This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json) Hash identifier: FuPdTDI5wLfRcYIXNhzbdIa7x5CCL4cOkLxmw0qkOpo= Subject key identifier: 3A:BB:59:AD:EB:9B:A2:10:AA:6C:12:DE:0A:84:BE:2B:6C:3A:0B:0D Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Certificate serial: 019B24E3425FFC1C9BEC7195528DF2DC416A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft Manifest number: 0562 Signing time: Tue 16 Dec 2025 02:00:31 +0000 Manifest this update: Tue 16 Dec 2025 02:00:31 +0000 Manifest next update: Wed 17 Dec 2025 02:00:31 +0000 Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=) 2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: Hx7dSURq6FY71TLoQ49AC3FOQNj4ZrZMvZyD/KDcMas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:42:5f:fc:1c:9b:ec:71:95:52:8d:f2:dc:41:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Validity Not Before: Dec 16 02:00:31 2025 GMT Not After : Dec 17 02:00:31 2025 GMT Subject: CN=3abb59adeb9ba210aa6c12de0a84be2b6c3a0b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7f:df:3c:fa:77:63:ab:6b:19:89:44:6b:01: 4d:c2:93:2d:cf:5e:b3:e9:b7:0c:8d:23:69:ad:8e: 8b:32:90:55:36:00:d6:0c:4b:a9:fc:58:d6:9f:96: eb:68:17:fe:5c:a8:68:c7:4f:f8:b5:d7:9f:7f:17: e3:40:7c:e3:1f:5d:ba:5f:15:48:02:2f:30:d8:45: 34:36:0e:15:d0:9c:9b:74:2c:d3:e0:69:cd:be:f7: 9a:ec:96:7d:b0:e0:c3:f6:cc:d3:c5:0b:79:12:4e: 3f:55:10:b8:b8:94:0f:29:0f:e4:23:f3:f6:cf:7b: 99:c0:76:ef:97:dd:e5:3e:a2:e4:dd:a2:eb:68:d2: e6:0f:81:cb:02:ed:b6:bd:8e:59:59:b7:e1:6f:ce: c6:b4:64:25:64:39:f9:f7:65:03:a4:70:75:83:f8: b9:7c:8b:94:9a:64:10:6f:ff:09:ef:94:be:1c:93: 97:0c:9a:d1:3b:aa:4d:f8:15:69:d3:66:7e:4f:76: 3a:e5:f1:43:84:80:5a:76:a4:11:0d:d1:73:70:de: c9:1e:7a:22:70:18:9c:27:05:91:84:82:8d:c4:78: 9d:de:32:33:fe:5d:c6:ea:2f:6c:bf:79:82:d2:25: d0:fd:9e:6e:76:ac:34:05:99:47:56:66:18:ed:3e: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BB:59:AD:EB:9B:A2:10:AA:6C:12:DE:0A:84:BE:2B:6C:3A:0B:0D X509v3 Authority Key Identifier: keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:71:45:9e:7e:02:c5:00:ed:d1:0c:b6:85:b2:07:20:33:6d: da:2b:69:da:f8:49:a3:65:87:9d:de:e1:a1:62:08:89:48:e9: 32:94:85:75:14:ea:13:2c:9b:f2:25:60:99:c4:c8:25:9c:af: 7b:e7:40:86:24:5c:a1:be:a7:53:75:ba:94:5f:31:4b:a9:95: 89:5c:60:d6:0c:60:8b:ba:6a:ec:bf:b5:d8:70:d0:2c:af:91: 0b:91:8b:e1:fd:0d:84:49:da:c3:d3:90:a9:b6:1b:2a:fa:0e: 70:35:98:2a:07:de:d4:54:f9:5e:82:4a:70:95:07:de:cd:e4: b8:f9:86:63:17:e8:e4:7f:d7:93:cd:79:da:1a:96:5e:c9:bb: ca:76:a9:d5:0e:d6:ab:c6:08:d6:84:1c:a0:aa:0e:02:de:d3: d9:c6:2f:23:6a:7b:7f:e4:20:ea:1e:e2:39:68:50:53:b2:57: 5a:ff:a4:27:c7:d8:23:43:26:40:e7:9e:5f:4a:f5:3a:b9:df: a6:ea:1b:26:44:69:e8:de:ff:cc:5a:12:d7:65:a0:6e:55:fa: e5:a1:41:d5:e2:2f:d7:a5:43:00:cb:a7:f3:15:0e:9a:4c:8e: a3:9b:60:82:67:3d:9a:6c:a6:c0:f5:d1:4d:3a:10:45:01:87: 3b:58:f5:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk40Jf/Byb7HGVUo3y3EFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz YTE5OTYwHhcNMjUxMjE2MDIwMDMxWhcNMjUxMjE3MDIwMDMxWjAzMTEwLwYDVQQD EygzYWJiNTlhZGViOWJhMjEwYWE2YzEyZGUwYTg0YmUyYjZjM2EwYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxH/fPPp3Y6trGYlEawFNwpMtz16z 6bcMjSNprY6LMpBVNgDWDEup/FjWn5braBf+XKhox0/4tdeffxfjQHzjH126XxVI Ai8w2EU0Ng4V0JybdCzT4GnNvvea7JZ9sODD9szTxQt5Ek4/VRC4uJQPKQ/kI/P2 z3uZwHbvl93lPqLk3aLraNLmD4HLAu22vY5ZWbfhb87GtGQlZDn592UDpHB1g/i5 fIuUmmQQb/8J75S+HJOXDJrRO6pN+BVp02Z+T3Y65fFDhIBadqQRDdFzcN7JHnoi cBicJwWRhIKNxHid3jIz/l3G6i9sv3mC0iXQ/Z5udqw0BZlHVmYY7T7MLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq7Wa3rm6IQqmwS3gqEvitsOgsNMB8GA1UdIwQY MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4 LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAanFFnn4C xQDt0Qy2hbIHIDNt2itp2vhJo2WHnd7hoWIIiUjpMpSFdRTqEyyb8iVgmcTIJZyv e+dAhiRcob6nU3W6lF8xS6mViVxg1gxgi7pq7L+12HDQLK+RC5GL4f0NhEnaw9OQ qbYbKvoOcDWYKgfe1FT5XoJKcJUH3s3kuPmGYxfo5H/Xk8152hqWXsm7ynap1Q7W q8YI1oQcoKoOAt7T2cYvI2p7f+Qg6h7iOWhQU7JXWv+kJ8fYI0MmQOeeX0r1Ornf puobJkRp6N7/zFoS12WgblX65aFB1eIv16VDAMun8xUOmkyOo5tggmc9mmymwPXR TToQRQGHO1j1SA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:33 2025 by rpki-client