This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft File: WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json) Hash identifier: RsMGtzIyEj1EWegKFAqJgAN5Yxp/X1CAmoPRsfPijKs= Subject key identifier: 10:9F:64:6B:22:F6:92:D9:7C:7B:6D:43:31:B6:42:DA:EF:B2:70:78 Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73 Certificate issuer: /CN=5960e6cd1b1b0063b1890f780745c245606dcf73 Certificate serial: 019AF540AA981C13B47AE34C20109C6D5EBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 20:00:47 +0000 Manifest this update: Sat 06 Dec 2025 20:00:47 +0000 Manifest next update: Sun 07 Dec 2025 20:00:47 +0000 Files and hashes: 1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=) 2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: gGXi+YXmAAlSxSzjArgsnELo7SfLoyPgpaA384D5HZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:aa:98:1c:13:b4:7a:e3:4c:20:10:9c:6d:5e:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73 Validity Not Before: Dec 6 20:00:47 2025 GMT Not After : Dec 7 20:00:47 2025 GMT Subject: CN=109f646b22f692d97c7b6d4331b642daefb27078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3b:11:69:f1:63:4d:8c:f4:85:c9:81:82:1c: 13:ba:7f:45:db:c8:ee:d0:5e:ce:e3:86:a2:e2:f3: 72:0e:a1:36:d5:fe:1c:4f:2a:e2:91:e0:32:cc:a5: bf:59:36:7e:4c:21:0d:02:bb:19:b5:ef:a0:1d:81: 01:bc:e3:b8:5f:6f:ee:bc:a0:70:e1:85:81:8a:fc: 49:de:0f:fc:24:89:dc:96:e8:33:0d:89:18:06:10: 3f:03:f6:30:29:11:08:97:b6:dd:d4:b7:19:1d:65: a9:fd:c5:ca:c2:84:08:4c:77:e6:00:3b:cf:0c:07: bf:18:3d:06:e8:51:f4:4c:6a:d0:a7:7b:f0:64:08: 2e:15:86:07:43:94:f9:7d:a4:e6:fa:df:5d:83:c2: 3c:eb:ae:93:ff:46:15:b2:de:29:90:71:76:d1:f0: 17:fd:c1:b0:45:4e:72:59:30:4c:f3:e8:d8:fb:ee: cd:73:26:00:57:ec:3d:c0:8f:f8:88:e9:f9:75:2e: c0:06:d7:fc:c3:35:aa:c6:31:ad:46:5f:ed:c8:e9: fa:4e:6c:4e:d4:9a:0c:ba:b3:0a:38:2e:fa:82:96: c9:67:d4:e0:e7:37:d9:94:84:5f:37:1b:59:be:c3: d9:77:08:2a:2a:69:aa:e9:b2:b8:5e:9c:7d:96:fc: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9F:64:6B:22:F6:92:D9:7C:7B:6D:43:31:B6:42:DA:EF:B2:70:78 X509v3 Authority Key Identifier: keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a3:dd:04:3d:b5:07:7e:64:22:c9:94:f2:e5:9d:3a:33:13: 80:6a:a1:da:ac:3a:26:d0:9b:cd:46:95:16:b6:53:eb:c5:0c: 9d:64:42:d9:28:49:b2:fb:c5:29:48:9f:96:a4:b4:9c:f0:53: 02:fb:f6:80:e5:68:95:d9:19:8b:81:9a:c4:26:80:5c:49:9e: 24:0c:07:c1:35:e2:14:f7:de:35:a4:7c:33:26:17:0f:a5:fd: 0f:c0:30:f3:64:c0:a9:6c:cd:bb:d8:e7:79:a0:bb:17:7e:f6: 6d:e0:5c:85:23:54:67:ee:5a:0c:e0:86:4f:b1:ba:91:89:be: d3:37:22:d7:2d:49:29:21:2e:c1:d7:9b:55:2c:9c:61:3f:27: ca:73:2f:87:44:10:01:56:24:37:b5:92:60:e1:bc:b6:40:34: 21:a1:54:9a:61:f7:f3:5f:22:85:aa:61:29:1f:13:1c:ae:30: b5:1d:7c:82:b4:29:9e:ae:72:ed:ea:10:2d:4f:d8:61:d4:17: 69:38:5e:e0:49:55:70:18:f9:10:a8:52:d7:68:54:29:7a:be: da:f7:e3:af:8b:20:57:35:bd:24:00:6e:f4:1d:f0:99:ee:fe: 61:d7:61:40:74:25:68:34:fe:34:1f:6b:53:c0:1f:81:69:5b: 74:07:ae:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QKqYHBO0euNMIBCcbV69MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjBlNmNkMWIxYjAwNjNiMTg5MGY3ODA3NDVjMjQ1NjA2 ZGNmNzMwHhcNMjUxMjA2MjAwMDQ3WhcNMjUxMjA3MjAwMDQ3WjAzMTEwLwYDVQQD EygxMDlmNjQ2YjIyZjY5MmQ5N2M3YjZkNDMzMWI2NDJkYWVmYjI3MDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjsRafFjTYz0hcmBghwTun9F28ju 0F7O44ai4vNyDqE21f4cTyrikeAyzKW/WTZ+TCENArsZte+gHYEBvOO4X2/uvKBw 4YWBivxJ3g/8JInclugzDYkYBhA/A/YwKREIl7bd1LcZHWWp/cXKwoQITHfmADvP DAe/GD0G6FH0TGrQp3vwZAguFYYHQ5T5faTm+t9dg8I8666T/0YVst4pkHF20fAX /cGwRU5yWTBM8+jY++7NcyYAV+w9wI/4iOn5dS7ABtf8wzWqxjGtRl/tyOn6TmxO 1JoMurMKOC76gpbJZ9Tg5zfZlIRfNxtZvsPZdwgqKmmq6bK4Xpx9lvxlPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCfZGsi9pLZfHttQzG2QtrvsnB4MB8GA1UdIwQY MBaAFFlg5s0bGwBjsYkPeAdFwkVgbc9zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQt MGE4MzBkMDFhZmQxLzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kNmQxYmUtMTBkOS00YTNhLWJkMTQtMGE4MzBkMDFhZmQx LzEvV1dEbXpSc2JBR094aVE5NEIwWENSV0J0ejNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6PdBD21 B35kIsmU8uWdOjMTgGqh2qw6JtCbzUaVFrZT68UMnWRC2ShJsvvFKUiflqS0nPBT Avv2gOVoldkZi4GaxCaAXEmeJAwHwTXiFPfeNaR8MyYXD6X9D8Aw82TAqWzNu9jn eaC7F372beBchSNUZ+5aDOCGT7G6kYm+0zci1y1JKSEuwdebVSycYT8nynMvh0QQ AVYkN7WSYOG8tkA0IaFUmmH3818ihaphKR8THK4wtR18grQpnq5y7eoQLU/YYdQX aThe4ElVcBj5EKhS12hUKXq+2vfjr4sgVzW9JABu9B3wme7+YddhQHQlaDT+NB9r U8AfgWlbdAeuWA== -----END CERTIFICATE-----Generated at Sun Dec 7 02:09:05 2025 by rpki-client