This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json) Hash identifier: qXny+tn4ncArGWb8672OraUS5/c156d4gCVs8zji96Q= Subject key identifier: A7:7B:81:11:FB:1C:77:67:6E:F6:D3:84:85:D1:EE:70:5A:AB:31:25 Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Certificate serial: 019B3BD992A6643868CD95CF10A7C57BA276 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft Manifest number: 038A Signing time: Sat 20 Dec 2025 13:01:13 +0000 Manifest this update: Sat 20 Dec 2025 13:01:13 +0000 Manifest next update: Sun 21 Dec 2025 13:01:13 +0000 Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=) 2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: ua+SOQInPpHxXmEJAp3o6g6q+0rDWwC2W5db0HNH8m8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:92:a6:64:38:68:cd:95:cf:10:a7:c5:7b:a2:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Validity Not Before: Dec 20 13:01:13 2025 GMT Not After : Dec 21 13:01:13 2025 GMT Subject: CN=a77b8111fb1c77676ef6d38485d1ee705aab3125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ab:e7:05:b6:77:62:61:2b:a5:2c:32:a7:94: b9:56:cc:3a:dc:86:40:46:68:88:d3:e3:cc:fd:ef: 45:96:fe:cb:17:99:dc:b4:90:80:59:b8:4d:02:71: bd:3e:b5:a0:0d:12:97:dd:96:66:f2:6d:7d:f5:26: c1:b6:45:b2:4c:d9:09:b3:a7:d7:ce:52:1c:47:41: c9:7e:65:df:b3:6a:60:d7:98:65:0a:19:62:f5:ef: cf:15:c2:4d:b3:1d:39:91:2e:f6:15:ce:b2:26:99: 46:7e:41:8c:b6:c6:ef:84:66:ca:9c:ad:0a:10:ad: cf:b4:fb:18:fd:b3:60:86:83:8b:d0:1e:b3:b1:b9: 14:33:e4:f1:bc:98:5e:64:f7:31:5c:7f:f3:ef:fe: 20:4e:fe:ac:26:5d:1f:b8:bb:0c:fd:e2:b2:a2:78: 26:f9:3d:02:3c:56:52:41:0a:ae:81:a3:c1:8d:42: ad:c3:47:36:a2:09:7f:d8:5b:ec:67:ee:5c:27:22: bf:0d:43:e3:5b:c6:5f:06:3a:0a:15:97:39:e6:5d: ed:84:2b:2b:d3:cf:3a:16:9c:4a:11:6d:6e:1f:a5: f6:07:67:e1:7c:3f:93:2b:df:48:ac:4d:62:36:f4: 8f:45:ae:01:80:2e:13:0a:ff:61:21:25:bc:d0:11: a3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7B:81:11:FB:1C:77:67:6E:F6:D3:84:85:D1:EE:70:5A:AB:31:25 X509v3 Authority Key Identifier: keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:59:c1:ea:5a:f2:3f:7c:a0:09:9e:74:e3:63:9d:7b:83:b3: 26:5a:c6:da:8a:96:25:3b:0f:7d:e1:f7:67:3d:7e:d1:f2:01: dd:c8:5f:73:9a:d7:25:2d:6c:4a:84:dc:7e:13:82:6a:ab:5f: 50:8f:8e:93:a4:b8:ce:b7:b5:9a:31:fb:b2:14:3f:0d:00:61: a3:7d:95:56:a6:cd:31:f0:1a:c7:f9:4a:5e:67:62:bd:7b:11: 5b:dd:58:dc:2f:06:3b:8e:4d:1a:c3:53:24:e9:51:c4:f0:a5: 01:91:f0:0b:35:6a:68:4c:3c:8d:f0:32:93:e1:40:c2:f6:93: 66:25:7c:76:c0:17:d9:9b:79:9d:80:e8:40:83:0f:7e:af:84: 34:2f:d7:2e:d8:cb:08:a0:db:a5:f6:54:47:fe:56:c0:b4:b0: af:0e:72:3f:6b:38:23:3e:a9:5d:73:fe:bb:26:64:7f:2f:47: 33:cd:67:9a:bf:d0:a3:63:bf:50:56:15:44:dd:1e:a8:8f:f1: 6b:57:77:7e:69:88:06:97:d1:f2:22:e0:39:b8:b0:32:83:99: 20:52:40:65:e8:98:49:ce:49:ff:47:0c:02:e6:39:fe:e2:9e: 62:9b:67:8d:67:cb:55:df:6c:b8:b5:2f:02:e3:2c:f4:08:42: 1e:23:d1:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72ZKmZDhozZXPEKfFe6J2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk NjcxMTgwHhcNMjUxMjIwMTMwMTEzWhcNMjUxMjIxMTMwMTEzWjAzMTEwLwYDVQQD EyhhNzdiODExMWZiMWM3NzY3NmVmNmQzODQ4NWQxZWU3MDVhYWIzMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16vnBbZ3YmErpSwyp5S5Vsw63IZA RmiI0+PM/e9Flv7LF5nctJCAWbhNAnG9PrWgDRKX3ZZm8m199SbBtkWyTNkJs6fX zlIcR0HJfmXfs2pg15hlChli9e/PFcJNsx05kS72Fc6yJplGfkGMtsbvhGbKnK0K EK3PtPsY/bNghoOL0B6zsbkUM+TxvJheZPcxXH/z7/4gTv6sJl0fuLsM/eKyongm +T0CPFZSQQqugaPBjUKtw0c2ogl/2FvsZ+5cJyK/DUPjW8ZfBjoKFZc55l3thCsr 0886FpxKEW1uH6X2B2fhfD+TK99IrE1iNvSPRa4BgC4TCv9hISW80BGjfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKd7gRH7HHdnbvbThIXR7nBaqzElMB8GA1UdIwQY MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlnB6lry P3ygCZ5042Ode4OzJlrG2oqWJTsPfeH3Zz1+0fIB3chfc5rXJS1sSoTcfhOCaqtf UI+Ok6S4zre1mjH7shQ/DQBho32VVqbNMfAax/lKXmdivXsRW91Y3C8GO45NGsNT JOlRxPClAZHwCzVqaEw8jfAyk+FAwvaTZiV8dsAX2Zt5nYDoQIMPfq+ENC/XLtjL CKDbpfZUR/5WwLSwrw5yP2s4Iz6pXXP+uyZkfy9HM81nmr/Qo2O/UFYVRN0eqI/x a1d3fmmIBpfR8iLgObiwMoOZIFJAZeiYSc5J/0cMAuY5/uKeYptnjWfLVd9suLUv AuMs9AhCHiPRhQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:12 2025 by rpki-client