This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft File: WWXGLxDCXnp-8YNWgzqk-bmELGo.mft (raw, json) Hash identifier: sIX1aqcwa/pg0fpztO7DsPpqWzTv4Vd9sMvgn6/dugo= Subject key identifier: F6:56:03:71:5C:8E:C6:2D:C6:DA:58:3F:4C:E2:24:40:9E:B1:98:E9 Authority key identifier: 59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A Certificate issuer: /CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Certificate serial: 019AF12E8543E8A30C97366FA2DA2D6E7AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft Manifest number: 1123 Signing time: Sat 06 Dec 2025 01:02:29 +0000 Manifest this update: Sat 06 Dec 2025 01:02:29 +0000 Manifest next update: Sun 07 Dec 2025 01:02:29 +0000 Files and hashes: 1: 7UOjyf-6bS8r8zJDoqOo76_7Llk.roa (hash: M/fakT1uObMb7UW5IWYfhtUN1rDOGMnXTsxFWM6dOkk=) 2: WWXGLxDCXnp-8YNWgzqk-bmELGo.crl (hash: eMxiRWBxr5hUgDIan7C8VLh/EqQY1tpPDtZjtqx4z9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:85:43:e8:a3:0c:97:36:6f:a2:da:2d:6e:7a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5965c62f10c25e7a7ef18356833aa4f9b9842c6a Validity Not Before: Dec 6 01:02:29 2025 GMT Not After : Dec 7 01:02:29 2025 GMT Subject: CN=f65603715c8ec62dc6da583f4ce224409eb198e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:3d:19:ae:37:49:2c:7c:84:d7:47:d4:67: 00:f7:51:43:e0:4f:fc:cc:2f:33:64:53:da:6d:db: f0:d1:39:74:b6:78:5e:6d:43:44:53:3f:32:b4:11: 14:00:ef:7d:19:55:27:74:5b:6d:f7:3a:af:31:10: 73:65:5c:c9:80:29:6e:c8:ab:d4:27:3b:59:95:12: ce:b6:1d:83:9d:e2:0f:3b:6a:65:7a:48:1b:db:e2: ea:8b:d6:ad:e4:3a:e6:3b:04:da:c4:a4:d6:70:ea: ee:c6:b3:a1:2a:de:35:7e:d6:bc:fd:0b:01:81:09: 31:ed:01:75:bf:5b:1a:5e:79:37:fb:67:ed:b8:aa: e6:f3:56:1c:cc:1c:ec:4f:93:7e:cf:e8:65:b6:be: a9:bc:f1:32:32:fd:9a:44:7b:95:92:c8:e7:b0:e5: df:a3:af:0a:b8:d5:4f:1d:e8:a2:0a:91:da:48:a9: 22:fd:ea:4b:35:27:e8:84:8a:c7:89:d1:26:f3:fe: e4:d4:85:16:23:0e:69:cd:3a:47:b7:7f:0e:5d:02: aa:8e:8e:bf:ee:1d:53:a1:f7:17:9b:f1:a1:86:7c: f5:b0:64:85:a0:08:96:b5:43:a5:36:48:d6:f5:1e: f3:23:c9:70:99:5f:d3:1c:f7:47:c2:bf:42:6c:9e: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:56:03:71:5C:8E:C6:2D:C6:DA:58:3F:4C:E2:24:40:9E:B1:98:E9 X509v3 Authority Key Identifier: keyid:59:65:C6:2F:10:C2:5E:7A:7E:F1:83:56:83:3A:A4:F9:B9:84:2C:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWXGLxDCXnp-8YNWgzqk-bmELGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/abd2a7-3bfd-4613-9f01-6ca7c54263b9/1/WWXGLxDCXnp-8YNWgzqk-bmELGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:28:7e:15:8a:b5:a3:7f:a0:56:98:38:c0:0a:d0:4f:25:ed: 