This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json) Hash identifier: lMiYq2ZFPU0inBuQITEfTnwWe4a7FJSaZVYBgtoOnLs= Subject key identifier: 66:B3:F9:4E:F6:A3:F9:B8:82:2B:7D:3B:98:2E:E4:54:C7:7D:12:8B Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf Certificate serial: 019B5A5144FB80EA258BC5ADD788D605B5FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft Manifest number: A2 Signing time: Fri 26 Dec 2025 11:00:33 +0000 Manifest this update: Fri 26 Dec 2025 11:00:33 +0000 Manifest next update: Sat 27 Dec 2025 11:00:33 +0000 Files and hashes: 1: Fe7zjbjsSkfSmHcOcKTsjCvLSrw.roa (hash: ilUtJi4tRjp7bb2QTirkNRC/xpGUx1kSM2twyjBIiuQ=) 2: lArwr8_PfkDYr8SBOSW8MnQBUXQ.roa (hash: AD2nqbhdm3sQUtFHZTKBMCAVZNhqnsAWjkg28nriwS4=) 3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: TfPfb/OBuJ1hI+T/4hs10m+XlG7YGBDGxKfU3y5NhLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:44:fb:80:ea:25:8b:c5:ad:d7:88:d6:05:b5:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf Validity Not Before: Dec 26 11:00:33 2025 GMT Not After : Dec 27 11:00:33 2025 GMT Subject: CN=66b3f94ef6a3f9b8822b7d3b982ee454c77d128b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:03:d9:d4:15:6e:02:e5:1a:6f:0c:c9:a7:5e: a1:cb:82:0c:76:41:fe:d4:8b:38:c3:61:2d:3b:be: 65:d0:f9:13:10:50:50:a3:c6:94:55:f1:6f:54:c7: 30:fd:2c:9d:7e:c6:17:b7:80:b6:63:04:a9:ab:25: 68:13:85:90:b2:81:68:65:83:d7:92:e3:f9:37:06: 06:33:9d:29:64:c6:ce:f4:8d:fa:02:40:6f:4e:1a: f9:65:d9:dc:7f:47:e3:d0:d6:dd:53:14:5f:5e:35: 80:0e:c5:69:83:01:80:01:27:f4:5c:4f:35:4e:aa: 61:bc:89:83:18:27:40:0d:18:55:87:c6:62:46:f0: 54:4c:dd:ba:e0:4a:a7:ab:db:34:16:b2:b3:1b:22: 7c:c0:b2:ab:b4:25:17:c4:82:46:46:f5:c2:af:7c: e0:83:74:16:87:c2:df:1c:f2:13:4f:f4:46:7f:86: 99:b1:a9:6b:ce:57:32:ca:5f:b2:5d:d3:94:12:c6: 90:9c:27:1d:6e:5e:b1:02:bc:df:a5:88:00:5f:a6: e4:db:5f:66:9f:d1:14:65:17:2b:11:83:5a:ca:1a: 36:dc:d3:4f:cf:4b:cc:9b:45:de:ff:d1:69:64:92: b4:a5:2d:fd:4d:5e:35:8e:81:00:53:41:06:5e:db: 99:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B3:F9:4E:F6:A3:F9:B8:82:2B:7D:3B:98:2E:E4:54:C7:7D:12:8B X509v3 Authority Key Identifier: keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bb:6e:20:64:a5:bf:2a:82:88:7f:91:53:f5:02:f8:3a:b9: 41:93:56:d7:0a:c7:80:21:11:13:9c:ee:ab:c5:b7:36:91:ef: 1e:0d:5b:a2:5e:9d:2a:2d:e3:51:93:a2:c7:ba:21:11:bc:51: 2e:21:da:41:00:78:04:9c:0e:02:af:a1:f4:82:34:30:61:7c: 86:26:1c:78:b4:44:60:b4:0b:53:89:b1:bb:27:e3:01:9a:4e: 04:12:61:5f:38:6f:06:f3:0c:2f:b7:52:67:3e:cb:fb:fc:8a: 39:03:a3:d2:19:8a:83:18:38:d2:6d:27:67:2e:16:53:47:24: bd:8a:1c:64:69:44:96:0d:a5:e1:b6:43:a2:b8:1e:c2:51:3e: cd:4f:5a:15:4c:34:ec:40:66:00:02:04:4d:69:2d:eb:cb:07: 30:c1:5f:01:17:8b:3d:3f:17:12:ec:5a:e7:cd:47:58:5c:d3: 37:25:28:9c:53:c3:37:44:83:e0:28:2f:bb:8f:7e:a0:bf:ca: eb:11:69:79:a8:1b:6f:22:b2:7d:30:a1:3d:30:72:c0:c8:69: 2d:ba:7d:4a:ae:96:7e:92:f4:69:b4:ab:d1:38:3f:e0:c4:12: 45:a6:a2:40:0f:23:9b:4d:d4:23:bd:36:e9:b0:55:5e:c5:0b: 15:2c:f6:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUUT7gOoli8Wt14jWBbX9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZmI0OTJmMGExODhmMDAxNDI3OGUwZGY2YmJiMDI5Y2Vi YWRiYWYwHhcNMjUxMjI2MTEwMDMzWhcNMjUxMjI3MTEwMDMzWjAzMTEwLwYDVQQD Eyg2NmIzZjk0ZWY2YTNmOWI4ODIyYjdkM2I5ODJlZTQ1NGM3N2QxMjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAPZ1BVuAuUabwzJp16hy4IMdkH+ 1Is4w2EtO75l0PkTEFBQo8aUVfFvVMcw/SydfsYXt4C2YwSpqyVoE4WQsoFoZYPX kuP5NwYGM50pZMbO9I36AkBvThr5Zdncf0fj0NbdUxRfXjWADsVpgwGAASf0XE81 TqphvImDGCdADRhVh8ZiRvBUTN264Eqnq9s0FrKzGyJ8wLKrtCUXxIJGRvXCr3zg g3QWh8LfHPITT/RGf4aZsalrzlcyyl+yXdOUEsaQnCcdbl6xArzfpYgAX6bk219m n9EUZRcrEYNayho23NNPz0vMm0Xe/9FpZJK0pS39TV41joEAU0EGXtuZAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaz+U72o/m4git9O5gu5FTHfRKLMB8GA1UdIwQY MBaAFMH7SS8KGI8AFCeODfa7sCnOutuvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQt NTE1YTBlZjY4NmFiLzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQtNTE1YTBlZjY4NmFi LzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbtuIGSl vyqCiH+RU/UC+Dq5QZNW1wrHgCERE5zuq8W3NpHvHg1bol6dKi3jUZOix7ohEbxR LiHaQQB4BJwOAq+h9II0MGF8hiYceLREYLQLU4mxuyfjAZpOBBJhXzhvBvMML7dS Zz7L+/yKOQOj0hmKgxg40m0nZy4WU0ckvYocZGlElg2l4bZDorgewlE+zU9aFUw0 7EBmAAIETWkt68sHMMFfAReLPT8XEuxa581HWFzTNyUonFPDN0SD4Cgvu49+oL/K 6xFpeagbbyKyfTChPTBywMhpLbp9Sq6WfpL0abSr0Tg/4MQSRaaiQA8jm03UI702 6bBVXsULFSz2eA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:24 2025 by rpki-client