This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json) Hash identifier: wbG28g9miS0HTsHybrH6cb7noUkqCe7NWJmzIPP+0q4= Subject key identifier: 65:7F:17:94:54:06:7A:53:59:70:0B:0F:1E:B3:5B:1C:B9:26:09:FC Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e Certificate serial: 019B3E6DE2FB35A0985D8911B33DFECA97E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft Manifest number: 0DA4 Signing time: Sun 21 Dec 2025 01:02:27 +0000 Manifest this update: Sun 21 Dec 2025 01:02:27 +0000 Manifest next update: Mon 22 Dec 2025 01:02:27 +0000 Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: Ft5elc/9GpPSJ/rBdJjS9l1BG8Ns1hdXFwQ1owdg7Ng=) 2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:e2:fb:35:a0:98:5d:89:11:b3:3d:fe:ca:97:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e Validity Not Before: Dec 21 01:02:27 2025 GMT Not After : Dec 22 01:02:27 2025 GMT Subject: CN=657f179454067a5359700b0f1eb35b1cb92609fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2f:fd:a2:9f:cf:6e:bb:89:02:07:19:6f:a6: e0:94:68:f5:f0:d2:02:87:2e:79:90:76:28:9f:3b: f7:95:9f:65:d4:f8:a2:3e:d2:76:bc:57:c7:e1:c5: eb:30:e0:51:3d:06:fc:e1:63:61:56:57:0b:b4:d2: 03:f8:7c:69:8c:3d:76:2f:15:4f:b4:e6:ee:80:cc: ca:62:94:a0:f2:13:dd:9c:0b:66:06:26:bf:46:b2: ce:90:1a:87:23:de:8d:4b:76:ee:2c:7b:05:ee:1d: ef:92:8d:65:9b:0f:96:82:8c:27:87:ed:55:1e:6b: fd:a5:c9:66:80:5e:a1:0a:03:fb:68:f9:9a:8c:0e: 51:e6:68:70:f2:b2:2b:a2:af:24:41:ee:84:8b:32: b5:00:8a:22:a1:33:10:5c:e2:b6:15:0d:fc:58:81: d7:74:7c:da:a3:e3:a6:c5:81:21:b3:d1:e5:7e:34: 00:8d:9c:96:37:33:13:9e:9c:40:78:ea:24:e0:3e: eb:7a:79:4e:b0:ee:3f:4f:0d:74:63:7f:bd:7e:88: a8:71:26:8f:bf:9a:bf:68:90:61:b1:77:04:f0:bc: 2e:10:d1:4f:00:6d:18:6e:16:91:87:b2:72:83:15: 28:ed:ee:b3:1c:4c:cd:96:e3:90:52:8b:b3:0c:b6: 35:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7F:17:94:54:06:7A:53:59:70:0B:0F:1E:B3:5B:1C:B9:26:09:FC X509v3 Authority Key Identifier: keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:86:77:8f:1b:6e:ee:0f:05:c4:23:e1:35:b3:9e:5d:ba:05: 05:e6:f7:c8:78:c6:79:88:f0:31:f1:a5:23:c7:13:f9:5a:d1: 90:6b:04:f4:55:bc:92:cc:73:96:4f:ed:0b:cb:6b:d9:19:ae: 43:f4:43:c3:e5:41:3b:c8:0d:80:10:0d:63:a0:dd:39:01:1c: 22:7c:47:7b:41:fe:ce:29:57:a0:d4:3d:82:db:17:47:c4:8f: 65:80:02:ba:c0:05:fa:6f:bf:91:f5:2b:ea:ab:03:65:87:c9: b7:c4:8a:d3:10:18:6e:bb:6f:85:b6:e0:09:f9:d2:8c:53:cc: 54:58:63:7d:f9:b8:c7:ad:24:e8:f8:0c:6f:06:95:79:09:c1: 5f:93:f7:af:79:e3:a5:e6:29:91:96:b1:f4:e9:1c:51:17:78: 88:c4:cb:e0:ca:e3:30:90:3a:f4:fe:0b:5f:c7:17:eb:5c:4c: 7b:65:47:fa:61:d6:47:db:6c:c5:c9:fe:4c:48:41:e1:1d:d4: 00:98:5b:b7:4b:a3:34:35:38:49:71:bb:8e:fd:f9:9c:97:06: 74:ce:96:37:2d:b7:6a:f3:d9:8f:36:a8:63:a5:3a:b1:c1:94: 4e:43:a5:69:8f:bf:4b:f9:ec:c1:76:b4:ce:d6:5b:d9:33:a9: 00:17:3c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+beL7NaCYXYkRsz3+ypfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTg2YTZjNzFmYjczNGM3MDViNWU2NmU3NGFjMWM1NmJi OTYwNWUwHhcNMjUxMjIxMDEwMjI3WhcNMjUxMjIyMDEwMjI3WjAzMTEwLwYDVQQD Eyg2NTdmMTc5NDU0MDY3YTUzNTk3MDBiMGYxZWIzNWIxY2I5MjYwOWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC/9op/PbruJAgcZb6bglGj18NIC hy55kHYonzv3lZ9l1PiiPtJ2vFfH4cXrMOBRPQb84WNhVlcLtNID+HxpjD12LxVP tObugMzKYpSg8hPdnAtmBia/RrLOkBqHI96NS3buLHsF7h3vko1lmw+Wgownh+1V Hmv9pclmgF6hCgP7aPmajA5R5mhw8rIroq8kQe6EizK1AIoioTMQXOK2FQ38WIHX dHzao+OmxYEhs9HlfjQAjZyWNzMTnpxAeOok4D7renlOsO4/Tw10Y3+9foiocSaP v5q/aJBhsXcE8LwuENFPAG0YbhaRh7JygxUo7e6zHEzNluOQUouzDLY1QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGV/F5RUBnpTWXALDx6zWxy5Jgn8MB8GA1UdIwQY MBaAFFioamxx+3NMcFteZudKwcVruWBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAt YTliMTNjMjgwMGFmLzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAtYTliMTNjMjgwMGFm LzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0oZ3jxtu 7g8FxCPhNbOeXboFBeb3yHjGeYjwMfGlI8cT+VrRkGsE9FW8ksxzlk/tC8tr2Rmu Q/RDw+VBO8gNgBANY6DdOQEcInxHe0H+zilXoNQ9gtsXR8SPZYACusAF+m+/kfUr 6qsDZYfJt8SK0xAYbrtvhbbgCfnSjFPMVFhjffm4x60k6PgMbwaVeQnBX5P3r3nj peYpkZax9OkcURd4iMTL4MrjMJA69P4LX8cX61xMe2VH+mHWR9tsxcn+TEhB4R3U AJhbt0ujNDU4SXG7jv35nJcGdM6WNy23avPZjzaoY6U6scGUTkOlaY+/S/nswXa0 ztZb2TOpABc8Vw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:33 2025 by rpki-client