This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft File: WQB0CLv4rZBE3mgEZYfHWJty6-8.mft (raw, json) Hash identifier: e6MfXRbHKq628gY+w+ny3yN8H8oXmWczyk523AzqWvw= Subject key identifier: 0A:10:5E:2C:66:FC:09:17:17:C9:7F:6D:97:E0:4D:8B:EF:62:02:8D Authority key identifier: 59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF Certificate issuer: /CN=59007408bbf8ad9044de68046587c7589b72ebef Certificate serial: 019AF19B098D24B10BA3F83AF60BF76DCF15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft Manifest number: 10DF Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: WQB0CLv4rZBE3mgEZYfHWJty6-8.crl (hash: DIDZcFDoiBnG3d9PZfadZtMcTzZMVoRi1GNhqFI1hiA=) 2: rwRRPql1rIQzsq_i06yzoO2wgHQ.roa (hash: 0FdnTsSRRUfY+3q4ZnKlxf+D+uYOXphiuhAQtxiPw20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:09:8d:24:b1:0b:a3:f8:3a:f6:0b:f7:6d:cf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59007408bbf8ad9044de68046587c7589b72ebef Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=0a105e2c66fc091717c97f6d97e04d8bef62028d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8a:fa:28:2f:90:6c:ee:13:ea:47:11:b9:e4: bc:55:e6:43:e7:eb:73:ce:5f:5b:60:2c:33:16:15: fe:a5:9c:05:bf:32:0a:65:c4:0c:d9:8f:cd:2d:70: af:63:2c:09:c2:7a:9a:87:a1:1e:89:9a:65:95:ed: bf:79:39:1b:03:df:29:9d:20:e1:88:17:a4:6d:f2: e4:67:ae:26:30:b8:bf:f3:8e:37:89:0b:50:03:3c: f0:0e:38:b8:8c:73:c6:a8:3f:c9:59:fa:1d:b5:8a: 39:ec:e2:a6:f7:b5:83:cd:22:c6:02:36:84:e7:14: 13:2e:55:f9:ea:f4:7d:27:46:3a:98:8b:20:39:8c: d2:38:78:8f:f2:88:ec:f3:00:f9:5e:7f:ad:dc:88: 58:83:46:59:b6:a2:8e:4d:17:23:85:53:64:f3:a4: 79:98:91:91:8a:0f:7c:b2:85:ff:b0:1b:26:5e:a1: e2:61:c4:66:fe:9c:e9:f9:d8:66:32:2e:ab:0c:23: cd:70:ed:f0:dc:4b:88:9a:9f:44:97:57:20:45:96: 29:05:34:b0:27:ba:0d:8f:6c:49:af:28:c6:00:b7: 91:c6:06:43:dd:a6:a2:c0:80:75:53:8d:82:e4:48: 3e:27:ce:3a:d0:d1:0d:07:bd:4d:8d:a1:67:dd:1b: f9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:10:5E:2C:66:FC:09:17:17:C9:7F:6D:97:E0:4D:8B:EF:62:02:8D X509v3 Authority Key Identifier: keyid:59:00:74:08:BB:F8:AD:90:44:DE:68:04:65:87:C7:58:9B:72:EB:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQB0CLv4rZBE3mgEZYfHWJty6-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8fb71-a7c7-4f92-8743-9c708dac1d92/1/WQB0CLv4rZBE3mgEZYfHWJty6-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4f:15:b7:1d:c6:db:ad:5e:80:09:6e:18:8d:d6:82:ac:3e: fb:6f:05:4d:83:fa:eb:df:a3:b1:eb:3c:5f:7c:87:e0:2e:8d: a0:01:25:e9:e9:b1:6a:f5:b8:90:42:c1:98:1c:22:71:32:1c: 0b:36:18:5a:09:0b:2c:76:b1:34:4b:33:2c:f4:6f:2b:f9:22: 67:9a:10:96:98:34:a9:1f:8f:4c:f9:9b:b5:e3:ec:06:45:ee: 6c:9e:49:03:5a:94:cc:9f:bd:83:88:29:81:c0:93:e3:ea:fa: 5f:b2:63:6f:a5:a1:00:a1:aa:e6:61:b4:a0:a3:2a:53:bb:53: c0:96:bd:33:e1:d9:34:da:e3:5a:a8:06:19:25:94:b1:23:4f: e9:7a:d0:40:61:03:ab:8a:d2:da:97:d7:04:7e:2b:3f:f9:d3: 65:03:96:5e:d4:e9:20:d7:b6:58:86:dc:fb:e1:34:32:c6:5f: 0a:f7:c3:05:09:70:43:a6:18:ba:43:e8:b4:52:c8:d9:77:ad: 46:e3:c1:4b:15:99:53:0c:f7:58:98:8a:23:08:4f:ab:d9:4a: 3e:f4:57:ef:c8:f9:db:7e:39:58:37:e5:68:2d:5c:b5:6b:60: 62:7e:9e:c2:12:1d:08:84:3d:26:89:20:11:e2:83:4b:ef:0f: fd:a3:b5:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwmNJLELo/g69gv3bc8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDA3NDA4YmJmOGFkOTA0NGRlNjgwNDY1ODdjNzU4OWI3 MmViZWYwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD EygwYTEwNWUyYzY2ZmMwOTE3MTdjOTdmNmQ5N2UwNGQ4YmVmNjIwMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAror6KC+QbO4T6kcRueS8VeZD5+tz zl9bYCwzFhX+pZwFvzIKZcQM2Y/NLXCvYywJwnqah6EeiZplle2/eTkbA98pnSDh iBekbfLkZ64mMLi/8443iQtQAzzwDji4jHPGqD/JWfodtYo57OKm97WDzSLGAjaE 5xQTLlX56vR9J0Y6mIsgOYzSOHiP8ojs8wD5Xn+t3IhYg0ZZtqKOTRcjhVNk86R5 mJGRig98soX/sBsmXqHiYcRm/pzp+dhmMi6rDCPNcO3w3EuImp9El1cgRZYpBTSw J7oNj2xJryjGALeRxgZD3aaiwIB1U42C5Eg+J8460NENB71NjaFn3Rv5XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoQXixm/AkXF8l/bZfgTYvvYgKNMB8GA1UdIwQY MBaAFFkAdAi7+K2QRN5oBGWHx1ibcuvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMt OWM3MDhkYWMxZDkyLzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mOGZiNzEtYTdjNy00ZjkyLTg3NDMtOWM3MDhkYWMxZDky LzEvV1FCMENMdjRyWkJFM21nRVpZZkhXSnR5Ni04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVk8Vtx3G 261egAluGI3Wgqw++28FTYP669+jses8X3yH4C6NoAEl6emxavW4kELBmBwicTIc CzYYWgkLLHaxNEszLPRvK/kiZ5oQlpg0qR+PTPmbtePsBkXubJ5JA1qUzJ+9g4gp gcCT4+r6X7Jjb6WhAKGq5mG0oKMqU7tTwJa9M+HZNNrjWqgGGSWUsSNP6XrQQGED q4rS2pfXBH4rP/nTZQOWXtTpINe2WIbc++E0MsZfCvfDBQlwQ6YYukPotFLI2Xet RuPBSxWZUwz3WJiKIwhPq9lKPvRX78j52345WDflaC1ctWtgYn6ewhIdCIQ9Jokg EeKDS+8P/aO1Ow== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:06 2025 by rpki-client