This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft File: WbWUsQer_jKkbE0dvge7tOa7Fjo.mft (raw, json) Hash identifier: UXzok53VbybCPgtffuyt+pNNkNq4t0PXFuCWSjFFQJA= Subject key identifier: 6F:F5:6D:F8:A9:55:80:A8:25:20:C3:F6:B0:2A:BE:8B:68:90:98:20 Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A Certificate issuer: /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a Certificate serial: 019B2098FA91EA31C60F091E64C7B4F157A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft Manifest number: 0C0C Signing time: Mon 15 Dec 2025 06:00:55 +0000 Manifest this update: Mon 15 Dec 2025 06:00:55 +0000 Manifest next update: Tue 16 Dec 2025 06:00:55 +0000 Files and hashes: 1: WbWUsQer_jKkbE0dvge7tOa7Fjo.crl (hash: ytdyl2RJ2g6fsR5A/9u2J5DBKGz9Hvcmffz+0fO6kjc=) 2: iaYhX-wTSSW1QYw64E4AzhGwws8.roa (hash: wTQucH27CFyiNY63Xms6GuDAYhKr9yvb+MoiHvTWRCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:fa:91:ea:31:c6:0f:09:1e:64:c7:b4:f1:57:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a Validity Not Before: Dec 15 06:00:55 2025 GMT Not After : Dec 16 06:00:55 2025 GMT Subject: CN=6ff56df8a95580a82520c3f6b02abe8b68909820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:e5:3d:a0:e1:9f:c6:1c:75:25:2d:f2:cd: d8:a8:f9:03:c2:dd:0a:14:ea:d6:aa:82:b5:1c:e0: 8b:76:59:38:8a:c9:f6:d9:3f:ef:3e:05:aa:74:c9: b7:54:15:9e:39:98:6f:a2:ef:ed:16:2a:2f:ad:eb: 37:d2:1c:28:82:75:68:ad:66:19:67:b0:04:54:2a: b6:43:9b:b4:7b:16:1f:93:30:87:f2:47:8b:f0:4d: 86:9a:88:a0:35:fd:46:8e:49:3a:5f:b6:61:d2:61: 8c:52:14:23:21:be:de:3c:f0:49:a4:44:f6:9f:d5: d2:5e:ff:50:4a:3f:7d:27:9b:89:1e:d0:df:34:4b: f0:04:49:94:7b:83:23:a6:f8:ed:d9:53:3c:91:25: c2:dc:29:7c:6a:da:83:69:e3:b5:74:ef:c9:c2:3d: 2e:11:8c:ba:bb:63:2e:08:f1:60:36:c5:b1:45:1b: 75:12:36:c6:73:2e:55:ad:c6:9f:36:a2:50:c5:65: 74:f7:93:fa:20:ec:af:e5:51:73:e9:8b:ed:e0:6d: 66:1d:5c:1d:b5:8d:74:5f:25:b9:5a:7c:e3:42:d0: d2:40:76:30:e1:2e:87:35:9e:f7:8c:c6:c9:af:82: 29:8c:c4:68:12:df:39:a1:9c:4a:3e:8f:2b:e0:03: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F5:6D:F8:A9:55:80:A8:25:20:C3:F6:B0:2A:BE:8B:68:90:98:20 X509v3 Authority Key Identifier: keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d0:88:e7:09:31:b2:be:6f:16:97:be:03:c3:23:27:4f:6a: e7:a2:1a:eb:63:4f:df:01:1a:0b:c8:34:f6:bd:b1:98:2b:ee: 22:38:a5:ef:fe:b8:c7:f4:2a:90:c5:06:58:a7:d3:48:22:4e: d1:e2:3e:a4:f7:a6:54:23:2b:90:37:e0:af:0d:44:58:5f:41: 3c:61:d9:eb:f5:18:df:51:2f:b3:de:18:0f:17:fd:0d:67:ab: 23:52:4c:fe:f3:9c:86:19:ee:d7:aa:a9:bb:64:e1:c6:f1:c3: bf:2c:33:81:1f:2b:7f:3c:96:eb:b5:59:cc:e0:38:20:1b:6f: 13:03:d3:51:4f:9f:54:15:68:12:ec:f8:3b:04:ea:07:10:4c: c3:57:de:95:7c:2c:49:98:83:3d:fb:7f:a2:42:97:90:03:b7: d8:99:bc:0a:7d:47:8a:63:e6:73:2a:d3:ed:ed:2a:2f:10:c7: b6:bd:d6:03:92:28:2e:41:f7:6c:17:73:dc:80:65:85:e2:90: 69:11:dc:3d:38:67:9b:09:9c:ee:e4:06:5f:87:57:0d:4d:f0: e8:d2:43:90:7e:1f:63:ab:76:1e:4f:f2:b5:f9:1d:75:95:f7: 21:ba:e0:d6:b7:d0:0c:5c:d7:6e:ef:98:51:28:a4:0b:b2:20: 49:2c:e1:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmPqR6jHGDwkeZMe08VepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjU5NGIxMDdhYmZlMzJhNDZjNGQxZGJlMDdiYmI0ZTZi YjE2M2EwHhcNMjUxMjE1MDYwMDU1WhcNMjUxMjE2MDYwMDU1WjAzMTEwLwYDVQQD Eyg2ZmY1NmRmOGE5NTU4MGE4MjUyMGMzZjZiMDJhYmU4YjY4OTA5ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1p3lPaDhn8YcdSUt8s3YqPkDwt0K FOrWqoK1HOCLdlk4isn22T/vPgWqdMm3VBWeOZhvou/tFiovres30hwognVorWYZ Z7AEVCq2Q5u0exYfkzCH8keL8E2GmoigNf1Gjkk6X7Zh0mGMUhQjIb7ePPBJpET2 n9XSXv9QSj99J5uJHtDfNEvwBEmUe4Mjpvjt2VM8kSXC3Cl8atqDaeO1dO/Jwj0u EYy6u2MuCPFgNsWxRRt1EjbGcy5VrcafNqJQxWV095P6IOyv5VFz6Yvt4G1mHVwd tY10XyW5WnzjQtDSQHYw4S6HNZ73jMbJr4IpjMRoEt85oZxKPo8r4AMNWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/1bfipVYCoJSDD9rAqvotokJggMB8GA1UdIwQY MBaAFFm1lLEHq/4ypGxNHb4Hu7TmuxY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2Mt YjNmNTY3ODA1YTdjLzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2MtYjNmNTY3ODA1YTdj LzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtCI5wkx sr5vFpe+A8MjJ09q56Ia62NP3wEaC8g09r2xmCvuIjil7/64x/QqkMUGWKfTSCJO 0eI+pPemVCMrkDfgrw1EWF9BPGHZ6/UY31Evs94YDxf9DWerI1JM/vOchhnu16qp u2ThxvHDvywzgR8rfzyW67VZzOA4IBtvEwPTUU+fVBVoEuz4OwTqBxBMw1felXws SZiDPft/okKXkAO32Jm8Cn1HimPmcyrT7e0qLxDHtr3WA5IoLkH3bBdz3IBlheKQ aRHcPThnmwmc7uQGX4dXDU3w6NJDkH4fY6t2Hk/ytfkddZX3Ibrg1rfQDFzXbu+Y USikC7IgSSzhHQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:01:29 2025 by rpki-client