This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json) Hash identifier: iQnZKvgXi/2PFd1VNSHvlYYhxg61cvMh4j4oCIPhI5k= Subject key identifier: 02:5A:B0:AE:68:15:D7:16:EB:4C:FA:1A:7F:4C:A6:94:37:90:22:59 Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Certificate serial: 019B262D4ECD0C43D2F3B794A47799074820 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft Manifest number: 0CD6 Signing time: Tue 16 Dec 2025 08:01:02 +0000 Manifest this update: Tue 16 Dec 2025 08:01:02 +0000 Manifest next update: Wed 17 Dec 2025 08:01:02 +0000 Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=) 2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: RqSHZAVjM5oC4kl0pfjGR5w+MCJ0ko0InYipCSSOV/M=) 3: xPTlfZcqBmFHE8DqUkWLvX-OfrY.roa (hash: hULrZXIf+9xvKQAU881NPQxtxECyTMfIWjcDLv4pIxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:4e:cd:0c:43:d2:f3:b7:94:a4:77:99:07:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Validity Not Before: Dec 16 08:01:02 2025 GMT Not After : Dec 17 08:01:02 2025 GMT Subject: CN=025ab0ae6815d716eb4cfa1a7f4ca69437902259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:09:46:6c:f2:39:dd:5e:dd:0b:47:95:46: a0:ec:77:7c:54:4c:8f:81:69:88:3d:ca:24:52:4e: d4:89:25:56:97:7d:d7:6e:61:7b:40:cc:08:c5:3e: d7:9c:c0:ae:e6:90:19:b4:f1:83:9b:ef:9c:d9:f5: 91:98:89:ea:e6:af:da:bf:7b:bd:fc:93:fb:f8:3f: 73:8b:b6:f3:f4:30:f5:7b:7d:f3:8a:c8:10:83:a3: ca:c7:0a:31:75:f3:77:c2:d5:a3:82:97:8d:bb:f2: 52:e7:73:76:2d:f7:91:23:16:8b:9d:27:19:df:bb: dd:98:9f:0b:05:c6:6d:c8:68:a4:3d:53:90:fa:81: 57:25:b5:41:ba:22:d2:62:ad:b9:51:13:a3:db:e3: 0c:1d:0b:45:63:a7:eb:28:a1:cb:76:a3:8b:8d:8a: 9b:42:6d:f0:17:86:b0:32:d6:76:67:f0:52:f9:55: 5b:b5:17:9b:e2:94:b6:74:a6:f9:51:7f:dd:d0:26: fd:c4:88:56:63:35:14:1e:b1:0a:f2:cc:51:c8:d4: 02:83:30:9c:40:c2:86:15:c4:c1:73:97:e8:c0:54: 9f:71:1e:a2:5d:9f:ea:be:75:3d:0b:94:24:3b:38: 71:4d:1d:c4:5d:68:0b:2c:4f:86:a0:eb:49:21:20: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5A:B0:AE:68:15:D7:16:EB:4C:FA:1A:7F:4C:A6:94:37:90:22:59 X509v3 Authority Key Identifier: keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b9:c0:ee:51:87:51:e6:89:66:a8:8a:84:14:5a:df:c7:da: 19:ee:57:8a:90:96:f4:b1:d9:30:02:7b:43:88:1e:e5:d1:1f: 81:41:3d:57:89:74:10:3d:eb:4b:7c:67:32:60:ef:d8:bd:8e: 8e:9e:d8:35:38:97:89:7c:f7:28:57:09:d5:53:fa:6f:95:78: 61:bb:9b:7b:13:a4:a5:2f:1f:91:98:f9:46:e8:dd:73:c8:7a: e1:df:0e:5d:60:3d:b6:9d:bf:db:d5:2c:32:5f:2c:b0:9b:f9: 4a:5f:26:35:1a:d1:e4:bc:65:b6:07:a1:6f:d6:9d:a2:04:1e: 6c:29:72:ae:fd:3d:c0:14:b1:31:c3:26:86:1a:13:cf:1a:22: ee:e6:7c:31:8e:1e:98:62:77:4c:cd:a4:3a:3a:90:45:83:70: d6:d7:12:59:1c:54:12:5f:5e:a8:3a:58:c7:11:d7:99:31:0c: 0d:72:3c:13:83:06:3f:6a:c5:43:d9:17:9b:82:f8:83:d8:0e: 43:f5:e6:89:d3:63:b5:d7:88:a8:d9:73:60:0b:95:b1:be:ef: dd:96:a4:25:f7:d6:c6:56:9d:70:af:97:24:c2:f6:74:f1:f8: 91:be:7f:84:40:46:63:0b:2b:8f:8a:91:f6:d4:47:0e:fc:93: b3:3e:5c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLU7NDEPS87eUpHeZB0ggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz NWZiZjEwHhcNMjUxMjE2MDgwMTAyWhcNMjUxMjE3MDgwMTAyWjAzMTEwLwYDVQQD EygwMjVhYjBhZTY4MTVkNzE2ZWI0Y2ZhMWE3ZjRjYTY5NDM3OTAyMjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTkJRmzyOd1e3QtHlUag7Hd8VEyP gWmIPcokUk7UiSVWl33XbmF7QMwIxT7XnMCu5pAZtPGDm++c2fWRmInq5q/av3u9 /JP7+D9zi7bz9DD1e33zisgQg6PKxwoxdfN3wtWjgpeNu/JS53N2LfeRIxaLnScZ 37vdmJ8LBcZtyGikPVOQ+oFXJbVBuiLSYq25UROj2+MMHQtFY6frKKHLdqOLjYqb Qm3wF4awMtZ2Z/BS+VVbtReb4pS2dKb5UX/d0Cb9xIhWYzUUHrEK8sxRyNQCgzCc QMKGFcTBc5fowFSfcR6iXZ/qvnU9C5QkOzhxTR3EXWgLLE+GoOtJISCGCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJasK5oFdcW60z6Gn9MppQ3kCJZMB8GA1UdIwQY MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt NmJhZjMwMDc5MDVjLzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrnA7lGH UeaJZqiKhBRa38faGe5XipCW9LHZMAJ7Q4ge5dEfgUE9V4l0ED3rS3xnMmDv2L2O jp7YNTiXiXz3KFcJ1VP6b5V4YbubexOkpS8fkZj5Rujdc8h64d8OXWA9tp2/29Us Ml8ssJv5Sl8mNRrR5Lxltgehb9adogQebClyrv09wBSxMcMmhhoTzxoi7uZ8MY4e mGJ3TM2kOjqQRYNw1tcSWRxUEl9eqDpYxxHXmTEMDXI8E4MGP2rFQ9kXm4L4g9gO Q/XmidNjtdeIqNlzYAuVsb7v3ZakJffWxladcK+XJML2dPH4kb5/hEBGYwsrj4qR 9tRHDvyTsz5cyg== -----END CERTIFICATE-----Generated at Tue Dec 16 14:22:28 2025 by rpki-client