:fd: 80:d6:86:93:f9:b3:46:b2:a6:15:fa:59:fd:17:dd: 05:7d:c6:a8:85:7c:c7:e2:80:48:d4:93:ff:fb:d1: 51:4d:9e:45:d8:2a:87:0c:28:74:5c:21:c2:b3:2d: da:db:ee:0f:95:59:ad:56:b9:b0:11:b5:0c:ed:17: ab:48:ff:c5:91:e2:ea:4d:15:40:f1:da:17:84:ff: ba:a0:cf:fc:db:7d:43:94:4f:f7:79:f2:c3:ca:39: 0a:9b:c9:d2:a1:3d:43:ec:dc:3e:cc:4f:14:9f:7f: 65:1a:cb:70:84:3e:58:6c:08:36:20:ae:7b:78:01: 1d:dd:15:2f:ac:94:e9:6a:19:e8:1e:5a:4a:a8:e5: 99:8a:81:8d:4a:8f:65:12:5c:2c:db:89:01:0b:4c: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BD:44:5A:E3:22:FC:93:E6:CF:8A:CC:02:00:19:8D:B3:06:81:B5 X509v3 Authority Key Identifier: keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:25:9f:d5:43:6a:3a:9b:18:34:cc:b9:a8:9f:86:c9:d2:a2: 29:6e:07:b7:1b:bf:e8:71:4c:1f:28:79:41:5b:9d:fa:c6:f7: 0e:4b:a8:5e:2d:4e:9a:9a:3f:97:d6:fe:ec:f5:cd:01:1b:13: 13:99:3b:9d:95:ec:8d:e0:10:21:52:9d:9d:1f:f8:43:d8:32: 27:fc:81:d0:bf:c2:07:00:db:06:39:fc:9b:c3:05:c7:9d:fc: a2:7a:b3:02:8a:1f:77:80:f4:9b:8a:d0:44:42:d2:33:d0:77: 5d:11:68:3b:26:28:4f:b6:c6:fe:5f:ec:2c:95:a1:95:a1:da: cb:04:94:98:2f:ec:89:fd:9a:70:9b:49:be:0c:a6:67:39:16: 6b:f5:8a:d1:87:d4:37:4b:79:1d:86:4e:b3:94:2f:dc:27:49: 4a:0e:8f:b3:46:db:cf:82:80:0c:26:00:07:b7:6c:6d:6e:53: 26:4b:cd:9b:75:0d:5c:aa:ff:dd:5c:5d:fb:2d:f4:5d:b8:98: 55:ed:c7:cc:7c:b7:fc:7c:ee:df:bc:53:43:69:0b:c5:6e:c1: 98:67:3e:a0:07:b8:13:27:bb:a2:2d:86:75:a8:49:64:05:eb: fc:83:d4:bb:67:9e:32:ce:46:48:34:26:0e:2c:49:21:1d:95: 14:a6:52:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB2wV5qBo/p9dNa8+s8CjBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz YTE5OTYwHhcNMjUxMjIxMTcwMDMxWhcNMjUxMjIyMTcwMDMxWjAzMTEwLwYDVQQD EyhiNmJkNDQ1YWUzMjJmYzkzZTZjZjhhY2MwMjAwMTk4ZGIzMDY4MWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrAhJTeVz9jLr9U5Mdv9lVRBs4+y 7FLTOfiymlGY2ketaGhBTrFRMu91q4Hi4TDRFYagGex49NfIGuQwhHCEZVN7LeIK gLnm7jYVl1tWN239XeqkCVWH3PkWWSFrl3SjOoCePea2j/2A1oaT+bNGsqYV+ln9 F90FfcaohXzH4oBI1JP/+9FRTZ5F2CqHDCh0XCHCsy3a2+4PlVmtVrmwEbUM7Rer SP/FkeLqTRVA8doXhP+6oM/8231DlE/3efLDyjkKm8nSoT1D7Nw+zE8Un39lGstw hD5YbAg2IK57eAEd3RUvrJTpahnoHlpKqOWZioGNSo9lElws24kBC0xQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLa9RFrjIvyT5s+KzAIAGY2zBoG1MB8GA1UdIwQY MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4 LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHiWf1UNq OpsYNMy5qJ+GydKiKW4Htxu/6HFMHyh5QVud+sb3DkuoXi1Ompo/l9b+7PXNARsT E5k7nZXsjeAQIVKdnR/4Q9gyJ/yB0L/CBwDbBjn8m8MFx538onqzAoofd4D0m4rQ RELSM9B3XRFoOyYoT7bG/l/sLJWhlaHaywSUmC/sif2acJtJvgymZzkWa/WK0YfU N0t5HYZOs5Qv3CdJSg6Ps0bbz4KADCYAB7dsbW5TJkvNm3UNXKr/3Vxd+y30XbiY Ve3HzHy3/Hzu37xTQ2kLxW7BmGc+oAe4Eye7oi2GdahJZAXr/IPUu2eeMs5GSDQm DixJIR2VFKZSGA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:01 2025 by rpki-client