This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json) Hash identifier: Mpsd8ihr9nBuTpb5zhaWdoy45l1/hUid4fdcCe0Qk8Q= Subject key identifier: A1:E8:BD:58:DD:3A:31:B0:BE:AD:C4:37:D6:67:CE:37:B6:CD:60:D9 Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Certificate serial: 019B552B9058947821814E8E7D6BED512E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft Manifest number: 1311 Signing time: Thu 25 Dec 2025 11:01:16 +0000 Manifest this update: Thu 25 Dec 2025 11:01:16 +0000 Manifest next update: Fri 26 Dec 2025 11:01:16 +0000 Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: qWgI5LZW31HtHLLhB+blvArv6N74WMjoQX/JpeZxuXo=) 2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:90:58:94:78:21:81:4e:8e:7d:6b:ed:51:2e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Validity Not Before: Dec 25 11:01:16 2025 GMT Not After : Dec 26 11:01:16 2025 GMT Subject: CN=a1e8bd58dd3a31b0beadc437d667ce37b6cd60d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:6c:dd:73:71:9d:02:89:0a:20:0a:a4:dd: 76:0e:28:04:0c:fb:29:6b:2e:79:18:a2:9d:64:8d: 99:a6:fd:5a:f3:76:1d:80:1e:41:8c:12:f6:ea:e0: 75:54:2a:5f:bd:ed:da:26:dc:76:f9:51:2a:ae:b0: 77:0e:d2:be:73:33:07:4a:5e:19:69:bf:1d:c2:e6: 6a:6a:2d:6f:9d:84:47:90:76:bd:7f:9d:8a:de:82: 3a:4c:61:d6:e7:e3:08:cc:28:02:8b:ea:c2:47:27: 1a:01:0d:79:db:43:e1:3d:af:e6:72:61:0f:52:0e: 84:6b:93:67:21:a8:95:02:ca:98:b6:cb:05:89:c4: fc:96:d3:39:69:ae:1a:b4:45:72:f6:2c:bd:70:24: 9b:63:ab:18:1b:93:cf:14:34:a9:ec:06:ab:f1:ff: 74:e4:58:c5:c3:6c:b5:b9:f4:a9:e4:59:51:be:b2: c9:b2:a7:b7:fd:88:5b:e0:fc:8d:e4:87:21:d5:59: ef:12:69:dc:2e:13:73:19:a0:6c:75:c4:d1:f3:4f: 31:1e:8d:5e:a9:50:cb:42:ee:e1:ff:be:b7:c7:d3: 70:b7:85:c6:52:22:c1:1f:d6:e0:62:30:19:7c:79: 5d:2d:a0:ae:9a:19:bb:cc:c5:a0:84:e7:b3:8c:de: 5b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E8:BD:58:DD:3A:31:B0:BE:AD:C4:37:D6:67:CE:37:B6:CD:60:D9 X509v3 Authority Key Identifier: keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:97:26:e7:ef:49:9a:80:9f:d3:08:56:7d:02:c3:f2:7a:ff: b5:25:23:6a:2d:b5:a8:d2:02:8d:a4:df:22:98:49:f6:c5:d4: 42:16:6e:fd:6c:a1:53:21:fb:0c:43:15:5c:81:e7:a5:84:1a: 0e:c9:33:19:5c:53:d4:fe:11:e0:ab:4c:cb:da:a7:a2:76:0c: 17:fc:ed:3b:04:d7:c8:1c:f4:83:bb:14:fe:be:7a:3b:a0:1b: a5:8a:c0:39:00:3a:fd:e5:79:41:4f:22:fb:80:0d:cf:3d:7f: a9:4f:97:12:83:ac:d4:13:95:1b:38:f0:93:48:57:ed:02:76: e9:70:5c:48:71:7c:70:84:fd:07:1b:53:fd:14:20:f4:f0:81: 35:9b:38:6e:a8:0a:14:6e:60:d2:c8:3d:29:17:27:0b:0e:b3: a7:28:9c:7c:dd:98:9e:eb:c8:61:bc:3e:15:3d:64:cd:84:19: 97:90:db:5c:2a:57:bc:33:9b:a3:13:c9:ac:38:1a:d9:b0:ce: e9:dd:de:57:5b:0b:f7:b3:6f:a2:d5:87:9d:d7:94:d0:8b:d3: 26:1c:4a:a7:84:ea:c4:99:a8:db:b0:1e:e4:5c:f8:17:b3:c8: c2:62:14:af:45:53:ad:6d:a9:3a:c8:d7:54:26:d2:63:8a:bb: 6b:08:64:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK5BYlHghgU6OfWvtUS6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1 NTcyODgwHhcNMjUxMjI1MTEwMTE2WhcNMjUxMjI2MTEwMTE2WjAzMTEwLwYDVQQD EyhhMWU4YmQ1OGRkM2EzMWIwYmVhZGM0MzdkNjY3Y2UzN2I2Y2Q2MGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIZs3XNxnQKJCiAKpN12DigEDPsp ay55GKKdZI2Zpv1a83YdgB5BjBL26uB1VCpfve3aJtx2+VEqrrB3DtK+czMHSl4Z ab8dwuZqai1vnYRHkHa9f52K3oI6TGHW5+MIzCgCi+rCRycaAQ1520PhPa/mcmEP Ug6Ea5NnIaiVAsqYtssFicT8ltM5aa4atEVy9iy9cCSbY6sYG5PPFDSp7Aar8f90 5FjFw2y1ufSp5FlRvrLJsqe3/Yhb4PyN5Ich1VnvEmncLhNzGaBsdcTR808xHo1e qVDLQu7h/763x9Nwt4XGUiLBH9bgYjAZfHldLaCumhm7zMWghOezjN5bTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKHovVjdOjGwvq3EN9Znzje2zWDZMB8GA1UdIwQY MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb5cm5+9J moCf0whWfQLD8nr/tSUjai21qNICjaTfIphJ9sXUQhZu/WyhUyH7DEMVXIHnpYQa DskzGVxT1P4R4KtMy9qnonYMF/ztOwTXyBz0g7sU/r56O6AbpYrAOQA6/eV5QU8i +4ANzz1/qU+XEoOs1BOVGzjwk0hX7QJ26XBcSHF8cIT9BxtT/RQg9PCBNZs4bqgK FG5g0sg9KRcnCw6zpyicfN2YnuvIYbw+FT1kzYQZl5DbXCpXvDOboxPJrDga2bDO 6d3eV1sL97NvotWHndeU0IvTJhxKp4TqxJmo27Ae5Fz4F7PIwmIUr0VTrW2pOsjX VCbSY4q7awhkKA== -----END CERTIFICATE-----Generated at Thu Dec 25 19:40:16 2025 by rpki-client