This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json) Hash identifier: wue9z0dseLOxuuQgORZZB8qIL1j/jtArFXL5GVhdKSg= Subject key identifier: 47:34:26:B6:7C:71:8A:F3:C5:B2:E0:D6:39:9E:3F:5E:62:2B:AD:7B Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Certificate serial: 019B53AB4C8139294EF5BEF1EAF95628B9D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft Manifest number: 0717 Signing time: Thu 25 Dec 2025 04:01:33 +0000 Manifest this update: Thu 25 Dec 2025 04:01:33 +0000 Manifest next update: Fri 26 Dec 2025 04:01:33 +0000 Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: h9tRN+OP71bLZ7GYMNUXY+TcnEOfXrSjREuoHalNi2w=) 2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:4c:81:39:29:4e:f5:be:f1:ea:f9:56:28:b9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Validity Not Before: Dec 25 04:01:33 2025 GMT Not After : Dec 26 04:01:33 2025 GMT Subject: CN=473426b67c718af3c5b2e0d6399e3f5e622bad7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:ef:ec:44:ef:a4:5a:16:63:d1:0e:08:83: cb:f6:fc:a8:f0:44:99:f2:d5:b1:ab:24:db:84:cb: e9:d9:28:91:87:2f:69:cd:1c:51:d6:4e:4a:48:70: 44:4c:39:f7:a0:8d:70:58:61:3f:ca:dc:39:f6:96: f4:b1:39:a7:05:3e:30:97:0f:ed:ad:78:a9:a6:76: c2:1d:4a:f3:ad:d9:27:99:9a:bd:62:da:4b:ed:f3: ce:5e:23:0a:c7:55:41:53:6b:c2:0d:2a:85:1c:61: 84:18:c3:b6:21:ea:bb:f9:4d:42:e8:be:10:e1:2e: 1e:51:b0:b4:00:6c:24:e8:70:4f:94:17:1d:a0:48: 73:7f:72:c5:e1:70:0d:88:bc:ed:c0:7f:40:7e:43: e0:df:80:2b:44:51:1d:8f:46:fb:29:fd:c2:f0:63: 92:84:f7:f0:d6:31:b5:bc:6e:e4:42:02:ec:15:24: a7:60:6c:0c:61:7a:e1:9f:0c:93:f0:80:7a:1a:46: ab:49:1f:51:07:85:c2:e0:c0:d2:a1:c2:45:98:1a: d9:b8:a4:93:be:6f:9b:8c:d9:16:0e:9b:f3:f3:4d: b3:8c:42:03:94:44:56:bc:1b:a4:a8:48:18:b3:4f: b5:33:db:98:e6:a2:23:b6:c5:a6:f8:2b:72:da:f4: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:34:26:B6:7C:71:8A:F3:C5:B2:E0:D6:39:9E:3F:5E:62:2B:AD:7B X509v3 Authority Key Identifier: keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ec:56:de:32:11:60:03:4b:87:86:86:55:ec:79:50:98:0e: 0b:66:e4:29:2f:94:38:bf:f4:b7:f5:b4:d6:85:e2:a8:ac:b6: db:4d:09:97:ba:64:2e:d5:d1:98:93:91:9c:20:3c:85:b4:2b: a5:17:11:fe:2e:bf:e3:86:d3:2a:4a:c3:ca:2e:d6:70:52:c7: bd:8f:36:ff:be:eb:d2:9b:ac:b5:c9:ba:e6:77:45:6a:dd:bc: c1:2f:a6:47:47:0f:12:eb:87:ae:5e:a4:0c:a0:20:c3:f6:20: 31:f5:6b:22:49:e7:a6:cf:f6:95:78:36:83:44:d1:7a:c9:0a: 19:c1:d4:1b:ce:85:6a:ad:e4:7e:68:47:36:b1:11:c4:34:66: 20:a7:30:af:96:d0:80:f5:b4:b0:ef:35:ee:f3:c3:c1:08:44: fa:7f:e6:03:32:f0:6f:55:25:e9:5f:03:44:d4:d3:61:6c:a9: 1d:d1:82:1e:22:62:fc:b6:9f:57:95:f6:f9:c9:0f:c6:c4:54: 60:19:71:41:d3:63:10:d0:bf:96:24:8e:27:dc:96:9a:aa:27: 9b:24:c7:96:ac:82:23:20:01:92:49:1d:18:17:da:de:0d:93: e8:0b:de:28:3d:d2:ae:66:f1:cd:24:25:7e:de:68:95:df:66: ab:a5:e9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq0yBOSlO9b7x6vlWKLnSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy NmI1ZDMwHhcNMjUxMjI1MDQwMTMzWhcNMjUxMjI2MDQwMTMzWjAzMTEwLwYDVQQD Eyg0NzM0MjZiNjdjNzE4YWYzYzViMmUwZDYzOTllM2Y1ZTYyMmJhZDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+3v7ETvpFoWY9EOCIPL9vyo8ESZ 8tWxqyTbhMvp2SiRhy9pzRxR1k5KSHBETDn3oI1wWGE/ytw59pb0sTmnBT4wlw/t rXippnbCHUrzrdknmZq9YtpL7fPOXiMKx1VBU2vCDSqFHGGEGMO2Ieq7+U1C6L4Q 4S4eUbC0AGwk6HBPlBcdoEhzf3LF4XANiLztwH9AfkPg34ArRFEdj0b7Kf3C8GOS hPfw1jG1vG7kQgLsFSSnYGwMYXrhnwyT8IB6GkarSR9RB4XC4MDSocJFmBrZuKST vm+bjNkWDpvz802zjEIDlERWvBukqEgYs0+1M9uY5qIjtsWm+Cty2vQXSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc0JrZ8cYrzxbLg1jmeP15iK617MB8GA1UdIwQY MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABOxW3jIR YANLh4aGVex5UJgOC2bkKS+UOL/0t/W01oXiqKy2200Jl7pkLtXRmJORnCA8hbQr pRcR/i6/44bTKkrDyi7WcFLHvY82/77r0pustcm65ndFat28wS+mR0cPEuuHrl6k DKAgw/YgMfVrIknnps/2lXg2g0TReskKGcHUG86Faq3kfmhHNrERxDRmIKcwr5bQ gPW0sO817vPDwQhE+n/mAzLwb1Ul6V8DRNTTYWypHdGCHiJi/LafV5X2+ckPxsRU YBlxQdNjENC/liSOJ9yWmqonmyTHlqyCIyABkkkdGBfa3g2T6AveKD3SrmbxzSQl ft5old9mq6XpTw== -----END CERTIFICATE-----Generated at Thu Dec 25 05:31:58 2025 by rpki-client