This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft File: wgBqzAX53EUeoNROhyfbRwuSh5Q.mft (raw, json) Hash identifier: Rv3hMwQ3Dcp7uKztY2ySoOsAY5HBLsw4M4qjoFsUvvY= Subject key identifier: 12:51:D9:BD:AF:85:53:23:96:C2:77:FE:E4:33:9D:E5:9F:5C:1B:2C Authority key identifier: C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94 Certificate issuer: /CN=c2006acc05f9dc451ea0d44e8727db470b928794 Certificate serial: 019AF0885A2AA1FD4D3A57A93069BE10C73B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft Manifest number: 59 Signing time: Fri 05 Dec 2025 22:00:59 +0000 Manifest this update: Fri 05 Dec 2025 22:00:59 +0000 Manifest next update: Sat 06 Dec 2025 22:00:59 +0000 Files and hashes: 1: 3hz5ahXW_cZwqkugxIaH-nqOVCg.roa (hash: nyivPGE2o7vY4ANffkjrKsm1M5UAi4P4q6Wm8KRHgq8=) 2: wgBqzAX53EUeoNROhyfbRwuSh5Q.crl (hash: aH+la9+henJdQPt3rNAfV5KSq0gMViNMQLbmJ8IZ1qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:5a:2a:a1:fd:4d:3a:57:a9:30:69:be:10:c7:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2006acc05f9dc451ea0d44e8727db470b928794 Validity Not Before: Dec 5 22:00:59 2025 GMT Not After : Dec 6 22:00:59 2025 GMT Subject: CN=1251d9bdaf85532396c277fee4339de59f5c1b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:dd:78:c3:02:8a:89:d4:c2:c1:36:d9:2a:09: f3:99:0d:7f:b2:2e:e1:28:7f:b5:7d:d1:eb:66:54: bf:e2:56:4f:cf:4f:12:f5:82:1e:c1:6f:d7:7b:95: 76:19:80:2b:59:d3:cc:ca:82:74:70:c2:38:b6:2f: 9b:5f:ad:b2:67:a6:32:8a:ea:4b:26:ff:f0:1d:ce: fd:75:0a:0f:73:64:55:88:a4:89:23:48:ae:d1:99: 60:92:3f:1a:7e:30:3f:d9:73:b5:21:2f:c1:8a:fc: 14:d9:b3:7e:34:e6:0b:35:3d:a9:de:48:d7:70:34: f9:bc:38:7c:9e:4b:95:dd:e5:e9:a7:96:69:1a:c1: e6:c6:f7:8a:d2:48:84:35:32:a2:4d:a9:9d:46:a9: fa:e4:7e:5f:17:a0:dc:37:92:02:04:5e:65:4b:2d: e7:61:f5:9b:41:8c:07:9c:4e:3c:be:af:63:63:cd: d7:19:f4:8f:6d:20:d4:b3:13:27:2d:30:0d:f0:e5: 40:c0:cb:c2:40:24:82:c8:c8:dc:fc:8a:f9:4c:6b: f9:bb:b4:18:b8:90:78:08:c2:58:52:0c:f8:78:b6: 48:38:e3:bd:5b:52:47:96:a4:6a:16:5d:ff:b9:79: 99:9f:ab:26:5a:73:94:46:b6:81:5b:2c:cd:7e:0b: 17:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:D9:BD:AF:85:53:23:96:C2:77:FE:E4:33:9D:E5:9F:5C:1B:2C X509v3 Authority Key Identifier: keyid:C2:00:6A:CC:05:F9:DC:45:1E:A0:D4:4E:87:27:DB:47:0B:92:87:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wgBqzAX53EUeoNROhyfbRwuSh5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/23b72f-9de4-4706-8e32-f991f90090c6/1/wgBqzAX53EUeoNROhyfbRwuSh5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:06:42:74:cb:2d:01:87:9f:a7:dd:1f:01:96:cf:00:f4:d7: 