This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json) Hash identifier: zdYtwOQvx0+TqLU3e0T+qTCIyS/HNc9mHY7i2Jap/0E= Subject key identifier: CD:72:60:BD:0F:89:32:38:2B:0D:74:D8:13:46:4D:1B:B8:BC:12:54 Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Certificate serial: 019B42EE1E29F61ADCC58E2AC5F1EC945F39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 22:01:00 +0000 Manifest this update: Sun 21 Dec 2025 22:01:00 +0000 Manifest next update: Mon 22 Dec 2025 22:01:00 +0000 Files and hashes: 1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=) 2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: YEruPUNZmM+Y23hKQX2mlBGVLX09Nf7AjYwC+nVIiOY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:1e:29:f6:1a:dc:c5:8e:2a:c5:f1:ec:94:5f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Validity Not Before: Dec 21 22:01:00 2025 GMT Not After : Dec 22 22:01:00 2025 GMT Subject: CN=cd7260bd0f8932382b0d74d813464d1bb8bc1254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f8:a2:75:3c:d8:55:de:e0:ed:de:f3:4a:32: f6:ab:58:d2:82:fd:fe:2b:56:c2:75:27:3e:71:ca: 9c:7a:be:e2:16:af:16:bb:a6:27:8c:67:ef:c9:a4: 83:9f:93:14:e8:53:5b:ff:85:d9:a3:1f:90:4a:c0: ca:66:55:b5:d2:a5:3a:f0:80:74:3a:bb:24:d1:8e: d3:e1:d0:33:13:a9:b2:ca:2d:83:1d:72:9e:87:f9: cf:e1:25:53:9b:54:01:a8:01:8a:99:dc:75:fd:a5: 33:4b:da:c6:96:db:56:88:68:d0:43:3d:07:38:8e: dc:83:fa:4e:e8:73:fb:00:27:16:b9:09:06:f8:b1: c4:56:b5:3c:ea:98:05:31:89:c2:f9:c5:c2:ee:12: 13:4b:35:c8:d1:c8:09:52:15:b5:70:e8:93:99:e1: c3:62:88:ae:f6:54:da:fb:49:98:5d:d1:45:0b:17: 59:5a:37:ae:f2:71:c2:79:e2:b1:6b:4e:34:ff:48: c0:da:ea:ba:7a:30:dc:be:a2:aa:b7:ad:33:d9:b5: 17:bd:6b:5d:1e:45:52:77:e1:01:72:01:22:5b:11: e5:67:b1:d3:37:af:c8:87:dc:ed:0a:fe:ac:81:30: fd:a9:14:4e:2e:20:af:a2:fa:38:46:59:b6:88:86: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:60:BD:0F:89:32:38:2B:0D:74:D8:13:46:4D:1B:B8:BC:12:54 X509v3 Authority Key Identifier: keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3d:97:b6:80:0e:c9:f8:a9:68:93:90:da:07:a3:02:5b:dd: 32:66:70:a1:70:62:b5:6b:72:f3:cc:56:e0:bc:28:74:78:fe: d1:d0:1d:5d:cb:e7:ca:ad:4e:b4:f8:78:68:62:00:8c:05:9b: 43:3e:95:97:84:36:27:4e:fd:1b:27:de:1b:09:01:3f:cf:11: 81:bd:39:b2:62:d6:d8:a4:6f:2d:9e:15:9b:db:96:a7:e0:b7: 69:53:9a:a1:9a:3e:80:08:0b:a8:51:1a:c5:1c:77:98:c9:1d: 7d:fd:54:f8:f3:74:3f:85:a0:28:4f:97:69:67:0c:f0:3a:0d: 91:c6:aa:ae:88:cd:73:bc:05:e3:98:d1:30:ea:3d:ed:0c:a2: 46:cd:93:ca:3e:2d:1c:a7:3b:9c:3b:eb:90:45:96:72:7c:58: 24:2e:61:95:a2:da:9f:8e:d4:44:87:86:24:70:e6:4e:1a:1b: c0:02:ff:49:04:a5:96:21:80:e2:5a:26:68:3d:3a:13:9a:06: 8a:65:05:fc:b6:cd:03:0b:ec:e1:bd:02:d6:e8:f6:89:2c:61: 97:fc:b8:ed:a3:15:09:7c:62:7d:58:18:6c:77:70:02:6c:7f: fb:b6:6a:cb:14:0f:58:88:a4:38:d8:93:ae:60:4d:1c:cb:82: c9:4e:8c:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7h4p9hrcxY4qxfHslF85MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNjdjNTkxY2MxYjk2YTFjYTRmOTEwZmUxMDFlZjkwNGRh MWUyMTgwHhcNMjUxMjIxMjIwMTAwWhcNMjUxMjIyMjIwMTAwWjAzMTEwLwYDVQQD EyhjZDcyNjBiZDBmODkzMjM4MmIwZDc0ZDgxMzQ2NGQxYmI4YmMxMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/iidTzYVd7g7d7zSjL2q1jSgv3+ K1bCdSc+ccqcer7iFq8Wu6YnjGfvyaSDn5MU6FNb/4XZox+QSsDKZlW10qU68IB0 Orsk0Y7T4dAzE6myyi2DHXKeh/nP4SVTm1QBqAGKmdx1/aUzS9rGlttWiGjQQz0H OI7cg/pO6HP7ACcWuQkG+LHEVrU86pgFMYnC+cXC7hITSzXI0cgJUhW1cOiTmeHD Yoiu9lTa+0mYXdFFCxdZWjeu8nHCeeKxa040/0jA2uq6ejDcvqKqt60z2bUXvWtd HkVSd+EBcgEiWxHlZ7HTN6/Ih9ztCv6sgTD9qRROLiCvovo4Rlm2iIYEsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1yYL0PiTI4Kw102BNGTRu4vBJUMB8GA1UdIwQY MBaAFMFnxZHMG5ahyk+RD+EB75BNoeIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDkt OWNhMzBmMTkxOTM0LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDktOWNhMzBmMTkxOTM0 LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGz2XtoAO yfipaJOQ2gejAlvdMmZwoXBitWty88xW4LwodHj+0dAdXcvnyq1OtPh4aGIAjAWb Qz6Vl4Q2J079GyfeGwkBP88Rgb05smLW2KRvLZ4Vm9uWp+C3aVOaoZo+gAgLqFEa xRx3mMkdff1U+PN0P4WgKE+XaWcM8DoNkcaqrojNc7wF45jRMOo97QyiRs2Tyj4t HKc7nDvrkEWWcnxYJC5hlaLan47URIeGJHDmThobwAL/SQSlliGA4lomaD06E5oG imUF/LbNAwvs4b0C1uj2iSxhl/y47aMVCXxifVgYbHdwAmx/+7ZqyxQPWIikONiT rmBNHMuCyU6Mgg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:03:26 2025 by rpki-client