This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
File: WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft (raw, json)
Hash identifier: +UJI7kXD4JePhF/FMjcD9H4dCa8L+BYh9U7bBJocmqk=
Subject key identifier: 0B:A3:68:EC:A8:3B:2A:5C:67:0B:61:67:0B:8E:4A:92:97:D4:8B:80
Authority key identifier: 58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B
Certificate issuer: /CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
Certificate serial: 019B3532BF464E2F6EE09AE2E63FBCEBE4FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
Manifest number: 049D
Signing time: Fri 19 Dec 2025 06:01:16 +0000
Manifest this update: Fri 19 Dec 2025 06:01:16 +0000
Manifest next update: Sat 20 Dec 2025 06:01:16 +0000
Files and hashes: 1: WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl (hash: fz8p8KF+4HAV95OfXFW90aJnkMnFKIT3imO08B4Ofhg=)
2: Z2JDU3PNXto61tujLWtOdksDxYw.roa (hash: XDiLVtUbcUm1U7CtOsqMZFEyrN50eh3zLLtFQ3J984U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:35:32:bf:46:4e:2f:6e:e0:9a:e2:e6:3f:bc:eb:e4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58c3c43b444ca835cc76f4c4c3c639752ed1aa7b
Validity
Not Before: Dec 19 06:01:16 2025 GMT
Not After : Dec 20 06:01:16 2025 GMT
Subject: CN=0ba368eca83b2a5c670b61670b8e4a9297d48b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:b6:2c:f5:df:b7:eb:2f:f0:03:3f:46:5f:
94:c3:7c:49:bc:c8:ef:72:01:ed:83:75:6a:c7:dc:
cd:df:de:73:38:e5:59:cb:32:32:f4:41:f0:ab:b8:
a2:f0:98:07:7e:19:57:16:8d:27:ad:4b:e0:fd:1b:
98:53:79:9f:5a:96:de:c5:35:40:ec:9d:5b:a5:26:
b5:7f:4d:4d:78:2a:5d:10:a3:13:6a:fd:b2:19:3c:
c3:8b:47:dc:3a:6b:52:4f:e7:18:c1:ed:41:83:4e:
fa:ec:6c:fa:d9:76:9b:bf:39:3e:b5:0c:10:e4:da:
c3:d1:9a:7b:16:31:69:bc:b6:a0:87:b1:72:17:02:
13:59:6c:6a:1a:ea:f4:46:ba:d9:ae:48:8c:3b:00:
17:d4:71:68:13:83:89:1f:e3:96:ca:3c:88:64:15:
ab:43:3b:bd:9e:f4:2a:0c:67:78:bb:1c:c9:37:a7:
83:f9:78:10:ad:5d:b2:3f:45:73:19:55:d5:7d:46:
65:27:de:d9:f3:f8:f5:4c:29:27:40:4f:f4:29:f7:
57:77:9a:8c:ee:66:27:44:d7:e6:4a:81:a2:20:ed:
d0:37:22:ec:91:e4:e5:d4:15:b7:2e:cf:84:e5:07:
3c:87:8f:c3:52:77:4f:68:d5:7d:be:bf:4d:f2:22:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A3:68:EC:A8:3B:2A:5C:67:0B:61:67:0B:8E:4A:92:97:D4:8B:80
X509v3 Authority Key Identifier:
keyid:58:C3:C4:3B:44:4C:A8:35:CC:76:F4:C4:C3:C6:39:75:2E:D1:AA:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/f9f131-2ded-4754-884c-c9a80f53fc0e/1/WMPEO0RMqDXMdvTEw8Y5dS7Rqns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:36:4b:de:9b:62:0d:53:df:f3:a1:4a:5a:5a:88:e8:1e:c7:
3c:fe:ba:0d:0f:81:cc:81:c3:d6:65:8a:a2:82:91:bd:cb:e4:
cc:02:d2:a2:e2:b8:2a:4b:c4:62:a6:b0:36:32:36:de:0f:ea:
78:28:87:56:1c:4b:5d:60:d9:03:09:a6:43:71:b7:4d:c4:77:
7b:8a:6d:14:22:78:ed:96:ef:b3:ea:17:a2:30:20:9a:b0:b5:
5d:6d:cd:b3:e0:1f:bd:a4:44:9a:41:62:10:c9:da:de:5a:2c:
2a:d8:c4:4a:bd:73:92:97:1a:22:a3:cb:a8:2a:2e:d6:16:10:
98:cf:57:7d:e4:e5:15:a7:ac:21:d6:90:26:50:f3:da:1a:b4:
9a:b5:34:ee:8d:83:f0:f1:85:58:ef:af:d6:d9:bd:40:41:eb:
da:c5:49:ce:2a:9e:b6:de:1c:0c:b6:43:d7:87:d7:57:08:a6:
09:e1:24:1e:aa:01:40:45:0f:4c:5f:1e:9a:8a:dd:54:c7:7d:
12:fc:dd:2b:38:ab:b5:d5:a2:08:52:d8:b4:d3:63:c1:94:a0:
9f:a9:0e:31:3b:6d:78:b5:0f:18:cc:b4:32:55:e9:a0:92:b9:
59:10:f7:22:4d:50:f2:78:13:ab:9f:13:6c:17:3a:e7:9a:00:
ca:68:54:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:59:09 2025 by rpki-client