This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json) Hash identifier: NWwnVFYnCEbDL4JdelIAdYXg8sN89lrLpquhjxerSnY= Subject key identifier: 4B:72:EB:8D:E0:46:14:5C:AF:9E:78:95:83:DC:EF:65:97:F7:71:D2 Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a Certificate serial: 019B33B1966503D35431FEB655D6F9844507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft Manifest number: 14E3 Signing time: Thu 18 Dec 2025 23:00:34 +0000 Manifest this update: Thu 18 Dec 2025 23:00:34 +0000 Manifest next update: Fri 19 Dec 2025 23:00:34 +0000 Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: SJtS3U68vkbbK67XarX8IBk8oGh7S077BdPVk/ddraE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:96:65:03:d3:54:31:fe:b6:55:d6:f9:84:45:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a Validity Not Before: Dec 18 23:00:34 2025 GMT Not After : Dec 19 23:00:34 2025 GMT Subject: CN=4b72eb8de046145caf9e789583dcef6597f771d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:09:c3:38:c3:7c:d4:32:f8:ef:9d:7d:1f: f7:ec:64:11:d9:60:da:03:2a:be:c2:df:f9:e0:37: 2e:50:47:dd:46:a3:6b:c5:f1:ad:b9:62:4d:86:97: 35:40:b0:87:a2:74:fc:a1:e5:7a:a4:61:50:41:38: e4:a5:48:bd:93:7f:b6:d9:33:01:61:e0:d8:e5:18: b7:e8:d8:8c:49:7a:a5:f4:70:8c:99:c5:01:f2:ad: 1d:64:33:00:55:71:7c:9b:e6:72:9b:d7:a9:14:94: f3:bf:88:48:f6:a5:c5:a1:2c:9f:42:c3:f6:15:6c: 48:fa:53:19:7d:d8:79:88:10:19:17:8b:da:4e:cd: cc:73:87:eb:0a:62:93:50:37:3d:a5:65:b7:32:b7: 49:36:4d:dc:a0:0d:55:d4:ca:15:02:67:ba:e1:1d: 1c:e6:50:f9:39:e7:f1:e8:17:76:f0:16:95:f8:25: 1d:f3:d6:ff:71:54:6b:06:bb:c9:87:ed:d2:28:5a: 9b:64:85:7a:25:78:68:7d:d2:84:dc:03:66:d0:d0: 94:e7:48:09:e5:56:73:17:8a:82:82:9d:9c:2f:a5: 6c:24:67:29:79:3e:b2:2f:41:42:29:62:ac:26:f5: 8b:a2:9e:09:06:88:ec:1a:66:78:04:b9:1b:bb:eb: 48:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:72:EB:8D:E0:46:14:5C:AF:9E:78:95:83:DC:EF:65:97:F7:71:D2 X509v3 Authority Key Identifier: keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7a:ca:7a:9a:40:fb:66:1a:48:85:09:dd:4b:aa:86:ba:e1: 37:bd:04:f9:2d:de:0c:04:e7:66:0a:51:e0:0b:d6:a6:7c:a0: de:13:58:4b:f6:93:ce:95:87:70:f4:4c:3d:85:eb:cc:79:47: 07:63:6b:8e:1a:bc:ac:64:09:f6:a7:da:62:35:89:ba:fc:55: 75:99:eb:bd:c0:33:e2:3e:ee:fe:1a:8f:92:94:af:dc:0f:b5: f9:94:0b:20:35:54:fe:e5:c5:eb:b0:50:05:2d:5d:85:2f:5a: f9:86:68:bf:eb:7e:8d:7a:a8:d2:e7:9d:65:5b:51:b0:c3:82: d8:f9:99:36:fe:b2:4a:ff:92:19:92:a9:10:de:12:1d:c7:60: 90:42:30:c5:6c:ea:ea:8e:34:a4:bb:d5:21:49:b8:4b:e5:44: 79:f4:ab:77:f1:00:43:ee:87:df:49:c0:c9:c1:a6:77:19:be: 24:77:ae:5b:5c:8b:dc:84:8d:77:97:97:cc:ac:8c:a3:26:71: 0f:3c:99:6a:df:f5:98:5c:7c:b8:d1:82:0c:e9:19:61:53:93: fe:6a:49:1a:a6:22:8b:5a:03:b6:73:2c:55:c9:3d:10:00:ec: 65:2a:4a:24:37:94:a9:c4:54:8f:48:f4:44:8b:18:71:88:12: b7:99:77:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsZZlA9NUMf62Vdb5hEUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE2MTFlODBiYWRlNDAyZmJkNjBlNzg2ZjM0ZmI3MTcy ZDIyNWEwHhcNMjUxMjE4MjMwMDM0WhcNMjUxMjE5MjMwMDM0WjAzMTEwLwYDVQQD Eyg0YjcyZWI4ZGUwNDYxNDVjYWY5ZTc4OTU4M2RjZWY2NTk3Zjc3MWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SkJwzjDfNQy+O+dfR/37GQR2WDa Ayq+wt/54DcuUEfdRqNrxfGtuWJNhpc1QLCHonT8oeV6pGFQQTjkpUi9k3+22TMB YeDY5Ri36NiMSXql9HCMmcUB8q0dZDMAVXF8m+Zym9epFJTzv4hI9qXFoSyfQsP2 FWxI+lMZfdh5iBAZF4vaTs3Mc4frCmKTUDc9pWW3MrdJNk3coA1V1MoVAme64R0c 5lD5Oefx6Bd28BaV+CUd89b/cVRrBrvJh+3SKFqbZIV6JXhofdKE3ANm0NCU50gJ 5VZzF4qCgp2cL6VsJGcpeT6yL0FCKWKsJvWLop4JBojsGmZ4BLkbu+tIvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEty643gRhRcr554lYPc72WX93HSMB8GA1UdIwQY MBaAFFgBYR6Aut5AL71g54bzT7cXLSJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZmRjNjktNjRjMi00YjQ3LWE0Zjgt YWIzOWJlNjU2MDU3LzEvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81ZmRjNjktNjRjMi00YjQ3LWE0ZjgtYWIzOWJlNjU2MDU3 LzEvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHrKeppA +2YaSIUJ3UuqhrrhN70E+S3eDATnZgpR4AvWpnyg3hNYS/aTzpWHcPRMPYXrzHlH B2Nrjhq8rGQJ9qfaYjWJuvxVdZnrvcAz4j7u/hqPkpSv3A+1+ZQLIDVU/uXF67BQ BS1dhS9a+YZov+t+jXqo0uedZVtRsMOC2PmZNv6ySv+SGZKpEN4SHcdgkEIwxWzq 6o40pLvVIUm4S+VEefSrd/EAQ+6H30nAycGmdxm+JHeuW1yL3ISNd5eXzKyMoyZx DzyZat/1mFx8uNGCDOkZYVOT/mpJGqYii1oDtnMsVck9EADsZSpKJDeUqcRUj0j0 RIsYcYgSt5l3IA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:17:13 2025 by rpki-client