This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json) Hash identifier: 2MGJ7tTjmqXzht7aIgsNpWnztUVgFEl3x7bzWgBexcE= Subject key identifier: 40:E5:31:36:D7:66:67:F2:EA:2D:73:E9:AB:D1:00:7B:68:13:44:E0 Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73 Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73 Certificate serial: 019B4A39B1B0652E5AE20A2CB963E4E3CA0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 08:00:53 +0000 Manifest this update: Tue 23 Dec 2025 08:00:53 +0000 Manifest next update: Wed 24 Dec 2025 08:00:53 +0000 Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=) 2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: BEP3U68/OzxZ4c7/HocL1V1iCSXjp939/WWCrt4nWKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:39:b1:b0:65:2e:5a:e2:0a:2c:b9:63:e4:e3:ca:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73 Validity Not Before: Dec 23 08:00:53 2025 GMT Not After : Dec 24 08:00:53 2025 GMT Subject: CN=40e53136d76667f2ea2d73e9abd1007b681344e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:ba:74:8e:a0:41:69:e6:33:88:a7:4c:d0: 18:04:ec:64:1f:9d:b5:27:a1:ab:85:fb:fe:22:41: ea:81:2a:a3:1a:53:37:2f:5b:82:e7:d1:c2:eb:f3: 96:56:0d:b6:61:1c:86:fd:1e:ec:54:da:93:fa:79: 1c:b2:e5:dd:9f:04:bb:9b:9e:e0:33:7d:b2:44:92: 58:49:e3:72:e1:d7:26:b9:83:d1:6a:c6:0f:e9:76: cc:68:69:85:ea:4a:cc:72:65:5d:35:b6:75:3b:68: be:17:59:09:d8:5f:11:15:0d:b9:e2:be:8b:4c:15: fd:e4:2f:14:a7:7f:4c:2b:a7:87:29:1c:74:49:3b: de:9c:de:fc:47:9b:b2:86:c2:9e:82:4f:c2:b2:01: c6:3c:49:e4:c2:af:f1:0b:21:c3:98:70:10:d5:da: b7:4e:78:29:bd:e3:28:fb:55:bc:cc:8a:fc:80:40: 07:62:00:4e:3b:56:bc:1f:f0:82:be:42:6e:bc:f0: 3d:f7:28:ec:a1:45:3f:27:ee:61:06:98:c4:04:f9: e0:09:22:d9:e3:77:8b:cd:85:36:4c:1d:32:c4:b0: 78:1a:79:7f:a0:c4:9b:21:23:1b:e6:7c:96:44:c7: d9:74:5b:e0:fc:01:41:7e:ca:6d:e1:c5:60:96:68: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E5:31:36:D7:66:67:F2:EA:2D:73:E9:AB:D1:00:7B:68:13:44:E0 X509v3 Authority Key Identifier: keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e3:ce:64:ee:23:3e:39:23:cb:7a:f7:0d:8a:7e:85:52:f4: f8:96:83:68:7a:25:e4:f7:c2:c6:7e:57:30:a2:b9:a8:7c:56: fb:9e:4c:b8:ac:9d:bc:d9:b3:f7:21:77:41:4b:f6:50:04:3a: 5c:e6:60:ee:14:9d:ab:7f:f1:e9:5d:82:37:5d:2e:a4:e2:18: 5a:28:32:77:f9:9a:41:64:86:88:07:12:7e:e8:8b:b6:7f:e5: cd:e8:39:69:49:6e:98:04:df:78:8c:53:5d:22:59:08:00:e3: 99:99:0a:7c:08:1b:ef:9e:3b:2a:78:df:e2:1f:92:29:48:e4: 80:66:11:8e:26:be:89:bd:f9:1d:59:21:57:3f:14:94:9e:9e: 24:14:cd:40:3d:f0:79:4a:3d:ef:da:ef:06:ef:af:00:b2:56: 6d:89:39:36:db:41:80:40:58:a1:54:80:84:be:c2:a1:21:83: d5:1a:be:53:dd:62:c4:2b:65:d4:19:74:68:7b:03:6a:8d:3e: ea:28:74:2c:e8:29:29:62:7e:4d:9e:02:76:4e:c4:c4:2f:4a: aa:88:c6:df:58:ff:7f:f6:af:ad:f6:a4:94:b0:54:7d:64:41: 97:02:3c:18:74:b3:38:7e:70:49:4a:9b:82:19:14:e9:b2:fb: 10:a1:48:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKObGwZS5a4gosuWPk48oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2 ZGNmNzMwHhcNMjUxMjIzMDgwMDUzWhcNMjUxMjI0MDgwMDUzWjAzMTEwLwYDVQQD Eyg0MGU1MzEzNmQ3NjY2N2YyZWEyZDczZTlhYmQxMDA3YjY4MTM0NGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkba6dI6gQWnmM4inTNAYBOxkH521 J6Grhfv+IkHqgSqjGlM3L1uC59HC6/OWVg22YRyG/R7sVNqT+nkcsuXdnwS7m57g M32yRJJYSeNy4dcmuYPRasYP6XbMaGmF6krMcmVdNbZ1O2i+F1kJ2F8RFQ254r6L TBX95C8Up39MK6eHKRx0STvenN78R5uyhsKegk/CsgHGPEnkwq/xCyHDmHAQ1dq3 TngpveMo+1W8zIr8gEAHYgBOO1a8H/CCvkJuvPA99yjsoUU/J+5hBpjEBPngCSLZ 43eLzYU2TB0yxLB4Gnl/oMSbISMb5nyWRMfZdFvg/AFBfspt4cVglmiEpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDlMTbXZmfy6i1z6avRAHtoE0TgMB8GA1UdIwQY MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt MGE4MzBkMDFhZmQxLzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVePOZO4j Pjkjy3r3DYp+hVL0+JaDaHol5PfCxn5XMKK5qHxW+55MuKydvNmz9yF3QUv2UAQ6 XOZg7hSdq3/x6V2CN10upOIYWigyd/maQWSGiAcSfuiLtn/lzeg5aUlumATfeIxT XSJZCADjmZkKfAgb7547Knjf4h+SKUjkgGYRjia+ib35HVkhVz8UlJ6eJBTNQD3w eUo979rvBu+vALJWbYk5NttBgEBYoVSAhL7CoSGD1Rq+U91ixCtl1Bl0aHsDao0+ 6ih0LOgpKWJ+TZ4Cdk7ExC9KqojG31j/f/avrfaklLBUfWRBlwI8GHSzOH5wSUqb ghkU6bL7EKFIBQ== -----END CERTIFICATE-----Generated at Tue Dec 23 09:16:37 2025 by rpki-client