This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft File: WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft (raw, json) Hash identifier: C1xetLgyR0PssxvzHU2u3Kqiiaq3xW2LV18RpPzDZQo= Subject key identifier: 33:6B:DC:AC:89:20:7C:4B:08:2D:82:8D:C9:F0:15:79:86:69:9E:D3 Authority key identifier: 59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB Certificate issuer: /CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db Certificate serial: 019B0EC979FF15462CB93AFE0AC73304F10C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft Manifest number: 0ECB Signing time: Thu 11 Dec 2025 19:00:43 +0000 Manifest this update: Thu 11 Dec 2025 19:00:43 +0000 Manifest next update: Fri 12 Dec 2025 19:00:43 +0000 Files and hashes: 1: BnHPRpHVxUrrpd0IzvhYM9ZoVGA.roa (hash: k46oPjmA0dBoUS914bzbaVVF+WxzasmMO4gdexQM14I=) 2: WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl (hash: bDVCDnTcw6gEfsZn5g+2HUmnANpxaJeI0qJKKRbe/iI=) 3: pXH9YpU9YJCA_rF2kD4sAq3Gb8A.roa (hash: T2ULJjjfs09CAUBnhR9VtzEhjC6fHO+cQ94xa8HkXMc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:79:ff:15:46:2c:b9:3a:fe:0a:c7:33:04:f1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b3e0956a9d4817cd92852c27a27b7d2f1113db Validity Not Before: Dec 11 19:00:43 2025 GMT Not After : Dec 12 19:00:43 2025 GMT Subject: CN=336bdcac89207c4b082d828dc9f0157986699ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:c3:3c:d7:74:01:82:81:fc:fd:29:18:6a: 49:c6:64:df:1e:08:13:a5:34:0b:62:b6:95:98:ed: 99:90:72:68:1c:87:fe:25:64:c1:4e:a1:c8:b1:d7: 65:f1:98:be:52:31:f5:ea:5a:48:f0:27:b7:c7:21: b4:3c:de:6a:cd:63:ff:a3:9a:b6:63:85:17:b6:b1: 31:73:4c:84:59:99:4b:36:fc:84:5f:3f:bf:6e:fc: 07:c9:2e:c3:eb:1e:15:b9:c2:a7:90:35:94:99:ab: 89:ab:d5:82:66:45:2f:7b:24:af:6f:86:f2:08:d0: 53:12:0b:cc:31:55:c0:be:d6:00:47:53:48:3c:ba: f1:eb:c5:1a:42:5f:5a:d7:87:54:66:7f:61:93:19: 78:43:0a:59:5a:88:3f:bd:42:39:b4:b3:1c:c7:43: ba:3e:93:b1:9a:f7:e6:a7:fc:a5:4d:6e:06:01:76: fd:49:13:d5:78:0e:57:ed:1d:45:e3:3c:23:11:19: 0f:db:64:1f:75:1e:b0:e1:e7:dd:c3:f9:ca:45:ec: 0f:54:b6:1e:10:af:ae:37:7c:37:72:4f:ab:6b:bc: 85:8f:80:67:f8:58:96:6c:71:79:bc:5c:92:d7:43: f2:06:4a:2e:fd:57:72:f9:c0:c6:7d:67:e9:98:db: ef:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6B:DC:AC:89:20:7C:4B:08:2D:82:8D:C9:F0:15:79:86:69:9E:D3 X509v3 Authority Key Identifier: