This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft File: WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json) Hash identifier: stomFW9wlHzqCRNz/yqjMlORH6aecrXnbu+8j3nuoRA= Subject key identifier: 8F:3E:B3:9C:F1:79:41:78:CA:23:21:99:D1:AB:27:2D:AD:D8:0B:25 Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5 Certificate issuer: /CN=59641c0574f49a52512e6dd033b77bbf912cedc5 Certificate serial: 019AF1D266211D1D76F85DF0B080C32C490F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft Manifest number: 071B Signing time: Sat 06 Dec 2025 04:01:28 +0000 Manifest this update: Sat 06 Dec 2025 04:01:28 +0000 Manifest next update: Sun 07 Dec 2025 04:01:28 +0000 Files and hashes: 1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: 60Qj7tgyOApLJsk4L9Xy/afuk6dEsiCyzPjAlESZ4rA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:66:21:1d:1d:76:f8:5d:f0:b0:80:c3:2c:49:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5 Validity Not Before: Dec 6 04:01:28 2025 GMT Not After : Dec 7 04:01:28 2025 GMT Subject: CN=8f3eb39cf1794178ca232199d1ab272dadd80b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:95:27:98:32:be:ac:75:36:d2:05:1e:eb: 59:ee:d9:4b:e4:5f:19:41:22:56:62:4f:e0:64:fc: 18:04:75:9a:cb:e5:21:79:73:36:61:e9:3b:fb:e4: ab:97:12:d8:5d:14:ed:fe:0d:c2:37:a0:d5:98:43: e1:05:bb:c1:99:b0:5e:de:dc:2d:44:96:9a:15:c4: a7:8d:11:05:a6:5a:d6:a6:60:62:65:36:f3:c2:b3: 2c:5f:28:43:b7:37:61:d6:8d:b5:a0:d9:72:31:74: 81:30:47:80:dc:14:4c:77:24:34:47:1a:23:49:b1: 5a:77:82:9e:6c:d4:9b:7c:a5:00:4a:e2:b1:b5:fc: c1:63:05:08:47:be:b1:1a:5b:42:2d:b6:49:5f:de: 1b:72:9d:13:73:98:61:ed:ed:79:36:25:11:14:31: da:9c:f3:a2:b7:8a:74:55:5f:85:e7:31:16:c3:33: ff:38:c5:60:2b:6b:9c:67:64:eb:68:09:bb:06:5c: 34:0d:09:66:7b:02:32:85:cc:f1:df:7b:83:fe:14: cd:7c:af:d5:6f:d7:f6:1c:25:af:d1:fb:27:4c:2a: 75:70:c8:ce:1e:bd:89:94:5c:2b:1e:a5:1f:b8:2a: c5:4d:4d:d3:4c:18:ad:94:ed:fc:05:5e:4a:5a:fa: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:3E:B3:9C:F1:79:41:78:CA:23:21:99:D1:AB:27:2D:AD:D8:0B:25 X509v3 Authority Key Identifier: keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ee:9b:82:37:87:a7:1a:a5:e7:05:f6:27:1d:64:7b:44:fb: 5d:89:3a:e9:e1:25:12:bf:22:06:24:fa:5d:57:23:9c:a2:c3: 34:42:91:3d:f1:ce:2a:34:92:32:85:42:fe:3c:9c:f0:e5:81: 46:9c:6f:31:d2:50:da:07:36:f9:86:8a:77:fe:2f:dd:87:45: e0:76:93:40:b8:a4:12:b7:58:8d:b9:21:2e:7c:32:e5:cb:a8: 1f:58:d3:ab:b5:e6:6a:c1:4d:c4:73:57:37:9c:f5:89:33:34: 29:db:85:df:23:84:02:20:59:6f:93:17:39:1f:13:11:a6:95: e8:d7:2d:53:99:d4:b7:28:f6:70:8d:7c:6c:1c:19:eb:fc:22: 33:e9:80:42:16:cb:4c:10:55:d4:21:fa:75:29:db:eb:82:d0: ec:40:dd:fa:a0:5d:d4:6e:5b:88:21:dd:9e:56:b4:c2:e1:bf: a4:f1:02:d8:c9:7c:d8:4e:b6:7d:f6:04:db:39:63:09:d8:97: fe:f3:bd:89:a2:6b:e6:6c:a2:5c:de:0d:bb:a5:58:36:5f:34: 22:33:18:2e:a7:58:1b:47:05:aa:fa:a8:50:a7:e1:d5:c7:9c: b6:54:d2:07:75:70:b8:0c:c9:1f:1d:9b:6c:b1:c6:de:39:69: 39:fa:bc:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0mYhHR12+F3wsIDDLEkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjQxYzA1NzRmNDlhNTI1MTJlNmRkMDMzYjc3YmJmOTEy Y2VkYzUwHhcNMjUxMjA2MDQwMTI4WhcNMjUxMjA3MDQwMTI4WjAzMTEwLwYDVQQD Eyg4ZjNlYjM5Y2YxNzk0MTc4Y2EyMzIxOTlkMWFiMjcyZGFkZDgwYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cWVJ5gyvqx1NtIFHutZ7tlL5F8Z QSJWYk/gZPwYBHWay+UheXM2Yek7++SrlxLYXRTt/g3CN6DVmEPhBbvBmbBe3twt RJaaFcSnjREFplrWpmBiZTbzwrMsXyhDtzdh1o21oNlyMXSBMEeA3BRMdyQ0Rxoj SbFad4KebNSbfKUASuKxtfzBYwUIR76xGltCLbZJX94bcp0Tc5hh7e15NiURFDHa nPOit4p0VV+F5zEWwzP/OMVgK2ucZ2TraAm7Blw0DQlmewIyhczx33uD/hTNfK/V b9f2HCWv0fsnTCp1cMjOHr2JlFwrHqUfuCrFTU3TTBitlO38BV5KWvoK6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8+s5zxeUF4yiMhmdGrJy2t2AslMB8GA1UdIwQY MBaAFFlkHAV09JpSUS5t0DO3e7+RLO3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dRY0JYVDBtbEpSTG0zUU03ZDd2NUVzN2NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8xNjQ5ODYtZmIzZi00MmVjLTk2MzUt MGM4NDMxYWNkNjhhLzEvV1dRY0JYVDBtbEpSTG0zUU03ZDd2NUVzN2NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8xNjQ5ODYtZmIzZi00MmVjLTk2MzUtMGM4NDMxYWNkNjhh LzEvV1dRY0JYVDBtbEpSTG0zUU03ZDd2NUVzN2NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJu6bgjeH pxql5wX2Jx1ke0T7XYk66eElEr8iBiT6XVcjnKLDNEKRPfHOKjSSMoVC/jyc8OWB RpxvMdJQ2gc2+YaKd/4v3YdF4HaTQLikErdYjbkhLnwy5cuoH1jTq7XmasFNxHNX N5z1iTM0KduF3yOEAiBZb5MXOR8TEaaV6NctU5nUtyj2cI18bBwZ6/wiM+mAQhbL TBBV1CH6dSnb64LQ7EDd+qBd1G5biCHdnla0wuG/pPEC2Ml82E62ffYE2zljCdiX /vO9iaJr5myiXN4Nu6VYNl80IjMYLqdYG0cFqvqoUKfh1cectlTSB3VwuAzJHx2b bLHG3jlpOfq81w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:35 2025 by rpki-client