This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json) Hash identifier: ho6c/wKr+cah02NRrHIojzSSdmt35ggrKkph/+AP94g= Subject key identifier: 2B:7E:19:49:5C:66:3E:B0:0F:7F:DD:16:42:88:B0:4A:DE:3A:36:FD Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09 Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409 Certificate serial: 019AF2773C6485807AF7F1FA4144A0853F9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft Manifest number: 061A Signing time: Sat 06 Dec 2025 07:01:31 +0000 Manifest this update: Sat 06 Dec 2025 07:01:31 +0000 Manifest next update: Sun 07 Dec 2025 07:01:31 +0000 Files and hashes: 1: QEzw4CiK6CiHgldhyTg0boyDFI4.roa (hash: ffDuLw/6EUMQBC9wlTrHOAlboOryP+rRmytNZtNkFZU=) 2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: 9Lxlo4Uf+TWYgBMIa2c9iwdcpplFoXECvky18rWVJu0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:3c:64:85:80:7a:f7:f1:fa:41:44:a0:85:3f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409 Validity Not Before: Dec 6 07:01:31 2025 GMT Not After : Dec 7 07:01:31 2025 GMT Subject: CN=2b7e19495c663eb00f7fdd164288b04ade3a36fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:a6:b4:ee:ff:2e:ab:9d:2c:a8:cf:3d:42: 94:d3:31:20:cb:14:54:a6:73:1c:84:43:54:3b:b5: b4:8f:60:e1:ec:5c:10:db:66:70:cd:e6:29:de:72: 25:e9:81:aa:49:bd:81:3b:02:ec:3a:e3:b5:8e:2f: b6:5d:07:8e:b4:53:d5:8a:68:65:0b:64:2e:f9:a4: aa:2f:6d:ae:5c:06:d1:e6:9f:4f:dd:0a:71:9d:97: 35:69:22:66:fe:cf:9a:11:69:e8:53:ab:2a:56:e0: ec:d0:db:c2:84:d1:7a:b4:4a:82:56:86:77:3c:34: 55:31:6b:41:9f:75:08:fc:55:9e:fc:a3:b7:1b:e4: 39:59:a0:c1:11:03:67:e8:71:33:2b:29:ae:22:0d: 43:26:c7:7a:c8:e7:bd:e1:5e:0a:fb:b4:70:1f:0d: e1:7d:52:20:bb:71:a3:17:d9:2a:5c:ba:91:bc:d6: 05:71:b7:bc:d2:12:1c:6f:0d:0d:10:4f:14:f5:c6: 8b:21:85:3b:9d:28:ce:f7:c3:85:45:f7:c9:65:7d: 12:62:6b:49:c8:eb:66:7c:b2:51:03:ae:d4:8f:f2: 18:8f:b3:75:8b:c2:dd:02:31:ad:2a:2c:c2:a3:94: fd:92:28:83:7d:33:cd:44:ef:df:5d:c6:df:7c:58: 59:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7E:19:49:5C:66:3E:B0:0F:7F:DD:16:42:88:B0:4A:DE:3A:36:FD X509v3 Authority Key Identifier: keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f9:d2:e2:72:2f:c3:f9:10:1c:c3:46:38:a9:3e:86:71:6e: 53:3d:e2:24:40:8b:f0:68:64:df:1a:85:81:8c:79:85:51:38: ef:4c:27:57:1d:41:a1:44:82:81:b0:9c:c3:30:78:81:bd:f2: c2:f8:ca:77:6c:21:18:3c:f7:77:39:9c:cf:e9:76:93:0f:60: ed:f0:01:a3:f5:33:82:0d:2a:f5:8e:b8:51:f7:dd:20:81:0d: 4f:3c:ba:72:db:4a:9c:44:67:b8:ae:6a:f1:63:8e:0d:ed:34: fc:d0:90:d9:a1:7f:3e:9b:09:a0:22:e4:c2:0d:2b:60:57:c0: 62:16:6c:14:b1:ba:a3:20:bb:8b:a3:25:25:b6:92:01:31:61: 64:78:78:7f:ad:cf:19:27:3e:bb:35:40:b2:63:18:2a:72:7a: b1:1f:72:16:3e:09:58:59:b8:8a:10:07:5c:58:27:6b:95:23: 03:88:80:4f:5e:02:1c:80:fd:44:f2:6c:04:cf:a0:12:e0:0e: 69:0e:50:77:56:69:b5:98:e6:37:87:1f:c1:ef:8e:7f:5e:a6: aa:72:61:94:35:52:e0:9a:f5:74:50:f5:46:5a:19:98:19:cb: 69:1c:ce:b2:de:a7:a6:79:d4:ba:ef:a2:91:56:ba:93:e6:2d: 68:d9:28:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydzxkhYB69/H6QUSghT+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2JmZTA4MzRmOGU2NjUxMmY1NWJkNzhjYzA3NWI3ZWQ1 NmY0MDkwHhcNMjUxMjA2MDcwMTMxWhcNMjUxMjA3MDcwMTMxWjAzMTEwLwYDVQQD EygyYjdlMTk0OTVjNjYzZWIwMGY3ZmRkMTY0Mjg4YjA0YWRlM2EzNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktWmtO7/LqudLKjPPUKU0zEgyxRU pnMchENUO7W0j2Dh7FwQ22ZwzeYp3nIl6YGqSb2BOwLsOuO1ji+2XQeOtFPVimhl C2Qu+aSqL22uXAbR5p9P3QpxnZc1aSJm/s+aEWnoU6sqVuDs0NvChNF6tEqCVoZ3 PDRVMWtBn3UI/FWe/KO3G+Q5WaDBEQNn6HEzKymuIg1DJsd6yOe94V4K+7RwHw3h fVIgu3GjF9kqXLqRvNYFcbe80hIcbw0NEE8U9caLIYU7nSjO98OFRffJZX0SYmtJ yOtmfLJRA67Uj/IYj7N1i8LdAjGtKizCo5T9kiiDfTPNRO/fXcbffFhZHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCt+GUlcZj6wD3/dFkKIsEreOjb9MB8GA1UdIwQY MBaAFFjL/gg0+OZlEvVb14zAdbftVvQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDIt NDA5NDEwNjc4NmE5LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDItNDA5NDEwNjc4NmE5 LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvnS4nIv w/kQHMNGOKk+hnFuUz3iJECL8Ghk3xqFgYx5hVE470wnVx1BoUSCgbCcwzB4gb3y wvjKd2whGDz3dzmcz+l2kw9g7fABo/Uzgg0q9Y64UffdIIENTzy6cttKnERnuK5q 8WOODe00/NCQ2aF/PpsJoCLkwg0rYFfAYhZsFLG6oyC7i6MlJbaSATFhZHh4f63P GSc+uzVAsmMYKnJ6sR9yFj4JWFm4ihAHXFgna5UjA4iAT14CHID9RPJsBM+gEuAO aQ5Qd1ZptZjmN4cfwe+Of16mqnJhlDVS4Jr1dFD1RloZmBnLaRzOst6npnnUuu+i kVa6k+YtaNkoGA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:13:24 2025 by rpki-client