29:1f:b7:6b:d3:c4:37:79:76:1f:71:8f:2f:8a:e0:58:5a:3d: 6e:a2:b2:86:5b:76:2d:2d:76:4c:d8:54:81:76:f1:8a:f3:55: e4:ec:97:4a:d8:26:d5:9c:88:67:67:bc:80:c2:66:ad:c0:f5: c8:46:dc:7c:0d:62:1a:17:1f:50:78:a3:7d:84:ed:de:b9:ac: 82:b8:27:a1:9b:04:51:cc:03:f7:06:b7:23:47:39:b6:1a:c3: b4:0c:1a:55:fa:73:cd:64:28:c6:6c:6a:f6:4b:13:b7:da:cd: e6:7c:dc:9b:06:1d:5b:88:4e:03:56:5a:f9:28:1c:c5:db:05: 83:fb:dc:a3:d6:30:26:cb:54:70:ae:7a:f5:a0:63:c4:65:26: 4c:af:a7:56:d4:8e:62:78:1d:56:0e:b5:34:04:9c:f4:7d:85: a0:cd:63:5d:d2:73:aa:1d:d9:b3:f9:79:da:5f:b0:3f:4d:f1: ed:d3:63:24:78:b7:38:57:7c:25:b5:7a:59:b5:61:b5:47:9f: 60:e7:42:58:ef:87:e8:0d:e4:8e:5f:1b:13:ae:e4:ba:6b:a5: 30:12:26:2e:50:91:ad:20:74:c0:4b:f5:91:57:91:cf:a9:b2: b1:7c:60:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLoVD6KMMlzZvototbnqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjVjNjJmMTBjMjVlN2E3ZWYxODM1NjgzM2FhNGY5Yjk4 NDJjNmEwHhcNMjUxMjA2MDEwMjI5WhcNMjUxMjA3MDEwMjI5WjAzMTEwLwYDVQQD EyhmNjU2MDM3MTVjOGVjNjJkYzZkYTU4M2Y0Y2UyMjQ0MDllYjE5OGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNE9Ga43SSx8hNdH1GcA91FD4E/8 zC8zZFPabdvw0Tl0tnhebUNEUz8ytBEUAO99GVUndFtt9zqvMRBzZVzJgCluyKvU JztZlRLOth2DneIPO2plekgb2+Lqi9at5DrmOwTaxKTWcOruxrOhKt41fta8/QsB gQkx7QF1v1saXnk3+2ftuKrm81YczBzsT5N+z+hltr6pvPEyMv2aRHuVksjnsOXf o68KuNVPHeiiCpHaSKki/epLNSfohIrHidEm8/7k1IUWIw5pzTpHt38OXQKqjo6/ 7h1TofcXm/Ghhnz1sGSFoAiWtUOlNkjW9R7zI8lwmV/THPdHwr9CbJ6yoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPZWA3FcjsYtxtpYP0ziJECesZjpMB8GA1UdIwQY MBaAFFllxi8Qwl56fvGDVoM6pPm5hCxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEt NmNhN2M1NDI2M2I5LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9hYmQyYTctM2JmZC00NjEzLTlmMDEtNmNhN2M1NDI2M2I5 LzEvV1dYR0x4RENYbnAtOFlOV2d6cWstYm1FTEdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANSh+FYq1 o3+gVpg4wArQTyXtKR+3a9PEN3l2H3GPL4rgWFo9bqKyhlt2LS12TNhUgXbxivNV 5OyXStgm1ZyIZ2e8gMJmrcD1yEbcfA1iGhcfUHijfYTt3rmsgrgnoZsEUcwD9wa3 I0c5thrDtAwaVfpzzWQoxmxq9ksTt9rN5nzcmwYdW4hOA1Za+SgcxdsFg/vco9Yw JstUcK569aBjxGUmTK+nVtSOYngdVg61NASc9H2FoM1jXdJzqh3Zs/l52l+wP03x 7dNjJHi3OFd8JbV6WbVhtUefYOdCWO+H6A3kjl8bE67kumulMBImLlCRrSB0wEv1 kVeRz6mysXxgSg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:03 2025 by rpki-client