This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json) Hash identifier: JwPHnZdMKJneLZHVJWzAqYxju9nlAR9HSnezQApdPdg= Subject key identifier: 43:3C:B6:27:62:04:09:C5:61:2B:90:DC:7E:5F:2C:C9:6E:5A:1D:57 Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34 Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234 Certificate serial: 019B243ED949F3FFE9A86ACDEF4118CCCC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft Manifest number: 03F3 Signing time: Mon 15 Dec 2025 23:00:57 +0000 Manifest this update: Mon 15 Dec 2025 23:00:57 +0000 Manifest next update: Tue 16 Dec 2025 23:00:57 +0000 Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: ZiLliUhniTtTb9D+NPTCJgkiynE+lZZiR7HE1NuP90A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:d9:49:f3:ff:e9:a8:6a:cd:ef:41:18:cc:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234 Validity Not Before: Dec 15 23:00:57 2025 GMT Not After : Dec 16 23:00:57 2025 GMT Subject: CN=433cb627620409c5612b90dc7e5f2cc96e5a1d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:d7:a6:c9:fa:8b:14:7e:02:8d:3b:b0:a5: 3b:dc:5d:a4:a3:19:06:37:7e:11:31:a8:08:98:d8: a8:4b:a4:6f:25:ee:99:b6:2b:78:47:06:7b:2d:f4: a7:b3:ac:6c:8c:5b:2b:b0:e0:ae:78:95:9d:b9:cd: 74:44:2a:eb:81:6c:52:0a:5a:30:a2:11:f4:f2:f3: 88:08:94:fb:69:49:73:8d:3a:cf:53:5b:9f:5a:1a: 4c:08:0f:4b:fc:2f:9c:58:31:de:c2:1f:3f:14:e3: 56:e7:74:8f:cc:4a:bc:a2:4a:31:03:d5:a6:1d:e4: c5:4d:85:32:b8:ae:19:6d:99:d4:43:48:a6:5f:60: 28:2d:32:a6:ec:99:80:60:d9:56:1a:87:bc:b9:dc: c5:45:3b:b6:d8:9b:f9:d4:9a:39:01:40:58:00:9c: fe:21:41:fb:34:d1:e2:1f:9c:81:4a:30:49:38:a1: 7c:dd:72:ca:f3:f0:c5:c1:31:17:bb:27:68:c2:6b: 6a:25:ad:ab:56:f9:39:3f:80:ad:63:37:dd:81:bf: 67:c7:51:18:14:bb:65:99:2b:46:e9:0e:6a:01:e0: 06:ed:7a:bc:c9:a3:7e:dd:79:af:08:7b:b6:bc:3b: 46:38:ea:28:9e:01:88:f8:22:4e:4a:6b:34:c7:2a: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:3C:B6:27:62:04:09:C5:61:2B:90:DC:7E:5F:2C:C9:6E:5A:1D:57 X509v3 Authority Key Identifier: keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:04:08:5c:ae:ee:01:3d:ca:a9:6a:18:af:b7:78:d5:6c:08: 06:07:d9:7a:49:4f:ec:5f:27:88:5e:d6:25:34:8a:35:b8:f9: a6:71:38:88:c2:f2:0d:e5:5e:19:08:3b:50:2a:2c:00:3f:a9: 3b:56:6e:ea:2c:23:71:2b:5d:2e:d0:3f:b1:10:c3:bb:30:cc: 16:9b:e3:a1:d8:17:34:3f:dc:22:8f:32:28:49:b5:e2:b3:92: 61:86:a5:66:82:24:86:f0:28:92:9b:9b:ec:d2:e7:dc:9a:f4: 4c:42:4a:ee:87:b2:5e:8e:d7:ed:39:57:38:25:f8:dd:eb:a0: 87:7f:60:ee:c7:b4:a2:da:97:3f:c4:cb:6b:27:e1:fe:bc:70: 6d:48:e4:7b:b1:ef:35:94:3b:16:3d:1f:e7:6d:3f:29:b2:fe: b9:44:0e:70:d7:3e:d3:ec:79:f9:ef:2f:8a:34:37:b8:72:6b: 89:b3:5d:b3:4e:2d:fe:c2:cd:e5:3f:b8:8d:d5:52:d3:ef:61: f8:d4:b1:2e:56:50:d5:57:21:84:1a:98:e2:87:af:c0:db:93: 05:cc:4e:01:bb:47:54:b8:ad:e2:c6:99:81:77:86:dd:df:d9: 5e:0e:dc:78:5d:e9:9c:ae:30:f9:12:a6:60:e4:ef:67:2c:d0: fc:35:07:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPtlJ8//pqGrN70EYzMxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MjA0M2MwMWQ3YWRlYWRkOTZmNTZiZGJiZWYyNzQ4ZTAw ODAyMzQwHhcNMjUxMjE1MjMwMDU3WhcNMjUxMjE2MjMwMDU3WjAzMTEwLwYDVQQD Eyg0MzNjYjYyNzYyMDQwOWM1NjEyYjkwZGM3ZTVmMmNjOTZlNWExZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5fXpsn6ixR+Ao07sKU73F2koxkG N34RMagImNioS6RvJe6Ztit4RwZ7LfSns6xsjFsrsOCueJWduc10RCrrgWxSClow ohH08vOICJT7aUlzjTrPU1ufWhpMCA9L/C+cWDHewh8/FONW53SPzEq8okoxA9Wm HeTFTYUyuK4ZbZnUQ0imX2AoLTKm7JmAYNlWGoe8udzFRTu22Jv51Jo5AUBYAJz+ IUH7NNHiH5yBSjBJOKF83XLK8/DFwTEXuydowmtqJa2rVvk5P4CtYzfdgb9nx1EY FLtlmStG6Q5qAeAG7Xq8yaN+3XmvCHu2vDtGOOoongGI+CJOSms0xyo8IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM8tidiBAnFYSuQ3H5fLMluWh1XMB8GA1UdIwQY MBaAFFggQ8Adet6t2W9WvbvvJ0jgCAI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYt NjA3MzY4NTljMGM0LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYtNjA3MzY4NTljMGM0 LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4wQIXK7u AT3KqWoYr7d41WwIBgfZeklP7F8niF7WJTSKNbj5pnE4iMLyDeVeGQg7UCosAD+p O1Zu6iwjcStdLtA/sRDDuzDMFpvjodgXND/cIo8yKEm14rOSYYalZoIkhvAokpub 7NLn3Jr0TEJK7oeyXo7X7TlXOCX43eugh39g7se0otqXP8TLayfh/rxwbUjke7Hv NZQ7Fj0f520/KbL+uUQOcNc+0+x5+e8vijQ3uHJribNds04t/sLN5T+4jdVS0+9h +NSxLlZQ1VchhBqY4oevwNuTBcxOAbtHVLit4saZgXeG3d/ZXg7ceF3pnK4w+RKm YOTvZyzQ/DUHKg== -----END CERTIFICATE-----Generated at Tue Dec 16 06:25:38 2025 by rpki-client