This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json) Hash identifier: OufSWNUlmhqzK4Eib9SHzMyuXCq2HYv6dV0jE3KAkso= Subject key identifier: 0D:16:4C:91:60:A3:AB:CE:1A:09:E5:BF:52:A9:D7:9B:C7:96:88:FA Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1 Certificate serial: 019AF1D2258DCE92D9EAD9C6677C545EB25C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft Manifest number: 0683 Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: 0se6oPOZ9FSI_6qzearxcjxlYSY.roa (hash: g6cZT2b3ImLhGYVmMKzVx9c34caYKC+s1u35aPIl42k=) 2: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: GNgxHKCbyX3H64cyp6h/QDIFMN5gvL3+rOUZvKkymUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:25:8d:ce:92:d9:ea:d9:c6:67:7c:54:5e:b2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1 Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=0d164c9160a3abce1a09e5bf52a9d79bc79688fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:10:1a:88:ff:06:b0:99:65:69:02:75:24:55: da:b5:72:79:b6:4c:4e:93:74:57:a9:6e:c7:eb:14: b7:2e:ac:5c:47:83:41:62:a8:fd:69:b5:40:e3:24: 27:de:3e:6b:fb:95:d7:97:19:51:50:3c:30:24:c3: 91:19:5f:37:4b:2a:73:e4:1a:47:d9:94:a2:63:75: 1f:ec:f1:11:c2:c2:5c:94:d3:a2:d7:78:a9:4f:c9: 98:55:eb:82:f1:7f:06:99:55:0c:b1:e1:c6:08:fe: e4:d1:4b:0f:a5:41:41:14:2d:49:24:27:41:34:e2: 68:4f:6b:29:f2:5e:f7:5f:7c:44:ab:e1:d4:47:a6: 12:41:2d:87:3e:5e:1b:29:2e:b6:5f:2f:05:0f:6d: fc:f1:3f:4c:a5:84:95:26:3d:00:25:22:7d:84:ca: f3:89:b8:41:fd:32:97:9f:d6:37:71:d4:a7:58:8c: 0d:e6:58:95:7b:1a:58:65:76:48:1f:88:e5:e4:ea: 49:3a:d1:09:0f:53:31:92:e0:0a:3c:d8:1d:7a:71: 87:db:45:56:83:b6:0e:bf:85:1c:35:40:a9:b2:bf: ba:9c:a5:c9:10:d3:42:34:44:ca:3d:f0:55:ed:7b: 29:19:e1:6b:23:3f:48:c1:44:dd:70:c0:b9:b4:59: a5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:16:4C:91:60:A3:AB:CE:1A:09:E5:BF:52:A9:D7:9B:C7:96:88:FA X509v3 Authority Key Identifier: keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:88:4d:aa:a7:49:ce:ee:70:e5:26:b4:08:94:93:fc:ff: de:19:43:07:11:ab:1d:a0:69:9a:3f:34:fb:bf:68:b9:52:df: 3f:27:ab:dd:d6:fc:5f:1c:9c:4c:83:3f:5d:dd:d6:82:0a:ea: 07:a9:94:84:70:82:d8:79:4e:28:7b:28:09:c4:a8:29:e1:76: dd:cd:b0:3a:81:c5:da:5b:64:16:10:59:d1:9e:8f:6e:74:48: 56:19:9e:0a:fc:3b:08:9d:75:46:e2:d4:98:79:52:fb:f6:b4: 97:41:ac:4a:db:b8:5b:bf:77:59:cc:f9:ca:02:55:93:9b:2a: 0b:58:6d:02:19:d1:ee:9f:73:47:8f:50:57:1a:2b:cd:4c:e0: 49:19:6e:3e:0e:d4:9a:98:10:c5:2c:c5:f6:77:ca:61:e0:c4: 03:29:44:1b:ee:be:8a:2d:b6:7a:95:2d:df:ee:01:52:74:77: 70:8a:3c:a7:b9:44:ed:36:75:64:bd:ed:c1:0b:7f:ee:2f:f2: e1:ab:e6:54:32:3d:3a:0e:3f:0a:97:c2:91:1a:f9:2a:44:af: e1:85:23:3f:57:59:cd:83:fa:57:bb:c3:84:d9:10:2f:eb:6a: c9:e7:4e:7f:da:f9:7d:fc:20:04:8d:df:41:33:69:98:2d:08: f9:cd:ff:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0iWNzpLZ6tnGZ3xUXrJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YmM1MmIxNTA2OWMxYzQ3YjU0ZTk3YjlmNTY5NGI3NTVi NWNlYjEwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD EygwZDE2NGM5MTYwYTNhYmNlMWEwOWU1YmY1MmE5ZDc5YmM3OTY4OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxAaiP8GsJllaQJ1JFXatXJ5tkxO k3RXqW7H6xS3LqxcR4NBYqj9abVA4yQn3j5r+5XXlxlRUDwwJMORGV83Sypz5BpH 2ZSiY3Uf7PERwsJclNOi13ipT8mYVeuC8X8GmVUMseHGCP7k0UsPpUFBFC1JJCdB NOJoT2sp8l73X3xEq+HUR6YSQS2HPl4bKS62Xy8FD2388T9MpYSVJj0AJSJ9hMrz ibhB/TKXn9Y3cdSnWIwN5liVexpYZXZIH4jl5OpJOtEJD1MxkuAKPNgdenGH20VW g7YOv4UcNUCpsr+6nKXJENNCNETKPfBV7XspGeFrIz9IwUTdcMC5tFmlRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA0WTJFgo6vOGgnlv1Kp15vHloj6MB8GA1UdIwQY MBaAFFm8UrFQacHEe1Tpe59WlLdVtc6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEt MmMxMGIxOWQ0YzJhLzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEtMmMxMGIxOWQ0YzJh LzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohGITaqn Sc7ucOUmtAiUk/z/3hlDBxGrHaBpmj80+79ouVLfPyer3db8XxycTIM/Xd3Wggrq B6mUhHCC2HlOKHsoCcSoKeF23c2wOoHF2ltkFhBZ0Z6PbnRIVhmeCvw7CJ11RuLU mHlS+/a0l0GsStu4W793Wcz5ygJVk5sqC1htAhnR7p9zR49QVxorzUzgSRluPg7U mpgQxSzF9nfKYeDEAylEG+6+ii22epUt3+4BUnR3cIo8p7lE7TZ1ZL3twQt/7i/y 4avmVDI9Og4/CpfCkRr5KkSv4YUjP1dZzYP6V7vDhNkQL+tqyedOf9r5ffwgBI3f QTNpmC0I+c3/iw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:51:14 2025 by rpki-client