This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json) Hash identifier: hapRj+EX9nCFSnKntRl7JtmkUAIX5dKx6gWiZKZQVD4= Subject key identifier: 6B:AD:CE:02:74:7B:12:DE:7A:F1:0D:E6:D9:1A:E4:20:B5:F8:00:48 Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b Certificate serial: 019B533D0D25B9E990217BAFAB4194DCB8EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft Manifest number: 02ED Signing time: Thu 25 Dec 2025 02:01:08 +0000 Manifest this update: Thu 25 Dec 2025 02:01:08 +0000 Manifest next update: Fri 26 Dec 2025 02:01:08 +0000 Files and hashes: 1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: u69hNypbmY/3hQ2cQkZcIoP/R6APzl1zoQ7jnDKUvw4=) 2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=) 3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=) 4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:3d:0d:25:b9:e9:90:21:7b:af:ab:41:94:dc:b8:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b Validity Not Before: Dec 25 02:01:08 2025 GMT Not After : Dec 26 02:01:08 2025 GMT Subject: CN=6badce02747b12de7af10de6d91ae420b5f80048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:2c:59:60:55:76:41:56:b9:6d:4b:f1:db: b0:06:64:b6:86:ab:5d:27:7c:02:a5:de:b3:f4:e6: ee:ee:fa:88:66:c7:3e:1f:c7:1e:04:29:ed:9b:12: bf:7d:52:19:45:8a:63:9c:5a:9e:19:fc:dd:57:85: 29:0e:2c:19:bb:e6:38:f2:e6:c8:26:ec:f0:01:52: 18:9a:a7:d9:f0:e9:62:fa:57:ce:f5:03:90:74:9f: 8f:0e:a6:6c:4d:d3:36:48:c2:0e:e0:0f:e2:5b:66: 7c:9c:6f:de:6c:fd:df:c8:9b:3b:87:3d:b9:46:18: 8e:a4:04:c7:84:f6:bb:5a:a0:43:08:ff:78:a4:24: 31:63:df:38:18:f9:4b:74:8a:6f:64:a8:c9:c4:5e: e3:9d:80:19:31:bd:71:6d:b0:52:65:47:b2:aa:93: af:35:d4:e0:8d:6e:e3:bd:e3:6c:61:ba:3a:fd:b7: f2:c7:a9:2d:c9:8e:f8:95:97:22:c4:ea:68:42:1f: f2:40:55:f3:7f:8c:22:26:8a:1f:f7:8e:91:a5:5f: 2f:a9:93:90:2c:d7:55:9f:cd:3f:db:85:54:a9:17: 2b:46:5a:5c:99:de:03:01:ca:a4:64:ec:61:54:8a: 63:af:d3:3a:af:ee:7f:ef:a6:10:68:5d:e7:0c:ce: 73:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AD:CE:02:74:7B:12:DE:7A:F1:0D:E6:D9:1A:E4:20:B5:F8:00:48 X509v3 Authority Key Identifier: keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c0:d1:84:72:c7:f8:0d:01:e5:af:7e:d4:2b:fe:cd:2c:6f: 48:e3:08:75:09:5c:6a:14:b2:08:68:3d:2c:35:ac:d6:30:13: 5c:5e:4f:85:75:f9:9a:f2:de:c9:28:a3:e4:26:e9:57:ba:99: 63:fb:35:8b:bd:37:53:88:79:4b:92:fc:41:ac:62:60:30:2e: 20:c6:25:67:03:c6:ba:b2:22:d3:44:c0:40:7e:e0:fc:e3:f4: 14:ee:28:fe:1e:3e:43:e9:91:24:14:c2:4a:29:40:39:f7:4e: 7b:df:49:90:29:98:c5:68:4d:44:97:55:2a:79:63:84:44:a4: f3:bd:c0:08:60:5c:34:0b:4e:a1:39:fb:20:22:5b:b9:fd:b1: e9:cf:0f:9f:aa:e8:6c:2d:50:8c:d5:d3:77:37:02:a8:e1:53: 21:e6:70:09:19:ea:72:86:ad:f2:14:7c:2c:f8:00:d3:b6:e4: 56:4a:4c:82:24:45:39:99:43:27:43:55:84:c5:67:5c:31:88: ee:d0:bb:a4:f0:75:68:87:5a:4a:39:3b:39:75:01:d8:a5:54: 6d:da:f2:d5:a4:6b:90:4c:2e:0c:15:44:2b:cc:77:2a:50:94: 43:59:96:89:68:58:77:3f:21:8b:b7:4d:5e:b9:75:8a:38:62: 03:9b:87:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTPQ0luemQIXuvq0GU3LjsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2Q1NjNhMmFlNjUyOWM5ZjQzZmU0YjVjNjdkYjcwZTc3 OWEwOWIwHhcNMjUxMjI1MDIwMTA4WhcNMjUxMjI2MDIwMTA4WjAzMTEwLwYDVQQD Eyg2YmFkY2UwMjc0N2IxMmRlN2FmMTBkZTZkOTFhZTQyMGI1ZjgwMDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnosWWBVdkFWuW1L8duwBmS2hqtd J3wCpd6z9Obu7vqIZsc+H8ceBCntmxK/fVIZRYpjnFqeGfzdV4UpDiwZu+Y48ubI JuzwAVIYmqfZ8Oli+lfO9QOQdJ+PDqZsTdM2SMIO4A/iW2Z8nG/ebP3fyJs7hz25 RhiOpATHhPa7WqBDCP94pCQxY984GPlLdIpvZKjJxF7jnYAZMb1xbbBSZUeyqpOv NdTgjW7jveNsYbo6/bfyx6ktyY74lZcixOpoQh/yQFXzf4wiJoof946RpV8vqZOQ LNdVn80/24VUqRcrRlpcmd4DAcqkZOxhVIpjr9M6r+5/76YQaF3nDM5zyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGutzgJ0exLeevEN5tka5CC1+ABIMB8GA1UdIwQY MBaAFFjNVjoq5lKcn0P+S1xn23DneaCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAt NDdhNWY0ODFlNmY1LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAtNDdhNWY0ODFlNmY1 LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcDRhHLH +A0B5a9+1Cv+zSxvSOMIdQlcahSyCGg9LDWs1jATXF5PhXX5mvLeySij5CbpV7qZ Y/s1i703U4h5S5L8QaxiYDAuIMYlZwPGurIi00TAQH7g/OP0FO4o/h4+Q+mRJBTC SilAOfdOe99JkCmYxWhNRJdVKnljhESk873ACGBcNAtOoTn7ICJbuf2x6c8Pn6ro bC1QjNXTdzcCqOFTIeZwCRnqcoat8hR8LPgA07bkVkpMgiRFOZlDJ0NVhMVnXDGI 7tC7pPB1aIdaSjk7OXUB2KVUbdry1aRrkEwuDBVEK8x3KlCUQ1mWiWhYdz8hi7dN Xrl1ijhiA5uHAg== -----END CERTIFICATE-----Generated at Thu Dec 25 11:13:43 2025 by rpki-client