This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft File: WKaBxxvrRk4B1baOGcpWbamTDiM.mft (raw, json) Hash identifier: sRyuv/q+Tg7wuCc/YXBVqHA2aSb5s+TH9tRwWTmODwE= Subject key identifier: 62:07:70:4A:7A:53:E2:8D:E6:4B:00:1F:F9:62:5E:B2:51:85:3C:A0 Authority key identifier: 58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 Certificate issuer: /CN=58a681c71beb464e01d5b68e19ca566da9930e23 Certificate serial: 019AF0884FD47D02F1008DEC4B2DFB3DE818 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft Manifest number: 63 Signing time: Fri 05 Dec 2025 22:00:56 +0000 Manifest this update: Fri 05 Dec 2025 22:00:56 +0000 Manifest next update: Sat 06 Dec 2025 22:00:56 +0000 Files and hashes: 1: WKaBxxvrRk4B1baOGcpWbamTDiM.crl (hash: 1dsb3JV5J2BqXR/OjrVMDD+tt4oG1sXzVhDfFjX9bU4=) 2: lN5HO-JNvGu4hGpY5gcTC4TiNiM.roa (hash: tVhecYMNj6vTa/xG0wc+2Ec2FDfRws1DmGu5dGnbsLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:4f:d4:7d:02:f1:00:8d:ec:4b:2d:fb:3d:e8:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a681c71beb464e01d5b68e19ca566da9930e23 Validity Not Before: Dec 5 22:00:56 2025 GMT Not After : Dec 6 22:00:56 2025 GMT Subject: CN=6207704a7a53e28de64b001ff9625eb251853ca0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:61:d0:a9:d5:80:88:3a:41:be:9e:74:89:2b: d7:ef:62:51:50:9e:fb:77:20:84:1f:f9:89:fb:26: 46:e6:87:a3:48:c2:3a:b2:99:9b:51:cc:36:08:11: 2f:58:68:c6:58:ee:83:8e:fd:ac:83:67:f4:76:a1: aa:4a:a3:8e:5a:70:06:8e:67:5e:9a:21:7b:bf:26: 89:54:40:e5:5a:aa:7b:1d:6c:4a:d6:7f:e8:50:ca: 59:e1:7b:64:85:ab:f5:06:ab:89:77:1f:86:5b:cb: 28:8b:5f:86:f5:77:75:6a:24:77:74:d3:9d:86:15: d2:df:d5:23:c7:cd:12:3f:7f:b7:a8:17:00:eb:b2: 29:40:aa:35:75:d6:f3:59:9c:89:6c:9c:e2:3b:a3: 5e:11:87:5a:01:52:79:f4:a0:c0:94:49:58:5b:57: 91:8f:ed:f1:8b:3b:c0:86:ea:c8:0f:56:3b:57:8a: e4:3b:ce:38:26:75:2d:24:eb:32:22:21:26:d2:27: 45:53:05:55:38:db:53:4a:8e:8c:4f:40:d4:1f:4c: 14:52:56:8c:51:d2:ea:d6:fc:cc:e0:cc:09:a4:bc: c4:d1:83:06:08:bd:cc:78:10:4e:07:ae:8f:bd:1d: 9f:2d:74:15:82:6b:d5:ac:f0:0e:28:dc:13:59:7e: f6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:07:70:4A:7A:53:E2:8D:E6:4B:00:1F:F9:62:5E:B2:51:85:3C:A0 X509v3 Authority Key Identifier: keyid:58:A6:81:C7:1B:EB:46:4E:01:D5:B6:8E:19:CA:56:6D:A9:93:0E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKaBxxvrRk4B1baOGcpWbamTDiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f51d2e-d174-4ef5-80c1-97f91bc97a42/1/WKaBxxvrRk4B1baOGcpWbamTDiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:23:33:5d:78:47:0b:59:48:8c:6b:1d:40:d2:0e:80:2b:f9: 