This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json) Hash identifier: Odw83gqm0bkGBNMUcF8bilE2c3mwS2AXTVp1MFctH9I= Subject key identifier: E3:4C:D4:B9:D7:65:91:0D:28:6C:67:A7:32:04:E7:C2:F0:2D:CF:59 Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Certificate serial: 019B2F302C80DF7A78242A95E3D49CF7F678 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft Manifest number: 0191 Signing time: Thu 18 Dec 2025 02:00:44 +0000 Manifest this update: Thu 18 Dec 2025 02:00:44 +0000 Manifest next update: Fri 19 Dec 2025 02:00:44 +0000 Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: GowQJJh/CPip2morAIIF5v9BnzPhzpQA/yrl3AbEMws=) 2: o0U8osvjVfiUePXARN4QCTizNIY.roa (hash: ya55CYA+rU6mfw44B9MOjIiEFlx2IM7GsmvEpJ7vX+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:2c:80:df:7a:78:24:2a:95:e3:d4:9c:f7:f6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Validity Not Before: Dec 18 02:00:44 2025 GMT Not After : Dec 19 02:00:44 2025 GMT Subject: CN=e34cd4b9d765910d286c67a73204e7c2f02dcf59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:65:e0:99:46:ee:44:08:e5:06:90:29:0d: 51:44:65:3e:a0:b2:b4:52:df:72:7b:f1:94:a8:d0: 67:38:81:ae:ea:34:28:57:ed:77:fd:46:86:06:5f: 74:b7:e5:20:dc:49:e5:0e:67:3b:15:45:a5:13:a4: 5b:8d:b6:3f:cc:fe:f2:2f:57:0c:97:12:58:03:10: e9:f5:72:a2:8c:e1:af:3a:df:fa:2b:fa:b4:57:d7: 3a:68:c4:fa:c4:ec:e0:65:49:e8:8b:76:3a:5b:13: c2:29:b6:4c:ae:fa:50:59:18:70:ce:f5:3c:9a:4c: 96:74:94:50:ff:78:66:b4:d3:de:55:43:e9:be:35: 66:25:f3:91:53:c0:b8:09:0b:5e:f4:ae:78:92:64: 34:46:09:ea:9b:0e:d9:d2:66:bd:82:0a:aa:87:41: 03:95:2e:76:b5:7b:35:a8:36:8c:14:9e:c0:0d:5a: 05:ca:87:f5:3d:d8:63:d3:60:82:a5:55:7f:ca:38: d6:e4:3d:67:c3:5e:71:06:69:45:07:2b:52:cf:2d: 26:6c:d1:d1:a6:fd:15:29:e7:c9:f3:c0:da:1a:7b: 29:4f:31:2e:9a:66:4a:78:19:69:18:41:fa:42:15: 03:d8:d7:56:65:df:bc:0f:d8:d9:d6:01:0a:44:c9: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4C:D4:B9:D7:65:91:0D:28:6C:67:A7:32:04:E7:C2:F0:2D:CF:59 X509v3 Authority Key Identifier: keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:82:dd:7a:43:a6:ea:07:8d:70:ad:f9:e8:5a:a0:e6:f0:d4: f8:72:66:e0:d0:90:ee:d7:96:50:67:14:ad:9b:5d:98:95:83: f1:e5:c1:05:11:19:e4:45:39:af:75:07:22:ff:79:f9:3d:48: c0:43:11:b5:2f:b9:a3:9c:cd:39:f7:f3:b2:fd:50:70:01:a8: fc:0e:12:3d:76:0d:98:f3:9d:e3:4a:53:b9:ce:72:fa:7e:6c: 57:73:99:c6:98:a0:91:f0:87:30:15:bf:fe:e5:24:41:45:c6: b3:9a:11:68:79:f9:a2:dd:62:02:ad:71:56:3e:3b:19:b9:21: ef:19:9a:a2:5d:a9:0a:b9:db:65:c9:db:66:5d:bb:6f:01:5e: 01:8c:40:7e:33:6b:d7:fa:ed:66:f7:5c:f2:fb:09:c7:10:76: a3:42:eb:cf:21:ba:c8:2f:52:67:31:f5:a8:56:ab:41:60:ed: f2:c3:3a:55:02:4e:41:13:34:98:70:3b:f2:6a:a5:dd:c4:86: af:c8:d2:68:ff:12:83:51:94:22:de:9d:41:e7:5e:40:93:fc: 7f:85:b9:91:41:d5:74:ed:86:a6:4c:19:54:31:2b:13:9d:36: c8:57:37:85:c8:f7:ae:ef:2f:82:ba:1d:d6:a5:8e:e6:da:3e: b0:21:a6:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMCyA33p4JCqV49Sc9/Z4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm MTU5MjgwHhcNMjUxMjE4MDIwMDQ0WhcNMjUxMjE5MDIwMDQ0WjAzMTEwLwYDVQQD EyhlMzRjZDRiOWQ3NjU5MTBkMjg2YzY3YTczMjA0ZTdjMmYwMmRjZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsghl4JlG7kQI5QaQKQ1RRGU+oLK0 Ut9ye/GUqNBnOIGu6jQoV+13/UaGBl90t+Ug3EnlDmc7FUWlE6RbjbY/zP7yL1cM lxJYAxDp9XKijOGvOt/6K/q0V9c6aMT6xOzgZUnoi3Y6WxPCKbZMrvpQWRhwzvU8 mkyWdJRQ/3hmtNPeVUPpvjVmJfORU8C4CQte9K54kmQ0Rgnqmw7Z0ma9ggqqh0ED lS52tXs1qDaMFJ7ADVoFyof1Pdhj02CCpVV/yjjW5D1nw15xBmlFBytSzy0mbNHR pv0VKefJ88DaGnspTzEummZKeBlpGEH6QhUD2NdWZd+8D9jZ1gEKRMkpEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFONM1LnXZZENKGxnpzIE58LwLc9ZMB8GA1UdIwQY MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt MDkwNmRhMWIyM2E2LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2 LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMoLdekOm 6geNcK356Fqg5vDU+HJm4NCQ7teWUGcUrZtdmJWD8eXBBREZ5EU5r3UHIv95+T1I wEMRtS+5o5zNOffzsv1QcAGo/A4SPXYNmPOd40pTuc5y+n5sV3OZxpigkfCHMBW/ /uUkQUXGs5oRaHn5ot1iAq1xVj47Gbkh7xmaol2pCrnbZcnbZl27bwFeAYxAfjNr 1/rtZvdc8vsJxxB2o0LrzyG6yC9SZzH1qFarQWDt8sM6VQJOQRM0mHA78mql3cSG r8jSaP8Sg1GUIt6dQedeQJP8f4W5kUHVdO2GpkwZVDErE502yFc3hcj3ru8vgrod 1qWO5to+sCGmtA== -----END CERTIFICATE-----Generated at Thu Dec 18 05:00:25 2025 by rpki-client