This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft File: wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json) Hash identifier: yXYVJFJfeQSCPiccaYbWrxFBpv3tSZjq0BX5QYlMAkg= Subject key identifier: 4E:54:96:DE:BD:59:8E:73:00:02:4F:78:EF:6C:15:73:78:47:43:4E Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78 Certificate issuer: /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78 Certificate serial: 019AF50A7B0C7F078BF5C0C530C3A45306A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft Manifest number: 0B1D Signing time: Sat 06 Dec 2025 19:01:35 +0000 Manifest this update: Sat 06 Dec 2025 19:01:35 +0000 Manifest next update: Sun 07 Dec 2025 19:01:35 +0000 Files and hashes: 1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: zPLFrtUqbbxsQZFE4ILfYvNBxXREUZWSu5NJ1rwm+v4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:7b:0c:7f:07:8b:f5:c0:c5:30:c3:a4:53:06:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78 Validity Not Before: Dec 6 19:01:35 2025 GMT Not After : Dec 7 19:01:35 2025 GMT Subject: CN=4e5496debd598e7300024f78ef6c15737847434e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8a:31:24:79:75:8c:af:93:ae:6f:df:8f:12: 68:bc:7f:bf:ed:e4:10:b6:4f:bb:68:1d:9a:37:b6: 93:0b:0c:16:8e:25:be:9b:0d:65:e3:80:92:f0:89: 74:5a:0b:94:b5:0d:28:22:63:50:97:c8:3e:7d:22: 71:7a:b6:d5:24:b7:06:41:24:0a:c9:8f:27:ce:e5: f3:2d:ad:ff:74:69:fc:c3:76:23:be:75:4d:a8:3e: fa:ee:ca:07:fa:08:10:1f:56:86:56:a2:c3:f4:72: 3b:97:4c:53:1b:68:2c:bb:03:bb:17:5d:ae:31:c0: f8:aa:ef:7e:49:5a:43:26:37:b3:c2:05:1b:34:5b: 51:21:e3:ca:2b:2d:76:f7:a7:e8:c8:76:63:cc:d1: 0f:18:f2:44:64:e5:fa:a6:76:27:6a:fa:27:0c:16: e5:36:18:4c:30:20:89:fa:75:75:70:30:93:dc:c4: 5a:8b:12:a8:b5:10:41:98:7b:d8:1d:a6:af:9f:b9: 4d:ca:a4:28:46:f9:ad:e7:7a:a7:7e:19:b2:45:17: 05:70:00:4c:79:1c:76:1d:b6:b8:f8:5c:33:8f:88: ff:c3:0d:7c:34:a0:36:d2:d5:28:52:35:49:1a:5c: 53:cd:bc:38:b3:87:7d:f5:3d:c8:0f:06:1c:10:a5: a5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:54:96:DE:BD:59:8E:73:00:02:4F:78:EF:6C:15:73:78:47:43:4E X509v3 Authority Key Identifier: keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:26:32:b5:67:bb:d4:73:51:3d:8e:be:34:a2:b1:42:9d:49: 51:fb:57:b5:9d:90:05:6b:b5:b2:13:5d:ce:55:1a:25:a5:38: 8c:1a:a9:95:a2:a5:dc:ad:73:df:59:66:84:19:a5:cf:6c:80: cb:40:82:64:1c:02:cf:be:23:c4:cd:dc:cf:21:b7:37:83:b3: d6:5f:01:ba:d7:4d:8d:10:c8:70:e1:75:4c:94:16:77:63:b4: 2f:77:10:4e:c9:1d:0e:00:c3:5e:96:d8:b6:67:62:a3:d3:07: 93:ff:3b:31:61:f3:fb:cc:d0:11:9c:ce:69:d2:32:f4:59:21: bf:e8:78:6c:c0:94:ff:9a:e7:a4:02:78:d1:a2:bd:1f:23:12: 6c:db:31:d3:80:a8:2f:02:90:16:9a:39:39:7b:42:52:7f:6d: cf:d5:f6:c0:f6:75:b3:ba:2b:a0:a1:80:04:a5:01:f6:7c:22: 62:65:36:8f:66:e2:e0:f7:70:99:53:c5:28:1c:55:e4:d5:38: 63:19:f2:3a:32:a9:09:99:a0:b8:32:2e:07:35:27:4a:b1:21: 7a:84:d3:83:02:28:bf:77:66:e0:91:00:cb:61:b0:5e:7f:5f: 95:3f:bd:1c:ff:b2:90:aa:0f:c5:a3:47:24:c7:14:7d:60:c1: af:89:45:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CnsMfweL9cDFMMOkUwakMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNmIwNzYwNzY2ZTZjYzcyMzljMjc1NWEyZDBkMzlmYmUx NGVkNzgwHhcNMjUxMjA2MTkwMTM1WhcNMjUxMjA3MTkwMTM1WjAzMTEwLwYDVQQD Eyg0ZTU0OTZkZWJkNTk4ZTczMDAwMjRmNzhlZjZjMTU3Mzc4NDc0MzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYoxJHl1jK+Trm/fjxJovH+/7eQQ tk+7aB2aN7aTCwwWjiW+mw1l44CS8Il0WguUtQ0oImNQl8g+fSJxerbVJLcGQSQK yY8nzuXzLa3/dGn8w3YjvnVNqD767soH+ggQH1aGVqLD9HI7l0xTG2gsuwO7F12u McD4qu9+SVpDJjezwgUbNFtRIePKKy1296foyHZjzNEPGPJEZOX6pnYnavonDBbl NhhMMCCJ+nV1cDCT3MRaixKotRBBmHvYHaavn7lNyqQoRvmt53qnfhmyRRcFcABM eRx2Hba4+Fwzj4j/ww18NKA20tUoUjVJGlxTzbw4s4d99T3IDwYcEKWlqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5Ult69WY5zAAJPeO9sFXN4R0NOMB8GA1UdIwQY MBaAFMJrB2B2bmzHI5wnVaLQ05++FO14MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd21zSFlIWnViTWNqbkNkVm90RFRuNzRVN1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zNWI2MzgtNzI4Ni00M2QwLWE3YzAt OWFiMTliMjY2ZTk2LzEvd21zSFlIWnViTWNqbkNkVm90RFRuNzRVN1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zNWI2MzgtNzI4Ni00M2QwLWE3YzAtOWFiMTliMjY2ZTk2 LzEvd21zSFlIWnViTWNqbkNkVm90RFRuNzRVN1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANCYytWe7 1HNRPY6+NKKxQp1JUftXtZ2QBWu1shNdzlUaJaU4jBqplaKl3K1z31lmhBmlz2yA y0CCZBwCz74jxM3czyG3N4Oz1l8ButdNjRDIcOF1TJQWd2O0L3cQTskdDgDDXpbY tmdio9MHk/87MWHz+8zQEZzOadIy9Fkhv+h4bMCU/5rnpAJ40aK9HyMSbNsx04Co LwKQFpo5OXtCUn9tz9X2wPZ1s7oroKGABKUB9nwiYmU2j2bi4PdwmVPFKBxV5NU4 YxnyOjKpCZmguDIuBzUnSrEheoTTgwIov3dm4JEAy2GwXn9flT+9HP+ykKoPxaNH JMcUfWDBr4lF/w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:44 2025 by rpki-client