This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json) Hash identifier: 7xD9F4334Acyx9X7Ue+fa9DU4UOK8wG3HaWwngVJHgY= Subject key identifier: B0:18:4B:70:60:6B:F9:64:7D:D0:6F:41:C2:A5:30:9F:5C:32:1C:FB Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73 Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73 Certificate serial: 019B59ACA0D668A415D74CBAAF49FA7E719C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 08:00:44 +0000 Manifest this update: Fri 26 Dec 2025 08:00:44 +0000 Manifest next update: Sat 27 Dec 2025 08:00:44 +0000 Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=) 2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: M6aV/ySrh7zwug05CLq1dHS6+YnZt8FlXfc88PEp4xM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:a0:d6:68:a4:15:d7:4c:ba:af:49:fa:7e:71:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73 Validity Not Before: Dec 26 08:00:44 2025 GMT Not After : Dec 27 08:00:44 2025 GMT Subject: CN=b0184b70606bf9647dd06f41c2a5309f5c321cfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:d2:cf:7c:0b:37:9c:14:98:7c:fa:52:e5: fa:44:c5:58:e3:0e:6e:c4:f0:28:a2:c8:b3:09:a4: e3:cf:17:3e:22:2c:d6:26:19:63:2c:c0:eb:54:c0: e2:13:20:ca:1c:b8:06:bb:bd:24:40:3c:89:01:1e: 6e:46:8f:cc:a9:f9:e7:40:dd:49:9f:0d:69:ef:0a: d6:83:e6:ba:73:fe:d8:b9:aa:87:86:92:8c:7c:52: 5c:f4:a9:2a:bc:6b:ce:dd:39:f8:91:52:5c:c0:bc: a4:81:65:e0:cc:d4:52:10:2b:76:05:cd:69:a8:85: 07:b3:33:61:fa:ea:0f:e4:62:34:d4:b4:be:a8:e6: 90:d4:f9:e2:ee:a9:ab:5c:9c:e6:72:cf:71:fd:8a: 92:d8:7b:64:96:88:cb:c7:59:a8:f4:18:94:d0:90: ab:f6:e5:93:dc:9e:9b:5f:5e:63:a3:40:cc:e5:c4: 29:96:bf:06:dc:44:b2:b3:a1:c6:8a:45:e5:c5:5c: 40:aa:ef:34:8b:ba:ee:da:fa:3b:15:94:25:73:fc: 36:38:c9:55:8d:80:07:4e:b3:73:3e:30:af:1d:8c: d4:6c:9a:91:38:5b:f9:7c:36:da:7a:5e:f8:3c:15: d0:ff:ee:27:93:8b:68:fc:3e:98:05:d4:f7:cc:90: df:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:18:4B:70:60:6B:F9:64:7D:D0:6F:41:C2:A5:30:9F:5C:32:1C:FB X509v3 Authority Key Identifier: keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:55:d0:79:ce:54:95:c4:66:6e:c6:fe:98:3b:28:2f:ce:28: e3:46:a0:7a:36:74:29:c2:57:9a:52:50:78:ff:ef:0b:0f:33: c4:b5:c0:bb:d7:68:28:b5:ba:b4:69:e6:cc:47:c4:ad:18:c9: 21:d2:c8:f2:bf:a8:58:b9:63:61:8a:7d:86:00:1e:ce:2b:d1: 37:16:cc:c8:42:52:43:db:4e:53:33:92:d2:25:97:27:52:81: 1c:64:a7:0d:bd:d5:e8:39:bd:bf:64:af:39:ff:8d:3f:08:04: 42:8b:ce:da:6a:ff:26:67:53:5d:35:d4:b2:ff:55:72:98:99: 31:1d:4b:cc:e5:91:65:58:3c:a1:f8:83:b0:63:d8:67:88:34: 4d:8f:39:e5:c2:cb:95:f6:85:e7:b7:c2:93:48:4e:71:bc:8a: 06:b3:7d:e9:b4:ae:bb:8e:0b:f0:71:0f:47:ff:cf:4b:dc:63: 1f:05:3c:f2:c1:91:db:56:61:03:5b:7d:e5:1b:8b:2c:54:94: e6:29:52:ad:1b:6b:dd:73:1c:3d:66:07:17:b4:dd:9d:d7:e8: bd:55:07:67:ea:35:b1:e1:7c:46:ba:8c:66:ab:38:e3:b8:b1: 5a:e4:2c:ce:5a:4c:42:fb:3f:73:df:b9:77:83:3a:4f:17:27: 72:a5:b7:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKDWaKQV10y6r0n6fnGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2 ZGNmNzMwHhcNMjUxMjI2MDgwMDQ0WhcNMjUxMjI3MDgwMDQ0WjAzMTEwLwYDVQQD EyhiMDE4NGI3MDYwNmJmOTY0N2RkMDZmNDFjMmE1MzA5ZjVjMzIxY2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuznSz3wLN5wUmHz6UuX6RMVY4w5u xPAoosizCaTjzxc+IizWJhljLMDrVMDiEyDKHLgGu70kQDyJAR5uRo/MqfnnQN1J nw1p7wrWg+a6c/7YuaqHhpKMfFJc9KkqvGvO3Tn4kVJcwLykgWXgzNRSECt2Bc1p qIUHszNh+uoP5GI01LS+qOaQ1Pni7qmrXJzmcs9x/YqS2HtklojLx1mo9BiU0JCr 9uWT3J6bX15jo0DM5cQplr8G3ESys6HGikXlxVxAqu80i7ru2vo7FZQlc/w2OMlV jYAHTrNzPjCvHYzUbJqROFv5fDbael74PBXQ/+4nk4to/D6YBdT3zJDf7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLAYS3Bga/lkfdBvQcKlMJ9cMhz7MB8GA1UdIwQY MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt MGE4MzBkMDFhZmQxLzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAelXQec5U lcRmbsb+mDsoL84o40agejZ0KcJXmlJQeP/vCw8zxLXAu9doKLW6tGnmzEfErRjJ IdLI8r+oWLljYYp9hgAezivRNxbMyEJSQ9tOUzOS0iWXJ1KBHGSnDb3V6Dm9v2Sv Of+NPwgEQovO2mr/JmdTXTXUsv9VcpiZMR1LzOWRZVg8ofiDsGPYZ4g0TY855cLL lfaF57fCk0hOcbyKBrN96bSuu44L8HEPR//PS9xjHwU88sGR21ZhA1t95RuLLFSU 5ilSrRtr3XMcPWYHF7TdndfovVUHZ+o1seF8RrqMZqs447ixWuQszlpMQvs/c9+5 d4M6TxcncqW3ag== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:51 2025 by rpki-client