This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft File: WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft (raw, json) Hash identifier: dcSIRpoyQqfxJ7nzDXO4AbWBeizBAOgW3ZvujeSmzA0= Subject key identifier: 29:6F:A8:C3:51:64:2A:09:50:20:55:83:E6:04:C2:BC:5F:7A:F7:5A Authority key identifier: 58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7 Certificate issuer: /CN=583faf07e3ec9200764f273a10e7b6c4b1582ea7 Certificate serial: 019B3E6CD851E7C387160465362CBE04E73E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft Manifest number: 0399 Signing time: Sun 21 Dec 2025 01:01:19 +0000 Manifest this update: Sun 21 Dec 2025 01:01:19 +0000 Manifest next update: Mon 22 Dec 2025 01:01:19 +0000 Files and hashes: 1: 1xEtGe6qOBqeztJ60lWSug9lag0.roa (hash: 6Dtch6lrRv1cvrUDsIQ1IxZ+LvZnmKy8YbBTsdIcjFI=) 2: WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl (hash: bQpdRjDvm4mgAMKnF9udKnTUsOuiOKJJkCRZbyVQiLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:d8:51:e7:c3:87:16:04:65:36:2c:be:04:e7:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583faf07e3ec9200764f273a10e7b6c4b1582ea7 Validity Not Before: Dec 21 01:01:19 2025 GMT Not After : Dec 22 01:01:19 2025 GMT Subject: CN=296fa8c351642a0950205583e604c2bc5f7af75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:8a:77:c9:c7:41:eb:8a:c3:f2:65:16:76:f5: 22:53:74:8e:95:dd:d7:93:31:d5:a5:27:63:cf:ad: 30:9f:bc:ff:fa:3a:b0:2c:9d:49:c8:c9:e1:59:7d: 80:00:4c:32:60:21:dc:24:47:1b:70:ae:dd:dc:2b: 13:bb:13:07:01:a5:e7:69:47:47:59:1a:2e:f6:7e: 5b:4f:b0:f4:85:83:7d:33:92:0f:9d:e4:57:3e:23: 82:ca:3b:52:01:35:fd:81:58:66:b6:c1:e5:54:b3: 95:30:61:a7:b5:b4:74:25:87:c0:b9:aa:55:98:58: 41:41:bd:8f:0a:2e:a3:7b:fe:5b:a4:01:16:f8:9c: b5:f0:2d:91:d5:9e:26:52:83:ef:b5:18:b4:c5:57: d5:97:dc:49:40:f3:bd:54:69:c7:35:32:96:3f:75: 62:41:0f:4d:a7:5c:f2:20:66:43:5a:ec:e8:39:71: c0:ed:54:85:17:2e:3a:aa:3d:3d:72:8e:47:19:5f: c8:32:d9:b2:05:ff:d8:ca:85:96:fe:96:73:81:0d: 2a:e1:f5:d9:f1:d2:d5:6a:ae:da:a4:b0:15:3f:08: a0:2a:ad:74:af:4c:c8:d1:16:82:ad:46:bb:b8:c9: d1:76:cb:04:99:32:00:3f:49:f8:b0:b3:d3:06:5b: 10:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:6F:A8:C3:51:64:2A:09:50:20:55:83:E6:04:C2:BC:5F:7A:F7:5A X509v3 Authority Key Identifier: keyid:58:3F:AF:07:E3:EC:92:00:76:4F:27:3A:10:E7:B6:C4:B1:58:2E:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD-vB-PskgB2Tyc6EOe2xLFYLqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/517a86-4bae-46cd-98e2-cf94b1fd469e/1/WD-vB-PskgB2Tyc6EOe2xLFYLqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dc:20:22:f8:e8:8f:12:21:eb:23:a4:f6:56:99:59:d6:67: