This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
File: wcIPvEj6WafY3qV5CPNQobl0Wd8.mft (raw, json)
Hash identifier: uqf0AU2fCf7GHkhTMT1IwWfJviU3m9dgNrIPE3eBA9A=
Subject key identifier: 08:59:D4:31:39:73:CD:3A:A3:B2:FC:A1:D9:F7:87:2D:F7:F4:5A:BE
Authority key identifier: C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
Certificate issuer: /CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Certificate serial: 019AABDDB984C7C1335D3859ED1E17F41004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
Manifest number: 1557
Signing time: Sat 22 Nov 2025 14:00:26 +0000
Manifest this update: Sat 22 Nov 2025 14:00:26 +0000
Manifest next update: Sun 23 Nov 2025 14:00:26 +0000
Files and hashes: 1: 1FW1XbyYUs66xbKImXHkiZU-xAA.roa (hash: DA26l55wpmFxpEPwr1TEVKDAhIdZwBFIGz/j/ljF/kM=)
2: rQGBYURhHxIS2gUjxgxhWlf8G-M.roa (hash: d90EC3mny7b2jkfAqHp6/1/Pw4XbnGm5shftI7zAdH4=)
3: wcIPvEj6WafY3qV5CPNQobl0Wd8.crl (hash: E04J4I+Z8OJLlc1o6HR5r6RwgmRlKQ0xPwMiEiKKAbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ab:dd:b9:84:c7:c1:33:5d:38:59:ed:1e:17:f4:10:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c20fbc48fa59a7d8dea57908f350a1b97459df
Validity
Not Before: Nov 22 14:00:26 2025 GMT
Not After : Nov 23 14:00:26 2025 GMT
Subject: CN=0859d4313973cd3aa3b2fca1d9f7872df7f45abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:c6:bf:e2:32:4f:67:c7:fa:b0:8e:5c:52:
38:12:95:0a:94:f4:84:32:e1:97:7e:36:4e:10:6d:
d6:4f:b2:9a:a2:4a:58:91:52:13:51:59:5a:7f:49:
88:d5:9b:d3:f1:13:47:82:c2:18:18:fc:51:95:e8:
e8:6b:b7:21:b8:a4:00:08:ac:9f:e9:c8:96:85:33:
4d:5c:e4:a9:ab:dd:30:1a:68:3a:ff:d2:d3:3d:9a:
70:5d:02:0f:4e:49:66:25:0d:97:c8:e9:0a:37:3b:
93:d6:f9:62:8a:3c:e7:91:21:11:b1:7b:50:70:c0:
b4:c5:3a:f5:47:c8:58:6d:d3:fc:38:48:fb:61:b6:
af:c3:19:a5:61:21:60:94:3a:52:c5:05:6f:4e:72:
bc:5c:c7:4c:1b:da:c5:ef:23:7e:11:a7:95:cc:7b:
3d:27:9b:db:d3:6f:e5:e6:35:ce:74:5d:e8:83:16:
24:ce:a5:2e:1c:87:ad:ff:34:f4:12:e6:67:07:c3:
e9:ef:c7:69:35:58:20:fb:0a:bd:be:f2:c8:76:5c:
13:aa:cb:11:21:5a:b1:99:39:f4:81:a6:b4:52:ed:
ad:2a:cc:b6:8a:8d:66:22:33:14:d8:2d:6a:bf:9f:
ca:4f:74:17:c1:fa:4e:c4:34:d3:04:c6:ac:6a:c8:
71:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:59:D4:31:39:73:CD:3A:A3:B2:FC:A1:D9:F7:87:2D:F7:F4:5A:BE
X509v3 Authority Key Identifier:
