This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
File: WPde8NYw4dCGeQygt45-744qz7s.mft (raw, json)
Hash identifier: n/l2O1LkqVVfsqygsEDq/MUTyJgg02XtfS/4IY5DEF4=
Subject key identifier: 80:89:80:BC:78:06:B5:AD:C8:6C:4E:82:73:7D:97:BE:CF:E4:BF:D4
Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Certificate serial: 019AF61C3012E27BC66207169115B37DFA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
Manifest number: 1764
Signing time: Sun 07 Dec 2025 00:00:33 +0000
Manifest this update: Sun 07 Dec 2025 00:00:33 +0000
Manifest next update: Mon 08 Dec 2025 00:00:33 +0000
Files and hashes: 1: WPde8NYw4dCGeQygt45-744qz7s.crl (hash: gaLCVw+ZU742yRMGh6+Dk1TqW28uzu8ds61OciiJJfI=)
2: x5rquIVhJ13GXmSiEvGgLAga1-w.roa (hash: 89X00FnyaHqizMTzCA2kNKHXqUvFiwqZlo80Pxfjk08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 21:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f6:1c:30:12:e2:7b:c6:62:07:16:91:15:b3:7d:fa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb
Validity
Not Before: Dec 7 00:00:33 2025 GMT
Not After : Dec 8 00:00:33 2025 GMT
Subject: CN=808980bc7806b5adc86c4e82737d97becfe4bfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:21:7f:bc:0c:55:e2:41:cd:0d:05:bd:53:
f4:c6:bf:87:a7:9c:d5:f8:01:4d:5b:82:ef:ae:7c:
23:0e:1f:a2:3a:30:49:14:6d:0c:33:8b:40:ce:5f:
ff:e5:ec:12:f4:84:dd:5d:7c:60:86:33:99:07:20:
d8:b1:75:d3:4e:63:d9:a7:21:be:0e:ea:a4:1f:f0:
2f:00:56:c7:b9:d0:da:92:53:c4:ba:e6:71:d2:f0:
70:50:0e:02:9a:a4:05:54:ed:82:3d:d3:4a:db:a1:
eb:a3:6c:f1:c3:4b:dc:e4:e5:d0:d0:83:e2:40:99:
6f:25:32:8a:6c:0a:2a:7d:dc:09:dd:65:5b:8d:0d:
b3:98:95:51:e7:10:71:6f:32:ff:32:26:86:19:bd:
d1:26:47:fa:58:2f:42:3b:37:e0:0f:5a:91:a4:02:
01:be:66:4d:09:7c:43:4c:41:24:4e:c5:21:e9:5e:
fa:88:bc:1e:15:fd:d2:63:3c:54:68:fe:bf:d0:9c:
3b:25:a8:1d:4e:f2:59:75:cc:19:af:14:3f:d2:54:
e9:e1:e9:4f:5b:85:52:98:1d:74:9f:ae:7a:89:6e:
a2:cb:af:da:dc:b7:fb:50:ca:7e:2b:52:4b:bb:02:
c8:ef:23:be:ed:88:47:fb:a1:ca:32:26:18:47:f6:
91:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:80:BC:78:06:B5:AD:C8:6C:4E:82:73:7D:97:BE:CF:E4:BF:D4
X509v3 Authority Key Identifier:
keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a5:e9:28:2d:38:45:57:16:50:b2:bf:75:2f:bd:22:76:93:
e6:06:26:fc:96:f5:2f:43:b4:8d:9f:da:5b:65:09:95:a2:63:
2c:c4:40:26:5d:8f:b3:61:21:bd:74:07:36:14:7a:f8:8b:b2:
a4:d8:63:ef:08:a9:4d:4b:23:d5:f8:f5:f4:2f:84:17:ab:b4:
17:e0:0c:cc:4c:8d:27:4a:b7:bb:a4:1b:32:41:13:50:4d:86:
f5:5f:8c:6c:db:ec:93:35:00:8b:bc:71:34:b6:f6:67:56:d8:
ad:dc:80:77:51:6b:4a:a8:17:84:b8:2e:5b:e0:00:98:28:96:
30:56:27:98:bb:98:47:b7:13:20:81:7e:9b:61:52:a3:62:2a:
3e:a6:5f:83:21:ac:f5:b8:c5:bc:fc:4c:7e:36:26:2f:9e:09:
43:b9:c1:59:b4:7e:55:6d:ac:8b:82:d6:e1:68:72:e3:38:6e:
30:58:86:14:67:f4:46:9c:7c:64:97:35:c5:1e:17:b7:4f:aa:
9f:32:91:3f:69:92:a1:2e:22:a9:00:b8:c8:9e:52:a3:19:9e:
31:ab:cf:dc:86:1f:89:a5:59:2a:3c:a1:e6:aa:c3:4b:49:7c:
e9:0f:d9:b6:5d:36:67:3c:06:72:6d:bf:d0:e3:59:7f:6d:fa:
6e:70:b2:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr2HDAS4nvGYgcWkRWzffpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4Zjc1ZWYwZDYzMGUxZDA4Njc5MGNhMGI3OGU3ZWVmOGUy
YWNmYmIwHhcNMjUxMjA3MDAwMDMzWhcNMjUxMjA4MDAwMDMzWjAzMTEwLwYDVQQD
Eyg4MDg5ODBiYzc4MDZiNWFkYzg2YzRlODI3MzdkOTdiZWNmZTRiZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtUhf7wMVeJBzQ0FvVP0xr+Hp5zV
+AFNW4LvrnwjDh+iOjBJFG0MM4tAzl//5ewS9ITdXXxghjOZByDYsXXTTmPZpyG+
DuqkH/AvAFbHudDaklPEuuZx0vBwUA4CmqQFVO2CPdNK26Hro2zxw0vc5OXQ0IPi
QJlvJTKKbAoqfdwJ3WVbjQ2zmJVR5xBxbzL/MiaGGb3RJkf6WC9COzfgD1qRpAIB
vmZNCXxDTEEkTsUh6V76iLweFf3SYzxUaP6/0Jw7JagdTvJZdcwZrxQ/0lTp4elP
W4VSmB10n656iW6iy6/a3Lf7UMp+K1JLuwLI7yO+7YhH+6HKMiYYR/aRBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICJgLx4BrWtyGxOgnN9l77P5L/UMB8GA1UdIwQY
MBaAFFj3XvDWMOHQhnkMoLeOfu+OKs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzIt
MmZkMjgwZTBkNTRhLzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzItMmZkMjgwZTBkNTRh
LzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKXpKC04
RVcWULK/dS+9InaT5gYm/Jb1L0O0jZ/aW2UJlaJjLMRAJl2Ps2EhvXQHNhR6+Iuy
pNhj7wipTUsj1fj19C+EF6u0F+AMzEyNJ0q3u6QbMkETUE2G9V+MbNvskzUAi7xx
NLb2Z1bYrdyAd1FrSqgXhLguW+AAmCiWMFYnmLuYR7cTIIF+m2FSo2IqPqZfgyGs
9bjFvPxMfjYmL54JQ7nBWbR+VW2si4LW4Why4zhuMFiGFGf0Rpx8ZJc1xR4Xt0+q
nzKRP2mSoS4iqQC4yJ5SoxmeMavP3IYfiaVZKjyh5qrDS0l86Q/Ztl02ZzwGcm2/
0ONZf236bnCyFQ==
-----END CERTIFICATE-----
Generated at Sun Dec 7 02:18:44 2025 by rpki-client