This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft File: wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json) Hash identifier: vip5uAHyszgLqXSnQn0PYmay6W46n5DiygPxZXUYy50= Subject key identifier: 0C:36:55:28:FC:AB:51:7F:72:C6:6E:52:0E:E6:A1:0B:83:79:A1:7C Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6 Certificate issuer: /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6 Certificate serial: 019B3C7DCF8EED57AAEBF62C969A85631F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 16:00:36 +0000 Manifest this update: Sat 20 Dec 2025 16:00:36 +0000 Manifest next update: Sun 21 Dec 2025 16:00:36 +0000 Files and hashes: 1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=) 2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: MCd0yvJbbAkLktf9m6ktrSNrKG9wMlWBPwHa0s8K+V8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:cf:8e:ed:57:aa:eb:f6:2c:96:9a:85:63:1f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6 Validity Not Before: Dec 20 16:00:36 2025 GMT Not After : Dec 21 16:00:36 2025 GMT Subject: CN=0c365528fcab517f72c66e520ee6a10b8379a17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:3e:b6:de:91:2f:3b:04:9b:6d:c8:d9:ba:0a: d0:39:92:08:8f:bf:e6:e7:7f:8d:ae:0a:05:d5:88: db:15:79:7d:d7:db:01:73:89:47:51:b3:2b:9f:0e: 8f:48:2b:b5:99:f6:12:21:0b:d2:4c:45:79:03:a4: bf:34:d2:a0:b9:e3:d5:e9:72:b2:4f:8c:c6:3e:b8: 0d:47:09:a6:5b:c2:7b:7a:75:07:b9:d8:7e:39:59: 03:09:8f:d7:61:b4:25:23:4c:ff:40:35:de:ee:bc: a3:40:fe:25:3a:11:0a:73:a5:7e:6a:6d:89:ca:c0: 67:5c:c3:8d:c7:56:cb:99:7f:f5:38:f2:06:08:6b: 2b:4b:e8:3a:21:48:eb:cd:cb:c6:0c:9c:51:0e:3d: a2:8c:b2:02:81:a0:f0:1c:20:3d:0f:00:b6:7c:da: 59:f7:da:c4:72:67:80:3b:67:62:94:85:82:9b:aa: d0:c0:98:33:18:60:ba:63:95:37:57:fb:c5:9f:fa: 42:70:b4:a2:28:09:34:7a:7d:55:e1:e5:fc:01:11: 54:06:5c:70:15:0c:25:9d:28:75:1b:7f:cb:09:4f: 64:68:45:52:e1:04:00:28:3f:c3:4c:cb:c3:52:d8: 3c:93:91:8b:cc:44:91:fe:8a:31:36:31:7c:5a:6d: ea:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:36:55:28:FC:AB:51:7F:72:C6:6E:52:0E:E6:A1:0B:83:79:A1:7C X509v3 Authority Key Identifier: keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:95:11:b4:00:f2:e6:06:45:af:93:3a:83:94:0d:b4:c9:3f: 8f:62:e8:83:db:3e:74:52:09:55:ee:f1:17:46:41:25:ff:11: 2a:57:f1:b4:88:03:a0:71:8d:ed:42:1b:10:6b:66:80:d9:cd: 58:ca:03:77:60:5a:42:44:f5:29:9f:1a:0e:92:cf:9b:f5:5e: f5:0e:80:69:18:b8:7c:23:a0:32:07:c1:80:13:6b:53:4d:e7: 93:c7:d7:1a:ce:2a:97:16:6e:8b:17:e5:bf:9b:1d:c7:16:fe: 81:50:26:23:0a:ea:7f:3c:70:ee:cb:51:cb:09:39:d1:04:0a: f2:d9:df:bd:3e:df:52:29:ba:87:e1:f8:8d:e2:0d:5d:66:66: 59:57:d3:30:f4:f3:36:97:90:db:f3:57:e2:a7:a4:ba:44:03: 68:f4:36:36:f9:8b:ac:68:2e:96:41:40:0b:f9:93:8b:b5:07: 63:cb:24:7b:91:4f:03:ef:35:61:e5:02:d4:32:00:39:8d:6f: 61:7f:80:1f:13:e8:d5:4e:b8:13:83:29:58:88:1b:6a:f9:5c: 8a:11:a5:15:d7:cd:7c:01:7b:c5:f1:cf:46:ba:59:92:c0:97: 93:5c:dd:82:19:54:ba:dc:5b:c5:02:a6:ee:2e:60:55:dc:ca: b3:cd:c2:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fc+O7Veq6/YslpqFYx+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzA1ZWNlNmM5MDhhZDg4ODI1MTNkYTNhMjVhMTYwNzAz YmI3ZjYwHhcNMjUxMjIwMTYwMDM2WhcNMjUxMjIxMTYwMDM2WjAzMTEwLwYDVQQD EygwYzM2NTUyOGZjYWI1MTdmNzJjNjZlNTIwZWU2YTEwYjgzNzlhMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj623pEvOwSbbcjZugrQOZIIj7/m 53+NrgoF1YjbFXl919sBc4lHUbMrnw6PSCu1mfYSIQvSTEV5A6S/NNKguePV6XKy T4zGPrgNRwmmW8J7enUHudh+OVkDCY/XYbQlI0z/QDXe7ryjQP4lOhEKc6V+am2J ysBnXMONx1bLmX/1OPIGCGsrS+g6IUjrzcvGDJxRDj2ijLICgaDwHCA9DwC2fNpZ 99rEcmeAO2dilIWCm6rQwJgzGGC6Y5U3V/vFn/pCcLSiKAk0en1V4eX8ARFUBlxw FQwlnSh1G3/LCU9kaEVS4QQAKD/DTMvDUtg8k5GLzESR/ooxNjF8Wm3qwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAw2VSj8q1F/csZuUg7moQuDeaF8MB8GA1UdIwQY MBaAFMHAXs5skIrYiCUT2joloWBwO7f2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAt ZWJiNjNhNDU0YTkxLzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8zN2ZiNGEtNWM5Ni00ZDE3LTg2YTAtZWJiNjNhNDU0YTkx LzEvd2NCZXpteVFpdGlJSlJQYU9pV2hZSEE3dF9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpURtADy 5gZFr5M6g5QNtMk/j2Log9s+dFIJVe7xF0ZBJf8RKlfxtIgDoHGN7UIbEGtmgNnN WMoDd2BaQkT1KZ8aDpLPm/Ve9Q6AaRi4fCOgMgfBgBNrU03nk8fXGs4qlxZuixfl v5sdxxb+gVAmIwrqfzxw7stRywk50QQK8tnfvT7fUim6h+H4jeINXWZmWVfTMPTz NpeQ2/NX4qekukQDaPQ2NvmLrGgulkFAC/mTi7UHY8ske5FPA+81YeUC1DIAOY1v YX+AHxPo1U64E4MpWIgbavlcihGlFdfNfAF7xfHPRrpZksCXk1zdghlUutxbxQKm 7i5gVdzKs83CYw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:31 2025 by rpki-client