This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: EVZTXnpZCflUfZKEKaHftte2JtPJHHaGpGpx3CZwoBs= Subject key identifier: 72:A0:7F:12:D0:A5:A0:71:1A:2B:34:09:7F:31:E9:0A:35:6B:7F:39 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019B2362E98008957D6A6B15D8D2C2A391A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 14B1 Signing time: Mon 15 Dec 2025 19:00:43 +0000 Manifest this update: Mon 15 Dec 2025 19:00:43 +0000 Manifest next update: Tue 16 Dec 2025 19:00:43 +0000 Files and hashes: 1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=) 2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=) 3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=) 4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=) 5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=) 6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: 2D7QPzi2/Z2J42pVZ2X2e+6MS19sLCubcagQfMOvKlQ=) 7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=) 8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=) 9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=) 10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=) 11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=) 12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=) 13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:62:e9:80:08:95:7d:6a:6b:15:d8:d2:c2:a3:91:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Dec 15 19:00:43 2025 GMT Not After : Dec 16 19:00:43 2025 GMT Subject: CN=72a07f12d0a5a0711a2b34097f31e90a356b7f39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ea:20:ae:dc:3c:8b:90:71:e6:db:9b:87:b3: 18:3f:46:ce:46:87:eb:4a:4f:7f:92:27:c5:7d:ca: 5b:97:31:7c:a0:0a:ad:42:6c:b4:37:2d:05:d6:28: 8b:78:6e:b4:2e:aa:9c:2d:9b:63:ff:7b:c2:2d:65: b1:ec:ba:68:be:0b:62:b1:19:07:15:1a:53:ac:d5: 74:6f:45:24:d6:57:6d:99:2b:f1:e0:c3:0c:ae:e1: d7:1d:52:9b:48:a9:95:97:24:40:52:f3:9a:b5:53: 3e:de:bf:44:4c:0c:a8:05:5d:2b:23:25:4a:46:b0: 87:78:aa:88:0c:c8:77:b2:cc:2a:de:32:5a:53:29: 77:9e:47:f9:be:a7:74:9d:f1:7f:c1:0a:d1:2b:48: 73:6d:b8:0d:0c:97:6b:15:d1:a1:44:d8:5d:87:43: ae:66:3f:57:b1:6a:a7:ac:18:fb:ce:69:de:97:5e: 45:90:2d:aa:b0:f6:7a:42:a8:51:11:1b:e8:84:e6: 37:99:63:f8:be:3a:ae:22:e1:82:4b:df:25:68:24: 6b:02:91:27:23:55:78:64:d7:c0:6b:8d:4e:c0:c3: 2f:0b:e6:e8:51:f0:f0:bb:30:cd:b7:f3:1c:cd:30: 3d:e2:8c:38:ac:5f:d3:d4:f1:c5:af:51:cf:1e:9a: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A0:7F:12:D0:A5:A0:71:1A:2B:34:09:7F:31:E9:0A:35:6B:7F:39 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ae:03:62:e3:4f:1c:ee:30:eb:f5:cd:2e:69:64:8b:a9:02: 69:e7:71:4a:4e:e0:07:86:e9:97:f7:ec:42:a7:9a:6b:3f:1f: 6d:c6:d3:5a:31:9e:13:38:23:00:22:02:9b:e4:52:cf:46:31: 24:db:25:94:eb:6d:80:ca:9a:a6:13:f4:0e:52:53:51:c9:49: 6f:91:ef:82:97:7d:99:8b:0c:8d:70:e0:44:28:4e:9c:20:18: 08:bb:e6:00:92:86:14:85:f9:83:14:85:1e:29:2e:e9:6f:13: 44:3f:08:20:fe:c0:ef:5a:35:f5:3c:fc:5f:14:e4:a8:52:09: 1c:f0:77:79:7d:a0:16:37:93:28:6d:6d:16:4a:97:b7:0f:ca: f2:f3:af:01:6d:ab:e3:ff:30:af:2f:d2:76:43:ae:d3:d7:37: 54:57:70:f5:ef:9d:8d:67:0e:fe:9b:23:ad:7c:29:9a:b5:5a: 2b:ca:6a:92:ff:17:5b:fd:00:ca:49:c7:c7:98:47:02:b2:03: f4:61:76:41:a1:f2:ff:3d:19:a1:0e:15:dd:9d:f9:8a:0c:93: 4d:c9:92:06:dc:43:b3:d5:7b:8f:19:e5:df:19:f6:e8:07:57: 0e:a1:18:ee:21:11:d2:4f:86:6f:da:58:27:97:19:aa:9a:21: b0:a1:61:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjYumACJV9amsV2NLCo5GkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjUxMjE1MTkwMDQzWhcNMjUxMjE2MTkwMDQzWjAzMTEwLwYDVQQD Eyg3MmEwN2YxMmQwYTVhMDcxMWEyYjM0MDk3ZjMxZTkwYTM1NmI3ZjM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eogrtw8i5Bx5tubh7MYP0bORofr Sk9/kifFfcpblzF8oAqtQmy0Ny0F1iiLeG60LqqcLZtj/3vCLWWx7LpovgtisRkH FRpTrNV0b0Uk1ldtmSvx4MMMruHXHVKbSKmVlyRAUvOatVM+3r9ETAyoBV0rIyVK RrCHeKqIDMh3sswq3jJaUyl3nkf5vqd0nfF/wQrRK0hzbbgNDJdrFdGhRNhdh0Ou Zj9XsWqnrBj7zmnel15FkC2qsPZ6QqhRERvohOY3mWP4vjquIuGCS98laCRrApEn I1V4ZNfAa41OwMMvC+boUfDwuzDNt/MczTA94ow4rF/T1PHFr1HPHppH+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKgfxLQpaBxGis0CX8x6Qo1a385MB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACq4DYuNP HO4w6/XNLmlki6kCaedxSk7gB4bpl/fsQqeaaz8fbcbTWjGeEzgjACICm+RSz0Yx JNsllOttgMqaphP0DlJTUclJb5Hvgpd9mYsMjXDgRChOnCAYCLvmAJKGFIX5gxSF Hiku6W8TRD8IIP7A71o19Tz8XxTkqFIJHPB3eX2gFjeTKG1tFkqXtw/K8vOvAW2r 4/8wry/SdkOu09c3VFdw9e+djWcO/psjrXwpmrVaK8pqkv8XW/0AyknHx5hHArID 9GF2QaHy/z0ZoQ4V3Z35igyTTcmSBtxDs9V7jxnl3xn26AdXDqEY7iER0k+Gb9pY J5cZqpohsKFhBA== -----END CERTIFICATE-----Generated at Mon Dec 15 21:46:17 2025 by rpki-client