This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft File: WKhqbHH7c0xwW15m50rBxWu5YF4.mft (raw, json) Hash identifier: lpPrnVpQly4M9ud3CVBqAezfmUviAMvxpCDxusiMoC8= Subject key identifier: 69:26:BC:8F:9C:4D:80:E3:0F:D4:DA:C2:61:F2:9D:BE:7E:C9:7B:3E Authority key identifier: 58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E Certificate issuer: /CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e Certificate serial: 019AF31C65741CB5DAF596344B6915C91A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft Manifest number: 0D7D Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: WKhqbHH7c0xwW15m50rBxWu5YF4.crl (hash: 33i82beqpvyuZGZ8EEw6fhRv+mzvFPRwAQbsiur7xNE=) 2: eTD5X7eUVxPbE-bCRH9QGxLRZDs.roa (hash: IG853MFkGaq1sWpTd3DWggMITF7We7r2IbsZKj9lAZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:65:74:1c:b5:da:f5:96:34:4b:69:15:c9:1a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a86a6c71fb734c705b5e66e74ac1c56bb9605e Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=6926bc8f9c4d80e30fd4dac261f29dbe7ec97b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:dd:60:3b:ae:b9:1d:fe:d1:52:02:63:ad: 37:52:c3:b6:f9:b4:ae:a8:ee:27:f4:b8:a3:37:1c: 39:97:10:b6:95:29:c6:26:6f:01:49:29:7f:cd:2d: 10:2b:fb:2d:63:bd:70:09:dc:3a:62:d1:dd:7e:35: 77:80:27:76:0f:01:29:2a:4d:9d:e0:2d:b0:32:22: a8:2a:79:62:38:8a:cc:86:ca:3e:a1:ee:65:1e:c0: 6a:e4:ac:61:18:e7:78:7b:db:78:31:36:0f:2b:a4: 0a:01:77:2f:50:3e:b9:31:66:71:9c:0a:37:ec:b8: a1:79:6c:ae:0d:41:41:2f:8e:0d:1a:3f:6d:2f:b3: 3a:9a:fe:1f:aa:76:c3:fc:84:c4:79:0e:0d:6c:f7: d7:16:3f:05:5a:be:6f:8c:36:85:84:7d:ad:00:24: 17:12:6d:e9:b3:72:da:ad:ff:36:7c:15:76:0a:01: cc:e9:d8:2a:29:48:16:ef:76:e9:9e:56:97:57:63: ab:59:2a:c5:63:ba:59:5f:24:45:2d:cd:cf:5d:ba: a5:61:bf:c4:78:c7:be:9e:64:88:05:63:5b:2d:97: 2d:6e:ad:25:02:68:f7:1d:f8:a9:ae:f6:b2:8f:4f: 52:89:79:24:8b:34:33:27:e2:e9:5c:a5:a2:f8:9b: 7a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:26:BC:8F:9C:4D:80:E3:0F:D4:DA:C2:61:F2:9D:BE:7E:C9:7B:3E X509v3 Authority Key Identifier: keyid:58:A8:6A:6C:71:FB:73:4C:70:5B:5E:66:E7:4A:C1:C5:6B:B9:60:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKhqbHH7c0xwW15m50rBxWu5YF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c4365-a98f-43fe-9950-a9b13c2800af/1/WKhqbHH7c0xwW15m50rBxWu5YF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:18:1d:14:a4:82:79:5b:ac:4b:ce:30:f7:f2:cc:f9:e4:e1: 38:ed:e3:df:cc:67:db:d4:6d:ec:b8:97:d0:4d:85:99:5d:52: 34:a6:7d:32:28:a6:cb:89:5b:a9:91:a0:e9:6a:b7:29:6a:64: 54:f5:a3:ef:88:9b:f2:cc:1c:c2:c0:38:ff:b8:97:da:d0:dc: 1c:e2:dd:93:9c:46:6b:bd:54:53:6b:09:09:58:69:84:09:6d: 7d:92:10:1f:fb:2a:8b:1b:9b:ed:bf:20:99:71:d2:52:63:db: b5:d5:c6:c8:4d:ed:6e:92:e6:57:3c:d2:ee:77:56:fd:6c:ff: 35:3d:da:8f:14:1a:56:8e:8d:2a:0c:4f:6e:88:1e:c5:43:36: e9:bb:c3:00:cd:8c:1c:bf:0d:a7:74:64:c8:c7:64:25:58:7c: ed:fe:25:b0:e2:bc:04:0d:83:ab:a6:10:b2:28:c2:d7:7a:99: e5:60:f8:f9:47:13:bb:7f:87:e0:c2:d1:bc:d1:d9:b2:38:b9: d4:03:b1:5d:5d:4e:6a:ca:25:3b:a9:30:ec:a1:26:42:36:7f: b2:e0:e5:a2:6f:5d:ff:05:b5:7a:d5:1c:a5:1d:79:84:37:ae: 44:45:a1:94:f0:71:fb:d5:f0:6d:47:83:e5:d3:c4:31:93:74: e8:3f:a3:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGV0HLXa9ZY0S2kVyRqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTg2YTZjNzFmYjczNGM3MDViNWU2NmU3NGFjMWM1NmJi OTYwNWUwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD Eyg2OTI2YmM4ZjljNGQ4MGUzMGZkNGRhYzI2MWYyOWRiZTdlYzk3YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6TdYDuuuR3+0VICY603UsO2+bSu qO4n9LijNxw5lxC2lSnGJm8BSSl/zS0QK/stY71wCdw6YtHdfjV3gCd2DwEpKk2d 4C2wMiKoKnliOIrMhso+oe5lHsBq5KxhGOd4e9t4MTYPK6QKAXcvUD65MWZxnAo3 7LiheWyuDUFBL44NGj9tL7M6mv4fqnbD/ITEeQ4NbPfXFj8FWr5vjDaFhH2tACQX Em3ps3Larf82fBV2CgHM6dgqKUgW73bpnlaXV2OrWSrFY7pZXyRFLc3PXbqlYb/E eMe+nmSIBWNbLZctbq0lAmj3Hfiprvayj09SiXkkizQzJ+LpXKWi+Jt6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkmvI+cTYDjD9TawmHynb5+yXs+MB8GA1UdIwQY MBaAFFioamxx+3NMcFteZudKwcVruWBeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAt YTliMTNjMjgwMGFmLzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85YzQzNjUtYTk4Zi00M2ZlLTk5NTAtYTliMTNjMjgwMGFm LzEvV0tocWJISDdjMHh3VzE1bTUwckJ4V3U1WUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRgdFKSC eVusS84w9/LM+eThOO3j38xn29Rt7LiX0E2FmV1SNKZ9Miimy4lbqZGg6Wq3KWpk VPWj74ib8swcwsA4/7iX2tDcHOLdk5xGa71UU2sJCVhphAltfZIQH/sqixub7b8g mXHSUmPbtdXGyE3tbpLmVzzS7ndW/Wz/NT3ajxQaVo6NKgxPbogexUM26bvDAM2M HL8Np3RkyMdkJVh87f4lsOK8BA2Dq6YQsijC13qZ5WD4+UcTu3+H4MLRvNHZsji5 1AOxXV1OasolO6kw7KEmQjZ/suDlom9d/wW1etUcpR15hDeuREWhlPBx+9XwbUeD 5dPEMZN06D+jOg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:39:24 2025 by rpki-client