keyid:59:B3:E0:95:6A:9D:48:17:CD:92:85:2C:27:A2:7B:7D:2F:11:13:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbPglWqdSBfNkoUsJ6J7fS8RE9s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/c07a7d-24e6-4610-b656-c47172d5d882/1/WbPglWqdSBfNkoUsJ6J7fS8RE9s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:54:64:c6:97:e2:4b:e1:e1:b4:ef:1e:1a:db:df:c3:d5:87: aa:56:95:e9:a2:f1:ef:03:a5:7f:e6:51:5d:ad:84:ea:c3:7a: 48:04:90:11:f0:95:fb:13:2a:32:a5:f4:12:6d:83:0d:c5:da: 3a:d7:e4:a3:8c:ff:f4:22:50:1c:d7:3d:d9:8b:c3:18:a5:99: 99:50:3c:dd:7b:16:e2:9e:cd:e3:11:af:29:16:a7:0c:26:5c: 4c:08:5c:8f:da:69:60:37:25:30:6b:c5:01:ca:3a:e9:11:c5: 26:0e:2f:1b:7e:19:de:0b:08:d3:39:6d:54:1c:bc:bb:de:ac: 56:d9:93:6d:65:ea:6e:90:93:84:73:52:e8:a9:b2:97:2a:65: 23:7c:66:87:fb:0b:8f:19:4a:75:0d:21:7e:f9:99:92:63:45: 10:9d:e4:a5:0f:5e:99:64:63:dc:a9:28:08:e3:51:d6:43:52: 42:b1:31:50:97:31:5f:2b:e5:c2:d1:f6:a9:2b:7e:6b:a4:f5: c1:4c:d8:71:0e:99:c3:6f:85:52:d6:08:e6:b4:f1:48:8b:77: 12:bd:ec:12:06:78:74:73:0c:71:e7:ba:02:1a:78:45:f4:6b: 72:e4:bd:04:7c:31:30:53:26:92:7d:e8:c0:59:cb:2a:60:25: ef:bd:3f:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyXn/FUYsuTr+CsczBPEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjNlMDk1NmE5ZDQ4MTdjZDkyODUyYzI3YTI3YjdkMmYx MTEzZGIwHhcNMjUxMjExMTkwMDQzWhcNMjUxMjEyMTkwMDQzWjAzMTEwLwYDVQQD EygzMzZiZGNhYzg5MjA3YzRiMDgyZDgyOGRjOWYwMTU3OTg2Njk5ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOjDPNd0AYKB/P0pGGpJxmTfHggT pTQLYraVmO2ZkHJoHIf+JWTBTqHIsddl8Zi+UjH16lpI8Ce3xyG0PN5qzWP/o5q2 Y4UXtrExc0yEWZlLNvyEXz+/bvwHyS7D6x4VucKnkDWUmauJq9WCZkUveySvb4by CNBTEgvMMVXAvtYAR1NIPLrx68UaQl9a14dUZn9hkxl4QwpZWog/vUI5tLMcx0O6 PpOxmvfmp/ylTW4GAXb9SRPVeA5X7R1F4zwjERkP22QfdR6w4efdw/nKRewPVLYe EK+uN3w3ck+ra7yFj4Bn+FiWbHF5vFyS10PyBkou/Vdy+cDGfWfpmNvvvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNr3KyJIHxLCC2CjcnwFXmGaZ7TMB8GA1UdIwQY MBaAFFmz4JVqnUgXzZKFLCeie30vERPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYt YzQ3MTcyZDVkODgyLzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9jMDdhN2QtMjRlNi00NjEwLWI2NTYtYzQ3MTcyZDVkODgy LzEvV2JQZ2xXcWRTQmZOa29Vc0o2SjdmUzhSRTlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVRkxpfi S+HhtO8eGtvfw9WHqlaV6aLx7wOlf+ZRXa2E6sN6SASQEfCV+xMqMqX0Em2DDcXa Otfko4z/9CJQHNc92YvDGKWZmVA83XsW4p7N4xGvKRanDCZcTAhcj9ppYDclMGvF Aco66RHFJg4vG34Z3gsI0zltVBy8u96sVtmTbWXqbpCThHNS6KmylyplI3xmh/sL jxlKdQ0hfvmZkmNFEJ3kpQ9emWRj3KkoCONR1kNSQrExUJcxXyvlwtH2qSt+a6T1 wUzYcQ6Zw2+FUtYI5rTxSIt3Er3sEgZ4dHMMcee6Ahp4RfRrcuS9BHwxMFMmkn3o wFnLKmAl770/sA== -----END CERTIFICATE-----Generated at Fri Dec 12 00:17:14 2025 by rpki-client