This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json) Hash identifier: xg5NNABW9ICsnYjISIoirRoCH8+UFL6Y5Sk3ZyXxxHc= Subject key identifier: 30:70:0E:D2:FB:CF:F3:46:4D:21:8E:74:A0:15:22:05:86:8A:EB:0E Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Certificate serial: 019B6E45BCAE25AAB9965DB48C987A5F1E72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft Manifest number: 0588 Signing time: Tue 30 Dec 2025 08:00:22 +0000 Manifest this update: Tue 30 Dec 2025 08:00:22 +0000 Manifest next update: Wed 31 Dec 2025 08:00:22 +0000 Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=) 2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: cAUanKf4ZaxKY4B7N7gyNDw+w65qPCx2LQb6Fz9+MM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:45:bc:ae:25:aa:b9:96:5d:b4:8c:98:7a:5f:1e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Validity Not Before: Dec 30 08:00:22 2025 GMT Not After : Dec 31 08:00:22 2025 GMT Subject: CN=30700ed2fbcff3464d218e74a0152205868aeb0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b7:0b:f7:1e:ba:60:39:bc:07:55:41:5a:6a: f1:b2:8a:5e:5c:40:d1:4d:bf:08:60:5a:f1:26:5e: ab:e1:82:66:af:de:1b:38:8b:d3:94:fe:36:cd:08: 64:73:93:78:56:78:d3:3f:d9:8c:b6:88:ea:fc:27: 09:c0:81:df:e2:51:63:21:d5:22:36:40:7e:17:0c: 9d:7e:f1:d6:b7:e4:38:60:e0:e3:aa:ab:52:6d:08: 25:04:70:de:30:44:7f:1e:08:35:f7:04:f4:81:36: 57:cc:36:b7:5e:47:8e:af:b4:01:0e:8a:d4:60:c0: f4:4e:93:b3:39:bb:c2:50:f8:58:cb:06:f5:37:34: b3:05:12:c6:44:fd:09:67:ad:7b:4d:06:fb:fa:a6: 75:f2:1a:48:c3:da:36:95:32:9e:c8:95:60:94:cf: f8:c4:4a:95:5b:c0:70:0e:8b:e1:56:06:4d:21:b7: d7:0e:cc:01:25:2e:3c:4b:b1:26:a8:35:7a:68:66: 86:27:c7:2d:8d:7b:e7:52:ab:ac:46:c6:ee:59:18: ac:86:61:d7:7e:8e:11:42:fd:9f:d4:de:d3:cf:a4: 3a:7f:11:bf:8a:46:1b:0c:cd:0b:10:61:fa:f6:92: b6:21:3c:8e:da:03:7b:a0:7e:a6:d6:8d:c7:5a:88: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:70:0E:D2:FB:CF:F3:46:4D:21:8E:74:A0:15:22:05:86:8A:EB:0E X509v3 Authority Key Identifier: keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:3c:d6:db:af:c3:86:f8:34:3e:64:c1:ef:1f:73:1b:6a:3e: 39:cb:c7:db:b4:84:16:20:bc:32:f9:36:ea:98:9b:fb:90:6b: 8f:6b:5b:56:c5:8c:68:78:cb:20:c3:b8:33:d8:bf:2b:39:7c: 49:14:86:43:9a:ac:f6:6d:46:7a:19:25:78:87:6b:68:c2:d6: ca:24:ea:cf:63:87:34:ca:04:40:c8:0e:df:af:a9:70:1d:5c: be:c9:d3:f7:a9:e1:c9:56:b4:0d:94:24:8b:e3:ab:04:70:35: 5f:cb:80:62:f8:f7:72:c2:8f:10:eb:0a:40:2b:e2:59:ab:83: a9:f5:8f:0f:8b:ec:b6:85:3f:96:39:6c:3c:5c:04:94:bd:39: a9:b7:99:3e:6e:ca:fe:30:c0:95:ce:eb:c4:48:26:46:ff:59: 47:26:a9:b7:ef:55:5d:e2:5d:28:f6:3e:e7:dc:8c:9f:86:a1: 89:38:12:a0:9a:c8:08:05:1b:22:3c:35:f1:e3:64:7b:19:0e: 9f:5e:d6:25:91:d9:b8:05:19:69:d1:3e:15:45:82:7a:18:db: 81:13:c6:0f:79:b5:41:46:1b:07:6e:8e:00:9a:93:da:a5:10: 88:ea:5d:4d:1a:74:64:b5:d5:92:95:61:89:54:39:42:6a:fa: d8:4d:49:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRbyuJaq5ll20jJh6Xx5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz YTE5OTYwHhcNMjUxMjMwMDgwMDIyWhcNMjUxMjMxMDgwMDIyWjAzMTEwLwYDVQQD EygzMDcwMGVkMmZiY2ZmMzQ2NGQyMThlNzRhMDE1MjIwNTg2OGFlYjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLcL9x66YDm8B1VBWmrxsopeXEDR Tb8IYFrxJl6r4YJmr94bOIvTlP42zQhkc5N4VnjTP9mMtojq/CcJwIHf4lFjIdUi NkB+FwydfvHWt+Q4YODjqqtSbQglBHDeMER/Hgg19wT0gTZXzDa3XkeOr7QBDorU YMD0TpOzObvCUPhYywb1NzSzBRLGRP0JZ617TQb7+qZ18hpIw9o2lTKeyJVglM/4 xEqVW8BwDovhVgZNIbfXDswBJS48S7EmqDV6aGaGJ8ctjXvnUqusRsbuWRishmHX fo4RQv2f1N7Tz6Q6fxG/ikYbDM0LEGH69pK2ITyO2gN7oH6m1o3HWoiP4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBwDtL7z/NGTSGOdKAVIgWGiusOMB8GA1UdIwQY MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4 LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTzW26/D hvg0PmTB7x9zG2o+OcvH27SEFiC8Mvk26pib+5Brj2tbVsWMaHjLIMO4M9i/Kzl8 SRSGQ5qs9m1GehkleIdraMLWyiTqz2OHNMoEQMgO36+pcB1cvsnT96nhyVa0DZQk i+OrBHA1X8uAYvj3csKPEOsKQCviWauDqfWPD4vstoU/ljlsPFwElL05qbeZPm7K /jDAlc7rxEgmRv9ZRyapt+9VXeJdKPY+59yMn4ahiTgSoJrICAUbIjw18eNkexkO n17WJZHZuAUZadE+FUWCehjbgRPGD3m1QUYbB26OAJqT2qUQiOpdTRp0ZLXVkpVh iVQ5Qmr62E1JDQ== -----END CERTIFICATE-----Generated at Tue Dec 30 10:34:29 2025 by rpki-client