This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json) Hash identifier: ccO1KgqEM3e/1gY0Gaq8JlufgXZvVrR3rH0WrxOPbho= Subject key identifier: 3A:84:75:F6:68:EE:C8:51:67:74:F3:0D:38:6A:9E:B9:F9:5F:CC:96 Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf Certificate serial: 019B4693CD12A0CA46B5525C8167ADA422C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 15:00:49 +0000 Manifest this update: Mon 22 Dec 2025 15:00:49 +0000 Manifest next update: Tue 23 Dec 2025 15:00:49 +0000 Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: TAWO9PseJQ79h5nIc78zrEh05dj2nhns5TjDd45QZrc=) 2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=) 3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:cd:12:a0:ca:46:b5:52:5c:81:67:ad:a4:22:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf Validity Not Before: Dec 22 15:00:49 2025 GMT Not After : Dec 23 15:00:49 2025 GMT Subject: CN=3a8475f668eec8516774f30d386a9eb9f95fcc96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:48:c2:4f:28:fc:a5:e1:5f:72:33:6c:96: ef:aa:46:b6:27:3c:0a:da:71:01:82:72:65:a3:86: 01:86:19:29:81:b4:41:e1:cb:19:89:30:b1:aa:28: aa:ff:4f:e5:bd:ed:4a:6c:88:94:c0:98:87:25:87: 98:db:0e:6f:36:06:db:55:46:80:7f:19:1d:c9:8d: 18:42:43:d9:0f:5f:82:e2:cd:8b:a2:24:15:be:a0: 34:f7:6c:f4:ec:8d:d2:fa:21:ed:77:e7:a8:43:82: a2:68:c3:73:bc:93:ea:40:b2:89:1c:2f:cd:f3:5d: 11:94:05:96:1d:ac:ba:15:df:51:01:f8:19:c9:63: ff:de:f6:11:5a:d6:63:32:30:57:96:b5:4c:a4:74: 50:b4:fd:d5:ed:d4:20:0c:d2:ab:a2:51:a2:49:cd: 80:91:bf:ec:da:b9:ef:a3:c0:00:c7:2a:6e:0e:6d: b2:ea:26:8b:0e:35:2a:2d:b2:32:44:89:33:14:6b: 37:fb:05:38:5a:ad:2b:3f:6e:f8:88:7f:87:6d:8e: 8d:63:76:ac:13:8d:c1:90:f0:0d:29:d6:ee:f9:fb: ab:1e:5b:3d:58:de:f8:d1:a1:76:ec:aa:ed:5c:77: e7:01:b0:68:6b:c8:d2:0b:a4:01:ba:b3:01:50:57: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:84:75:F6:68:EE:C8:51:67:74:F3:0D:38:6A:9E:B9:F9:5F:CC:96 X509v3 Authority Key Identifier: keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:18:30:85:7b:3c:a8:31:39:16:2f:ed:81:eb:18:d6:3f:88: d0:62:82:19:86:af:0e:3e:3f:c7:91:0d:7a:4f:00:f3:31:7b: 6c:97:39:7b:90:ec:29:e0:fa:f0:08:4c:0c:35:13:8f:81:a7: 91:3a:f7:22:3c:eb:4f:d0:2b:6b:54:1b:06:d8:13:26:ba:3f: 6c:4a:3e:b4:51:61:5e:f3:2f:cd:c0:31:a3:7c:ba:00:90:46: 88:c0:0e:5e:0a:e7:52:10:f7:7a:05:64:73:be:29:9b:6f:11: 29:36:ca:e7:5c:de:8e:69:bf:ad:bc:cb:38:b0:28:97:a8:d5: 0d:ad:46:95:70:d7:a9:9a:8a:1c:e1:08:19:9e:22:74:cf:6d: e9:9e:b3:fa:36:95:21:34:e2:58:5c:c7:7e:fe:81:cd:0a:b6: 23:7a:29:3f:91:5c:29:a5:35:8e:e2:a3:7a:f2:29:e7:75:90: b6:c3:4d:df:21:75:2f:25:56:f6:ff:3a:c6:80:88:57:85:ec: 37:39:bd:13:dc:b4:80:70:58:d4:f9:e1:4f:bd:f0:f0:f6:50: d1:d9:4f:94:e3:13:c3:ce:09:b6:2d:68:87:ed:3b:b8:ff:b5: 6a:b1:00:c1:ed:12:2c:d7:21:6b:5e:db:fc:ff:6b:9a:90:3e: 7a:ca:ee:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk80SoMpGtVJcgWetpCLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI1ZjgyNmNhMzgzYTBiN2E1YzAzNjdhZDc4MWZlMjc3 ZjY3Y2YwHhcNMjUxMjIyMTUwMDQ5WhcNMjUxMjIzMTUwMDQ5WjAzMTEwLwYDVQQD EygzYTg0NzVmNjY4ZWVjODUxNjc3NGYzMGQzODZhOWViOWY5NWZjYzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuBIwk8o/KXhX3IzbJbvqka2JzwK 2nEBgnJlo4YBhhkpgbRB4csZiTCxqiiq/0/lve1KbIiUwJiHJYeY2w5vNgbbVUaA fxkdyY0YQkPZD1+C4s2LoiQVvqA092z07I3S+iHtd+eoQ4KiaMNzvJPqQLKJHC/N 810RlAWWHay6Fd9RAfgZyWP/3vYRWtZjMjBXlrVMpHRQtP3V7dQgDNKrolGiSc2A kb/s2rnvo8AAxypuDm2y6iaLDjUqLbIyRIkzFGs3+wU4Wq0rP274iH+HbY6NY3as E43BkPANKdbu+furHls9WN740aF27KrtXHfnAbBoa8jSC6QBurMBUFfyjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqEdfZo7shRZ3TzDThqnrn5X8yWMB8GA1UdIwQY MBaAFFnyX4Jso4Ogt6XANnrXgf4nf2fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2Ut NjQyNWU0MzgyMzMzLzEvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2UtNjQyNWU0MzgyMzMz LzEvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRgwhXs8 qDE5Fi/tgesY1j+I0GKCGYavDj4/x5ENek8A8zF7bJc5e5DsKeD68AhMDDUTj4Gn kTr3IjzrT9Ara1QbBtgTJro/bEo+tFFhXvMvzcAxo3y6AJBGiMAOXgrnUhD3egVk c74pm28RKTbK51zejmm/rbzLOLAol6jVDa1GlXDXqZqKHOEIGZ4idM9t6Z6z+jaV ITTiWFzHfv6BzQq2I3opP5FcKaU1juKjevIp53WQtsNN3yF1LyVW9v86xoCIV4Xs Nzm9E9y0gHBY1PnhT73w8PZQ0dlPlOMTw84Jti1oh+07uP+1arEAwe0SLNcha17b /P9rmpA+esrubg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:42:37 2025 by rpki-client