This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json) Hash identifier: ntVGsvEipHfoJsYQDC5fWGWpQ2b1+YfzaLlci+Szmco= Subject key identifier: DD:81:95:A6:17:04:BA:2B:06:BF:AB:A1:AA:F5:E7:1E:04:FC:63:C9 Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Certificate serial: 019B0E934C14A47782DAC14AAD7B9ADEE9EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft Manifest number: 1782 Signing time: Thu 11 Dec 2025 18:01:32 +0000 Manifest this update: Thu 11 Dec 2025 18:01:32 +0000 Manifest next update: Fri 12 Dec 2025 18:01:32 +0000 Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=) 2: BY0duX9kQwVXjgquhsR-munhjnQ.asa (hash: NvBZnkapjPSPy1tNHiYvTA3NcGg5KXOBAdMekZQ3UrA=) 3: WAFcyNofG780PiarII34uyb9U64.crl (hash: dQGiTlJCujVGy7i2HB9oMLITgvNUd48QXfbT25HgphM=) 4: Wr5va4tlLM7OArIc13NwZVzUZSM.asa (hash: ZnrWop8OkpeoCvz/MYLeKchWVnb3K25hWmby4HEumAM=) 5: m3VZjdzwzA2piVdwr0jRtcRx0nU.roa (hash: P1WYR9PHlhqL+0w0ThuMbIIaq+c1NvgD6JAgzrBxv9k=) 6: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=) 7: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (hash: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:4c:14:a4:77:82:da:c1:4a:ad:7b:9a:de:e9:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Validity Not Before: Dec 11 18:01:32 2025 GMT Not After : Dec 12 18:01:32 2025 GMT Subject: CN=dd8195a61704ba2b06bfaba1aaf5e71e04fc63c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:6d:a5:b7:5d:00:c7:c8:27:07:12:8a:88: 75:6d:02:70:1a:ab:16:d1:df:47:f2:4e:ed:fd:db: 55:80:b3:57:91:89:ef:4c:fc:fa:53:ba:95:49:17: 3f:b8:b7:0c:1f:e3:c5:7b:e5:ec:8f:25:3f:9e:cf: ee:08:39:9c:3e:2f:8e:b3:4b:1b:e7:aa:70:09:ad: 28:33:06:40:44:0b:48:55:02:b8:be:64:4f:e2:2a: f5:42:5f:a3:f2:b1:4a:60:93:b5:04:43:9a:3e:c3: 3a:36:31:50:c9:b9:a4:ae:c8:73:af:f2:b8:ce:4a: 95:c4:9b:5e:a7:cc:ac:69:82:f6:84:80:d2:f8:f4: 70:ee:93:41:53:8d:32:96:50:37:c5:b0:55:c6:82: 4e:b9:d3:5a:49:72:40:dc:22:87:fe:82:80:ed:33: 51:ec:d7:51:63:02:38:a8:74:74:76:64:00:1c:bb: 34:e2:92:52:cf:7f:6c:6d:9a:99:0c:29:63:0f:b1: 41:2e:76:5f:53:26:06:24:0d:6f:9d:29:f4:af:db: 39:74:31:fb:0f:a1:0b:9c:73:67:77:a3:72:cf:e6: 29:f2:e2:cf:9e:74:c5:18:6d:35:b3:a1:26:d3:df: d1:ca:24:56:21:fe:fd:13:29:0a:57:20:12:04:21: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:81:95:A6:17:04:BA:2B:06:BF:AB:A1:AA:F5:E7:1E:04:FC:63:C9 X509v3 Authority Key Identifier: keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:89:ac:3e:10:8c:de:7f:8d:1a:dc:8f:81:db:82:7d:ee:dc: cb:97:f5:33:ee:1e:0d:75:e2:f7:46:3d:d3:f3:4a:14:cd:53: 66:c7:c1:91:c2:ac:b1:e3:f6:d9:f5:d7:4e:c4:0d:65:3c:43: a0:e1:75:9d:b7:83:79:9d:bd:c3:e9:4d:c5:0e:fb:e7:61:5f: dd:65:67:27:4c:56:1d:47:85:10:36:0d:b6:e5:31:c5:83:f7: 9f:2e:54:81:a5:56:77:98:db:48:c0:9c:90:4d:3f:48:b4:9f: fa:30:79:d6:5c:3d:3a:36:73:ad:90:13:57:91:14:c5:ab:55: 13:dd:93:61:2f:fc:ab:c9:95:9c:75:98:3c:36:b5:8c:12:28: db:33:2d:0f:62:b9:67:8b:6d:4b:04:5b:db:5b:d5:29:62:82: 0f:9d:ea:0b:ee:14:12:c1:37:0b:0e:95:ca:3f:1c:1c:00:15: 3c:a1:dd:31:54:c7:af:6a:18:7d:ae:3a:b4:f9:93:e3:b9:36: 5f:97:3d:8b:d4:cc:76:1c:11:10:1f:7a:8a:8e:a0:fa:cc:38: bc:59:92:1b:7c:98:3b:37:eb:c7:b5:a7:d8:ed:3e:64:d9:80: 80:d8:b9:05:cf:cb:f9:82:c5:1a:06:eb:0b:3f:19:7b:26:c9: 7d:e9:c2:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk0wUpHeC2sFKrXua3unsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm ZDUzYWUwHhcNMjUxMjExMTgwMTMyWhcNMjUxMjEyMTgwMTMyWjAzMTEwLwYDVQQD EyhkZDgxOTVhNjE3MDRiYTJiMDZiZmFiYTFhYWY1ZTcxZTA0ZmM2M2M5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ptpbddAMfIJwcSioh1bQJwGqsW 0d9H8k7t/dtVgLNXkYnvTPz6U7qVSRc/uLcMH+PFe+XsjyU/ns/uCDmcPi+Os0sb 56pwCa0oMwZARAtIVQK4vmRP4ir1Ql+j8rFKYJO1BEOaPsM6NjFQybmkrshzr/K4 zkqVxJtep8ysaYL2hIDS+PRw7pNBU40yllA3xbBVxoJOudNaSXJA3CKH/oKA7TNR 7NdRYwI4qHR0dmQAHLs04pJSz39sbZqZDCljD7FBLnZfUyYGJA1vnSn0r9s5dDH7 D6ELnHNnd6Nyz+Yp8uLPnnTFGG01s6Em09/RyiRWIf79EykKVyASBCFjRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN2BlaYXBLorBr+roar15x4E/GPJMB8GA1UdIwQY MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt OGVlMjFiNzRkZDU2LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2 LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4msPhCM 3n+NGtyPgduCfe7cy5f1M+4eDXXi90Y90/NKFM1TZsfBkcKsseP22fXXTsQNZTxD oOF1nbeDeZ29w+lNxQ7752Ff3WVnJ0xWHUeFEDYNtuUxxYP3ny5UgaVWd5jbSMCc kE0/SLSf+jB51lw9OjZzrZATV5EUxatVE92TYS/8q8mVnHWYPDa1jBIo2zMtD2K5 Z4ttSwRb21vVKWKCD53qC+4UEsE3Cw6Vyj8cHAAVPKHdMVTHr2oYfa46tPmT47k2 X5c9i9TMdhwREB96io6g+sw4vFmSG3yYOzfrx7Wn2O0+ZNmAgNi5Bc/L+YLFGgbr Cz8ZeybJfenCrw== -----END CERTIFICATE-----Generated at Thu Dec 11 22:59:59 2025 by rpki-client