This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft File: WbYCCZDrELBT1WtH4sg0paYmtdM.mft (raw, json) Hash identifier: O/6Gp6rh4OlaeTs+kbn5jOoHN8GjFDzbvsUoBvy+AhI= Subject key identifier: 1A:28:EC:62:E7:A3:FF:6B:2D:58:E7:20:F8:0F:D3:2B:8D:B6:15:05 Authority key identifier: 59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 Certificate issuer: /CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Certificate serial: 019AF12DD083465D45A4FAA8FB4B194CC152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft Manifest number: 06E4 Signing time: Sat 06 Dec 2025 01:01:42 +0000 Manifest this update: Sat 06 Dec 2025 01:01:42 +0000 Manifest next update: Sun 07 Dec 2025 01:01:42 +0000 Files and hashes: 1: WbYCCZDrELBT1WtH4sg0paYmtdM.crl (hash: nZvKyoUlgPSf7OSjVz2A5DNjDp+FWaujVJ4k+MoKtnI=) 2: ibsagXyULK6_yzLYa3pXOko3XKU.roa (hash: 03/iKlKS42XpS4t49YCxIL0w2I8iyQ6yxzMTAdH/Ztc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d0:83:46:5d:45:a4:fa:a8:fb:4b:19:4c:c1:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b6020990eb10b053d56b47e2c834a5a626b5d3 Validity Not Before: Dec 6 01:01:42 2025 GMT Not After : Dec 7 01:01:42 2025 GMT Subject: CN=1a28ec62e7a3ff6b2d58e720f80fd32b8db61505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1a:1e:08:75:56:e3:9e:ca:6e:e8:03:15:dd: 28:d4:88:94:60:43:cd:36:15:da:1f:a9:c1:ee:56: 36:eb:c1:98:e1:41:c3:d3:37:af:12:c8:d9:c5:8f: 8e:53:b1:a1:d1:7e:5f:ee:45:0f:6c:7f:88:11:79: 31:97:f1:5f:89:47:59:e0:42:63:2e:e5:00:e8:59: a4:be:13:48:aa:05:b6:41:d6:7e:c1:33:18:86:4d: 88:9f:0a:08:64:70:3a:4e:c0:bf:a3:47:f8:ae:d7: 8a:ae:92:54:2a:fd:73:47:0d:33:b1:41:f4:63:f1: c4:0a:2c:dd:0c:86:f1:f1:2f:05:b8:41:41:be:37: a1:29:81:c4:f2:a7:d6:10:f7:29:e8:da:f4:31:ba: 8d:70:45:a2:f2:38:ca:02:18:bb:6c:19:88:76:de: 7b:23:33:f8:d3:ce:f3:81:f8:49:71:4a:ae:6a:97: ff:ac:bc:79:00:cd:60:64:62:2e:f5:4f:c1:37:fe: e9:2a:37:32:8a:9e:3f:06:fe:e1:01:d0:b5:98:70: bc:bb:d3:1f:35:72:cb:39:a8:da:b4:40:ce:e8:7c: c8:e7:8a:93:fe:aa:d4:df:e4:1b:90:d9:ad:07:75: 3e:60:b5:6b:2f:33:f2:5d:ef:77:e2:40:9d:7f:4c: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:28:EC:62:E7:A3:FF:6B:2D:58:E7:20:F8:0F:D3:2B:8D:B6:15:05 X509v3 Authority Key Identifier: keyid:59:B6:02:09:90:EB:10:B0:53:D5:6B:47:E2:C8:34:A5:A6:26:B5:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbYCCZDrELBT1WtH4sg0paYmtdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ded97f-0214-4388-8008-9823b7ea4db3/1/WbYCCZDrELBT1WtH4sg0paYmtdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e5:6d:68:67:7c:0a:a2:c9:98:f4:98:17:3b:04:37:54:db: