This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json) Hash identifier: ezsGmiI0WlsAtQf3rbA41DFz1ZvRP+47Q/Pxr4B5WPs= Subject key identifier: AF:61:5C:60:D3:3E:54:36:49:6A:12:EC:8A:D2:C9:1C:21:D2:FB:A8 Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Certificate serial: 019B202B5671E59F38DBCAEAA1D4C0D175CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 04:01:09 +0000 Manifest this update: Mon 15 Dec 2025 04:01:09 +0000 Manifest next update: Tue 16 Dec 2025 04:01:09 +0000 Files and hashes: 1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=) 2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: FNS81Q0refuMk5PX5yYvbk7HwXyk0dkUoVauPfrxMIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:56:71:e5:9f:38:db:ca:ea:a1:d4:c0:d1:75:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Validity Not Before: Dec 15 04:01:09 2025 GMT Not After : Dec 16 04:01:09 2025 GMT Subject: CN=af615c60d33e5436496a12ec8ad2c91c21d2fba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0d:9d:d8:3d:b1:8c:45:fe:e1:b3:a3:a7:8c: 8a:5e:01:96:63:a7:96:de:9b:c3:e7:a6:f9:8b:31: ee:9b:2e:96:ce:1f:51:45:ba:71:5c:cb:82:cc:2b: c7:71:bb:5b:9c:b5:22:fe:7b:bd:17:a7:c4:3a:d7: 9b:da:85:6a:5c:47:41:68:81:a8:92:51:07:de:81: be:aa:69:91:7a:dd:2c:8a:64:7a:e5:a9:c5:9e:f7: fa:7f:82:f0:1f:bc:e3:d8:96:17:b5:c2:1a:97:9e: b0:e4:40:10:76:5f:f9:2a:3b:e8:2c:6a:13:1d:6f: de:d9:98:66:bb:1d:65:72:98:73:fe:de:05:c6:f9: 16:cb:e0:7f:2d:67:a3:5b:c3:b7:30:43:86:67:5f: 07:2e:09:24:0d:a8:27:60:40:d7:f5:dc:31:1f:0e: 8e:e0:d9:f5:e4:00:a1:35:7e:23:ad:0a:a4:f2:a5: ed:2a:34:96:06:63:fb:94:ed:14:ae:a1:ef:e1:c8: a9:6e:cd:a7:b5:30:ae:db:c0:44:1d:83:b0:83:85: de:5c:9a:d6:c5:92:4c:cf:ec:72:a8:50:da:42:bd: f6:6d:44:d7:c4:9d:8d:03:c4:8f:71:ed:9f:37:46: 14:14:e6:43:4d:ef:55:e4:86:ca:a5:94:aa:4a:0c: 72:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:61:5C:60:D3:3E:54:36:49:6A:12:EC:8A:D2:C9:1C:21:D2:FB:A8 X509v3 Authority Key Identifier: keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:92:42:f7:fc:07:df:fa:13:93:b3:c6:94:d0:cc:8b:9a:65: 22:e4:7c:3c:cc:a1:b9:f0:b1:bb:30:d0:1a:0c:42:b7:50:33: a0:be:0e:f8:3f:72:68:72:6b:63:a9:61:6a:d3:e2:1e:62:10: 69:4e:59:66:7f:21:9b:fa:60:ec:ce:88:f5:a0:3a:ea:3c:7e: 41:96:7c:c8:db:f4:ab:8e:bf:95:3d:df:4d:60:44:47:f6:9e: 96:e6:7d:25:b0:fa:34:e0:56:b9:9e:c9:45:6c:27:f1:80:65: 6a:65:e5:84:7f:c3:57:2e:a1:0e:82:e6:2f:6c:cf:dd:ee:f3: 18:91:f0:3b:0f:dd:3b:09:aa:45:0d:69:c2:93:8d:6b:48:c2: 77:c8:bf:b0:3c:2f:58:26:ca:c3:0c:8a:5b:ea:f6:60:59:11: 67:bf:50:5c:db:fe:f3:48:cb:ac:cb:6a:08:3c:5e:4c:e0:41: ba:ef:3a:db:be:47:8f:c4:19:2d:2a:05:99:d2:12:98:d5:5a: dc:0e:b9:88:37:8c:91:b1:66:fb:1c:e2:61:08:0c:87:12:80: 1b:1d:a3:55:c5:a6:1b:f6:58:c5:55:e8:ac:b0:0e:61:6b:a4: f9:93:06:2a:29:b0:45:45:36:14:1c:f4:be:40:97:d8:9e:be: ba:4b:23:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK1Zx5Z8428rqodTA0XXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNjdjNTkxY2MxYjk2YTFjYTRmOTEwZmUxMDFlZjkwNGRh MWUyMTgwHhcNMjUxMjE1MDQwMTA5WhcNMjUxMjE2MDQwMTA5WjAzMTEwLwYDVQQD EyhhZjYxNWM2MGQzM2U1NDM2NDk2YTEyZWM4YWQyYzkxYzIxZDJmYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w2d2D2xjEX+4bOjp4yKXgGWY6eW 3pvD56b5izHumy6Wzh9RRbpxXMuCzCvHcbtbnLUi/nu9F6fEOteb2oVqXEdBaIGo klEH3oG+qmmRet0simR65anFnvf6f4LwH7zj2JYXtcIal56w5EAQdl/5KjvoLGoT HW/e2Zhmux1lcphz/t4FxvkWy+B/LWejW8O3MEOGZ18HLgkkDagnYEDX9dwxHw6O 4Nn15AChNX4jrQqk8qXtKjSWBmP7lO0UrqHv4cipbs2ntTCu28BEHYOwg4XeXJrW xZJMz+xyqFDaQr32bUTXxJ2NA8SPce2fN0YUFOZDTe9V5IbKpZSqSgxyVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9hXGDTPlQ2SWoS7IrSyRwh0vuoMB8GA1UdIwQY MBaAFMFnxZHMG5ahyk+RD+EB75BNoeIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDkt OWNhMzBmMTkxOTM0LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDktOWNhMzBmMTkxOTM0 LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlZJC9/wH 3/oTk7PGlNDMi5plIuR8PMyhufCxuzDQGgxCt1AzoL4O+D9yaHJrY6lhatPiHmIQ aU5ZZn8hm/pg7M6I9aA66jx+QZZ8yNv0q46/lT3fTWBER/aeluZ9JbD6NOBWuZ7J RWwn8YBlamXlhH/DVy6hDoLmL2zP3e7zGJHwOw/dOwmqRQ1pwpONa0jCd8i/sDwv WCbKwwyKW+r2YFkRZ79QXNv+80jLrMtqCDxeTOBBuu86275Hj8QZLSoFmdISmNVa 3A65iDeMkbFm+xziYQgMhxKAGx2jVcWmG/ZYxVXorLAOYWuk+ZMGKimwRUU2FBz0 vkCX2J6+uksjKA== -----END CERTIFICATE-----Generated at Mon Dec 15 15:01:34 2025 by rpki-client