This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json) Hash identifier: W0uDApYdDI9xhk8INvF/aaUka7bbM6l1HXNhoHY5xz8= Subject key identifier: 15:59:78:14:4B:E2:FB:E2:F5:D7:7C:2C:F6:3E:5F:31:23:2B:D4:5A Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef Certificate serial: 019B3EDAD14BE4C84F4CC5FE42300395BEB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft Manifest number: 1107 Signing time: Sun 21 Dec 2025 03:01:26 +0000 Manifest this update: Sun 21 Dec 2025 03:01:26 +0000 Manifest next update: Mon 22 Dec 2025 03:01:26 +0000 Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: Kpr1Cv1BJWXHOtCVRUsU+lw6WwzqkJMeBBfjeSnO3q0=) 2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d1:4b:e4:c8:4f:4c:c5:fe:42:30:03:95:be:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef Validity Not Before: Dec 21 03:01:26 2025 GMT Not After : Dec 22 03:01:26 2025 GMT Subject: CN=155978144be2fbe2f5d77c2cf63e5f31232bd45a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:d7:2a:30:7a:6f:f5:0b:55:42:9f:40:a7: 73:dd:08:e0:40:e6:26:1a:a3:68:47:3f:40:b0:40: 1d:60:e2:93:cd:79:f2:cd:fa:99:98:90:95:4f:c2: d5:3e:32:a3:c7:36:e4:38:8b:8e:85:32:7a:cd:98: 47:b7:51:ab:39:8e:02:c8:8d:9c:88:30:aa:96:77: 00:55:5e:be:9c:89:cd:e7:df:61:c9:44:ee:b5:11: 48:f5:d4:dd:13:53:40:ff:ec:9e:e6:93:66:2f:60: 2e:43:f8:3b:0b:6b:1f:97:25:18:dd:44:79:72:50: 7d:8f:ce:96:bd:cb:11:96:86:b9:ec:1e:4f:96:64: 4a:b6:56:fe:56:dd:2b:e8:72:1b:11:c4:50:04:7c: da:25:dc:ae:47:54:ff:d6:51:3d:a7:5b:37:cd:46: 39:70:2c:c2:33:0d:14:7b:d4:49:10:aa:d1:7d:3e: 0b:7c:9f:b6:17:88:c2:54:aa:41:21:2e:b9:8c:f4: 0a:92:6b:ab:04:49:bc:b6:c9:d9:ff:29:59:d1:2b: 8d:a7:81:28:2d:7b:91:43:80:cd:46:20:ec:cb:08: 3c:fe:e6:53:f1:50:b5:ac:27:6a:4c:7a:26:a4:93: 51:d0:6f:83:35:53:88:96:d3:ed:98:00:7e:df:5f: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:59:78:14:4B:E2:FB:E2:F5:D7:7C:2C:F6:3E:5F:31:23:2B:D4:5A X509v3 Authority Key Identifier: keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:3a:56:dc:08:87:be:58:58:5e:c4:8d:5d:e7:f1:87:da:dd: 77:99:83:1e:e0:20:82:d7:68:8e:a8:3b:8f:3b:54:56:5c:b3: 82:95:c1:cf:50:08:56:0d:23:12:92:cf:80:93:0b:2a:b0:2c: 69:cd:92:0a:b6:42:40:e7:2e:61:14:af:c2:46:90:7a:13:90: f2:d7:30:f0:73:ac:3b:e7:86:62:bf:49:e2:be:6f:da:c5:33: aa:04:4f:0b:68:ec:75:1a:5b:c2:0d:d9:52:5e:1d:0c:38:fa: 5f:45:fe:a7:e2:c5:3f:d0:39:90:64:cb:a8:df:3b:50:f8:53: 3c:4c:4f:c1:88:8d:35:dc:4b:fe:4c:dd:c9:83:4c:59:2a:98: a2:69:7a:5b:c9:db:f0:eb:1a:23:93:75:73:ee:7a:6b:4a:e3: c8:a3:5f:87:a6:20:6b:61:a0:00:7f:45:bc:d9:a3:78:5a:84: b5:e7:ab:4d:eb:3b:aa:26:f8:1e:ed:2c:fa:75:ca:51:bb:b6: 7a:d2:e4:0e:41:ad:b6:34:18:aa:6a:66:4e:d2:02:d7:a2:9d: c4:b9:f9:da:76:11:96:8b:58:f8:b1:fc:b0:74:5c:a2:8a:22: 72:b8:f5:66:81:f4:de:7d:82:73:64:23:af:43:1b:d0:23:25: c6:54:d9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2tFL5MhPTMX+QjADlb60MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3 MmViZWYwHhcNMjUxMjIxMDMwMTI2WhcNMjUxMjIyMDMwMTI2WjAzMTEwLwYDVQQD EygxNTU5NzgxNDRiZTJmYmUyZjVkNzdjMmNmNjNlNWYzMTIzMmJkNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc7XKjB6b/ULVUKfQKdz3QjgQOYm GqNoRz9AsEAdYOKTzXnyzfqZmJCVT8LVPjKjxzbkOIuOhTJ6zZhHt1GrOY4CyI2c iDCqlncAVV6+nInN599hyUTutRFI9dTdE1NA/+ye5pNmL2AuQ/g7C2sflyUY3UR5 clB9j86WvcsRloa57B5PlmRKtlb+Vt0r6HIbEcRQBHzaJdyuR1T/1lE9p1s3zUY5 cCzCMw0Ue9RJEKrRfT4LfJ+2F4jCVKpBIS65jPQKkmurBEm8tsnZ/ylZ0SuNp4Eo LXuRQ4DNRiDsywg8/uZT8VC1rCdqTHompJNR0G+DNVOIltPtmAB+31+sWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVZeBRL4vvi9dd8LPY+XzEjK9RaMB8GA1UdIwQY MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzpW3AiH vlhYXsSNXefxh9rdd5mDHuAggtdojqg7jztUVlyzgpXBz1AIVg0jEpLPgJMLKrAs ac2SCrZCQOcuYRSvwkaQehOQ8tcw8HOsO+eGYr9J4r5v2sUzqgRPC2jsdRpbwg3Z Ul4dDDj6X0X+p+LFP9A5kGTLqN87UPhTPExPwYiNNdxL/kzdyYNMWSqYoml6W8nb 8OsaI5N1c+56a0rjyKNfh6Yga2GgAH9FvNmjeFqEteerTes7qib4Hu0s+nXKUbu2 etLkDkGttjQYqmpmTtIC16KdxLn52nYRlotY+LH8sHRcoooicrj1ZoH03n2Cc2Qj r0Mb0CMlxlTZRw== -----END CERTIFICATE-----Generated at Sun Dec 21 11:58:21 2025 by rpki-client