This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft File: WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json) Hash identifier: hqqiHOGe74jOT57T7z25ZlWx+AcSXEPMIWxDmEIBpuI= Subject key identifier: E6:97:C6:9A:1E:60:80:1A:E7:B4:57:CE:BF:FE:01:5B:B9:92:7C:8F Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74 Certificate issuer: /CN=596a5fee9345fcd48010348877b7853afccc6474 Certificate serial: 019B5D89B4D69028D5370DA63319E11DDBEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft Manifest number: 0644 Signing time: Sat 27 Dec 2025 02:01:04 +0000 Manifest this update: Sat 27 Dec 2025 02:01:04 +0000 Manifest next update: Sun 28 Dec 2025 02:01:04 +0000 Files and hashes: 1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: XcSm9B3nPT0iWJbE2w5aDMNuomTqM+8u3/qV4rZxsII=) 2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:b4:d6:90:28:d5:37:0d:a6:33:19:e1:1d:db:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474 Validity Not Before: Dec 27 02:01:04 2025 GMT Not After : Dec 28 02:01:04 2025 GMT Subject: CN=e697c69a1e60801ae7b457cebffe015bb9927c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1d:16:21:02:ff:1c:e2:ae:4c:02:b0:88:68: 64:c2:a5:c5:12:bc:85:af:10:e6:ac:54:65:b5:a4: b0:3e:e7:e7:b0:92:58:c2:47:03:ec:ca:f7:70:3e: 2c:7b:5b:f2:5c:ec:f8:df:70:11:5b:21:26:50:75: 56:1a:81:f6:42:7b:d5:c7:43:a1:0d:c6:02:de:05: 40:aa:3e:c8:8f:12:53:53:97:6f:37:5b:7a:13:2b: 05:67:e8:52:14:65:42:0c:60:0e:bd:bf:bb:4f:8d: b6:5d:13:4a:f5:e8:5a:ae:24:fb:7f:3f:5f:ef:ff: 54:00:36:47:7b:43:45:55:c6:7b:a0:2a:2f:dc:61: 0f:2b:e8:2d:f3:b6:56:1f:43:d0:bd:3f:e2:3b:77: 86:ba:f3:f3:35:ed:96:da:8d:13:d3:34:b1:fe:65: c8:8a:60:5c:c5:47:91:99:18:6e:c3:aa:35:0a:00: 63:b8:51:53:7e:fc:b4:4f:1d:54:b6:cd:4b:b1:99: 0b:e2:85:e0:f5:37:94:d5:41:06:ee:9a:51:f6:14: f7:b5:89:cc:5e:6a:b8:f9:88:c9:ee:b7:13:b1:7b: 63:65:24:68:1f:04:dc:bd:0f:27:b0:1d:4c:e5:70: b0:d4:29:8c:3e:b9:96:01:ca:08:dd:75:62:40:9f: d8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:97:C6:9A:1E:60:80:1A:E7:B4:57:CE:BF:FE:01:5B:B9:92:7C:8F X509v3 Authority Key Identifier: keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9e:c2:3f:41:57:31:ee:94:63:6c:78:7b:96:41:5b:aa:81: 66:1f:aa:55:ac:7c:93:90:53:e8:bb:b2:e8:75:c0:a4:90:3d: b2:c6:12:ef:ff:4c:ea:55:ff:07:df:58:6f:85:67:3a:d8:0b: 2b:8a:af:e9:f3:49:f2:a8:04:b5:25:c9:1a:a8:1f:35:74:76: bc:27:87:67:2d:e7:10:f9:08:69:d9:b3:19:0b:81:cb:e6:0f: a5:72:c6:2c:4c:2c:ae:5c:99:20:48:2f:cc:1e:b8:e7:44:c7: 4a:2c:5e:4a:fb:ce:b7:e5:3f:e7:0a:7f:d9:5a:bb:a9:4a:98: b6:18:7e:b8:a3:cf:cd:99:1b:32:21:ee:aa:65:d3:80:84:1e: 63:48:3b:18:f6:11:c1:47:0f:97:71:bf:0d:6a:ba:21:4b:fa: 62:5a:98:1b:77:3e:11:77:4a:bc:5b:66:b4:ee:98:cc:34:52: ca:8c:60:87:bc:37:ab:a7:65:38:60:7a:b8:69:c0:db:f7:6d: 59:4f:d0:39:3b:ff:27:16:73:e9:ee:27:73:23:d7:b6:db:84: 5f:5a:5d:71:08:00:71:8b:6f:02:16:5b:3b:6d:39:1b:61:dc: 9c:19:04:ca:10:83:4e:07:52:a0:20:c0:d1:9c:ac:1d:7a:40: 27:43:85:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdibTWkCjVNw2mMxnhHdvsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NmE1ZmVlOTM0NWZjZDQ4MDEwMzQ4ODc3Yjc4NTNhZmNj YzY0NzQwHhcNMjUxMjI3MDIwMTA0WhcNMjUxMjI4MDIwMTA0WjAzMTEwLwYDVQQD EyhlNjk3YzY5YTFlNjA4MDFhZTdiNDU3Y2ViZmZlMDE1YmI5OTI3YzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh0WIQL/HOKuTAKwiGhkwqXFEryF rxDmrFRltaSwPufnsJJYwkcD7Mr3cD4se1vyXOz433ARWyEmUHVWGoH2QnvVx0Oh DcYC3gVAqj7IjxJTU5dvN1t6EysFZ+hSFGVCDGAOvb+7T422XRNK9ehariT7fz9f 7/9UADZHe0NFVcZ7oCov3GEPK+gt87ZWH0PQvT/iO3eGuvPzNe2W2o0T0zSx/mXI imBcxUeRmRhuw6o1CgBjuFFTfvy0Tx1Uts1LsZkL4oXg9TeU1UEG7ppR9hT3tYnM Xmq4+YjJ7rcTsXtjZSRoHwTcvQ8nsB1M5XCw1CmMPrmWAcoI3XViQJ/YCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaXxpoeYIAa57RXzr/+AVu5knyPMB8GA1UdIwQY MBaAFFlqX+6TRfzUgBA0iHe3hTr8zGR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUt ZGU0YmRhYTM3MjAzLzEvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi82ZjZiN2MtYzBhOS00OTUzLTk4NjUtZGU0YmRhYTM3MjAz LzEvV1dwZjdwTkZfTlNBRURTSWQ3ZUZPdnpNWkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf57CP0FX Me6UY2x4e5ZBW6qBZh+qVax8k5BT6Luy6HXApJA9ssYS7/9M6lX/B99Yb4VnOtgL K4qv6fNJ8qgEtSXJGqgfNXR2vCeHZy3nEPkIadmzGQuBy+YPpXLGLEwsrlyZIEgv zB6450THSixeSvvOt+U/5wp/2Vq7qUqYthh+uKPPzZkbMiHuqmXTgIQeY0g7GPYR wUcPl3G/DWq6IUv6YlqYG3c+EXdKvFtmtO6YzDRSyoxgh7w3q6dlOGB6uGnA2/dt WU/QOTv/JxZz6e4ncyPXttuEX1pdcQgAcYtvAhZbO205G2HcnBkEyhCDTgdSoCDA 0ZysHXpAJ0OFxg== -----END CERTIFICATE-----Generated at Sat Dec 27 11:44:49 2025 by rpki-client