This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json) Hash identifier: rpGNQxxZnofGl4IvRtyykfmLFzMB9Vkm9z91orUPv8Q= Subject key identifier: E1:9E:FC:33:F8:63:30:AC:EE:B3:60:D2:1E:43:4C:0A:3C:AB:7E:E8 Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Certificate serial: 019B3DC7E48D10C6FB21DD21BE8CFCE1A05D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft Manifest number: 038B Signing time: Sat 20 Dec 2025 22:01:08 +0000 Manifest this update: Sat 20 Dec 2025 22:01:08 +0000 Manifest next update: Sun 21 Dec 2025 22:01:08 +0000 Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=) 2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: fMWvr3jvxtrsz+bLBwomrpJ6vB1San0meIilR4allXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e4:8d:10:c6:fb:21:dd:21:be:8c:fc:e1:a0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Validity Not Before: Dec 20 22:01:08 2025 GMT Not After : Dec 21 22:01:08 2025 GMT Subject: CN=e19efc33f86330aceeb360d21e434c0a3cab7ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a6:82:88:dc:c5:87:bc:eb:69:c4:42:aa:d2: 30:c8:71:58:44:87:e6:e7:e7:74:20:fe:6a:fe:ba: 1f:6c:a0:47:1f:79:57:60:7e:2b:85:4d:a7:ab:dd: 5d:96:61:4a:cc:c9:24:46:ff:c5:a8:83:65:17:6a: 04:1c:f3:4d:45:1c:16:f4:a9:c8:4d:f3:55:15:61: 83:83:f9:af:e4:90:48:4b:a0:1d:41:aa:96:c1:13: b6:bc:e1:ec:0f:ab:f7:53:e1:91:bd:e7:ae:08:a5: 1a:f0:8e:9e:b4:7c:11:b2:28:17:f4:1a:b5:96:0e: 72:3c:b0:27:86:4e:42:a5:53:e2:f3:1d:0b:74:50: ac:85:a1:76:14:2b:19:06:b6:05:49:6b:73:5a:9c: 17:16:72:05:7f:46:b1:00:72:36:98:7c:c2:49:36: ba:ac:91:8c:ab:09:0d:15:e8:87:5f:62:0b:3c:76: 73:82:bd:ae:f5:ae:d3:ad:f7:38:23:71:50:24:4a: c2:aa:e0:f9:f3:cb:af:93:74:48:71:e4:6e:8c:8f: dd:2f:54:ba:29:82:36:61:24:3b:e8:42:20:a9:fb: 17:a7:dd:9d:e4:fe:f3:dd:73:d7:9e:c3:92:ac:ae: 7f:d1:bc:b0:f5:81:db:2c:cb:ab:42:c8:10:45:4e: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:FC:33:F8:63:30:AC:EE:B3:60:D2:1E:43:4C:0A:3C:AB:7E:E8 X509v3 Authority Key Identifier: keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:7c:52:1a:d5:c6:b8:d5:48:bc:aa:77:f5:09:03:b6:cc:26: e4:37:a7:8c:26:38:05:73:da:1b:88:fc:a9:36:58:45:8e:2e: 02:6a:3f:f6:dc:e2:40:db:8e:38:f5:bf:28:0a:19:75:2e:8e: 2f:fd:34:1c:55:60:64:e5:5f:fe:4e:70:05:b2:0a:a9:c8:d8: d8:b1:7a:09:e6:84:c5:5d:93:d6:d5:91:04:33:fc:e3:dc:d0: 58:06:3b:9d:8a:8f:bd:a3:6e:ab:d0:ff:a7:91:5b:e7:9d:cc: 7e:92:94:ce:7e:9a:bd:6e:92:2b:d0:1e:05:62:b5:8f:9b:af: 91:99:74:22:5a:98:ec:03:6b:c0:c7:b3:29:e6:09:3d:1a:d8: 90:46:c2:18:00:fc:b1:7e:2b:70:be:42:6c:00:a5:b6:2a:67: 8e:fa:d8:98:27:49:42:bd:f6:1a:43:c2:8a:7c:04:55:e1:66: 35:d9:9d:ab:54:4c:4a:8e:4f:e8:01:d9:cb:bb:66:8f:4b:d2: 3d:df:dc:4d:63:d1:f4:f2:0c:da:61:db:3a:62:ac:ce:e6:7d: 75:9c:90:30:5c:12:86:17:ca:e2:2c:c6:10:93:ce:87:d8:fa: ec:36:8f:58:4c:c9:2b:42:e2:d9:dd:87:37:59:1a:d1:1b:29: 89:4e:c1:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+SNEMb7Id0hvoz84aBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk NjcxMTgwHhcNMjUxMjIwMjIwMTA4WhcNMjUxMjIxMjIwMTA4WjAzMTEwLwYDVQQD EyhlMTllZmMzM2Y4NjMzMGFjZWViMzYwZDIxZTQzNGMwYTNjYWI3ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6aCiNzFh7zracRCqtIwyHFYRIfm 5+d0IP5q/rofbKBHH3lXYH4rhU2nq91dlmFKzMkkRv/FqINlF2oEHPNNRRwW9KnI TfNVFWGDg/mv5JBIS6AdQaqWwRO2vOHsD6v3U+GRveeuCKUa8I6etHwRsigX9Bq1 lg5yPLAnhk5CpVPi8x0LdFCshaF2FCsZBrYFSWtzWpwXFnIFf0axAHI2mHzCSTa6 rJGMqwkNFeiHX2ILPHZzgr2u9a7Trfc4I3FQJErCquD588uvk3RIceRujI/dL1S6 KYI2YSQ76EIgqfsXp92d5P7z3XPXnsOSrK5/0byw9YHbLMurQsgQRU6LVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGe/DP4YzCs7rNg0h5DTAo8q37oMB8GA1UdIwQY MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXxSGtXG uNVIvKp39QkDtswm5DenjCY4BXPaG4j8qTZYRY4uAmo/9tziQNuOOPW/KAoZdS6O L/00HFVgZOVf/k5wBbIKqcjY2LF6CeaExV2T1tWRBDP849zQWAY7nYqPvaNuq9D/ p5Fb553MfpKUzn6avW6SK9AeBWK1j5uvkZl0IlqY7ANrwMezKeYJPRrYkEbCGAD8 sX4rcL5CbACltipnjvrYmCdJQr32GkPCinwEVeFmNdmdq1RMSo5P6AHZy7tmj0vS Pd/cTWPR9PIM2mHbOmKszuZ9dZyQMFwShhfK4izGEJPOh9j67DaPWEzJK0Li2d2H N1ka0RspiU7B+A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:16 2025 by rpki-client