b4:43:53:d9:88:e5:ff:a3:b9:a5:54:6f:11:f9:b9:e3:ae:5c: 61:7d:1c:72:f4:cf:1e:2b:ad:ab:d4:cf:bf:6f:d7:80:f7:69: b6:8e:44:d0:af:ae:48:f6:09:78:7d:91:67:1c:9e:4a:d9:be: 8d:c6:88:22:c5:44:8a:f1:9e:e0:d9:0d:4b:e6:16:f5:0f:c4: b3:61:14:3c:4f:76:97:6b:2c:57:19:88:e5:4d:8a:ce:dc:22: cd:bd:b4:e2:b0:cd:c4:04:99:be:2d:0e:06:29:0f:57:61:40: 87:2e:3f:41:55:7e:03:04:58:0b:c5:16:56:a5:bb:87:ce:f4: 7a:28:22:b5:62:7f:1d:eb:83:11:11:47:e3:5a:17:73:03:d7: 20:2d:c0:b0:a0:14:77:9d:c3:9a:cf:7b:53:69:46:78:54:37: d3:27:fb:b3:fb:53:b7:e9:6e:12:c8:21:1d:b9:c5:3d:7b:77: 7e:83:17:1b:2d:be:6d:1b:d4:96:ac:47:91:24:47:32:74:bf: 24:4c:36:64:d7:3f:13:e4:5a:8f:d3:cd:f0:c4:13:e8:f7:52: 83:aa:36:67:ed:20:c0:ec:e9:a6:10:31:08:71:e2:bf:43:6b: 8e:70:6c:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bNhR58OHFgRlNiy+BOc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2ZhZjA3ZTNlYzkyMDA3NjRmMjczYTEwZTdiNmM0YjE1 ODJlYTcwHhcNMjUxMjIxMDEwMTE5WhcNMjUxMjIyMDEwMTE5WjAzMTEwLwYDVQQD EygyOTZmYThjMzUxNjQyYTA5NTAyMDU1ODNlNjA0YzJiYzVmN2FmNzVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Yp3ycdB64rD8mUWdvUiU3SOld3X kzHVpSdjz60wn7z/+jqwLJ1JyMnhWX2AAEwyYCHcJEcbcK7d3CsTuxMHAaXnaUdH WRou9n5bT7D0hYN9M5IPneRXPiOCyjtSATX9gVhmtsHlVLOVMGGntbR0JYfAuapV mFhBQb2PCi6je/5bpAEW+Jy18C2R1Z4mUoPvtRi0xVfVl9xJQPO9VGnHNTKWP3Vi QQ9Np1zyIGZDWuzoOXHA7VSFFy46qj09co5HGV/IMtmyBf/YyoWW/pZzgQ0q4fXZ 8dLVaq7apLAVPwigKq10r0zI0RaCrUa7uMnRdssEmTIAP0n4sLPTBlsQmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClvqMNRZCoJUCBVg+YEwrxfevdaMB8GA1UdIwQY MBaAFFg/rwfj7JIAdk8nOhDntsSxWC6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0QtdkItUHNrZ0IyVHljNkVPZTJ4TEZZTHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MTdhODYtNGJhZS00NmNkLTk4ZTIt Y2Y5NGIxZmQ0NjllLzEvV0QtdkItUHNrZ0IyVHljNkVPZTJ4TEZZTHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81MTdhODYtNGJhZS00NmNkLTk4ZTItY2Y5NGIxZmQ0Njll LzEvV0QtdkItUHNrZ0IyVHljNkVPZTJ4TEZZTHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABtwgIvjo jxIh6yOk9laZWdZntENT2Yjl/6O5pVRvEfm5465cYX0ccvTPHiutq9TPv2/XgPdp to5E0K+uSPYJeH2RZxyeStm+jcaIIsVEivGe4NkNS+YW9Q/Es2EUPE92l2ssVxmI 5U2Kztwizb204rDNxASZvi0OBikPV2FAhy4/QVV+AwRYC8UWVqW7h870eigitWJ/ HeuDERFH41oXcwPXIC3AsKAUd53Dms97U2lGeFQ30yf7s/tTt+luEsghHbnFPXt3 foMXGy2+bRvUlqxHkSRHMnS/JEw2ZNc/E+Raj9PN8MQT6PdSg6o2Z+0gwOzpphAx CHHiv0NrjnBskw== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:35 2025 by rpki-client