This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json) Hash identifier: CNUggiFhgrY6mN+HmSxbOR6ad7JmzSr0jBi4Bz+utJc= Subject key identifier: 6E:7F:34:A4:EE:0A:32:DB:98:CB:98:0C:79:CC:A6:9D:D9:00:67:DC Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Certificate serial: 019B4FCF79B697F86ED7AC5CEC41655665A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft Manifest number: 1154 Signing time: Wed 24 Dec 2025 10:02:35 +0000 Manifest this update: Wed 24 Dec 2025 10:02:35 +0000 Manifest next update: Thu 25 Dec 2025 10:02:35 +0000 Files and hashes: 1: 7UOjyf-6bS8r8zJDoqOo76_7Llk.roa (hash: M/fakT1uObMb7UW5IWYfhtUN1rDOGMnXTsxFWM6dOkk=) 2: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: 7EDsI74ddnViszOfT4quh4ULukc8HxtMOjMteNiJpWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cf:79:b6:97:f8:6e:d7:ac:5c:ec:41:65:56:65:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Validity Not Before: Dec 24 10:02:35 2025 GMT Not After : Dec 25 10:02:35 2025 GMT Subject: CN=6e7f34a4ee0a32db98cb980c79cca69dd90067dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cc:69:8a:08:57:fe:ca:97:55:5a:34:0b:d2: 59:86:a1:05:20:87:6b:32:55:62:27:0c:65:b4:04: a2:81:87:10:0f:91:62:9a:37:a2:43:df:19:ec:ef: 46:eb:27:bc:36:0b:c5:08:c9:b3:31:0a:91:8d:76: 80:98:07:2c:87:20:83:96:6f:3d:f8:a5:15:c1:c0: 2f:96:4c:65:8f:b2:df:59:41:18:92:be:1d:0f:d5: 6f:fd:a2:09:7d:96:82:bb:92:59:59:43:ab:22:15: 8e:a5:d3:d9:b5:a0:16:53:97:22:bd:74:ba:02:bb: 55:72:8f:7a:a9:c1:7d:65:3a:1a:a5:c2:72:bb:92: a2:4f:e0:44:60:30:01:66:0e:b1:24:23:ad:64:ac: bf:c0:5e:c1:e9:40:b1:78:3e:d8:2e:b5:13:05:51: 06:51:90:c3:41:26:61:55:28:b9:85:3a:d0:8c:60: 67:38:ee:47:0e:17:04:ac:50:f9:53:fd:5c:dc:79: bc:16:bd:50:77:88:1f:10:86:84:ea:c2:72:e2:6c: 3a:bf:a9:57:0c:44:22:1f:f5:9e:c2:32:08:88:3a: 9d:2b:c6:19:cb:7f:00:f0:9d:d9:d0:c6:03:10:84: 58:d8:1a:f4:ef:b5:85:d5:62:08:ad:6d:15:91:d4: 5b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:34:A4:EE:0A:32:DB:98:CB:98:0C:79:CC:A6:9D:D9:00:67:DC X509v3 Authority Key Identifier: keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:57:5f:38:8f:20:34:05:0c:e2:ca:ae:2a:d6:a1:a7:51: e8:8b:4f:a6:b4:6a:bb:ca:f4:52:a7:06:f7:ae:5c:ff:7d:f9: 40:53:56:d4:ed:15:38:b6:a4:98:02:c2:4d:2c:04:0c:de:43: 67:4d:d1:2f:4b:6f:42:e7:bb:dc:78:6b:e3:8a:ae:9f:24:2c: 66:58:5d:2a:81:ec:61:eb:e8:34:03:9f:c2:a5:20:9c:b9:a0: 97:58:8e:7c:43:c5:af:13:3f:92:b5:53:48:4c:40:95:e0:59: 48:57:30:1a:a5:11:41:87:5c:3f:0e:8a:5a:2f:2f:c7:47:06: d9:e9:91:9b:b0:dd:17:59:cc:b2:ff:6a:ae:43:a3:da:20:05: 59:87:40:b7:7a:5a:12:c3:6a:da:57:45:12:ff:35:41:a3:c8: c1:2b:02:35:de:5e:f2:bd:26:80:ef:5f:89:7c:17:ed:a4:63: cc:02:89:3c:c5:72:9b:fa:56:39:94:2b:84:57:ef:c1:90:fb: 92:57:7d:fb:73:f9:41:de:19:78:0f:a0:f7:b3:12:be:80:20: 8c:c8:83:4f:88:1a:75:11:4d:fd:00:f8:66:36:27:4d:46:f6: a6:69:02:81:4d:79:cd:45:06:62:8b:7d:a3:41:bf:64:d6:7f: 76:82:94:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPz3m2l/hu16xc7EFlVmWpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjVjNjJmMTBjMjVlN2E3ZWYxODM1NjgzM2FhNGY5Yjk4 NDJjNmEwHhcNMjUxMjI0MTAwMjM1WhcNMjUxMjI1MTAwMjM1WjAzMTEwLwYDVQQD Eyg2ZTdmMzRhNGVlMGEzMmRiOThjYjk4MGM3OWNjYTY5ZGQ5MDA2N2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sxpighX/sqXVVo0C9JZhqEFIIdr MlViJwxltASigYcQD5FimjeiQ98Z7O9G6ye8NgvFCMmzMQqRjXaAmAcshyCDlm89 +KUVwcAvlkxlj7LfWUEYkr4dD9Vv/aIJfZaCu5JZWUOrIhWOpdPZtaAWU5civXS6 ArtVco96qcF9ZToapcJyu5KiT+BEYDABZg6xJCOtZKy/wF7B6UCxeD7YLrUTBVEG UZDDQSZhVSi5hTrQjGBnOO5HDhcErFD5U/1c3Hm8Fr1Qd4gfEIaE6sJy4mw6v6lX DEQiH/WewjIIiDqdK8YZy38A8J3Z0MYDEIRY2Br077WF1WIIrW0VkdRbSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5/NKTuCjLbmMuYDHnMpp3ZAGfcMB8GA1UdIwQY MBaAFFllxi8Qwl56fvGDVoM6pPm5hCxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEt NmNhN2M1NDI2M2I5LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEtNmNhN2M1NDI2M2I5 LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOypXXziP IDQFDOLKrirWoadR6ItPprRqu8r0UqcG965c/335QFNW1O0VOLakmALCTSwEDN5D Z03RL0tvQue73Hhr44qunyQsZlhdKoHsYevoNAOfwqUgnLmgl1iOfEPFrxM/krVT SExAleBZSFcwGqURQYdcPw6KWi8vx0cG2emRm7DdF1nMsv9qrkOj2iAFWYdAt3pa EsNq2ldFEv81QaPIwSsCNd5e8r0mgO9fiXwX7aRjzAKJPMVym/pWOZQrhFfvwZD7 kld9+3P5Qd4ZeA+g97MSvoAgjMiDT4gadRFN/QD4ZjYnTUb2pmkCgU15zUUGYot9 o0G/ZNZ/doKU6A== -----END CERTIFICATE-----Generated at Wed Dec 24 11:42:12 2025 by rpki-client