This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft File: WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft (raw, json) Hash identifier: W/biNovZLICoteEh2h7G0nRmvSlvYlgkWGs6Ee1jz/E= Subject key identifier: 96:FF:FE:E8:8D:B8:CB:25:C7:34:F9:CF:60:4F:4F:7D:5A:9F:BF:C5 Authority key identifier: 58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 Certificate issuer: /CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Certificate serial: 019AF465B2FD459A163163133FD4FCDAB4EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft Manifest number: 0365 Signing time: Sat 06 Dec 2025 16:01:36 +0000 Manifest this update: Sat 06 Dec 2025 16:01:36 +0000 Manifest next update: Sun 07 Dec 2025 16:01:36 +0000 Files and hashes: 1: MzdQsDB1AACOG2EyiBlrqIPuVdY.roa (hash: nb+ptkiMxODpHnRgVbj2TaDnZ7JIdyQXT5CZFak+Qnc=) 2: WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl (hash: Y3eKaL06sziRAVZ7q9n4CC2C0bRWDmdW1j8FzPjJIB8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:b2:fd:45:9a:16:31:63:13:3f:d4:fc:da:b4:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cedba67a45b737d8ad0f7a784c350d86d67118 Validity Not Before: Dec 6 16:01:36 2025 GMT Not After : Dec 7 16:01:36 2025 GMT Subject: CN=96fffee88db8cb25c734f9cf604f4f7d5a9fbfc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:09:cd:cf:cf:5e:b6:a5:55:36:58:9b:6a:73: 13:6e:f9:21:8b:72:1b:10:f8:82:19:75:18:44:d3: 63:e9:17:8d:d2:34:a8:f6:93:df:03:f7:98:be:f6: 37:de:a4:75:8c:39:4c:2a:c0:de:0e:e2:39:8f:bd: 1e:3a:53:4c:fa:f7:23:f6:85:c4:e6:e2:b7:7b:0f: 4a:7c:90:1d:7e:cb:91:1a:b9:e4:f0:b2:3b:14:7f: b0:8a:75:9f:57:b9:2c:c1:f1:d1:7e:69:3f:b4:cd: b4:a5:f2:d9:3c:77:70:10:2e:9d:ec:7f:72:8b:d2: 92:88:c3:0d:60:1e:51:f9:4d:c1:47:55:db:e1:c0: d0:b5:b0:e2:68:da:e0:6c:4c:4d:eb:cc:1e:0e:69: b1:37:84:cf:55:4c:3f:c7:eb:cb:66:35:de:88:77: 7b:38:4c:22:8c:2a:52:49:bc:ce:13:f6:83:00:3b: e5:9d:f0:cd:ec:9c:0d:ec:f7:4f:77:0b:7c:d1:d2: c6:c3:d1:e9:1c:a4:13:70:89:d8:df:a9:1e:4b:7e: ef:34:01:36:57:dd:e1:39:2a:8e:26:e8:81:b6:f8: c8:b9:33:2d:c6:20:e4:75:83:e7:d4:e7:9c:87:b8: a3:5b:d8:c7:27:01:37:20:24:9a:f0:0f:58:75:d7: 96:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:FE:E8:8D:B8:CB:25:C7:34:F9:CF:60:4F:4F:7D:5A:9F:BF:C5 X509v3 Authority Key Identifier: