This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft File: WbWUsQer_jKkbE0dvge7tOa7Fjo.mft (raw, json) Hash identifier: KXkocXUzPIIqHMdiUSpnfF/kCKWWfm908oIwTXIWehE= Subject key identifier: 1E:CE:F5:50:47:D0:C9:A3:31:6D:15:BE:52:A1:BC:8F:49:61:05:FB Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A Certificate issuer: /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a Certificate serial: 019B3BA2450712910CE398FDEA38BDEC887D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft Manifest number: 0C1A Signing time: Sat 20 Dec 2025 12:00:48 +0000 Manifest this update: Sat 20 Dec 2025 12:00:48 +0000 Manifest next update: Sun 21 Dec 2025 12:00:48 +0000 Files and hashes: 1: WbWUsQer_jKkbE0dvge7tOa7Fjo.crl (hash: WixfBm5lt3KXNm8J2+2qIv1HRJaXPsvAhoR2vQx5YTY=) 2: iaYhX-wTSSW1QYw64E4AzhGwws8.roa (hash: wTQucH27CFyiNY63Xms6GuDAYhKr9yvb+MoiHvTWRCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:45:07:12:91:0c:e3:98:fd:ea:38:bd:ec:88:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a Validity Not Before: Dec 20 12:00:48 2025 GMT Not After : Dec 21 12:00:48 2025 GMT Subject: CN=1ecef55047d0c9a3316d15be52a1bc8f496105fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fc:cc:21:a8:74:be:e1:57:d3:46:10:b4:37: 6a:b0:77:18:64:b2:cc:f2:37:6e:1a:62:4b:c2:eb: 8a:83:40:77:71:65:91:b4:a9:c2:d5:db:16:06:1c: 08:e0:a6:3a:9a:77:64:32:94:73:87:47:9c:64:34: 75:13:a3:c7:1f:8a:0a:af:79:ac:ae:e0:ba:0a:02: b3:63:21:ac:56:55:09:21:1d:ec:04:74:a7:ad:9e: 2a:b3:54:f6:9d:e3:51:00:4a:33:64:02:d9:75:a5: db:eb:98:2b:d7:88:89:44:4a:8b:68:51:2e:bd:9a: 70:8c:28:7b:c8:84:13:d8:f1:b9:05:a3:cb:f2:a7: 00:9f:d7:5f:6b:4c:12:ff:e3:2d:59:cf:1f:92:df: b6:18:d0:92:96:17:40:07:f8:ea:27:1d:07:dd:71: d6:a9:3a:89:73:3c:23:99:70:f3:73:96:78:96:d9: e8:67:27:d7:19:8a:4f:90:f9:e3:98:9e:30:c3:ac: 88:3b:db:4f:12:2b:12:bd:37:e1:2d:9c:d6:5b:d1: f3:29:b4:43:98:89:d3:64:72:c3:4a:23:84:a6:fa: d8:f0:f8:a7:4d:0f:92:76:88:40:63:13:36:95:94: 0f:ef:e6:7c:21:1e:a2:b2:71:ae:7e:f3:68:57:de: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CE:F5:50:47:D0:C9:A3:31:6D:15:BE:52:A1:BC:8F:49:61:05:FB X509v3 Authority Key Identifier: keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:98:27:11:2c:9d:7b:5c:09:0e:0a:f9:b2:ee:ed:b7:7e:ab: 11:58:46:db:f2:9a:9e:b4:87:a6:6d:02:3b:1a:2c:53:b3:c6: 44:80:47:72:b4:02:ff:f7:e8:d9:0e:91:96:d5:77:cd:63:8b: f9:bf:d2:7b:0c:cf:98:5b:2f:f7:80:50:28:49:98:8b:6f:50: 61:51:69:13:e4:c7:cd:c8:f4:d9:ad:31:d9:ff:15:60:cc:4e: 8a:f4:58:a8:18:31:ac:fc:84:2c:a9:be:bc:c3:20:50:b4:a7: 07:91:14:52:12:0a:b1:c4:8b:1a:eb:9c:c4:a0:c7:3e:f5:ef: 22:65:c3:b6:53:45:43:1b:07:87:0d:64:d5:ee:55:cf:93:d4: 44:92:69:ec:a9:ad:10:2f:58:74:1f:0d:ae:f1:5f:8e:ae:fe: f5:69:cc:5e:9c:64:3b:c1:85:d9:85:6e:b3:c1:96:76:e4:e7: 0d:b1:67:7f:ab:a9:ed:b0:5f:4f:0a:37:26:78:64:ed:f3:4d: 8a:4d:e9:0a:81:9c:bd:b3:de:cc:b4:0e:60:21:bd:7f:28:28: c3:54:35:81:31:a4:5d:ff:3f:cc:39:91:78:eb:39:29:e8:18: 71:75:8b:2f:ee:05:26:70:5a:f5:17:87:69:91:0f:db:fc:41: 57:9e:5f:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7okUHEpEM45j96ji97Ih9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjU5NGIxMDdhYmZlMzJhNDZjNGQxZGJlMDdiYmI0ZTZi YjE2M2EwHhcNMjUxMjIwMTIwMDQ4WhcNMjUxMjIxMTIwMDQ4WjAzMTEwLwYDVQQD EygxZWNlZjU1MDQ3ZDBjOWEzMzE2ZDE1YmU1MmExYmM4ZjQ5NjEwNWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/zMIah0vuFX00YQtDdqsHcYZLLM 8jduGmJLwuuKg0B3cWWRtKnC1dsWBhwI4KY6mndkMpRzh0ecZDR1E6PHH4oKr3ms ruC6CgKzYyGsVlUJIR3sBHSnrZ4qs1T2neNRAEozZALZdaXb65gr14iJREqLaFEu vZpwjCh7yIQT2PG5BaPL8qcAn9dfa0wS/+MtWc8fkt+2GNCSlhdAB/jqJx0H3XHW qTqJczwjmXDzc5Z4ltnoZyfXGYpPkPnjmJ4ww6yIO9tPEisSvTfhLZzWW9HzKbRD mInTZHLDSiOEpvrY8PinTQ+SdohAYxM2lZQP7+Z8IR6isnGufvNoV957TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7O9VBH0MmjMW0VvlKhvI9JYQX7MB8GA1UdIwQY MBaAFFm1lLEHq/4ypGxNHb4Hu7TmuxY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2Mt YjNmNTY3ODA1YTdjLzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2MtYjNmNTY3ODA1YTdj LzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZgnESyd e1wJDgr5su7tt36rEVhG2/KanrSHpm0COxosU7PGRIBHcrQC//fo2Q6RltV3zWOL +b/SewzPmFsv94BQKEmYi29QYVFpE+THzcj02a0x2f8VYMxOivRYqBgxrPyELKm+ vMMgULSnB5EUUhIKscSLGuucxKDHPvXvImXDtlNFQxsHhw1k1e5Vz5PURJJp7Kmt EC9YdB8NrvFfjq7+9WnMXpxkO8GF2YVus8GWduTnDbFnf6up7bBfTwo3Jnhk7fNN ik3pCoGcvbPezLQOYCG9fygow1Q1gTGkXf8/zDmReOs5KegYcXWLL+4FJnBa9ReH aZEP2/xBV55fJQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:46:33 2025 by rpki-client