This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: aiSOr2fVAmRNKLNhkRd6k6e1ggD71suxO1m8yyKx2fg= Subject key identifier: CD:19:FF:C9:5E:F9:16:65:7F:A2:9A:F2:2C:1E:D1:F4:0E:0C:EE:29 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019B066BBD6C5A2BACF010485B74253D1CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 16D7 Signing time: Wed 10 Dec 2025 04:01:22 +0000 Manifest this update: Wed 10 Dec 2025 04:01:22 +0000 Manifest next update: Thu 11 Dec 2025 04:01:22 +0000 Files and hashes: 1: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 2: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: d0jKt/hjB1JWGrD8PJLwTxO42Wk3XpJ4KdJoGDhTb6Q=) 5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) 11: sjLa1NHXjGGWoSau_mh4jEEibtw.roa (hash: vRF2AhOiDnVepqEvc7nWHC8rDFbzRsetZ3BDi3ch/Uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:6b:bd:6c:5a:2b:ac:f0:10:48:5b:74:25:3d:1c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Dec 10 04:01:22 2025 GMT Not After : Dec 11 04:01:22 2025 GMT Subject: CN=cd19ffc95ef916657fa29af22c1ed1f40e0cee29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:aa:05:e7:0b:be:3e:48:ed:dc:33:94:3e: 1e:72:cd:96:2d:52:da:b6:40:fa:e7:a9:3e:6b:a0: b3:57:4f:ed:10:96:c5:09:0f:ca:a6:68:ec:e8:74: 8e:2d:4a:fd:31:b9:c3:db:d3:9f:63:38:65:5d:82: 78:2f:37:3a:95:d5:3c:f9:64:8a:18:9b:2d:9f:89: 67:8c:59:ce:e4:1a:8c:73:ee:73:0f:09:c8:2a:81: df:4b:11:19:b2:77:04:df:b2:82:f6:b4:1f:26:0c: d7:bc:30:aa:e9:fd:63:06:23:b6:51:5b:fd:83:43: 70:d3:10:0f:22:0c:48:bd:8e:44:0c:d1:be:e7:ed: 7c:73:2d:58:63:30:b9:be:e9:29:e1:a7:ed:34:af: b9:50:47:64:d4:09:22:b0:52:61:14:0e:1f:13:18: 9d:8e:d3:fd:e8:56:40:91:46:04:bd:74:8d:2b:1e: ba:bc:f3:db:a0:0c:d4:0d:80:06:9e:8f:47:6e:86: 96:f0:6b:6e:55:fa:ce:75:db:2e:bd:3b:b2:cd:ac: a8:4d:a8:ce:f6:07:e6:dd:81:83:2b:a8:4e:a4:41: 42:b8:97:c4:96:f3:26:55:8b:a5:0d:e1:2f:7a:87: 95:7d:4a:84:6c:a9:65:1a:22:a2:51:0c:01:d2:20: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:19:FF:C9:5E:F9:16:65:7F:A2:9A:F2:2C:1E:D1:F4:0E:0C:EE:29 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:37:0a:98:aa:b5:72:55:78:b1:ae:c5:02:1d:1e:df:3b:54: ef:b2:68:5c:d3:75:88:b4:20:dc:28:20:8b:30:51:a9:ab:b5: d0:7d:70:17:71:11:4e:39:49:78:2a:c8:b0:22:6b:2f:f1:25: fa:c6:de:7d:bf:8e:1d:45:40:f6:44:3a:b0:c7:93:ac:e2:bf: bf:62:db:cd:35:bc:de:2a:09:3a:51:90:48:3f:d9:93:1f:e5: b9:92:28:20:62:18:13:ae:f5:54:70:8b:7e:b3:84:ee:66:9e: 68:87:d3:7d:fc:8e:2b:cf:bf:1f:2d:93:9b:90:34:ee:8a:17: 28:b5:35:74:80:fa:bd:44:ab:3a:dc:2a:7e:42:56:14:f3:db: 4a:bd:31:54:7e:70:41:45:f3:f6:c3:8b:7a:ea:d3:eb:17:a0: f8:ae:3c:27:72:20:05:de:d4:e4:e0:93:37:9c:47:b5:c4:25: 86:aa:17:82:c9:28:06:7c:f1:d0:c2:12:16:2f:5f:3e:a3:11: 6a:60:6e:e1:8e:4d:31:a4:4e:76:a1:11:68:9b:c0:2c:85:d5: 61:0a:a5:fd:2c:13:45:69:22:87:eb:0d:d0:18:86:ed:e0:a8: d0:46:23:47:03:ec:c9:6d:5b:61:fd:14:0c:f8:41:f2:ef:8e: 00:7c:90:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsGa71sWius8BBIW3QlPRy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUxMjEwMDQwMTIyWhcNMjUxMjExMDQwMTIyWjAzMTEwLwYDVQQD EyhjZDE5ZmZjOTVlZjkxNjY1N2ZhMjlhZjIyYzFlZDFmNDBlMGNlZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptuqBecLvj5I7dwzlD4ecs2WLVLa tkD656k+a6CzV0/tEJbFCQ/Kpmjs6HSOLUr9MbnD29OfYzhlXYJ4Lzc6ldU8+WSK GJstn4lnjFnO5BqMc+5zDwnIKoHfSxEZsncE37KC9rQfJgzXvDCq6f1jBiO2UVv9 g0Nw0xAPIgxIvY5EDNG+5+18cy1YYzC5vukp4aftNK+5UEdk1AkisFJhFA4fExid jtP96FZAkUYEvXSNKx66vPPboAzUDYAGno9HboaW8GtuVfrOddsuvTuyzayoTajO 9gfm3YGDK6hOpEFCuJfElvMmVYulDeEveoeVfUqEbKllGiKiUQwB0iBJZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0Z/8le+RZlf6Ka8iwe0fQODO4pMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDcKmKq1 clV4sa7FAh0e3ztU77JoXNN1iLQg3CggizBRqau10H1wF3ERTjlJeCrIsCJrL/El +sbefb+OHUVA9kQ6sMeTrOK/v2LbzTW83ioJOlGQSD/Zkx/luZIoIGIYE671VHCL frOE7maeaIfTffyOK8+/Hy2Tm5A07ooXKLU1dID6vUSrOtwqfkJWFPPbSr0xVH5w QUXz9sOLeurT6xeg+K48J3IgBd7U5OCTN5xHtcQlhqoXgskoBnzx0MISFi9fPqMR amBu4Y5NMaROdqERaJvALIXVYQql/SwTRWkih+sN0BiG7eCo0EYjRwPsyW1bYf0U DPhB8u+OAHyQpA== -----END CERTIFICATE-----Generated at Wed Dec 10 12:03:56 2025 by rpki-client