This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
File: WxweBiQDm9HxqUbLUTyTOG-raxk.mft (raw, json)
Hash identifier: t2MrcuxrzbyZ7nHV8cxr1R93guSGeFLZEwl+Z9Ik64Y=
Subject key identifier: DD:E2:6C:78:E2:35:EE:A2:55:1B:74:C3:CB:08:57:CF:BB:F6:0F:D8
Authority key identifier: 5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
Certificate issuer: /CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Certificate serial: 019AF19B0486CA5C2A3DAB11C1A7576777A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
Manifest number: 0D61
Signing time: Sat 06 Dec 2025 03:00:59 +0000
Manifest this update: Sat 06 Dec 2025 03:00:59 +0000
Manifest next update: Sun 07 Dec 2025 03:00:59 +0000
Files and hashes: 1: J8g7cZ3te-XjH4vB99S63bY5jw8.roa (hash: kTqC/5LOxbM1zdbO1odgPNoINkirS3IzV43BF84XudQ=)
2: WxweBiQDm9HxqUbLUTyTOG-raxk.crl (hash: km9SvZkQ502AqAwaDe0ErYq3IasLvCGi1LZWdaHbshQ=)
3: n6GsozsAIUsV5q_nwqboXGBIS0o.roa (hash: SV+wqJcEFOa4P82VjIfU8axnoITYl7V615IXuKpHvcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9b:04:86:ca:5c:2a:3d:ab:11:c1:a7:57:67:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1c1e0624039bd1f1a946cb513c93386fab6b19
Validity
Not Before: Dec 6 03:00:59 2025 GMT
Not After : Dec 7 03:00:59 2025 GMT
Subject: CN=dde26c78e235eea2551b74c3cb0857cfbbf60fd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8b:69:f2:94:30:8b:e8:25:13:0f:42:27:af:
75:d9:f7:49:e1:5c:34:ea:3d:df:3b:ed:bd:d0:21:
db:9c:08:cc:22:c5:25:5b:55:ea:16:3d:cb:4b:b9:
04:49:f2:e4:8d:9c:35:f3:d3:c7:6e:ef:a4:d4:2b:
b3:15:34:b9:ce:a0:dc:88:b4:cb:07:e3:a8:72:d0:
14:65:0a:db:f7:b0:61:30:fe:63:ed:10:be:b8:bf:
c5:98:58:81:77:e0:c5:89:56:e8:4f:ff:1d:a9:ea:
81:40:6e:29:cd:3b:5d:e8:59:b1:cb:5c:1d:78:42:
60:49:a2:b2:61:42:f3:86:88:f8:7f:a7:eb:23:3f:
65:53:52:ae:7b:23:1f:86:d0:30:81:86:0e:82:68:
87:51:3c:48:a3:64:70:b4:ea:2a:3b:f5:02:ff:c1:
53:e6:f8:20:f0:60:8c:b2:b0:4b:07:29:06:5f:ff:
3b:0e:b8:a5:14:e1:b8:ad:5e:01:60:f4:ae:55:d9:
4c:9d:28:6b:bd:60:9b:87:1a:8c:48:c3:89:a0:58:
bc:c3:55:27:f4:3e:ef:ab:43:e4:99:b1:d8:cc:8f:
65:8f:6c:71:d9:35:fd:75:f8:76:ce:c9:b7:93:69:
6c:e0:f4:85:9e:2c:60:56:c2:e3:49:6e:a7:6d:da:
56:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E2:6C:78:E2:35:EE:A2:55:1B:74:C3:CB:08:57:CF:BB:F6:0F:D8
X509v3 Authority Key Identifier:
keyid:5B:1C:1E:06:24:03:9B:D1:F1:A9:46:CB:51:3C:93:38:6F:AB:6B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxweBiQDm9HxqUbLUTyTOG-raxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/18403d-7792-4f9d-9368-bfb6cf0f0835/1/WxweBiQDm9HxqUbLUTyTOG-raxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7c:25:02:36:76:ca:f0:74:dd:63:11:f6:fa:e9:5e:4a:0e:
45:6d:44:a7:d8:4e:5c:d2:5d:56:1e:a7:2d:dd:77:24:e9:6a:
f7:d0:8d:ee:22:e8:2a:f4:27:09:e6:8d:05:6d:b6:a6:55:03:
1c:95:38:c0:37:f9:be:97:55:2f:7e:9f:0f:ab:09:5b:e3:c9:
78:0a:58:92:5b:2d:d7:72:06:c2:30:d0:27:a1:e0:5e:1c:d5:
24:47:92:8c:5c:24:35:94:07:6e:76:e0:e2:38:23:e3:85:f1:
07:2e:a4:1a:78:37:c9:0c:3a:d2:01:2f:94:75:f3:54:f2:00:
f2:6c:82:44:92:db:f9:05:bf:db:50:50:55:a5:e4:d3:83:37:
46:c5:af:61:64:fd:35:da:30:25:33:02:3a:5f:ad:95:ed:b8:
5f:65:83:13:f6:cb:6c:88:c8:a7:a1:54:4c:1c:95:c0:b1:5e:
67:ab:73:5d:1b:fe:5f:a7:4b:f8:64:34:84:ed:b2:d8:13:0b:
80:e6:c3:f5:3d:0b:0b:b4:8a:73:12:43:df:d8:6a:ef:b8:34:
be:e8:3b:7a:e9:74:d0:68:7c:83:b9:fe:ea:96:2a:cd:7a:5e:
5e:07:14:20:17:2c:25:75:67:49:f7:29:ab:a0:b2:de:76:12:
0c:e1:e5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:21:56 2025 by rpki-client