This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: ffWpL6tOtNDDzB5kOWrwqYLFNP7drjis3gI6xI6CQtU= Subject key identifier: CB:62:91:26:D3:FA:C0:A6:DE:B8:8D:54:19:5D:17:29:3F:19:BD:59 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019B3A8F730CEBBB2BE61A73ED14948CF5A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 16F2 Signing time: Sat 20 Dec 2025 07:00:38 +0000 Manifest this update: Sat 20 Dec 2025 07:00:38 +0000 Manifest next update: Sun 21 Dec 2025 07:00:38 +0000 Files and hashes: 1: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 2: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: UkjJoBSlsg3sdMvmiaq/G76HQrTHxfL1h0Y2j/5VJCY=) 5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) 11: sjLa1NHXjGGWoSau_mh4jEEibtw.roa (hash: vRF2AhOiDnVepqEvc7nWHC8rDFbzRsetZ3BDi3ch/Uk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:73:0c:eb:bb:2b:e6:1a:73:ed:14:94:8c:f5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Dec 20 07:00:38 2025 GMT Not After : Dec 21 07:00:38 2025 GMT Subject: CN=cb629126d3fac0a6deb88d54195d17293f19bd59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:7c:4f:5b:2c:c3:25:18:8a:13:12:7d:aa: 1e:71:4c:33:a3:a8:5e:e1:6e:6c:c2:32:76:5a:1b: 28:77:10:d6:88:58:42:1f:19:46:c2:2f:c0:b5:90: 7d:d2:5d:12:c5:6e:27:1e:d2:8b:50:cb:4b:24:42: 8d:62:5d:cf:b7:cb:fb:8f:bb:43:29:6a:24:f2:60: 4a:7d:97:24:72:ad:39:77:64:67:3f:c2:35:f0:df: cd:d9:74:f1:3d:ae:cb:46:f5:9a:bf:46:b0:1f:9f: 41:d4:62:01:c0:67:83:51:91:36:6e:30:de:d7:6f: 9b:1e:42:b5:65:34:d2:dd:89:5a:fd:05:f3:64:d5: 58:db:98:3a:fd:21:59:25:0d:f6:ea:f5:f5:ef:6b: db:b9:0d:3c:23:ce:01:16:37:71:ec:32:5a:ad:09: 1a:40:3c:bd:92:62:d1:ec:6a:95:50:57:db:09:ec: 06:ae:84:60:37:65:5d:ea:c4:92:38:3f:03:a1:8d: df:8e:d6:8b:a9:bf:b3:c1:5c:d5:1f:c9:fa:e4:49: fb:1c:de:e4:a9:76:15:c5:a5:f1:06:cb:2f:16:25: 88:03:c2:cf:7b:eb:05:39:1c:56:ae:08:63:b4:9b: 8f:51:29:c7:68:34:af:19:74:2a:ed:26:88:9d:43: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:62:91:26:D3:FA:C0:A6:DE:B8:8D:54:19:5D:17:29:3F:19:BD:59 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d2:8a:e4:8b:5b:a5:d7:20:32:2c:72:1c:d9:db:54:73:9d: 01:9f:d9:50:ea:4f:21:3d:24:56:15:bd:ca:d5:2f:8e:c7:d2: 27:4f:c8:66:05:d3:fc:34:08:2a:9f:bc:f8:ae:1f:fa:bd:bd: 95:ac:35:9c:80:b6:e5:e4:10:e1:4b:dd:67:d9:2a:4e:b4:1a: 4f:1b:a8:c0:47:36:38:23:5e:d0:3f:f7:5b:1b:db:94:e5:26: 71:29:a4:75:d9:1e:be:a5:70:e1:2e:21:8b:72:19:37:46:b1: e9:d7:b8:03:fa:e2:34:4e:13:b6:e9:dc:39:4e:09:b2:97:89: 22:b5:ea:de:99:f8:a8:98:be:67:bf:f6:25:a4:9b:7d:1e:32: 05:f8:ff:65:e3:6a:a4:3d:40:c9:f5:07:a6:ef:16:a7:2a:b3: 47:6e:3b:2b:b3:e8:b8:50:55:2f:e4:3c:ce:5e:4e:6b:7c:ca: 21:41:92:0a:e5:bc:21:a9:00:bd:02:a9:74:de:99:6e:f1:6b: 8a:db:fb:18:57:eb:33:4a:00:e8:4e:b8:7f:f1:70:e9:41:ee: 62:13:4a:bf:3f:1e:88:24:96:95:f9:9a:ce:77:cc:88:08:3c: 52:f5:49:cd:fb:fa:1e:d5:de:8c:f7:8b:e7:bc:69:76:f7:3b: 58:01:4f:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j3MM67sr5hpz7RSUjPWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUxMjIwMDcwMDM4WhcNMjUxMjIxMDcwMDM4WjAzMTEwLwYDVQQD EyhjYjYyOTEyNmQzZmFjMGE2ZGViODhkNTQxOTVkMTcyOTNmMTliZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzx8T1sswyUYihMSfaoecUwzo6he 4W5swjJ2WhsodxDWiFhCHxlGwi/AtZB90l0SxW4nHtKLUMtLJEKNYl3Pt8v7j7tD KWok8mBKfZckcq05d2RnP8I18N/N2XTxPa7LRvWav0awH59B1GIBwGeDUZE2bjDe 12+bHkK1ZTTS3Yla/QXzZNVY25g6/SFZJQ326vX172vbuQ08I84BFjdx7DJarQka QDy9kmLR7GqVUFfbCewGroRgN2Vd6sSSOD8DoY3fjtaLqb+zwVzVH8n65En7HN7k qXYVxaXxBssvFiWIA8LPe+sFORxWrghjtJuPUSnHaDSvGXQq7SaInUM+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtikSbT+sCm3riNVBldFyk/Gb1ZMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVNKK5Itb pdcgMixyHNnbVHOdAZ/ZUOpPIT0kVhW9ytUvjsfSJ0/IZgXT/DQIKp+8+K4f+r29 law1nIC25eQQ4UvdZ9kqTrQaTxuowEc2OCNe0D/3WxvblOUmcSmkddkevqVw4S4h i3IZN0ax6de4A/riNE4TtuncOU4JspeJIrXq3pn4qJi+Z7/2JaSbfR4yBfj/ZeNq pD1AyfUHpu8WpyqzR247K7PouFBVL+Q8zl5Oa3zKIUGSCuW8IakAvQKpdN6ZbvFr itv7GFfrM0oA6E64f/Fw6UHuYhNKvz8eiCSWlfmaznfMiAg8UvVJzfv6HtXejPeL 57xpdvc7WAFPyQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:14:35 2025 by rpki-client