This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft File: WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json) Hash identifier: 3QQ3WGeaRRifka64PpDMUNLgxTAUO6uUpgJfyEpqg9M= Subject key identifier: C4:F3:B9:43:86:0D:52:1E:1E:54:AC:8E:BC:27:43:C1:69:17:B5:73 Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5 Certificate issuer: /CN=58833dec655e1a88733a17a2df3da0985ab660d5 Certificate serial: 019B360EA23B91B09B163858763DF1B934FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 10:01:27 +0000 Manifest this update: Fri 19 Dec 2025 10:01:27 +0000 Manifest next update: Sat 20 Dec 2025 10:01:27 +0000 Files and hashes: 1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=) 2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: 7YAoApOf1Tq07SCCUMkXKKrLoW7QZ/I42CuzHHcKabI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:a2:3b:91:b0:9b:16:38:58:76:3d:f1:b9:34:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5 Validity Not Before: Dec 19 10:01:27 2025 GMT Not After : Dec 20 10:01:27 2025 GMT Subject: CN=c4f3b943860d521e1e54ac8ebc2743c16917b573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:17:b5:cf:bd:26:26:b4:d8:c7:d4:ad:ae:b1: 49:2b:0f:09:71:9e:7a:f1:1f:b8:ae:38:41:6b:87: 41:c2:8d:87:b3:6a:4a:7c:47:84:40:cc:08:97:75: 93:7e:fe:25:74:f3:5a:92:3f:3e:0c:27:71:97:69: aa:03:15:2a:d2:88:7f:e2:b7:b4:09:de:95:8f:d8: 3a:b4:4a:c2:0c:d9:c1:f5:a8:50:bb:81:12:9d:db: 03:19:20:70:5d:69:4b:92:22:36:20:30:dc:c1:0a: 12:59:25:ab:ef:d5:a9:69:56:ff:9c:90:c1:57:14: 65:e8:b9:c7:20:f5:a4:62:f3:33:d4:a5:33:b0:36: e5:7f:50:3c:3c:5e:45:03:12:f1:be:c8:e8:ab:5f: e9:73:a2:c0:61:c0:82:3e:2b:9d:55:22:66:cd:30: 04:a0:2c:b8:e5:87:e2:b1:db:29:50:74:75:e4:0d: 17:02:2b:e5:ea:06:5e:ae:8d:10:32:a7:91:a3:64: f3:73:c2:b0:b0:b0:8b:4c:91:31:b3:81:12:41:35: 28:73:bf:dd:a1:cd:c5:f9:e5:63:2b:b8:97:3d:4a: 39:e5:6d:8e:d3:c9:b0:2d:f2:14:24:8a:f9:a8:a9: c7:9f:23:93:7f:22:d9:5f:ca:3a:4c:4b:f9:0d:ec: af:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F3:B9:43:86:0D:52:1E:1E:54:AC:8E:BC:27:43:C1:69:17:B5:73 X509v3 Authority Key Identifier: keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:4f:d5:31:32:dd:f5:57:31:05:0d:78:28:4f:0c:f6:b2:9e: 90:46:40:fa:10:71:1d:e0:22:4b:46:6c:14:31:be:1d:2d:ec: d5:81:67:d6:4d:12:46:41:dd:e4:94:e6:a7:0f:2b:59:55:39: 8f:6e:57:a5:60:6c:dc:16:e5:e8:01:12:b5:c5:90:14:60:56: 4b:55:4f:6d:13:03:d7:79:86:84:b0:11:4b:e7:46:bd:08:25: ce:00:78:a5:c7:21:87:64:1d:bf:12:fd:fe:90:43:50:de:53: 21:d9:19:96:a7:1b:20:19:47:75:0d:56:42:0f:e9:5d:67:5a: 32:4e:a6:91:ca:74:44:17:ed:aa:41:0d:26:28:f2:1f:11:f4: 11:e8:fc:6a:16:2e:4c:87:10:dc:63:ea:54:b5:61:08:87:f2: 82:12:4f:b3:54:1b:50:5c:ac:6c:f4:35:e9:0e:d0:c5:75:73: a1:80:f1:9a:5e:24:2a:4d:f7:7e:25:4d:2c:de:08:70:88:51: ac:75:dd:24:16:30:5b:cc:13:81:1f:e4:1e:29:2d:1c:71:24: 5f:34:5e:07:b4:c4:65:cb:40:c7:37:0a:f4:cd:d1:e8:c7:3f: 44:ef:56:59:64:d7:af:55:76:e7:bf:e6:87:de:cc:61:51:f6: b3:f8:88:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DqI7kbCbFjhYdj3xuTT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODMzZGVjNjU1ZTFhODg3MzNhMTdhMmRmM2RhMDk4NWFi NjYwZDUwHhcNMjUxMjE5MTAwMTI3WhcNMjUxMjIwMTAwMTI3WjAzMTEwLwYDVQQD EyhjNGYzYjk0Mzg2MGQ1MjFlMWU1NGFjOGViYzI3NDNjMTY5MTdiNTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRe1z70mJrTYx9StrrFJKw8JcZ56 8R+4rjhBa4dBwo2Hs2pKfEeEQMwIl3WTfv4ldPNakj8+DCdxl2mqAxUq0oh/4re0 Cd6Vj9g6tErCDNnB9ahQu4ESndsDGSBwXWlLkiI2IDDcwQoSWSWr79WpaVb/nJDB VxRl6LnHIPWkYvMz1KUzsDblf1A8PF5FAxLxvsjoq1/pc6LAYcCCPiudVSJmzTAE oCy45YfisdspUHR15A0XAivl6gZero0QMqeRo2Tzc8KwsLCLTJExs4ESQTUoc7/d oc3F+eVjK7iXPUo55W2O08mwLfIUJIr5qKnHnyOTfyLZX8o6TEv5Deyv6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTzuUOGDVIeHlSsjrwnQ8FpF7VzMB8GA1UdIwQY MBaAFFiDPexlXhqIczoXot89oJhatmDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjct MmZmYWVkMDQ3MzhhLzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjctMmZmYWVkMDQ3Mzhh LzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVU/VMTLd 9VcxBQ14KE8M9rKekEZA+hBxHeAiS0ZsFDG+HS3s1YFn1k0SRkHd5JTmpw8rWVU5 j25XpWBs3Bbl6AEStcWQFGBWS1VPbRMD13mGhLARS+dGvQglzgB4pcchh2QdvxL9 /pBDUN5TIdkZlqcbIBlHdQ1WQg/pXWdaMk6mkcp0RBftqkENJijyHxH0Eej8ahYu TIcQ3GPqVLVhCIfyghJPs1QbUFysbPQ16Q7QxXVzoYDxml4kKk33fiVNLN4IcIhR rHXdJBYwW8wTgR/kHiktHHEkXzReB7TEZctAxzcK9M3R6Mc/RO9WWWTXr1V257/m h97MYVH2s/iInQ== -----END CERTIFICATE-----Generated at Fri Dec 19 18:55:53 2025 by rpki-client