81:b4:b3:07:84:4c:f0:52:9c:9d:d1:a0:08:2b:41:7a:a9:59: b0:d5:aa:ea:09:36:20:64:70:54:2d:1f:34:a3:97:aa:a6:02: 9f:f8:a0:03:09:1a:8c:d4:e4:c1:23:9f:20:3d:45:ca:ba:35: 48:35:36:68:21:79:71:47:fa:83:65:fc:7c:1b:a6:da:02:9b: 77:ba:ae:26:3c:8a:39:bc:bd:36:1b:a4:fd:fa:b8:c4:16:c0: fd:0e:44:7b:cc:bc:67:48:a3:1a:4c:dd:27:fc:af:07:98:13: e4:f7:49:71:f8:74:12:52:c3:bf:a7:44:55:d1:c6:11:6b:33: 27:f5:48:5b:a9:ec:d1:43:4d:2b:ba:d6:df:de:ea:c7:b3:dd: 3e:23:eb:cc:f7:35:1e:83:95:17:d8:75:a5:6f:c8:ef:4e:0d: ad:96:6a:09:4d:3b:9a:33:78:72:87:84:45:96:25:e5:63:0b: 24:a9:30:2b:74:6f:ca:61:e9:0e:e3:64:31:d6:be:92:1f:ca: c6:44:5f:13:e5:ee:c6:2e:aa:93:e8:f2:c9:31:3d:ae:0c:1d: 68:5f:22:2b:50:96:37:00:f8:85:84:37:5c:72:8d:18:38:9e: 71:31:6a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiE/UfQLxAI3sSy37PegYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTY4MWM3MWJlYjQ2NGUwMWQ1YjY4ZTE5Y2E1NjZkYTk5 MzBlMjMwHhcNMjUxMjA1MjIwMDU2WhcNMjUxMjA2MjIwMDU2WjAzMTEwLwYDVQQD Eyg2MjA3NzA0YTdhNTNlMjhkZTY0YjAwMWZmOTYyNWViMjUxODUzY2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GHQqdWAiDpBvp50iSvX72JRUJ77 dyCEH/mJ+yZG5oejSMI6spmbUcw2CBEvWGjGWO6Djv2sg2f0dqGqSqOOWnAGjmde miF7vyaJVEDlWqp7HWxK1n/oUMpZ4Xtkhav1BquJdx+GW8soi1+G9Xd1aiR3dNOd hhXS39Ujx80SP3+3qBcA67IpQKo1ddbzWZyJbJziO6NeEYdaAVJ59KDAlElYW1eR j+3xizvAhurID1Y7V4rkO844JnUtJOsyIiEm0idFUwVVONtTSo6MT0DUH0wUUlaM UdLq1vzM4MwJpLzE0YMGCL3MeBBOB66PvR2fLXQVgmvVrPAOKNwTWX724QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIHcEp6U+KN5ksAH/liXrJRhTygMB8GA1UdIwQY MBaAFFimgccb60ZOAdW2jhnKVm2pkw4jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEt OTdmOTFiYzk3YTQyLzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9mNTFkMmUtZDE3NC00ZWY1LTgwYzEtOTdmOTFiYzk3YTQy LzEvV0thQnh4dnJSazRCMWJhT0djcFdiYW1URGlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSMzXXhH C1lIjGsdQNIOgCv5gbSzB4RM8FKcndGgCCtBeqlZsNWq6gk2IGRwVC0fNKOXqqYC n/igAwkajNTkwSOfID1Fyro1SDU2aCF5cUf6g2X8fBum2gKbd7quJjyKOby9Nhuk /fq4xBbA/Q5Ee8y8Z0ijGkzdJ/yvB5gT5PdJcfh0ElLDv6dEVdHGEWszJ/VIW6ns 0UNNK7rW397qx7PdPiPrzPc1HoOVF9h1pW/I704NrZZqCU07mjN4coeERZYl5WML JKkwK3RvymHpDuNkMda+kh/KxkRfE+Xuxi6qk+jyyTE9rgwdaF8iK1CWNwD4hYQ3 XHKNGDiecTFqGw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:52 2025 by rpki-client