This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json) Hash identifier: PRjsvPSmxPN8cnr//lThvIZ46uvjoKEQcq3UGnZb4og= Subject key identifier: 53:A9:68:BD:2E:67:0B:DE:5D:1F:4E:C3:02:A8:DB:06:2E:9B:4F:AD Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Certificate serial: 019B3DFED00709472FDDE7DBB398D36DFB30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft Manifest number: 1305 Signing time: Sat 20 Dec 2025 23:01:07 +0000 Manifest this update: Sat 20 Dec 2025 23:01:07 +0000 Manifest next update: Sun 21 Dec 2025 23:01:07 +0000 Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: Q6PHzrnGPW63S2cTe9WA4iIQMIx8oo9TxvEevQNcjgk=) 2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:d0:07:09:47:2f:dd:e7:db:b3:98:d3:6d:fb:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Validity Not Before: Dec 20 23:01:07 2025 GMT Not After : Dec 21 23:01:07 2025 GMT Subject: CN=53a968bd2e670bde5d1f4ec302a8db062e9b4fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:e5:5c:df:8a:00:6e:0e:b3:8d:b0:d3:c3: 97:02:9b:fc:5b:74:26:c3:70:e5:4a:a4:ee:21:c2: c0:27:00:c4:93:2a:69:74:46:a2:13:56:7b:80:f8: e4:e9:b5:e8:8e:d2:ea:46:23:9c:37:0c:c4:38:9b: 3f:64:04:96:60:84:9e:ec:1a:55:8e:41:b6:7f:08: be:eb:10:eb:2b:19:01:2b:55:4f:fe:70:4d:33:d1: c7:80:1c:70:0e:d9:96:13:92:e3:a2:27:47:ad:13: d3:52:9d:94:87:3b:7d:81:b5:86:5a:83:ab:59:0d: c1:09:df:75:37:03:e3:44:07:e8:d1:ea:c7:b4:35: b0:b2:c9:cb:22:d5:dd:31:96:90:70:eb:f5:f2:7f: 76:77:c2:b3:ed:2e:81:7b:4b:7f:75:b3:08:a5:a0: 7c:5c:74:04:ff:cc:a0:16:68:85:28:1c:59:2a:e1: d0:af:67:f6:2f:cd:ea:ee:39:f0:6f:04:83:00:b1: 8c:4a:9a:e1:60:65:e2:24:a7:3b:d1:90:01:d8:1c: 89:63:3c:0e:36:44:a4:3e:3e:89:88:b3:0f:68:82: ca:4d:2a:ca:b4:25:b9:18:9d:51:10:ea:e8:d4:ef: 3e:1f:1d:3c:eb:33:b8:3b:09:b1:5f:17:cf:48:ed: ef:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A9:68:BD:2E:67:0B:DE:5D:1F:4E:C3:02:A8:DB:06:2E:9B:4F:AD X509v3 Authority Key Identifier: keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d3:c4:9e:e9:43:04:df:bd:09:b2:79:cf:22:d8:13:98:9d: 90:8a:2c:fe:51:9a:70:8a:92:d3:5c:e3:db:42:da:e6:8b:e5: 03:4e:2e:44:77:4e:83:cc:8c:20:44:c3:c0:ed:d7:4c:0a:73: 1b:2f:73:74:20:09:ff:b4:0e:45:a1:ca:49:07:ce:d1:53:39: 13:1b:22:d4:95:98:81:82:9b:58:5b:73:f5:0a:3f:3d:84:cc: e7:b4:80:e4:8a:82:65:64:3e:c3:5d:63:af:d9:dd:f7:68:83: 87:88:99:66:39:af:b0:d4:93:da:b8:a5:38:11:8a:64:d0:9b: 68:d5:6d:e8:ab:74:6d:b2:3c:59:0d:6f:32:94:c5:8e:8f:c7: cb:36:ba:28:02:aa:3c:ab:70:9f:ef:c8:94:f7:32:2f:dc:77: 1e:15:ec:8f:ee:c2:b6:34:9f:47:af:f7:56:87:33:d2:0a:a3: 8b:33:9d:41:b9:e4:51:70:9c:c2:7d:c6:2d:e7:da:13:37:99: 33:6f:0d:4d:f7:0d:e7:5b:e5:e6:7e:ed:fa:43:87:cb:9b:e7: 9f:1d:d6:6a:86:ad:5c:8a:5a:5c:e9:b8:f0:85:37:28:fc:34: 7e:a4:43:ea:c4:f2:81:1b:3a:f8:61:1f:4f:f0:66:35:88:c4: 6e:af:b1:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tAHCUcv3efbs5jTbfswMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1 NTcyODgwHhcNMjUxMjIwMjMwMTA3WhcNMjUxMjIxMjMwMTA3WjAzMTEwLwYDVQQD Eyg1M2E5NjhiZDJlNjcwYmRlNWQxZjRlYzMwMmE4ZGIwNjJlOWI0ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCHlXN+KAG4Os42w08OXApv8W3Qm w3DlSqTuIcLAJwDEkyppdEaiE1Z7gPjk6bXojtLqRiOcNwzEOJs/ZASWYISe7BpV jkG2fwi+6xDrKxkBK1VP/nBNM9HHgBxwDtmWE5LjoidHrRPTUp2Uhzt9gbWGWoOr WQ3BCd91NwPjRAfo0erHtDWwssnLItXdMZaQcOv18n92d8Kz7S6Be0t/dbMIpaB8 XHQE/8ygFmiFKBxZKuHQr2f2L83q7jnwbwSDALGMSprhYGXiJKc70ZAB2ByJYzwO NkSkPj6JiLMPaILKTSrKtCW5GJ1REOro1O8+Hx086zO4OwmxXxfPSO3vzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOpaL0uZwveXR9OwwKo2wYum0+tMB8GA1UdIwQY MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtPEnulD BN+9CbJ5zyLYE5idkIos/lGacIqS01zj20La5ovlA04uRHdOg8yMIETDwO3XTApz Gy9zdCAJ/7QORaHKSQfO0VM5Exsi1JWYgYKbWFtz9Qo/PYTM57SA5IqCZWQ+w11j r9nd92iDh4iZZjmvsNST2rilOBGKZNCbaNVt6Kt0bbI8WQ1vMpTFjo/Hyza6KAKq PKtwn+/IlPcyL9x3HhXsj+7CtjSfR6/3Vocz0gqjizOdQbnkUXCcwn3GLefaEzeZ M28NTfcN51vl5n7t+kOHy5vnnx3WaoatXIpaXOm48IU3KPw0fqRD6sTygRs6+GEf T/BmNYjEbq+xUw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:17:07 2025 by rpki-client