This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier: KJdtYC/WS+nljlrwxurrYedX9n59DhjraVBcIzSvTI0=
Subject key identifier: 7B:1A:85:33:17:84:BD:29:80:4D:FC:54:5B:C0:BE:B6:0F:C6:CD:3C
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial: 019B341F898077A7FF546962F96F278D4FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number: 1788
Signing time: Fri 19 Dec 2025 01:00:40 +0000
Manifest this update: Fri 19 Dec 2025 01:00:40 +0000
Manifest next update: Sat 20 Dec 2025 01:00:40 +0000
Files and hashes: 1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: 5mLbJNFdiW5wha2qichOS8CLjTgLs/IjGZM8yK78rGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:34:1f:89:80:77:a7:ff:54:69:62:f9:6f:27:8d:4f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
Validity
Not Before: Dec 19 01:00:40 2025 GMT
Not After : Dec 20 01:00:40 2025 GMT
Subject: CN=7b1a85331784bd29804dfc545bc0beb60fc6cd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f2:15:90:9e:d8:fa:00:c2:f8:ca:6f:c6:21:
3d:97:85:17:34:de:8a:b3:5e:d7:0b:18:1d:42:a2:
53:0e:5d:54:ce:1a:3b:07:4f:98:1b:7d:ee:57:2b:
a2:d0:ae:06:12:e8:51:fd:51:73:d1:2c:39:88:d8:
f1:89:6c:5d:68:a4:6c:ff:c3:2e:f7:aa:7a:21:ee:
ac:49:5d:72:26:cc:cc:29:3d:84:da:63:a9:83:b2:
48:8f:fc:dd:e1:86:ff:68:7c:31:38:42:81:a2:07:
43:04:21:b7:d8:6c:fa:0e:a1:3e:24:d3:5f:dc:d3:
60:09:d8:a2:fd:5b:fd:a8:df:a6:98:f6:90:78:25:
88:58:96:bf:f9:f8:ea:fd:c7:67:c3:3a:46:eb:33:
e3:af:fb:d0:a0:09:72:a3:35:d2:cc:19:f9:14:30:
15:09:c4:4b:28:10:4f:f9:25:1a:c6:74:fc:a6:6b:
b5:98:8d:bd:1f:8e:f4:75:fd:ef:93:15:a0:cf:76:
0c:ae:0e:d6:76:b5:4c:8e:81:ba:5b:78:3e:4f:e8:
f0:7b:36:ef:75:b0:9d:b8:13:4f:77:ce:d1:bc:56:
a3:14:d3:9a:94:62:b1:f8:d8:29:d0:c3:bb:bd:14:
ed:ce:83:56:1e:c7:0a:d1:5f:d0:1c:27:56:ef:e0:
7d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1A:85:33:17:84:BD:29:80:4D:FC:54:5B:C0:BE:B6:0F:C6:CD:3C
X509v3 Authority Key Identifier:
keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cb:6e:73:2a:2f:ef:74:36:d3:b6:02:ce:ac:4a:76:43:a6:
03:f3:cd:7f:f3:7a:c2:f7:e7:37:61:26:3e:07:b8:c8:34:86:
92:fc:a0:02:ae:9a:50:5d:85:8f:fb:f1:78:1e:ff:a5:0d:37:
47:26:ff:f6:35:68:7d:e7:53:09:7e:86:77:b2:83:49:47:f7:
10:d3:ed:fe:5b:d4:6b:6a:6b:7b:16:42:f3:a1:51:41:ca:cd:
9b:a9:1a:d9:0a:f1:12:e0:98:20:b1:ff:84:f1:1d:a2:00:6f:
1d:78:2e:96:35:e3:1e:40:a8:01:a0:ee:56:16:48:83:17:4c:
1c:31:1a:29:fb:dc:e2:30:47:26:37:c8:80:ba:8f:6f:71:5a:
54:9f:1e:38:b7:63:e8:1b:af:6d:05:64:a8:07:6a:b5:1a:99:
ca:a3:87:4b:ab:d9:c8:ac:c2:b5:7b:6e:25:c1:85:1b:49:b8:
4f:ac:6d:6d:f3:12:02:52:21:5f:58:6b:7d:4d:97:34:66:3d:
d6:76:08:87:c3:dc:e3:7e:f5:0d:c2:20:82:6c:11:86:22:b2:
83:89:d5:f6:11:f3:03:5f:5e:cd:2c:37:e5:38:95:8a:ac:7a:
e6:7f:93:d3:32:c9:34:fe:83:04:b8:2d:6b:8c:a9:49:5f:fb:
b0:bf:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 10:23:50 2025 by rpki-client