This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json) Hash identifier: sSHEIK6/PYl1nNHMCdiyH7whHVPIjJ89JAi/LFK63JY= Subject key identifier: F5:A0:31:A9:68:3D:8D:8C:85:20:73:4E:37:84:5B:DA:AD:A0:F7:E5 Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Certificate serial: 019AEC075AB382148CFE1139723CD11BF012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft Manifest number: 41 Signing time: Fri 05 Dec 2025 01:01:36 +0000 Manifest this update: Fri 05 Dec 2025 01:01:36 +0000 Manifest next update: Sat 06 Dec 2025 01:01:36 +0000 Files and hashes: 1: DOiHl6Blr58G7-g5ryQ14ob_BSQ.roa (hash: Lt0of1f9vpxCYESgZXRaRcNizfsrbZc9ngbx6gbOqaQ=) 2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: L23QNphSmXgV4UlMhu4QkLLsnzTIkMPVmyBkLqwpFs0=) 3: n0Me6wkjc8Xeyc2eu9TL-q59u8I.roa (hash: x0QsbLQxSgzw6qfolhfMqYovLG9uc3eYJ7ouYr0O1Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:07:5a:b3:82:14:8c:fe:11:39:72:3c:d1:1b:f0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Validity Not Before: Dec 5 01:01:36 2025 GMT Not After : Dec 6 01:01:36 2025 GMT Subject: CN=f5a031a9683d8d8c8520734e37845bdaada0f7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:07:85:88:f0:e9:8b:2a:81:ee:7a:a6:db:a6: 28:0a:80:9a:99:4d:b8:3c:c7:51:f8:5a:f4:04:7a: 15:5a:84:05:b4:b2:e0:5f:b0:81:a1:da:09:97:83: 54:80:b1:c9:2a:6f:c1:02:23:7e:32:37:84:14:c6: 92:50:c8:d6:4a:29:27:76:23:d0:e0:fa:02:f8:23: 7d:3c:c0:3a:53:8a:36:b9:4e:83:10:fd:de:6a:df: 00:a1:f9:a1:d5:26:75:bd:bb:02:38:41:a1:f6:e5: c1:02:5f:d0:5b:2f:aa:95:48:cd:63:c8:e7:a6:fe: 72:18:1f:27:3d:9a:8c:b2:43:52:45:f9:a5:97:a0: 2b:1b:77:7e:95:58:da:81:8e:ce:35:61:6a:4f:d6: 1d:9d:73:a4:f5:d7:d3:d2:2a:37:b2:2f:6b:9e:cb: a6:2d:a6:03:e5:7c:f0:9f:ae:99:ed:1b:ab:88:a4: b5:cf:38:e2:b7:be:28:c4:7e:04:ae:88:46:98:db: 92:92:f5:e6:8c:e3:a2:85:63:f3:71:4f:0f:45:42: c1:c9:90:19:0b:2f:2d:86:4f:f7:0f:54:33:53:b2: 40:77:5c:08:72:99:3a:ca:17:01:71:64:f8:94:53: 16:d6:ea:90:bf:10:da:1b:ab:ea:70:2e:1b:9d:28: 2c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:A0:31:A9:68:3D:8D:8C:85:20:73:4E:37:84:5B:DA:AD:A0:F7:E5 X509v3 Authority Key Identifier: keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a1:50:5c:dc:d6:f1:40:68:4a:c0:b3:c7:fe:f1:3a:dc:d7: b5:a7:ae:21:de:d5:00:33:4d:af:42:b5:a1:58:eb:21:6b:03: 11:38:59:af:87:f9:08:21:33:6c:bd:ea:d7:c1:bf:3e:dc:cc: 79:5b:64:e9:70:20:49:71:5a:11:ad:f3:5a:a7:e3:8d:6b:32: c7:43:64:f6:fc:2d:61:01:11:5c:b2:81:5c:c2:48:e2:da:66: 58:c5:e2:19:77:07:5c:7a:00:aa:41:8f:76:8e:b2:14:f8:65: 83:a8:9c:a9:82:38:4e:9f:3e:dc:92:e5:93:fa:16:9d:59:88: 7c:c0:fc:fd:26:31:ec:da:80:28:7b:b5:23:54:77:04:fb:8b: b0:e1:ef:fc:7c:2b:87:bc:ea:67:5d:7c:a6:30:29:8e:f8:8d: 92:51:ac:aa:77:89:da:5a:ed:a5:50:13:a9:c2:b7:b0:0b:41: 4f:88:db:ba:c8:14:3c:04:78:40:01:66:f2:c6:d6:8f:4d:ba: 9e:94:dc:d4:5e:65:f6:a0:88:58:b2:12:42:2a:18:92:f0:92: 5a:b7:20:a9:43:37:59:d1:d6:67:62:0e:a5:4f:42:67:aa:e6: 95:f1:26:0a:7f:c9:94:8d:92:4e:f2:2c:7a:9d:c7:a0:b3:63: 29:9b:d4:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrsB1qzghSM/hE5cjzRG/ASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTM0NTU3NDZlYjcyYmI1NzZjN2I0MDRiMDQ2ZWY0NjBk MWFlMWMwHhcNMjUxMjA1MDEwMTM2WhcNMjUxMjA2MDEwMTM2WjAzMTEwLwYDVQQD EyhmNWEwMzFhOTY4M2Q4ZDhjODUyMDczNGUzNzg0NWJkYWFkYTBmN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygeFiPDpiyqB7nqm26YoCoCamU24 PMdR+Fr0BHoVWoQFtLLgX7CBodoJl4NUgLHJKm/BAiN+MjeEFMaSUMjWSikndiPQ 4PoC+CN9PMA6U4o2uU6DEP3eat8Aofmh1SZ1vbsCOEGh9uXBAl/QWy+qlUjNY8jn pv5yGB8nPZqMskNSRfmll6ArG3d+lVjagY7ONWFqT9YdnXOk9dfT0io3si9rnsum LaYD5Xzwn66Z7RuriKS1zzjit74oxH4ErohGmNuSkvXmjOOihWPzcU8PRULByZAZ Cy8thk/3D1QzU7JAd1wIcpk6yhcBcWT4lFMW1uqQvxDaG6vqcC4bnSgsSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWgMaloPY2MhSBzTjeEW9qtoPflMB8GA1UdIwQY MBaAFFjjRVdG63K7V2x7QEsEbvRg0a4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQt NGU5ZDk4YTYwNjNiLzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQtNGU5ZDk4YTYwNjNi LzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqFQXNzW 8UBoSsCzx/7xOtzXtaeuId7VADNNr0K1oVjrIWsDEThZr4f5CCEzbL3q18G/PtzM eVtk6XAgSXFaEa3zWqfjjWsyx0Nk9vwtYQERXLKBXMJI4tpmWMXiGXcHXHoAqkGP do6yFPhlg6icqYI4Tp8+3JLlk/oWnVmIfMD8/SYx7NqAKHu1I1R3BPuLsOHv/Hwr h7zqZ118pjApjviNklGsqneJ2lrtpVATqcK3sAtBT4jbusgUPAR4QAFm8sbWj026 npTc1F5l9qCIWLISQioYkvCSWrcgqUM3WdHWZ2IOpU9CZ6rmlfEmCn/JlI2STvIs ep3HoLNjKZvUug== -----END CERTIFICATE-----Generated at Fri Dec 5 05:08:17 2025 by rpki-client