This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json) Hash identifier: dhZz4l56004M+aK+Buv7VMCw6JC0h0/b6oyDSMhCTtc= Subject key identifier: A8:4B:A7:87:28:D1:A8:EE:C5:A4:0C:10:ED:5C:80:8B:A0:8D:B8:E9 Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Certificate serial: 019B32D5FD97BC8A6CFE1895CB1FB7DC84AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft Manifest number: 1145 Signing time: Thu 18 Dec 2025 19:00:43 +0000 Manifest this update: Thu 18 Dec 2025 19:00:43 +0000 Manifest next update: Fri 19 Dec 2025 19:00:43 +0000 Files and hashes: 1: 7UOjyf-6bS8r8zJDoqOo76_7Llk.roa (hash: M/fakT1uObMb7UW5IWYfhtUN1rDOGMnXTsxFWM6dOkk=) 2: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: Cv35h7Lgf+H1WsZIdtIy5cUFmK5vRqCSBzBHL4G/o2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:fd:97:bc:8a:6c:fe:18:95:cb:1f:b7:dc:84:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Validity Not Before: Dec 18 19:00:43 2025 GMT Not After : Dec 19 19:00:43 2025 GMT Subject: CN=a84ba78728d1a8eec5a40c10ed5c808ba08db8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:af:1f:cd:30:ac:c6:26:e2:bc:49:10:de: da:d4:ae:a1:40:76:39:d1:e8:2a:4c:ee:ec:38:26: 5c:2c:5f:a7:73:62:69:9e:6c:76:53:44:b5:4a:b3: ab:70:69:6d:68:90:d5:1d:8b:26:0a:a1:b0:8b:1f: fd:18:68:40:00:6c:83:de:5e:d4:9b:7f:28:2b:00: bb:32:f5:81:7e:88:a8:23:82:b9:9e:3c:e7:40:5a: 74:d0:ea:8b:3f:c4:ae:5c:20:56:c1:49:a9:33:24: 01:3f:3f:e2:14:45:2e:b2:f7:97:e6:35:6b:fa:39: 31:0c:bd:ba:34:50:31:dc:af:fa:48:cb:2a:52:bc: bb:49:79:14:57:26:24:19:e8:fc:65:60:1e:10:72: 0a:17:b0:8c:26:37:bf:71:54:e8:f5:c1:5f:4a:c4: 7e:7c:48:d7:a3:39:6e:a1:62:46:3f:42:65:7e:8b: c3:50:67:40:22:3b:2d:db:22:9c:e8:5f:0b:d0:d3: 6e:7f:e8:94:2d:4a:07:60:41:54:84:31:fd:e7:a4: c7:55:8d:34:d0:64:66:cf:19:7a:c6:92:e8:b3:33: cc:8a:c3:03:bb:6a:ff:36:ba:83:72:16:e7:ab:3d: a4:4c:23:1c:dc:39:c0:d4:8e:af:92:e0:aa:ed:7b: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4B:A7:87:28:D1:A8:EE:C5:A4:0C:10:ED:5C:80:8B:A0:8D:B8:E9 X509v3 Authority Key Identifier: keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:58:e1:82:95:21:4e:08:ad:88:3e:24:a1:73:b1:fd:de:8a: cb:a8:1f:8c:1d:95:1b:c8:bc:2c:26:cf:f4:c8:2f:15:a2:ec: d8:3b:29:95:ec:98:99:b9:01:02:6e:ad:82:2c:74:1e:58:81: 78:95:0f:90:ba:f5:3f:6b:00:b4:14:9a:9d:3b:0f:54:63:56: 4c:07:8f:33:e3:31:38:76:a9:d6:e0:c3:46:fb:e5:51:8a:d0: 0e:91:a8:b5:bf:40:a5:55:0d:54:e1:7e:81:d0:cb:af:70:11: 5a:bf:1c:da:6a:ac:51:cb:37:88:da:0d:10:6e:da:ec:b1:30: f6:43:59:e2:10:1b:1e:9d:58:ac:a3:bc:fc:b0:77:ac:77:49: 49:a2:7e:4b:11:0f:1b:76:da:93:85:05:f8:8c:16:e8:8c:c2: 7e:8f:38:00:a2:cf:33:de:92:3f:d2:9a:8e:13:3d:d4:46:08: fa:9f:77:1c:bd:2a:57:48:53:6f:a1:ab:33:0d:d1:02:49:de: 23:39:1e:c2:06:83:db:da:42:9c:75:ca:40:df:b0:97:8b:73: 6b:bb:d9:23:56:77:4e:fc:14:70:5c:a5:ae:95:5e:19:5b:2a: d0:47:f9:92:f0:80:1d:40:9b:0e:1b:76:28:fc:4d:73:ff:6a: 9e:ca:f8:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1f2XvIps/hiVyx+33ISsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjVjNjJmMTBjMjVlN2E3ZWYxODM1NjgzM2FhNGY5Yjk4 NDJjNmEwHhcNMjUxMjE4MTkwMDQzWhcNMjUxMjE5MTkwMDQzWjAzMTEwLwYDVQQD EyhhODRiYTc4NzI4ZDFhOGVlYzVhNDBjMTBlZDVjODA4YmEwOGRiOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+ivH80wrMYm4rxJEN7a1K6hQHY5 0egqTO7sOCZcLF+nc2Jpnmx2U0S1SrOrcGltaJDVHYsmCqGwix/9GGhAAGyD3l7U m38oKwC7MvWBfoioI4K5njznQFp00OqLP8SuXCBWwUmpMyQBPz/iFEUusveX5jVr +jkxDL26NFAx3K/6SMsqUry7SXkUVyYkGej8ZWAeEHIKF7CMJje/cVTo9cFfSsR+ fEjXozluoWJGP0JlfovDUGdAIjst2yKc6F8L0NNuf+iULUoHYEFUhDH956THVY00 0GRmzxl6xpLoszPMisMDu2r/NrqDchbnqz2kTCMc3DnA1I6vkuCq7XuqvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhLp4co0ajuxaQMEO1cgIugjbjpMB8GA1UdIwQY MBaAFFllxi8Qwl56fvGDVoM6pPm5hCxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEt NmNhN2M1NDI2M2I5LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEtNmNhN2M1NDI2M2I5 LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVjhgpUh TgitiD4koXOx/d6Ky6gfjB2VG8i8LCbP9MgvFaLs2DspleyYmbkBAm6tgix0HliB eJUPkLr1P2sAtBSanTsPVGNWTAePM+MxOHap1uDDRvvlUYrQDpGotb9ApVUNVOF+ gdDLr3ARWr8c2mqsUcs3iNoNEG7a7LEw9kNZ4hAbHp1YrKO8/LB3rHdJSaJ+SxEP G3bak4UF+IwW6IzCfo84AKLPM96SP9KajhM91EYI+p93HL0qV0hTb6GrMw3RAkne IzkewgaD29pCnHXKQN+wl4tza7vZI1Z3TvwUcFylrpVeGVsq0Ef5kvCAHUCbDht2 KPxNc/9qnsr4+w== -----END CERTIFICATE-----Generated at Thu Dec 18 21:48:07 2025 by rpki-client