This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json) Hash identifier: I1po2TBfbJYFeECWxA0ueDkzHMwofeolMVrxB0dsCB4= Subject key identifier: BC:46:3C:DF:B7:B8:C1:1B:8C:B0:FB:D4:28:82:34:D8:C2:83:E1:14 Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23 Certificate serial: 019B3BD933E4FA34B9868CA5796DE23505BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft Manifest number: 8A Signing time: Sat 20 Dec 2025 13:00:48 +0000 Manifest this update: Sat 20 Dec 2025 13:00:48 +0000 Manifest next update: Sun 21 Dec 2025 13:00:48 +0000 Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: zPNEWbLIGe6V+vBaAnPH/b9bV1MeRWCCwktjfK2jZ/Y=) 2: lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa (hash: tVhecYMNj6vTa/xG0wc+2Ec2FDfRws1DmGu5dGnbsLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:33:e4:fa:34:b9:86:8c:a5:79:6d:e2:35:05:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23 Validity Not Before: Dec 20 13:00:48 2025 GMT Not After : Dec 21 13:00:48 2025 GMT Subject: CN=bc463cdfb7b8c11b8cb0fbd4288234d8c283e114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:a5:6f:88:51:ad:a9:2f:c3:59:ec:9d:4c: ff:a4:90:00:a8:63:ba:e2:9a:1b:60:ab:00:2c:e6: 7b:26:56:89:1d:f6:c9:fd:be:e1:22:d6:80:15:c4: a8:73:55:86:1f:9f:3d:b3:33:5e:5f:6c:14:70:55: 79:a4:55:6d:a5:78:97:64:cb:ce:b7:10:52:c5:18: 7c:15:8d:03:b6:6e:e8:56:17:e1:0d:fd:e1:1e:da: 5b:16:7a:9e:d9:6e:73:7c:63:58:ef:b3:53:e5:b7: 93:42:7c:ed:e1:1e:e4:45:de:1d:57:e3:3e:2d:d5: 27:87:26:c3:e8:9c:d0:1e:1d:d1:f1:7a:42:88:7d: 24:b5:ad:01:ca:35:a7:84:5a:68:43:f3:f2:a1:39: 2b:e9:79:90:9a:59:eb:d1:4b:43:8f:02:21:9b:bd: 01:b2:33:2c:10:58:c1:db:f5:bf:1c:7d:ff:80:ca: dd:b3:61:a7:52:7e:c9:19:c5:2e:93:ba:af:ff:45: 76:b4:f8:53:5d:20:51:94:c1:de:1e:54:06:2a:e0: 59:ff:d5:f5:73:68:6c:bb:c1:94:1a:4c:2e:cc:3b: 76:d8:6b:38:c7:fa:58:d4:3f:ed:95:85:1f:50:3e: e0:7d:0b:d4:57:b8:70:9d:36:57:d5:21:83:8c:23: 0b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:3C:DF:B7:B8:C1:1B:8C:B0:FB:D4:28:82:34:D8:C2:83:E1:14 X509v3 Authority Key Identifier: keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7d:bd:c6:7c:26:18:33:54:98:1b:b1:f5:6a:99:21:ea:0f: 98:4b:b4:d9:20:ae:be:2f:ac:34:14:aa:7b:90:ec:ae:33:5f: 0f:12:b8:c8:c5:5c:59:13:0b:c6:a2:81:5f:b7:b8:cd:21:24: ba:b8:a9:79:3e:5c:e0:33:84:72:ea:a9:b3:fa:cb:bc:80:a2: 82:3d:26:f9:d6:78:82:41:6e:a5:39:4d:78:bc:90:ca:a0:bc: 4e:a9:09:e7:0c:a2:95:49:70:63:4d:b0:cb:8d:13:55:83:6b: d4:f9:c9:de:12:f1:b3:6e:34:5f:59:df:7f:d1:f0:f9:15:2e: 38:4a:59:04:7f:96:9d:98:4a:e1:92:73:b0:b2:51:7a:e3:2a: 74:d6:7c:46:33:6a:74:cf:4b:10:5c:1a:8e:82:d1:b6:74:29: 9c:99:15:47:dd:31:53:9f:54:39:43:37:61:8f:30:cd:8a:75: bb:37:cd:88:53:02:8a:d2:bb:35:a5:b3:ea:5a:5d:c8:8f:5a: a1:54:18:f8:35:70:83:e6:4b:86:cb:24:7c:55:02:98:3c:45: 29:fb:aa:6a:c4:4d:53:d3:8b:b0:bf:65:fd:b3:dd:e6:ef:dd: e9:3e:b5:04:96:06:9a:83:9e:a6:9e:d0:69:77:3a:9b:90:a9: a6:44:28:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72TPk+jS5hoyleW3iNQW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTY4MWM3MWJlYjQ2NGUwMWQ1YjY4ZTE5Y2E1NjZkYTk5 MzBlMjMwHhcNMjUxMjIwMTMwMDQ4WhcNMjUxMjIxMTMwMDQ4WjAzMTEwLwYDVQQD EyhiYzQ2M2NkZmI3YjhjMTFiOGNiMGZiZDQyODgyMzRkOGMyODNlMTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuGlb4hRrakvw1nsnUz/pJAAqGO6 4pobYKsALOZ7JlaJHfbJ/b7hItaAFcSoc1WGH589szNeX2wUcFV5pFVtpXiXZMvO txBSxRh8FY0Dtm7oVhfhDf3hHtpbFnqe2W5zfGNY77NT5beTQnzt4R7kRd4dV+M+ LdUnhybD6JzQHh3R8XpCiH0kta0ByjWnhFpoQ/PyoTkr6XmQmlnr0UtDjwIhm70B sjMsEFjB2/W/HH3/gMrds2GnUn7JGcUuk7qv/0V2tPhTXSBRlMHeHlQGKuBZ/9X1 c2hsu8GUGkwuzDt22Gs4x/pY1D/tlYUfUD7gfQvUV7hwnTZX1SGDjCMLHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxGPN+3uMEbjLD71CiCNNjCg+EUMB8GA1UdIwQY MBaAFFimgccb60ZOAdW2jhnKVm2pkw4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEt OTdmOTFiYzk3YTQyLzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEtOTdmOTFiYzk3YTQy LzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH329xnwm GDNUmBux9WqZIeoPmEu02SCuvi+sNBSqe5DsrjNfDxK4yMVcWRMLxqKBX7e4zSEk uripeT5c4DOEcuqps/rLvICigj0m+dZ4gkFupTlNeLyQyqC8TqkJ5wyilUlwY02w y40TVYNr1PnJ3hLxs240X1nff9Hw+RUuOEpZBH+WnZhK4ZJzsLJReuMqdNZ8RjNq dM9LEFwajoLRtnQpnJkVR90xU59UOUM3YY8wzYp1uzfNiFMCitK7NaWz6lpdyI9a oVQY+DVwg+ZLhsskfFUCmDxFKfuqasRNU9OLsL9l/bPd5u/d6T61BJYGmoOepp7Q aXc6m5CppkQoOw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:05:59 2025 by rpki-client