This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
File: WDMpShzcE1ivxDnApyczsGWob4s.mft (raw, json)
Hash identifier: Hb59KqznCNimaStT7/z6+hrC7qqsFPhU2c+3eItrUD0=
Subject key identifier: A5:96:67:51:21:AE:11:6A:BA:F8:83:89:30:A1:04:5B:BE:3D:34:2F
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial: 019AF12D262235B9585B0CA6D0F8528587C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
Manifest number: 14C4
Signing time: Sat 06 Dec 2025 01:00:59 +0000
Manifest this update: Sat 06 Dec 2025 01:00:59 +0000
Manifest next update: Sun 07 Dec 2025 01:00:59 +0000
Files and hashes: 1: FEhWjmoWc9cum53HxeyUT2Qa6mw.roa (hash: kSh8B6Zq+kic4h5PjLJKx7l3r3KTkN44epk5FRWmu2U=)
2: K0HsWHysHMZq685uifFe67OOB8U.roa (hash: mIF7jMe84gl1h6EoDmzjdFHUQ2hvrkI5zhJWqQMrx4w=)
3: WDMpShzcE1ivxDnApyczsGWob4s.crl (hash: zaER/5F0xrUpw7jOwd63lBIEIVoNAV2fymwjWITz9eA=)
4: hMmGvyz2W2EPSFxojtcmtvFemfI.roa (hash: Zkzb4yaO0yFYxaiPMOmQN6F3WGq60dEdcds/Vk7pzrc=)
5: kFJhvw8c8pO7-ui_KmaA5RNc_z4.roa (hash: YGEP4CjqmM4E2cc+zdPbvwB4J8vm3ddL4Eiaa6+UYhA=)
6: rVAMPxQEajIzgBDq_QlH1UB_rOs.roa (hash: i7dAzsdGsRXLSIsa/8df9dB0gK3gqAkFNHzOpoaptoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:2d:26:22:35:b9:58:5b:0c:a6:d0:f8:52:85:87:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Validity
Not Before: Dec 6 01:00:59 2025 GMT
Not After : Dec 7 01:00:59 2025 GMT
Subject: CN=a596675121ae116abaf8838930a1045bbe3d342f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:46:b0:8b:9c:43:89:cb:f5:da:10:65:b3:72:
f8:af:0b:95:b4:ff:dd:46:29:c3:68:74:88:d9:4d:
d5:b7:5a:41:5c:55:35:0d:2b:da:2f:a7:f8:10:5c:
97:a7:9d:b8:55:8e:29:0b:43:f9:de:0f:f3:6b:00:
6e:fb:55:f3:6c:54:e6:48:27:af:7e:10:36:12:66:
e5:69:25:89:09:03:ed:fd:44:ed:01:a3:d6:7b:aa:
4c:4e:e0:f6:fa:3b:2d:96:b7:63:7a:2a:a4:2c:52:
2a:5a:bf:87:86:95:c0:f2:c9:f4:72:e1:12:c4:14:
5f:f8:eb:3c:76:0a:15:15:1d:9d:20:80:ab:f0:6f:
85:a9:95:aa:92:4d:d5:46:75:04:d4:96:35:ec:ff:
7e:73:70:a9:2f:14:79:a1:e8:1a:0f:d0:20:02:3a:
4e:4f:0b:44:48:48:a6:14:9a:1f:ad:ca:e0:b3:8b:
54:df:3b:87:ae:6a:12:fd:1a:20:41:4d:fa:33:1b:
38:e2:3f:13:89:2c:ef:02:26:1b:af:6c:39:64:33:
95:dc:5b:a0:bb:ec:64:86:68:8e:c8:db:a4:7a:72:
e2:00:7d:80:dd:75:0b:78:6a:34:5c:c7:35:2d:22:
44:3f:e4:f9:a7:12:ca:46:67:64:45:67:92:d9:ae:
87:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:96:67:51:21:AE:11:6A:BA:F8:83:89:30:A1:04:5B:BE:3D:34:2F
X509v3 Authority Key Identifier:
keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:5b:5c:d5:8e:06:eb:4b:12:7f:fc:b4:ed:ae:79:aa:d4:38:
b3:af:82:75:75:68:3e:57:41:88:d5:cf:a8:b8:04:76:b7:6f:
d9:8a:9c:b0:49:23:f9:f6:4c:9d:ca:51:25:b1:bd:f8:10:9c:
a3:db:de:f0:d3:0b:11:46:40:ad:8b:f9:ce:95:c0:da:ee:ff:
b4:a6:92:90:be:4c:1d:11:0e:02:8a:a3:17:5d:bc:0e:4c:87:
9b:49:ce:38:cd:4e:75:63:b5:34:af:1b:9c:a3:46:52:4f:93:
03:5a:f5:e4:30:8f:eb:cd:2d:9e:da:52:be:ea:81:0c:88:f4:
36:49:0a:52:d8:64:51:b9:ee:9f:74:7e:49:00:a6:f0:64:d1:
a6:ac:2c:8e:e8:70:fc:4b:a4:35:e7:b1:85:2c:83:34:97:54:
7d:3c:26:33:1e:db:71:a8:75:5d:e0:1e:8d:3f:3d:00:67:2e:
6f:3e:ce:6f:ac:b0:d2:f3:0c:c3:2a:9a:d1:9e:ed:ca:09:83:
00:ec:52:27:ce:ce:60:d8:bd:f0:80:d0:e8:ba:70:44:63:f1:
50:55:4c:9c:fd:64:b1:3b:eb:b0:43:4f:5a:f8:63:8a:6d:29:
07:6a:d6:a1:d0:aa:3b:36:c1:5d:69:d3:9e:74:b5:11:2f:a9:
4b:f0:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:15 2025 by rpki-client