This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier: bDomZKWZPeW/g3VRjI8gTU3ZmyIUW2EnkMErltJBSEI=
Subject key identifier: F9:09:CF:0C:60:2D:7A:18:01:91:2F:5F:17:A1:2A:0E:A6:C8:BA:22
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial: 019AAD27DC5593CF66CF3A5AD4C943C4E250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number: 0297
Signing time: Sat 22 Nov 2025 20:01:01 +0000
Manifest this update: Sat 22 Nov 2025 20:01:01 +0000
Manifest next update: Sun 23 Nov 2025 20:01:01 +0000
Files and hashes: 1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: fVQcUvi6HGLED9QOug1tatd+bn/0k7B3vJmrVlCs3Ko=)
2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Nov 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ad:27:dc:55:93:cf:66:cf:3a:5a:d4:c9:43:c4:e2:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Validity
Not Before: Nov 22 20:01:01 2025 GMT
Not After : Nov 23 20:01:01 2025 GMT
Subject: CN=f909cf0c602d7a1801912f5f17a12a0ea6c8ba22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:a6:30:d1:4d:47:82:ba:98:48:54:24:a0:
45:35:42:52:c4:ae:bc:b1:85:47:80:1d:01:66:f9:
24:07:e8:ef:b5:e1:84:d9:a0:04:7c:1e:6f:c8:c9:
b4:ce:be:1f:f6:d2:5e:74:3e:c8:87:7f:04:1a:96:
57:d0:6e:79:75:6f:01:27:0d:9e:3e:b2:2b:ea:c4:
ec:66:81:90:33:f7:7d:62:c3:06:55:72:4c:a1:70:
24:78:57:24:c8:39:e5:a2:94:43:31:0a:43:6d:73:
ee:43:f9:23:a5:a5:64:bc:93:c6:8b:79:20:38:f8:
e8:5a:d3:18:df:46:f2:f0:6a:75:20:03:b5:6f:cc:
0f:3b:39:33:f4:67:ab:8d:8b:47:eb:63:3d:42:56:
92:84:e1:c7:71:b6:35:f8:60:34:db:08:b2:5a:6b:
5f:a0:26:65:4a:a6:aa:ec:83:a7:01:00:14:5d:78:
7d:99:ee:61:59:6d:ca:09:98:a0:5f:4e:12:eb:3d:
63:2b:dc:39:73:e5:68:c8:23:1e:f4:ad:c2:16:5c:
c1:38:2d:db:b1:cd:cc:88:e8:e8:ef:12:97:c1:d4:
9d:3a:94:28:d6:69:5c:72:91:ee:cb:86:fb:cb:0f:
3c:31:3f:cd:e3:51:49:16:d5:a7:4a:cd:93:78:a8:
ed:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:CF:0C:60:2D:7A:18:01:91:2F:5F:17:A1:2A:0E:A6:C8:BA:22
X509v3 Authority Key Identifier:
keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:38:24:d3:51:7e:29:07:92:52:f6:cd:3d:73:42:29:4e:14:
60:3a:95:61:5f:e8:11:31:6e:64:bb:9b:f9:92:66:12:f9:78:
84:06:57:79:d5:72:20:37:28:b6:aa:66:9e:73:63:a4:f0:8a:
05:56:c2:d1:e3:51:27:3f:21:79:4a:40:e2:82:f0:3d:42:fc:
91:aa:6c:35:81:2b:b0:c1:79:eb:6a:14:34:26:8b:9b:3e:79:
70:0c:f3:8c:ae:c9:60:de:ad:32:a8:e1:8c:d1:6b:b2:cc:fd:
fd:66:16:68:4c:a4:43:a3:8d:d7:51:ff:3a:57:4a:a3:a9:7c:
43:bc:86:da:96:9b:e2:a8:6b:1e:d6:db:5a:ca:a3:98:95:d2:
2d:1e:73:73:22:e6:da:76:b0:cc:96:b0:9e:c4:87:1a:15:69:
0d:de:07:4c:b4:e8:85:02:05:41:ed:0d:89:c1:89:b5:a1:6c:
1d:57:0b:32:b6:62:2c:5f:4e:34:46:66:72:a2:ea:1e:4c:90:
be:90:63:70:3e:a8:29:cb:d7:23:c4:2f:6f:a4:13:d7:d1:a8:
87:f0:c4:eb:9a:38:95:26:05:11:ac:dd:5b:40:95:32:39:3d:
58:25:bf:00:cc:19:46:cd:c0:e7:a8:01:d6:bb:b1:40:c8:89:
6c:19:12:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 22 21:49:58 2025 by rpki-client