04:48:ad:82:a7:f0:38:e4:5e:a2:c3:f6:15:7b:b0:58:76:02: 64:f7:cd:51:05:74:d3:82:cf:35:34:b6:03:17:6e:d7:f9:74: 5e:62:6f:5d:ee:cd:57:6f:bc:32:c5:c9:f7:ce:14:25:82:26: 4a:c4:cd:8b:d5:28:2e:68:04:86:2f:70:fc:f3:32:ca:be:c6: 16:19:a9:01:e2:cb:40:56:fe:b7:1d:5d:fe:04:4f:63:cd:b3: c5:44:5b:44:4d:0f:69:d6:6d:9c:9a:f4:51:32:15:3a:38:94: fd:3e:74:51:43:70:25:66:ac:2a:b1:ad:c4:1a:24:0d:a0:82: 27:13:5f:e3:f0:11:0c:99:f4:e3:16:a6:d3:43:28:50:be:cc: 59:2c:9b:8d:f9:1c:6c:65:14:f1:8f:fa:8e:e0:8a:96:b0:62: 17:b6:84:20:6c:63:80:2e:e5:87:b8:4c:d2:4c:9e:83:b7:ff: bc:ff:c6:2f:33:f4:43:9d:35:a3:da:9a:4a:33:df:5a:2b:c9: b5:e5:c2:0c:76:f6:74:66:ad:d0:26:3e:51:2a:0f:ea:64:67: 7d:61:0c:77:ce:c3:6c:06:35:f0:52:f2:d5:84:9c:ed:d5:6f: 3a:75:14:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiFoqof1NOlepMGm+EMc7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMDA2YWNjMDVmOWRjNDUxZWEwZDQ0ZTg3MjdkYjQ3MGI5 Mjg3OTQwHhcNMjUxMjA1MjIwMDU5WhcNMjUxMjA2MjIwMDU5WjAzMTEwLwYDVQQD EygxMjUxZDliZGFmODU1MzIzOTZjMjc3ZmVlNDMzOWRlNTlmNWMxYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8t14wwKKidTCwTbZKgnzmQ1/si7h KH+1fdHrZlS/4lZPz08S9YIewW/Xe5V2GYArWdPMyoJ0cMI4ti+bX62yZ6YyiupL Jv/wHc79dQoPc2RViKSJI0iu0Zlgkj8afjA/2XO1IS/BivwU2bN+NOYLNT2p3kjX cDT5vDh8nkuV3eXpp5ZpGsHmxveK0kiENTKiTamdRqn65H5fF6DcN5ICBF5lSy3n YfWbQYwHnE48vq9jY83XGfSPbSDUsxMnLTAN8OVAwMvCQCSCyMjc/Ir5TGv5u7QY uJB4CMJYUgz4eLZIOOO9W1JHlqRqFl3/uXmZn6smWnOURraBWyzNfgsXYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJR2b2vhVMjlsJ3/uQzneWfXBssMB8GA1UdIwQY MBaAFMIAaswF+dxFHqDUTocn20cLkoeUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8yM2I3MmYtOWRlNC00NzA2LThlMzIt Zjk5MWY5MDA5MGM2LzEvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8yM2I3MmYtOWRlNC00NzA2LThlMzItZjk5MWY5MDA5MGM2 LzEvd2dCcXpBWDUzRVVlb05ST2h5ZmJSd3VTaDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewZCdMst AYefp90fAZbPAPTXBEitgqfwOOReosP2FXuwWHYCZPfNUQV004LPNTS2Axdu1/l0 XmJvXe7NV2+8MsXJ984UJYImSsTNi9UoLmgEhi9w/PMyyr7GFhmpAeLLQFb+tx1d /gRPY82zxURbRE0PadZtnJr0UTIVOjiU/T50UUNwJWasKrGtxBokDaCCJxNf4/AR DJn04xam00MoUL7MWSybjfkcbGUU8Y/6juCKlrBiF7aEIGxjgC7lh7hM0kyeg7f/ vP/GLzP0Q501o9qaSjPfWivJteXCDHb2dGat0CY+USoP6mRnfWEMd87DbAY18FLy 1YSc7dVvOnUU5g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:46 2025 by rpki-client