This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json) Hash identifier: Z2ONMbHlsv2toWSvZ0YFv9HXzkhAHWzIqNsgw+AOjF4= Subject key identifier: 38:51:E5:BF:66:68:BB:41:CC:14:89:A3:2F:7A:B0:80:35:3E:87:B1 Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Certificate serial: 019B7A4B3EFDC2D32AF61300263E6FEBB48F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft Manifest number: 072B Signing time: Thu 01 Jan 2026 16:01:50 +0000 Manifest this update: Thu 01 Jan 2026 16:01:50 +0000 Manifest next update: Fri 02 Jan 2026 16:01:50 +0000 Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: qGu6qQ+8eUPcC1t0lWRL1wlNdOYuBAE4sfBjsrHrHoc=) 2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 16:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:4b:3e:fd:c2:d3:2a:f6:13:00:26:3e:6f:eb:b4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Validity Not Before: Jan 1 16:01:50 2026 GMT Not After : Jan 2 16:01:50 2026 GMT Subject: CN=3851e5bf6668bb41cc1489a32f7ab080353e87b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d3:b8:3c:ad:8b:bf:e0:09:69:41:90:43:3c: 65:25:fa:be:dc:2a:45:cb:2d:28:6e:3c:8e:ab:9f: 43:49:64:72:7b:87:ea:d9:6e:ce:82:57:3f:2f:5d: 01:c4:84:5e:84:00:3a:70:f7:79:2d:db:05:99:c5: 4c:1f:7d:3c:f1:8f:46:89:75:c3:e3:be:63:40:e6: 97:9d:d8:12:e9:a2:23:f0:69:d5:79:f1:70:a9:bd: e6:6b:f5:77:fb:69:5b:c9:a9:ce:f5:e7:70:5a:4c: ca:90:c9:a8:20:7b:80:c5:13:8c:1a:4f:d4:a3:8a: 30:8b:31:98:b4:42:22:e8:6f:8e:9d:34:9a:ae:17: c1:b0:f8:46:02:00:24:bd:2d:71:bd:ef:af:e0:8d: c5:40:46:65:3f:ea:8b:2b:0b:3c:4a:66:dc:7b:5f: 0e:6d:98:d6:4c:7d:8d:75:de:0a:ee:bc:5b:94:79: d6:1b:7c:b7:36:ac:c1:a9:d2:19:e9:19:0d:1a:e3: fe:05:66:34:64:17:61:32:50:d2:9b:36:ca:25:1f: 4d:77:69:46:5f:bc:b2:bb:b9:f4:41:82:5a:ff:9e: d5:be:25:dd:9d:e1:53:e3:53:6c:66:95:79:b0:a3: af:a5:3c:9c:a8:b4:f0:7d:1d:df:69:dd:c3:13:df: f6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:51:E5:BF:66:68:BB:41:CC:14:89:A3:2F:7A:B0:80:35:3E:87:B1 X509v3 Authority Key Identifier: keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0c:e4:60:85:7c:ec:c5:d8:1f:5d:14:5d:74:fd:56:a9:1d: 84:7a:1b:62:98:d1:09:bc:25:4a:cd:6d:fc:07:24:45:7b:0a: 57:83:44:8d:35:2c:01:5e:3c:6e:69:00:d6:4d:7b:13:c2:a2: 45:e4:85:7e:1b:66:f6:81:d9:1d:96:b1:1d:4b:5a:28:6a:f4: a5:de:b5:d7:93:ed:fe:22:32:43:90:9f:b2:de:6c:2a:18:92: 89:1d:88:f5:dd:c7:fd:26:37:27:bc:73:dd:6e:74:61:09:e0: c0:5b:40:ef:a1:5b:f5:15:fc:21:6c:2a:78:9e:d0:d4:ca:48: 84:64:bf:b6:42:a8:2a:3e:e4:93:75:bb:2a:d7:e6:f3:06:a1: d8:14:1b:29:dd:0e:e7:77:52:fa:71:16:97:69:7d:9a:c2:eb: 18:9c:67:c6:57:3a:5a:4a:6a:a7:f4:bd:7b:b2:a3:bb:c8:8d: f7:0c:d1:c4:0d:ee:72:34:d5:0a:bd:67:d3:4f:9b:cf:d8:99: 98:fa:dc:cb:09:de:8d:da:2f:24:5d:fd:d3:b5:e3:21:a0:4a: 31:26:a9:da:91:1b:cf:7c:9d:ab:ff:55:47:0d:95:4d:be:81: 44:c5:21:55:a7:60:31:1a:ec:b0:fe:9b:8f:d1:38:0e:9c:de: 71:7b:7f:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6Sz79wtMq9hMAJj5v67SPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy NmI1ZDMwHhcNMjYwMTAxMTYwMTUwWhcNMjYwMTAyMTYwMTUwWjAzMTEwLwYDVQQD EygzODUxZTViZjY2NjhiYjQxY2MxNDg5YTMyZjdhYjA4MDM1M2U4N2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dO4PK2Lv+AJaUGQQzxlJfq+3CpF yy0objyOq59DSWRye4fq2W7Oglc/L10BxIRehAA6cPd5LdsFmcVMH3088Y9GiXXD 475jQOaXndgS6aIj8GnVefFwqb3ma/V3+2lbyanO9edwWkzKkMmoIHuAxROMGk/U o4owizGYtEIi6G+OnTSarhfBsPhGAgAkvS1xve+v4I3FQEZlP+qLKws8Smbce18O bZjWTH2Ndd4K7rxblHnWG3y3NqzBqdIZ6RkNGuP+BWY0ZBdhMlDSmzbKJR9Nd2lG X7yyu7n0QYJa/57VviXdneFT41NsZpV5sKOvpTycqLTwfR3fad3DE9/22QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDhR5b9maLtBzBSJoy96sIA1PoexMB8GA1UdIwQY MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiAzkYIV8 7MXYH10UXXT9VqkdhHobYpjRCbwlSs1t/AckRXsKV4NEjTUsAV48bmkA1k17E8Ki ReSFfhtm9oHZHZaxHUtaKGr0pd6115Pt/iIyQ5Cfst5sKhiSiR2I9d3H/SY3J7xz 3W50YQngwFtA76Fb9RX8IWwqeJ7Q1MpIhGS/tkKoKj7kk3W7Ktfm8wah2BQbKd0O 53dS+nEWl2l9msLrGJxnxlc6Wkpqp/S9e7Kju8iN9wzRxA3ucjTVCr1n00+bz9iZ mPrcywnejdovJF3907XjIaBKMSap2pEbz3ydq/9VRw2VTb6BRMUhVadgMRrssP6b j9E4DpzecXt/gg== -----END CERTIFICATE-----Generated at Thu Jan 1 19:38:27 2026 by rpki-client