This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json) Hash identifier: MY+RLDvOTVKB3CPFgYyCJuKZFcJ/Bxq3R443SBvoj7g= Subject key identifier: 2F:16:8A:D6:9C:CD:E4:F8:44:F3:47:84:70:2F:EA:C8:6C:F3:29:5B Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Certificate serial: 019B175F8D4988955AE0A0CDD644C606BB93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft Manifest number: 12F1 Signing time: Sat 13 Dec 2025 11:01:36 +0000 Manifest this update: Sat 13 Dec 2025 11:01:36 +0000 Manifest next update: Sun 14 Dec 2025 11:01:36 +0000 Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: ElbaHPEpmrU6IHPzxpGHAEgLHIDrOdQsmufdS2HT4A0=) 2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5f:8d:49:88:95:5a:e0:a0:cd:d6:44:c6:06:bb:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Validity Not Before: Dec 13 11:01:36 2025 GMT Not After : Dec 14 11:01:36 2025 GMT Subject: CN=2f168ad69ccde4f844f34784702feac86cf3295b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:ee:c7:a2:e5:44:85:70:6e:32:70:1e:db: 91:1a:bf:7c:c9:23:b4:f5:77:90:dd:4b:29:68:58: 10:47:7b:94:46:76:32:be:42:66:7f:58:d3:c0:7a: 05:d7:57:96:10:6e:4b:3b:d8:96:fb:89:fc:12:64: ad:0d:fa:25:b3:34:68:5b:8d:0b:43:d8:84:25:c1: e9:d9:f9:42:6f:2a:06:9c:58:42:83:cf:87:48:13: f5:9f:06:b5:ef:57:da:63:54:45:49:14:93:a7:6d: e3:ab:a7:ce:66:86:9b:57:21:bd:4a:53:7f:33:5c: e3:f4:c6:9e:4b:58:3e:6d:85:d9:92:b1:19:2c:af: d9:7d:7d:77:54:60:6e:a0:0d:be:61:22:e4:2a:18: b1:fc:3b:4a:76:a9:78:69:f0:8a:e1:04:31:f8:f5: 36:7f:86:15:76:07:f7:66:6a:81:32:2b:49:ab:0a: b2:f4:49:97:c8:b0:f6:44:60:33:91:94:9e:51:0c: f7:71:9d:8f:c5:ac:21:49:a3:d5:74:44:f6:de:29: 3e:a0:b1:37:1f:36:2d:31:ec:1e:7f:7e:64:79:e2: f0:69:45:8a:8e:cb:cb:4f:9f:59:5b:29:88:29:67: 6f:0e:db:95:16:71:69:0f:76:84:07:b4:e1:24:58: 22:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:16:8A:D6:9C:CD:E4:F8:44:F3:47:84:70:2F:EA:C8:6C:F3:29:5B X509v3 Authority Key Identifier: keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:90:c6:ce:44:ac:56:bb:49:9f:db:61:fb:fa:37:12:5b:5c: b8:f6:61:48:fb:22:d3:30:c0:a4:d2:5f:bb:24:e9:99:75:17: f0:7b:ee:29:ed:d9:ed:b8:cf:26:bd:b8:52:a9:6c:a5:ee:e1: 2d:4a:46:6f:17:9d:b5:7a:3c:c0:4b:bb:bf:53:db:cf:51:9e: 01:2a:12:8d:95:1f:07:0e:2d:d2:f9:e1:aa:f7:55:1d:2a:8a: 2d:b0:73:5d:1d:f9:27:0d:b3:31:31:25:d5:30:22:65:cd:a3: f8:c9:06:58:58:ee:b9:3c:b0:a0:86:20:f1:40:34:e5:de:5d: df:db:71:82:75:40:8e:15:ff:87:61:99:28:4f:69:a5:8b:9f: bd:c6:5a:5c:87:2b:0f:f7:5f:21:e3:71:51:76:98:d9:18:c1: e5:60:f6:3f:9f:34:d7:12:84:51:f5:1f:e3:c3:88:f3:f8:25: 9c:83:52:f4:d7:fa:c2:5a:16:84:54:ba:67:02:bb:4f:3a:80: 62:0a:f3:b8:0d:68:dc:52:43:92:8b:76:e1:1f:97:f7:05:92: bd:db:d9:b4:fc:43:5c:3e:cc:b7:26:d9:98:04:05:ba:4e:e4: 2c:1c:de:b6:07:92:02:83:1c:dc:6a:37:d2:6a:7e:5d:9a:54: cc:ea:02:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsXX41JiJVa4KDN1kTGBruTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1 NTcyODgwHhcNMjUxMjEzMTEwMTM2WhcNMjUxMjE0MTEwMTM2WjAzMTEwLwYDVQQD EygyZjE2OGFkNjljY2RlNGY4NDRmMzQ3ODQ3MDJmZWFjODZjZjMyOTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pbux6LlRIVwbjJwHtuRGr98ySO0 9XeQ3UspaFgQR3uURnYyvkJmf1jTwHoF11eWEG5LO9iW+4n8EmStDfolszRoW40L Q9iEJcHp2flCbyoGnFhCg8+HSBP1nwa171faY1RFSRSTp23jq6fOZoabVyG9SlN/ M1zj9MaeS1g+bYXZkrEZLK/ZfX13VGBuoA2+YSLkKhix/DtKdql4afCK4QQx+PU2 f4YVdgf3ZmqBMitJqwqy9EmXyLD2RGAzkZSeUQz3cZ2PxawhSaPVdET23ik+oLE3 HzYtMewef35keeLwaUWKjsvLT59ZWymIKWdvDtuVFnFpD3aEB7ThJFgi8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8WitaczeT4RPNHhHAv6shs8ylbMB8GA1UdIwQY MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5DGzkSs VrtJn9th+/o3EltcuPZhSPsi0zDApNJfuyTpmXUX8HvuKe3Z7bjPJr24Uqlspe7h LUpGbxedtXo8wEu7v1Pbz1GeASoSjZUfBw4t0vnhqvdVHSqKLbBzXR35Jw2zMTEl 1TAiZc2j+MkGWFjuuTywoIYg8UA05d5d39txgnVAjhX/h2GZKE9ppYufvcZaXIcr D/dfIeNxUXaY2RjB5WD2P5801xKEUfUf48OI8/glnINS9Nf6wloWhFS6ZwK7TzqA YgrzuA1o3FJDkot24R+X9wWSvdvZtPxDXD7MtybZmAQFuk7kLBzetgeSAoMc3Go3 0mp+XZpUzOoCrQ== -----END CERTIFICATE-----Generated at Sat Dec 13 13:08:18 2025 by rpki-client