This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft File: wessYB-m0HUHlzCB-qEyX-GQsnY.mft (raw, json) Hash identifier: EcYRzKOm7kUK923uEOhXwTfD2HGEpv8ODRdyWydXOf0= Subject key identifier: AA:BB:B2:D5:40:15:BA:17:0B:EB:20:E0:BD:56:37:4D:2C:27:C0:10 Authority key identifier: C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76 Certificate issuer: /CN=c1eb2c601fa6d07507973081faa1325fe190b276 Certificate serial: 019B3D5A08FFA81CB5FA97A608EB5D09D1DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft Manifest number: 0605 Signing time: Sat 20 Dec 2025 20:01:09 +0000 Manifest this update: Sat 20 Dec 2025 20:01:09 +0000 Manifest next update: Sun 21 Dec 2025 20:01:09 +0000 Files and hashes: 1: 9VIpFT_uZfwTVVoxe7PNJO0XppE.roa (hash: dBqoAsOTvzrDylULyUsZPwgLS85TPwI2yvXP5iugyTk=) 2: v1vDCS3zEydWpnAi830GA_yQEHw.roa (hash: 3xFB/pduxsTBOKVMWYRZZ5LgXgY+cAqxpBeMHy8oimw=) 3: wessYB-m0HUHlzCB-qEyX-GQsnY.crl (hash: +CbzgHGOas9ofZH7uj2r8V3Bdki5BcD3ICD1wrM17Fg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:08:ff:a8:1c:b5:fa:97:a6:08:eb:5d:09:d1:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eb2c601fa6d07507973081faa1325fe190b276 Validity Not Before: Dec 20 20:01:09 2025 GMT Not After : Dec 21 20:01:09 2025 GMT Subject: CN=aabbb2d54015ba170beb20e0bd56374d2c27c010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5c:13:e5:59:d9:f7:20:4c:b1:ad:5a:b9:1c: 32:c4:51:4b:11:7a:b7:46:47:57:0a:04:e5:1b:b6: 8d:1c:3d:e0:83:58:c6:a2:28:09:aa:16:18:c8:7b: 80:58:e5:c7:ef:04:90:c8:7f:35:47:fc:9c:48:2e: 51:ba:b4:c9:99:61:17:33:09:1f:a0:2b:42:b1:74: 1e:ac:74:f4:90:ce:cc:d1:ad:aa:18:30:16:53:d9: da:70:11:d4:a9:4f:56:b2:06:55:32:7b:a4:48:05: 51:2a:85:86:7f:4d:43:df:51:0a:a6:f0:0f:9c:79: 73:9a:b4:7a:25:a4:72:73:ad:c5:be:cb:cb:51:8b: db:2d:6e:50:8c:b5:3c:ef:21:40:ec:16:7c:6e:fb: 1f:d0:6e:e3:e4:55:67:2a:19:ff:fa:e5:2a:ed:83: 39:76:a3:1c:3c:5c:8a:a5:01:15:d7:b2:74:42:5f: aa:42:35:e4:c6:5b:a8:ab:4b:c5:a7:0f:32:b5:69: a0:d1:6e:76:6e:fc:ba:16:9c:22:f6:bf:02:cd:dc: 39:d3:de:71:89:9e:b4:a7:12:8d:43:74:ba:29:44: 18:ab:e5:fc:7c:60:0f:bc:6f:c0:34:d1:55:2c:4d: a2:77:ee:84:13:72:29:bf:6d:54:12:7c:33:85:c2: ba:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:B2:D5:40:15:BA:17:0B:EB:20:E0:BD:56:37:4D:2C:27:C0:10 X509v3 Authority Key Identifier: keyid:C1:EB:2C:60:1F:A6:D0:75:07:97:30:81:FA:A1:32:5F:E1:90:B2:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wessYB-m0HUHlzCB-qEyX-GQsnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/5cf431-4d57-4503-b28a-90ef7bda1dc3/1/wessYB-m0HUHlzCB-qEyX-GQsnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d2:84:cf:36:68:3e:79:83:fc:f6:03:72:55:a4:27:ed:66: 1c:37:41:15:2b:42:5f:0b:02:2a:b7:65:91:42:56:5a:b9:75: 05:17:e8:71:7f:b4:b5:f2:09:7d:83:5c:08:48:db:ea:0f:42: 73:04:71:fc:7f:43:ea:2a:92:e2:61:9c:d9:0a:d5:ab:33:8f: f4:85:71:48:5a:0d:59:cc:3f:b0:79:29:7a:04:ff:4c:c1:1c: cd:04:b8:c8:0a:65:c1:f7:a8:73:97:4e:7d:bc:c7:5e:a6:06: 7b:3f:ba:e5:70:aa:d9:dc:63:f5:23:e7:04:a0:29:a3:89:1a: 48:9d:bc:2c:89:68:ef:6b:31:ea:24:a2:ad:9c:95:1e:d8:98: 25:aa:93:50:b6:c9:fe:de:7d:d1:57:70:ac:02:60:58:80:2d: ca:c9:4e:90:eb:ac:2a:92:e5:8e:28:91:a5:c4:de:bf:a4:e0: b5:70:94:51:08:15:cd:8a:b3:6c:5b:68:06:a7:e1:8b:72:22: 91:33:dc:68:96:51:f4:ee:29:99:6a:42:64:a0:9b:27:54:56: 29:c9:b7:ba:f3:bc:de:fd:ca:57:b1:1c:af:ae:60:ef:2d:e6: 48:ec:44:2b:97:3a:6a:2c:7c:f7:ec:b1:f7:40:d4:1d:90:bf: 4a:fb:6f:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wgj/qBy1+pemCOtdCdHdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWIyYzYwMWZhNmQwNzUwNzk3MzA4MWZhYTEzMjVmZTE5 MGIyNzYwHhcNMjUxMjIwMjAwMTA5WhcNMjUxMjIxMjAwMTA5WjAzMTEwLwYDVQQD EyhhYWJiYjJkNTQwMTViYTE3MGJlYjIwZTBiZDU2Mzc0ZDJjMjdjMDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlwT5VnZ9yBMsa1auRwyxFFLEXq3 RkdXCgTlG7aNHD3gg1jGoigJqhYYyHuAWOXH7wSQyH81R/ycSC5RurTJmWEXMwkf oCtCsXQerHT0kM7M0a2qGDAWU9nacBHUqU9WsgZVMnukSAVRKoWGf01D31EKpvAP nHlzmrR6JaRyc63FvsvLUYvbLW5QjLU87yFA7BZ8bvsf0G7j5FVnKhn/+uUq7YM5 dqMcPFyKpQEV17J0Ql+qQjXkxluoq0vFpw8ytWmg0W52bvy6Fpwi9r8Czdw5095x iZ60pxKNQ3S6KUQYq+X8fGAPvG/ANNFVLE2id+6EE3Ipv21UEnwzhcK64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq7stVAFboXC+sg4L1WN00sJ8AQMB8GA1UdIwQY MBaAFMHrLGAfptB1B5cwgfqhMl/hkLJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEt OTBlZjdiZGExZGMzLzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81Y2Y0MzEtNGQ1Ny00NTAzLWIyOGEtOTBlZjdiZGExZGMz LzEvd2Vzc1lCLW0wSFVIbHpDQi1xRXlYLUdRc25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktKEzzZo PnmD/PYDclWkJ+1mHDdBFStCXwsCKrdlkUJWWrl1BRfocX+0tfIJfYNcCEjb6g9C cwRx/H9D6iqS4mGc2QrVqzOP9IVxSFoNWcw/sHkpegT/TMEczQS4yAplwfeoc5dO fbzHXqYGez+65XCq2dxj9SPnBKApo4kaSJ28LIlo72sx6iSirZyVHtiYJaqTULbJ /t590VdwrAJgWIAtyslOkOusKpLljiiRpcTev6TgtXCUUQgVzYqzbFtoBqfhi3Ii kTPcaJZR9O4pmWpCZKCbJ1RWKcm3uvO83v3KV7Ecr65g7y3mSOxEK5c6aix89+yx 90DUHZC/SvtvHw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:52:49 2025 by rpki-client