keyid:C1:C2:0F:BC:48:FA:59:A7:D8:DE:A5:79:08:F3:50:A1:B9:74:59:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcIPvEj6WafY3qV5CPNQobl0Wd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/wcIPvEj6WafY3qV5CPNQobl0Wd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6f:eb:21:f4:5c:df:7c:fb:9b:bc:c9:f4:90:ae:9b:3d:45:
ee:60:c4:62:54:b8:cb:f3:a2:f2:cd:7f:bf:db:a6:a3:40:9a:
d9:53:61:7d:ba:7f:71:c6:c5:f5:00:cb:5e:1c:54:10:98:73:
4d:40:06:2a:6a:09:b0:9a:5d:c9:11:bf:81:7d:6c:8a:1c:cd:
bf:c9:3d:a3:72:58:fa:8c:8f:4f:2a:b2:d9:87:f8:cc:15:c1:
7a:3a:9a:23:72:94:f2:86:4f:c3:75:4e:e1:3f:09:48:77:3c:
eb:e6:59:40:9d:45:d6:54:73:43:0d:44:75:37:51:b9:78:a2:
e0:b9:38:c8:39:4b:53:54:6d:ae:b8:91:93:96:43:e6:6c:4f:
e3:34:a6:2a:16:60:6b:96:18:bc:18:5b:b7:99:a0:de:79:f7:
04:71:11:79:fd:ee:7c:40:c7:9c:ac:58:37:27:44:44:66:ed:
ae:03:f9:6f:f8:66:49:fb:85:8b:2c:57:37:95:37:fe:cd:95:
56:be:86:6f:f6:1a:a6:b6:b5:1e:3b:e6:95:fa:36:30:57:9e:
db:07:b8:59:5d:95:3b:f7:a8:a4:71:6b:37:d3:e9:d6:1e:29:
4a:ab:03:27:33:4a:72:1c:6d:2e:51:4d:a4:09:55:22:34:f6:
76:bc:bf:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZqr3bmEx8EzXThZ7R4X9BAEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzIwZmJjNDhmYTU5YTdkOGRlYTU3OTA4ZjM1MGExYjk3
NDU5ZGYwHhcNMjUxMTIyMTQwMDI2WhcNMjUxMTIzMTQwMDI2WjAzMTEwLwYDVQQD
EygwODU5ZDQzMTM5NzNjZDNhYTNiMmZjYTFkOWY3ODcyZGY3ZjQ1YWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubnGv+IyT2fH+rCOXFI4EpUKlPSE
MuGXfjZOEG3WT7KaokpYkVITUVlaf0mI1ZvT8RNHgsIYGPxRlejoa7chuKQACKyf
6ciWhTNNXOSpq90wGmg6/9LTPZpwXQIPTklmJQ2XyOkKNzuT1vliijznkSERsXtQ
cMC0xTr1R8hYbdP8OEj7YbavwxmlYSFglDpSxQVvTnK8XMdMG9rF7yN+EaeVzHs9
J5vb02/l5jXOdF3ogxYkzqUuHIet/zT0EuZnB8Pp78dpNVgg+wq9vvLIdlwTqssR
IVqxmTn0gaa0Uu2tKsy2io1mIjMU2C1qv5/KT3QXwfpOxDTTBMasashxLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhZ1DE5c806o7L8odn3hy339Fq+MB8GA1UdIwQY
MBaAFMHCD7xI+lmn2N6leQjzUKG5dFnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgt
MzAyY2UxYmM5OWMwLzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Yzc4ZGEtYmRlZC00MWE5LWI1MDgtMzAyY2UxYmM5OWMw
LzEvd2NJUHZFajZXYWZZM3FWNUNQTlFvYmwwV2Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2/rIfRc
33z7m7zJ9JCumz1F7mDEYlS4y/Oi8s1/v9umo0Ca2VNhfbp/ccbF9QDLXhxUEJhz
TUAGKmoJsJpdyRG/gX1sihzNv8k9o3JY+oyPTyqy2Yf4zBXBejqaI3KU8oZPw3VO
4T8JSHc86+ZZQJ1F1lRzQw1EdTdRuXii4Lk4yDlLU1RtrriRk5ZD5mxP4zSmKhZg
a5YYvBhbt5mg3nn3BHERef3ufEDHnKxYNydERGbtrgP5b/hmSfuFiyxXN5U3/s2V
Vr6Gb/Yapra1Hjvmlfo2MFee2we4WV2VO/eopHFrN9Pp1h4pSqsDJzNKchxtLlFN
pAlVIjT2dry/JA==
-----END CERTIFICATE-----
Generated at Sat Nov 22 21:53:51 2025 by rpki-client