c1:7b:92:d3:3b:e1:85:9f:9e:da:7f:c1:79:4f:90:6c:15:9f: b7:e8:12:85:62:c4:3e:6d:3f:53:4d:2e:38:13:53:43:9c:26: 54:aa:89:38:be:71:e9:f8:99:07:f4:41:90:9b:62:f5:80:b2: f9:a5:77:5c:24:52:ab:69:3c:da:02:49:06:29:c6:50:68:f5: 1b:f5:77:ff:d7:e6:f0:5b:c2:19:9b:05:a4:72:76:d9:10:e9: d8:fd:01:17:de:45:54:5b:01:42:99:77:00:ee:6e:a9:15:27: 7d:3b:ec:97:06:e9:23:b4:bb:5e:24:0e:b8:8d:28:f9:93:29: 23:b0:4e:de:c4:31:3f:16:b7:5c:94:8c:aa:19:f7:c6:16:64: 44:2f:3f:d4:b7:74:ee:65:95:a0:d8:86:ff:0b:22:88:6a:e2: 19:ce:f5:f8:9d:f9:bc:16:aa:62:a8:8d:32:5b:43:b0:26:f1: 1d:05:09:10:d3:18:3d:62:71:2b:11:ed:f3:aa:b9:b9:9c:d9: 72:89:de:54:7f:66:96:88:9d:77:b5:c9:ad:f8:e2:61:31:5e: 35:71:1b:d4:9c:61:52:8a:74:c5:ab:38:e1:97:58:d3:9f:53: 17:e7:88:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdCDRl1FpPqo+0sZTMFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjYwMjA5OTBlYjEwYjA1M2Q1NmI0N2UyYzgzNGE1YTYy NmI1ZDMwHhcNMjUxMjA2MDEwMTQyWhcNMjUxMjA3MDEwMTQyWjAzMTEwLwYDVQQD EygxYTI4ZWM2MmU3YTNmZjZiMmQ1OGU3MjBmODBmZDMyYjhkYjYxNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hoeCHVW457KbugDFd0o1IiUYEPN NhXaH6nB7lY268GY4UHD0zevEsjZxY+OU7Gh0X5f7kUPbH+IEXkxl/FfiUdZ4EJj LuUA6FmkvhNIqgW2QdZ+wTMYhk2InwoIZHA6TsC/o0f4rteKrpJUKv1zRw0zsUH0 Y/HECizdDIbx8S8FuEFBvjehKYHE8qfWEPcp6Nr0MbqNcEWi8jjKAhi7bBmIdt57 IzP4087zgfhJcUquapf/rLx5AM1gZGIu9U/BN/7pKjcyip4/Bv7hAdC1mHC8u9Mf NXLLOajatEDO6HzI54qT/qrU3+QbkNmtB3U+YLVrLzPyXe934kCdf0zvswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoo7GLno/9rLVjnIPgP0yuNthUFMB8GA1UdIwQY MBaAFFm2AgmQ6xCwU9VrR+LINKWmJrXTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgt OTgyM2I3ZWE0ZGIzLzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9kZWQ5N2YtMDIxNC00Mzg4LTgwMDgtOTgyM2I3ZWE0ZGIz LzEvV2JZQ0NaRHJFTEJUMVd0SDRzZzBwYVltdGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOVtaGd8 CqLJmPSYFzsEN1TbwXuS0zvhhZ+e2n/BeU+QbBWft+gShWLEPm0/U00uOBNTQ5wm VKqJOL5x6fiZB/RBkJti9YCy+aV3XCRSq2k82gJJBinGUGj1G/V3/9fm8FvCGZsF pHJ22RDp2P0BF95FVFsBQpl3AO5uqRUnfTvslwbpI7S7XiQOuI0o+ZMpI7BO3sQx Pxa3XJSMqhn3xhZkRC8/1Ld07mWVoNiG/wsiiGriGc71+J35vBaqYqiNMltDsCbx HQUJENMYPWJxKxHt86q5uZzZconeVH9mloidd7XJrfjiYTFeNXEb1JxhUop0xas4 4ZdY059TF+eIyg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:18 2025 by rpki-client