This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft File: WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json) Hash identifier: bg1luho+MCLnROfxLqTorsKAomoHvP/6buzq8h6x72I= Subject key identifier: 75:46:87:FE:9E:8F:8C:E5:6F:34:6A:BC:9E:95:0D:61:6F:C2:5B:83 Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B Certificate issuer: /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b Certificate serial: 019AF2ADE44DD6EA059506AC8C69EE476C60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft Manifest number: 02BB Signing time: Sat 06 Dec 2025 08:01:13 +0000 Manifest this update: Sat 06 Dec 2025 08:01:13 +0000 Manifest next update: Sun 07 Dec 2025 08:01:13 +0000 Files and hashes: 1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: GXhLnSXDCXUH7Ts8KTzmomY4YGag14spKXgbIO1d20w=) 2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=) 3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=) 4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:e4:4d:d6:ea:05:95:06:ac:8c:69:ee:47:6c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b Validity Not Before: Dec 6 08:01:13 2025 GMT Not After : Dec 7 08:01:13 2025 GMT Subject: CN=754687fe9e8f8ce56f346abc9e950d616fc25b83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c2:99:39:da:42:59:b4:69:e1:39:a1:0d:0d: 01:c6:5b:c2:94:ac:d8:e5:b2:34:78:05:60:f6:c5: 89:a1:48:c2:0f:45:57:4d:b3:4c:2f:cb:2d:ba:d4: 7f:cf:7b:11:1e:cf:3d:26:f6:6c:aa:16:5e:43:f4: c7:1d:d3:5b:4f:33:96:cc:3a:8e:c2:f2:a5:cf:84: 1f:69:30:e4:5a:ca:b4:a8:a8:d9:9b:7d:6e:0e:8a: df:d5:a2:ae:9a:ca:2f:9e:06:e5:5f:cd:bb:0f:d0: 08:39:d4:c9:5e:00:f1:ce:0b:f9:e8:6d:75:80:1d: 6c:fb:c0:a9:f2:d3:56:a2:be:45:e1:91:a0:46:69: 04:c3:1e:76:de:89:d2:1d:27:73:b9:10:c0:ce:80: 7f:fe:e9:2c:b2:59:79:ef:83:5f:cd:1f:66:51:52: e9:bb:7b:93:73:15:c1:7a:f9:c9:c6:5b:11:95:6e: 74:c9:38:73:fd:36:9d:92:20:83:43:4c:99:1d:f6: c2:e0:e3:5b:5d:d1:b3:d7:cc:7a:d7:d6:d8:81:86: 53:b0:11:23:4d:72:48:54:8b:bf:58:37:37:d1:6b: bc:0d:c3:77:03:e6:56:9c:c6:75:cd:3d:aa:2c:d7: ad:08:5b:b0:a7:8e:3d:cd:aa:ea:0f:66:dc:d8:02: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:46:87:FE:9E:8F:8C:E5:6F:34:6A:BC:9E:95:0D:61:6F:C2:5B:83 X509v3 Authority Key Identifier: keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:51:d0:6f:29:f3:54:a2:7c:dc:0a:68:99:20:6e:b0:d6:70: 1d:a9:fa:71:f4:dd:7f:31:ab:35:21:ea:e3:ab:20:42:c2:04: 90:e8:b9:86:bc:91:05:5a:cd:04:0c:97:b8:c8:5f:a7:5a:87: 60:9a:7c:53:09:02:9f:e1:01:14:bb:2c:87:da:7a:d2:02:d3: c2:d6:e1:1d:75:bf:a0:76:76:0d:ac:8f:2d:93:dd:a2:f4:2a: 30:99:f3:5f:66:26:c4:38:0c:37:97:a2:9b:4e:dd:f2:91:6d: 6b:7d:c5:26:2b:b0:f2:aa:88:73:71:22:ce:ff:21:be:0f:66: cd:95:14:3a:c8:c8:1e:ff:6e:54:43:5a:e9:87:7d:e3:c2:f5: d9:b9:1b:f5:06:34:52:a2:ad:fc:52:04:6e:2a:b1:fa:a1:40: 98:0c:a0:95:f3:0b:54:ae:f9:3a:00:67:36:9c:7a:19:5c:14: ba:82:53:1c:5b:1e:2e:9d:5c:de:a3:04:9c:6a:3a:13:be:0c: 23:96:3d:5a:08:d1:a1:4b:bb:a8:bc:54:c2:a4:bc:1f:45:e8: f4:22:3e:09:a7:d3:c5:58:92:a4:15:af:9f:38:15:d5:4d:5c: 46:ea:eb:44:ba:8f:88:09:a9:11:bf:fb:fb:c1:07:97:ec:e3: e0:60:35:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryreRN1uoFlQasjGnuR2xgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2Q1NjNhMmFlNjUyOWM5ZjQzZmU0YjVjNjdkYjcwZTc3 OWEwOWIwHhcNMjUxMjA2MDgwMTEzWhcNMjUxMjA3MDgwMTEzWjAzMTEwLwYDVQQD Eyg3NTQ2ODdmZTllOGY4Y2U1NmYzNDZhYmM5ZTk1MGQ2MTZmYzI1YjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMKZOdpCWbRp4TmhDQ0BxlvClKzY 5bI0eAVg9sWJoUjCD0VXTbNML8stutR/z3sRHs89JvZsqhZeQ/THHdNbTzOWzDqO wvKlz4QfaTDkWsq0qKjZm31uDorf1aKumsovngblX827D9AIOdTJXgDxzgv56G11 gB1s+8Cp8tNWor5F4ZGgRmkEwx523onSHSdzuRDAzoB//ukssll574NfzR9mUVLp u3uTcxXBevnJxlsRlW50yThz/TadkiCDQ0yZHfbC4ONbXdGz18x619bYgYZTsBEj TXJIVIu/WDc30Wu8DcN3A+ZWnMZ1zT2qLNetCFuwp449zarqD2bc2AI2mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVGh/6ej4zlbzRqvJ6VDWFvwluDMB8GA1UdIwQY MBaAFFjNVjoq5lKcn0P+S1xn23DneaCbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAt NDdhNWY0ODFlNmY1LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80ODA2YTUtNmZhMy00ODMyLWI3NDAtNDdhNWY0ODFlNmY1 LzEvV00xV09pcm1VcHlmUV81TFhHZmJjT2Q1b0pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1HQbynz VKJ83ApomSBusNZwHan6cfTdfzGrNSHq46sgQsIEkOi5hryRBVrNBAyXuMhfp1qH YJp8UwkCn+EBFLssh9p60gLTwtbhHXW/oHZ2DayPLZPdovQqMJnzX2YmxDgMN5ei m07d8pFta33FJiuw8qqIc3Eizv8hvg9mzZUUOsjIHv9uVENa6Yd948L12bkb9QY0 UqKt/FIEbiqx+qFAmAyglfMLVK75OgBnNpx6GVwUuoJTHFseLp1c3qMEnGo6E74M I5Y9WgjRoUu7qLxUwqS8H0Xo9CI+CafTxViSpBWvnzgV1U1cRurrRLqPiAmpEb/7 +8EHl+zj4GA1yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:48 2025 by rpki-client