This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft File: WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json) Hash identifier: UnygOvtniwMnTvZ7NBnxEHWmwzsQJdk6EMk1u+TYe6s= Subject key identifier: A6:39:F1:EF:BC:DC:26:7F:BE:41:EE:0C:CE:10:AE:F5:DC:05:31:65 Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5 Certificate issuer: /CN=58833dec655e1a88733a17a2df3da0985ab660d5 Certificate serial: 019B5ABF4DAAEF09A403AE141116C428EE4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 13:00:45 +0000 Manifest this update: Fri 26 Dec 2025 13:00:45 +0000 Manifest next update: Sat 27 Dec 2025 13:00:45 +0000 Files and hashes: 1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=) 2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: xaMdDnITWy6adc/uQreY/y0IS2BKJnOY2E8+k7EJwdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:4d:aa:ef:09:a4:03:ae:14:11:16:c4:28:ee:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5 Validity Not Before: Dec 26 13:00:45 2025 GMT Not After : Dec 27 13:00:45 2025 GMT Subject: CN=a639f1efbcdc267fbe41ee0cce10aef5dc053165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7e:76:ce:94:20:d4:ae:21:98:2f:af:10:b8: 5e:cb:7d:db:bd:d2:5f:ed:86:29:a7:50:99:8c:9f: 68:8a:92:b0:c7:51:9d:fe:c0:94:d2:27:5a:56:2c: 97:44:79:f9:18:e9:65:b5:e8:84:30:27:38:f4:37: 4a:52:6e:81:9f:a7:a0:cc:68:3a:c1:0b:0c:42:de: ad:73:8d:4a:49:f9:50:3b:26:de:6f:4d:6a:40:7f: e4:e8:40:35:63:07:3c:c7:b4:e0:49:bf:b1:bb:d7: 6d:82:06:51:c5:85:e7:e6:ea:50:0c:20:ef:48:83: 9a:94:34:61:bf:b0:f7:6c:d1:47:43:47:34:5b:5e: 83:c4:6a:5b:f9:0f:61:a9:e0:a0:b4:f6:3d:7a:49: c5:80:78:9e:91:fa:cd:e5:da:c2:59:ab:12:b5:7f: e4:5c:00:13:a7:cf:7e:0c:ef:08:dd:b4:81:91:d5: a9:ff:48:15:29:55:6f:e1:3a:95:bb:fa:c5:66:6f: 2b:43:f0:4d:9c:a9:7b:6f:c8:ee:48:e9:ef:69:09: 43:86:2c:91:8f:36:68:31:3d:b2:a3:80:40:ad:2e: 83:9b:b3:81:94:47:79:08:dd:c0:99:8e:4b:da:b6: 88:cd:19:87:17:3a:fa:f7:7d:39:27:f5:c4:f6:aa: ab:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:39:F1:EF:BC:DC:26:7F:BE:41:EE:0C:CE:10:AE:F5:DC:05:31:65 X509v3 Authority Key Identifier: keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:60:76:0e:45:16:20:82:46:dc:ae:ef:c5:62:e3:a7:6c:a9: 52:ad:1d:c8:3e:45:c4:51:d0:fc:87:93:96:55:09:19:39:97: a6:93:86:b3:41:42:fd:95:04:60:71:ab:d7:dc:08:a1:63:0f: 9b:ca:9a:10:61:e4:19:68:5a:6a:fa:a7:58:41:e2:ac:ac:8b: 73:34:d8:cc:98:3b:28:29:f5:67:ec:28:9a:bf:7a:a6:1f:d6: 00:f5:ec:9a:3c:f2:4a:ae:ff:78:8b:76:b6:ba:12:1f:d0:c3: 3b:99:8c:8b:83:ac:3e:fb:36:ca:78:2e:1f:a9:7f:46:b0:d6: 0e:09:80:82:35:d1:09:92:d6:e4:ef:1d:d9:11:39:94:48:40: e2:de:50:46:ec:fe:4a:1f:1b:3e:9c:63:d6:d9:05:88:54:43: 17:8d:cf:d8:be:58:db:10:4f:93:fc:c6:6b:22:9f:72:06:07: 18:94:a4:be:d4:ce:3a:b1:a0:46:3b:b4:f3:38:c7:34:3b:04: 3e:7d:7f:3d:36:90:13:c3:c1:11:70:35:0f:5d:a2:7e:9e:0c: 4e:4e:c7:e8:30:11:91:de:f0:4e:a7:2f:db:f0:78:70:8c:a8: 64:3a:7f:46:6a:5b:92:ef:d8:bf:c1:32:43:f1:34:56:71:c0: b5:ea:15:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav02q7wmkA64UERbEKO5PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODMzZGVjNjU1ZTFhODg3MzNhMTdhMmRmM2RhMDk4NWFi NjYwZDUwHhcNMjUxMjI2MTMwMDQ1WhcNMjUxMjI3MTMwMDQ1WjAzMTEwLwYDVQQD EyhhNjM5ZjFlZmJjZGMyNjdmYmU0MWVlMGNjZTEwYWVmNWRjMDUzMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH52zpQg1K4hmC+vELhey33bvdJf 7YYpp1CZjJ9oipKwx1Gd/sCU0idaViyXRHn5GOllteiEMCc49DdKUm6Bn6egzGg6 wQsMQt6tc41KSflQOybeb01qQH/k6EA1Ywc8x7TgSb+xu9dtggZRxYXn5upQDCDv SIOalDRhv7D3bNFHQ0c0W16DxGpb+Q9hqeCgtPY9eknFgHiekfrN5drCWasStX/k XAATp89+DO8I3bSBkdWp/0gVKVVv4TqVu/rFZm8rQ/BNnKl7b8juSOnvaQlDhiyR jzZoMT2yo4BArS6Dm7OBlEd5CN3AmY5L2raIzRmHFzr69305J/XE9qqr0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY58e+83CZ/vkHuDM4QrvXcBTFlMB8GA1UdIwQY MBaAFFiDPexlXhqIczoXot89oJhatmDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjct MmZmYWVkMDQ3MzhhLzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjctMmZmYWVkMDQ3Mzhh LzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmB2DkUW IIJG3K7vxWLjp2ypUq0dyD5FxFHQ/IeTllUJGTmXppOGs0FC/ZUEYHGr19wIoWMP m8qaEGHkGWhaavqnWEHirKyLczTYzJg7KCn1Z+womr96ph/WAPXsmjzySq7/eIt2 troSH9DDO5mMi4OsPvs2ynguH6l/RrDWDgmAgjXRCZLW5O8d2RE5lEhA4t5QRuz+ Sh8bPpxj1tkFiFRDF43P2L5Y2xBPk/zGayKfcgYHGJSkvtTOOrGgRju08zjHNDsE Pn1/PTaQE8PBEXA1D12ifp4MTk7H6DARkd7wTqcv2/B4cIyoZDp/Rmpbku/Yv8Ey Q/E0VnHAteoVXw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:14 2025 by rpki-client