This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json) Hash identifier: QFZX+n4dWGFWEaNxmVkiEINyy7apo7s2W8fyg3REHKA= Subject key identifier: C6:3E:5F:25:EF:4A:3D:15:43:E1:92:03:10:4A:D2:57:E1:4B:17:89 Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Certificate serial: 019AF2AD9CC596CD722C66F54CD09DD808E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft Manifest number: 0548 Signing time: Sat 06 Dec 2025 08:00:55 +0000 Manifest this update: Sat 06 Dec 2025 08:00:55 +0000 Manifest next update: Sun 07 Dec 2025 08:00:55 +0000 Files and hashes: 1: nvT_HNaheF7AuMYSBVzSYd3DVGE.roa (hash: f440eLAYfJKuxJN3bKdcZpOgumvQKi1Mg+JrUe7gMQo=) 2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: kxGYp4Mv6JHNiH8pcH2HHKKNLKtw55ueJgsykXGdMIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:9c:c5:96:cd:72:2c:66:f5:4c:d0:9d:d8:08:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Validity Not Before: Dec 6 08:00:55 2025 GMT Not After : Dec 7 08:00:55 2025 GMT Subject: CN=c63e5f25ef4a3d1543e19203104ad257e14b1789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:38:58:de:87:6e:97:f9:69:55:a9:24:c3: b6:57:ec:58:5b:b4:1b:91:0e:c4:93:db:28:da:1a: 2a:ce:ac:1c:fc:af:66:0a:c2:79:3e:3f:c7:7a:db: 61:57:a9:8f:78:38:3d:8b:a2:d2:fa:06:d0:29:e8: 69:fd:eb:c9:0a:05:b3:41:6a:d9:9f:7c:79:b4:43: 6e:e7:5b:d4:ec:97:3c:2b:1d:ab:f5:fb:ec:cf:84: 72:98:a8:e8:04:01:42:40:ea:ee:3a:ee:3b:13:ee: c5:56:ba:7c:96:08:25:7b:f2:5b:47:ae:ae:48:da: 47:7a:a9:c4:45:49:cd:72:c9:84:ac:53:1c:23:22: 24:a9:06:e1:57:74:af:8b:f1:1a:89:de:bb:e1:5a: 99:7e:75:97:ed:49:29:b8:e7:2a:38:81:50:dc:71: 35:7d:a0:d2:4a:63:60:86:d8:e9:7e:a3:83:74:7e: ba:f1:bd:18:25:c3:fa:27:b6:c4:30:ac:0e:7e:6b: a0:df:29:f5:47:b9:c7:58:2b:a4:07:98:90:18:f3: 8d:32:b3:57:d9:4b:8c:9f:3b:18:f5:8b:2c:67:77: 36:5f:ed:16:2c:4f:3e:40:5b:16:d5:a7:55:d8:8e: 61:31:ca:2b:19:7f:89:e5:37:37:ed:24:8c:2e:86: 38:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:3E:5F:25:EF:4A:3D:15:43:E1:92:03:10:4A:D2:57:E1:4B:17:89 X509v3 Authority Key Identifier: keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:19:2a:4e:ab:25:ba:4b:69:4c:67:c4:dd:28:14:be:91:8c: 56:09:74:6a:08:cb:64:75:1d:59:2d:89:12:39:e6:2d:49:61: a9:20:51:6c:44:ea:9d:ff:3f:9d:42:aa:18:e5:f2:cf:d1:29: 06:f1:11:c9:e3:e6:03:84:ba:e3:53:db:c3:e3:eb:18:ca:78: 74:ee:ff:c0:ac:66:cc:c8:ab:4a:33:e9:17:5d:e2:8c:4a:b7: 33:cc:2f:37:b3:57:eb:3a:be:a6:e4:d5:68:a6:89:ca:f1:9f: 5f:97:9f:5d:e4:87:a7:7d:ff:8b:11:a2:ac:b2:21:ec:98:ef: 99:0e:01:e3:60:3c:e6:34:e2:a1:77:18:5b:e7:6d:b2:2f:59: f8:06:03:f3:dd:94:f5:46:eb:eb:71:95:55:44:5c:fd:47:5a: 91:93:a7:d6:34:95:9d:20:51:11:11:62:e2:8a:1c:2e:b0:61: cd:81:2a:26:69:c9:61:85:ed:ab:39:cf:68:c2:4d:ae:70:6e: bb:a1:74:d6:b0:cb:7f:ed:78:c7:1a:9a:7b:2e:cf:a5:91:9c: 3c:5f:58:2a:f1:5a:45:a9:19:5a:4f:43:93:cd:27:a4:aa:70: 82:5d:7b:b6:cb:ce:56:df:73:07:c3:31:46:63:e2:99:a2:af: e8:a0:ff:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrZzFls1yLGb1TNCd2AjgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz YTE5OTYwHhcNMjUxMjA2MDgwMDU1WhcNMjUxMjA3MDgwMDU1WjAzMTEwLwYDVQQD EyhjNjNlNWYyNWVmNGEzZDE1NDNlMTkyMDMxMDRhZDI1N2UxNGIxNzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRc4WN6Hbpf5aVWpJMO2V+xYW7Qb kQ7Ek9so2hoqzqwc/K9mCsJ5Pj/HetthV6mPeDg9i6LS+gbQKehp/evJCgWzQWrZ n3x5tENu51vU7Jc8Kx2r9fvsz4RymKjoBAFCQOruOu47E+7FVrp8lggle/JbR66u SNpHeqnERUnNcsmErFMcIyIkqQbhV3Svi/Eaid674VqZfnWX7UkpuOcqOIFQ3HE1 faDSSmNghtjpfqODdH668b0YJcP6J7bEMKwOfmug3yn1R7nHWCukB5iQGPONMrNX 2UuMnzsY9YssZ3c2X+0WLE8+QFsW1adV2I5hMcorGX+J5Tc37SSMLoY4QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMY+XyXvSj0VQ+GSAxBK0lfhSxeJMB8GA1UdIwQY MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4 LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRkqTqsl uktpTGfE3SgUvpGMVgl0agjLZHUdWS2JEjnmLUlhqSBRbETqnf8/nUKqGOXyz9Ep BvERyePmA4S641Pbw+PrGMp4dO7/wKxmzMirSjPpF13ijEq3M8wvN7NX6zq+puTV aKaJyvGfX5efXeSHp33/ixGirLIh7JjvmQ4B42A85jTioXcYW+dtsi9Z+AYD892U 9Ubr63GVVURc/UdakZOn1jSVnSBRERFi4oocLrBhzYEqJmnJYYXtqznPaMJNrnBu u6F01rDLf+14xxqaey7PpZGcPF9YKvFaRakZWk9Dk80npKpwgl17tsvOVt9zB8Mx RmPimaKv6KD/DA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:55 2025 by rpki-client