This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft File: WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json) Hash identifier: GtxsMOLM3bnMoYIUhpa21p0vq4H8vlWw2uRYjOjPTKU= Subject key identifier: A3:37:15:C5:CC:39:46:7E:34:76:96:74:2C:3E:FE:3A:82:54:BE:05 Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5 Certificate issuer: /CN=58833dec655e1a88733a17a2df3da0985ab660d5 Certificate serial: 019B32318A60F23BD92ECBE847A58B62CD20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 16:01:06 +0000 Manifest this update: Thu 18 Dec 2025 16:01:06 +0000 Manifest next update: Fri 19 Dec 2025 16:01:06 +0000 Files and hashes: 1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=) 2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: eGiY6K0te/VMCBMim+hQ3Q8rUkMDTKRbjNUwdYefW+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:8a:60:f2:3b:d9:2e:cb:e8:47:a5:8b:62:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5 Validity Not Before: Dec 18 16:01:06 2025 GMT Not After : Dec 19 16:01:06 2025 GMT Subject: CN=a33715c5cc39467e347696742c3efe3a8254be05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:51:ed:a8:3e:be:62:04:b6:63:ec:28:20: 5a:cc:4f:46:2d:1d:5a:2a:c2:32:fc:f1:1f:0d:ad: a0:4e:30:d7:73:7d:3d:b3:53:4f:90:1d:e0:6c:d1: 70:29:cd:28:9f:dc:c8:8c:4b:cd:bc:15:21:37:d1: 9b:a0:cc:8c:b6:7a:15:14:b2:ad:72:85:c3:a3:ce: 90:a8:f5:de:9a:c1:35:d7:4b:4a:5f:74:04:b6:6f: 0f:86:74:3c:80:18:bf:5c:be:e8:95:f6:db:9b:4e: ed:ab:a8:07:73:33:43:6c:c3:16:a5:b1:4d:95:92: 27:ea:ec:45:ae:42:2f:d4:b0:92:0c:08:58:73:d9: cd:09:6d:a1:cf:87:54:99:e0:72:d2:2f:ad:4c:36: 1b:89:1f:ec:25:b1:fa:14:51:2e:60:5b:76:f4:e8: 79:6e:15:69:1a:f1:88:15:be:5f:ff:00:6f:c1:38: 04:2f:52:c0:d3:c9:d7:0d:c1:4f:9b:08:d2:58:1f: 2e:ce:05:5c:13:72:97:02:2f:2d:5c:62:e1:74:94: 26:be:c3:a6:e4:04:ef:18:11:f3:5a:29:41:b7:39: fd:be:51:4e:be:ab:da:d9:81:a2:16:63:62:66:49: f3:61:49:63:10:5d:a9:84:3a:7e:38:7d:ff:69:7a: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:37:15:C5:CC:39:46:7E:34:76:96:74:2C:3E:FE:3A:82:54:BE:05 X509v3 Authority Key Identifier: keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:dd:45:25:c2:e5:16:87:6c:ea:ba:c0:83:66:b0:9b:dd:f5: 01:e5:1c:16:b3:a7:30:44:b9:b3:d2:dd:84:63:2f:56:cf:05: 14:70:34:a4:5c:01:96:be:4e:a4:e2:a6:7e:91:31:0c:e1:96: 37:e8:24:8d:4e:a1:fc:a8:37:02:ee:05:a9:69:a5:bf:72:d9: 7e:5f:3e:34:b1:f9:72:62:be:1d:ac:58:51:17:94:1a:dc:2b: 74:c7:b0:8a:ab:07:4c:f0:31:68:30:33:85:26:f0:ac:5f:6a: 1c:0c:0d:86:dc:52:49:6c:95:36:94:89:76:b6:80:36:9b:d6: 59:e6:44:f3:8a:58:8d:3d:73:bb:22:9d:b0:58:55:9e:84:55: d4:60:56:ad:82:00:d5:fa:90:d8:f6:25:d3:23:11:f2:af:40: a9:79:7b:06:23:0e:60:89:c5:72:86:7b:92:59:50:69:f6:73: 18:84:ff:6a:02:72:b0:25:26:2a:a3:3b:1f:b3:fa:04:97:ed: f0:b7:56:d7:b9:bb:9f:0f:0b:a9:ef:90:62:da:4d:ac:82:d4: 67:69:28:d8:6d:44:53:3f:88:05:28:bd:45:32:9c:eb:73:e8: 0b:05:7c:62:b0:78:2c:aa:b7:18:56:cf:0a:ab:4d:16:b6:0b: 73:0d:28:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMYpg8jvZLsvoR6WLYs0gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODMzZGVjNjU1ZTFhODg3MzNhMTdhMmRmM2RhMDk4NWFi NjYwZDUwHhcNMjUxMjE4MTYwMTA2WhcNMjUxMjE5MTYwMTA2WjAzMTEwLwYDVQQD EyhhMzM3MTVjNWNjMzk0NjdlMzQ3Njk2NzQyYzNlZmUzYTgyNTRiZTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4e1R7ag+vmIEtmPsKCBazE9GLR1a KsIy/PEfDa2gTjDXc309s1NPkB3gbNFwKc0on9zIjEvNvBUhN9GboMyMtnoVFLKt coXDo86QqPXemsE110tKX3QEtm8PhnQ8gBi/XL7olfbbm07tq6gHczNDbMMWpbFN lZIn6uxFrkIv1LCSDAhYc9nNCW2hz4dUmeBy0i+tTDYbiR/sJbH6FFEuYFt29Oh5 bhVpGvGIFb5f/wBvwTgEL1LA08nXDcFPmwjSWB8uzgVcE3KXAi8tXGLhdJQmvsOm 5ATvGBHzWilBtzn9vlFOvqva2YGiFmNiZknzYUljEF2phDp+OH3/aXoyTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKM3FcXMOUZ+NHaWdCw+/jqCVL4FMB8GA1UdIwQY MBaAFFiDPexlXhqIczoXot89oJhatmDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjct MmZmYWVkMDQ3MzhhLzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjctMmZmYWVkMDQ3Mzhh LzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArd1FJcLl Fods6rrAg2awm931AeUcFrOnMES5s9LdhGMvVs8FFHA0pFwBlr5OpOKmfpExDOGW N+gkjU6h/Kg3Au4FqWmlv3LZfl8+NLH5cmK+HaxYUReUGtwrdMewiqsHTPAxaDAz hSbwrF9qHAwNhtxSSWyVNpSJdraANpvWWeZE84pYjT1zuyKdsFhVnoRV1GBWrYIA 1fqQ2PYl0yMR8q9AqXl7BiMOYInFcoZ7kllQafZzGIT/agJysCUmKqM7H7P6BJft 8LdW17m7nw8Lqe+QYtpNrILUZ2ko2G1EUz+IBSi9RTKc63PoCwV8YrB4LKq3GFbP CqtNFrYLcw0o7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 00:10:54 2025 by rpki-client