keyid:58:CE:DB:A6:7A:45:B7:37:D8:AD:0F:7A:78:4C:35:0D:86:D6:71:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM7bpnpFtzfYrQ96eEw1DYbWcRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e2fbfd-05f9-48ec-835b-70c770b1087b/1/WM7bpnpFtzfYrQ96eEw1DYbWcRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c4:16:ec:6a:ca:8e:d2:63:46:25:0a:ce:81:44:95:24:92: fd:14:e1:54:ee:4c:19:59:9c:6d:e0:23:9c:93:8b:b9:49:01: e8:4a:a4:1c:81:4c:f9:d1:3f:68:cc:36:f5:8e:ae:fd:36:34: 37:05:a5:d8:8f:a0:6b:e6:72:b5:0a:c0:4f:25:ae:cc:07:b8: f9:75:79:67:66:8d:d4:8f:3a:0a:ac:0d:dd:73:13:dc:ca:9a: a8:34:52:3c:a7:a7:73:a7:b9:bd:05:45:ef:1c:8b:57:83:d2: 90:f9:0c:db:1d:75:16:89:3d:87:ab:34:b8:05:05:2d:e9:d5: a7:3b:d2:41:db:27:79:98:5f:6f:51:09:9f:32:86:75:68:22: f4:51:6f:05:c5:dd:ff:c6:44:3f:83:9c:af:85:b1:3e:0a:ce: 32:89:84:3d:da:83:12:4f:b5:1e:20:68:9c:5c:b8:8f:6b:f8: 04:c7:ad:1a:17:8f:b8:c0:a0:9e:ba:f1:03:b0:a6:a9:d9:ee: a8:ec:7f:4a:59:2c:69:6f:97:b2:52:67:e6:40:a9:2b:08:c0: 93:34:fe:9c:4f:35:3a:9f:43:7d:6c:87:48:8b:cb:f7:f4:6f: f3:38:93:67:fc:97:eb:4f:f0:c5:d1:19:69:4d:32:60:40:51: 70:52:d0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZbL9RZoWMWMTP9T82rTqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2VkYmE2N2E0NWI3MzdkOGFkMGY3YTc4NGMzNTBkODZk NjcxMTgwHhcNMjUxMjA2MTYwMTM2WhcNMjUxMjA3MTYwMTM2WjAzMTEwLwYDVQQD Eyg5NmZmZmVlODhkYjhjYjI1YzczNGY5Y2Y2MDRmNGY3ZDVhOWZiZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAnNz89etqVVNlibanMTbvkhi3Ib EPiCGXUYRNNj6ReN0jSo9pPfA/eYvvY33qR1jDlMKsDeDuI5j70eOlNM+vcj9oXE 5uK3ew9KfJAdfsuRGrnk8LI7FH+winWfV7kswfHRfmk/tM20pfLZPHdwEC6d7H9y i9KSiMMNYB5R+U3BR1Xb4cDQtbDiaNrgbExN68weDmmxN4TPVUw/x+vLZjXeiHd7 OEwijCpSSbzOE/aDADvlnfDN7JwN7PdPdwt80dLGw9HpHKQTcInY36keS37vNAE2 V93hOSqOJuiBtvjIuTMtxiDkdYPn1Oech7ijW9jHJwE3ICSa8A9YddeWSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJb//uiNuMslxzT5z2BPT31an7/FMB8GA1UdIwQY MBaAFFjO26Z6Rbc32K0PenhMNQ2G1nEYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWIt NzBjNzcwYjEwODdiLzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lMmZiZmQtMDVmOS00OGVjLTgzNWItNzBjNzcwYjEwODdi LzEvV003YnBucEZ0emZZclE5NmVFdzFEWWJXY1JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMQW7GrK jtJjRiUKzoFElSSS/RThVO5MGVmcbeAjnJOLuUkB6EqkHIFM+dE/aMw29Y6u/TY0 NwWl2I+ga+ZytQrATyWuzAe4+XV5Z2aN1I86CqwN3XMT3MqaqDRSPKenc6e5vQVF 7xyLV4PSkPkM2x11Fok9h6s0uAUFLenVpzvSQdsneZhfb1EJnzKGdWgi9FFvBcXd /8ZEP4Ocr4WxPgrOMomEPdqDEk+1HiBonFy4j2v4BMetGhePuMCgnrrxA7Cmqdnu qOx/SlksaW+XslJn5kCpKwjAkzT+nE81Op9DfWyHSIvL9/Rv8ziTZ/yX60/wxdEZ aU0yYEBRcFLQ4w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:11:38 2025 by rpki-client