This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json) Hash identifier: AHZKhmOaXJCrqF89Q+dVQgGyT35s+MaAzEPyE/fDkkA= Subject key identifier: E1:22:EA:5B:4C:C0:67:81:AF:B1:D5:B3:7C:D8:49:D4:1B:CD:DD:30 Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Certificate serial: 019B3EA39FA0739065C9B3D4033A1A43EF5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft Manifest number: 0199 Signing time: Sun 21 Dec 2025 02:01:09 +0000 Manifest this update: Sun 21 Dec 2025 02:01:09 +0000 Manifest next update: Mon 22 Dec 2025 02:01:09 +0000 Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: XS+vt8lAYmjA2cQuZXf50JVvuLiMs9a8utawGquATVs=) 2: o0U8osvjVfiUePXARN4QCTizNIY.roa (hash: ya55CYA+rU6mfw44B9MOjIiEFlx2IM7GsmvEpJ7vX+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:9f:a0:73:90:65:c9:b3:d4:03:3a:1a:43:ef:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Validity Not Before: Dec 21 02:01:09 2025 GMT Not After : Dec 22 02:01:09 2025 GMT Subject: CN=e122ea5b4cc06781afb1d5b37cd849d41bcddd30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:75:b7:7b:10:35:15:a3:e0:e5:a4:c1:17:f6: 28:f1:17:b6:a1:8a:d2:6d:09:c8:be:43:15:fb:c1: 5c:f6:6c:ef:1f:c3:f1:6a:3b:d2:29:9f:a2:66:f1: e0:60:2f:cb:7b:9b:49:ea:95:7b:a9:e8:5c:f2:de: 34:f4:63:fc:db:9b:19:d9:aa:7b:0b:45:f4:06:fb: 8e:02:67:d0:57:43:99:37:31:f3:11:93:85:0b:90: e4:7d:53:93:db:8b:c9:8a:45:1d:2b:a9:c4:d7:69: 16:8e:be:4b:7c:7e:91:d9:6f:fa:b3:ab:e8:db:48: eb:22:2f:6f:b8:3a:7c:cb:f8:f8:1f:0d:31:90:99: 92:15:43:70:34:ec:b7:c2:99:7e:cf:14:f3:79:fe: fe:29:16:74:52:2b:17:5d:11:a9:bf:17:81:88:3f: 22:57:61:c1:30:10:b1:2f:49:95:b7:d1:0c:6e:00: cc:bd:d0:fe:ab:c8:b5:0f:2a:25:7d:d7:d0:80:a0: d6:e9:2a:32:8f:bf:05:4b:42:c5:dc:03:c9:fe:63: 9a:59:bb:58:c8:7f:59:96:48:d2:c3:30:09:0e:ab: 04:1d:6e:dd:96:eb:e0:d3:25:7e:4a:80:d9:b3:c6: 5e:ac:50:d8:ad:19:4c:04:af:3d:e8:9a:ec:3d:24: fe:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:22:EA:5B:4C:C0:67:81:AF:B1:D5:B3:7C:D8:49:D4:1B:CD:DD:30 X509v3 Authority Key Identifier: keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0d:2b:fc:4d:f0:66:bb:df:00:06:55:19:22:78:bb:fb:9e: fd:e1:93:6e:2f:fd:1b:46:24:f3:21:9e:53:97:8e:f3:2b:60: 63:84:ab:9a:a9:30:ca:0d:55:3a:2e:e9:e0:cc:2d:7d:1d:59: 40:da:d9:7d:05:ba:31:e2:f6:94:48:30:b6:db:0e:af:bd:8e: d2:39:b5:9f:6f:f5:d3:de:3a:d1:d2:03:c4:88:6d:7d:fc:e5: 5a:bd:17:39:5d:11:db:38:9f:86:5f:f2:54:26:c2:0b:e2:4c: ad:8d:83:11:d0:15:43:0a:7a:57:80:f9:38:4d:40:5c:3c:a6: 76:34:97:0f:a5:36:a3:cf:d6:9b:21:db:f1:f7:07:f8:19:11: ef:e3:8e:6d:9d:63:70:6c:0b:46:dd:44:4e:c3:56:ca:e2:b6: 15:a6:56:07:28:9f:9d:93:d0:3e:1f:c3:34:83:17:9a:75:60: c1:3c:67:c4:5b:84:4c:78:11:e0:bb:72:26:0a:9c:3a:82:6d: fe:35:e1:3f:60:67:c5:38:8b:b1:ef:84:a7:55:8b:71:88:b1: eb:65:4b:0a:75:a2:97:e8:03:56:a5:e8:4b:9c:0e:fe:e1:a5: 59:6e:21:49:35:40:14:3b:65:1f:5c:ed:fe:d0:ca:1e:98:fc: 11:a6:8b:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o5+gc5BlybPUAzoaQ+9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm MTU5MjgwHhcNMjUxMjIxMDIwMTA5WhcNMjUxMjIyMDIwMTA5WjAzMTEwLwYDVQQD EyhlMTIyZWE1YjRjYzA2NzgxYWZiMWQ1YjM3Y2Q4NDlkNDFiY2RkZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3W3exA1FaPg5aTBF/Yo8Re2oYrS bQnIvkMV+8Fc9mzvH8PxajvSKZ+iZvHgYC/Le5tJ6pV7qehc8t409GP825sZ2ap7 C0X0BvuOAmfQV0OZNzHzEZOFC5DkfVOT24vJikUdK6nE12kWjr5LfH6R2W/6s6vo 20jrIi9vuDp8y/j4Hw0xkJmSFUNwNOy3wpl+zxTzef7+KRZ0UisXXRGpvxeBiD8i V2HBMBCxL0mVt9EMbgDMvdD+q8i1DyolfdfQgKDW6Soyj78FS0LF3APJ/mOaWbtY yH9ZlkjSwzAJDqsEHW7dluvg0yV+SoDZs8ZerFDYrRlMBK896JrsPST+DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEi6ltMwGeBr7HVs3zYSdQbzd0wMB8GA1UdIwQY MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt MDkwNmRhMWIyM2E2LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2 LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA0r/E3w ZrvfAAZVGSJ4u/ue/eGTbi/9G0Yk8yGeU5eO8ytgY4Srmqkwyg1VOi7p4MwtfR1Z QNrZfQW6MeL2lEgwttsOr72O0jm1n2/109460dIDxIhtffzlWr0XOV0R2zifhl/y VCbCC+JMrY2DEdAVQwp6V4D5OE1AXDymdjSXD6U2o8/WmyHb8fcH+BkR7+OObZ1j cGwLRt1ETsNWyuK2FaZWByifnZPQPh/DNIMXmnVgwTxnxFuETHgR4LtyJgqcOoJt /jXhP2BnxTiLse+Ep1WLcYix62VLCnWil+gDVqXoS5wO/uGlWW4hSTVAFDtlH1zt /tDKHpj8EaaLwA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:02:28 2025 by rpki-client