This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft File: wftJLwoYjwAUJ44N9ruwKc66268.mft (raw, json) Hash identifier: bf+VJMU7Zf8IW4cHTbJA14eJoycfN1JqYErGB+zx8+M= Subject key identifier: CA:20:7E:6C:0C:04:E9:A3:3A:78:91:80:67:79:34:25:A0:18:DA:14 Authority key identifier: C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF Certificate issuer: /CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf Certificate serial: 019B413642BC380C51FEF674664372EBDB85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft Manifest number: 95 Signing time: Sun 21 Dec 2025 14:00:33 +0000 Manifest this update: Sun 21 Dec 2025 14:00:33 +0000 Manifest next update: Mon 22 Dec 2025 14:00:33 +0000 Files and hashes: 1: Fe7zjbjsSkfSmHcOcKTsjCvLSrw.roa (hash: ilUtJi4tRjp7bb2QTirkNRC/xpGUx1kSM2twyjBIiuQ=) 2: lArwr8_PfkDYr8SBOSW8MnQBUXQ.roa (hash: AD2nqbhdm3sQUtFHZTKBMCAVZNhqnsAWjkg28nriwS4=) 3: wftJLwoYjwAUJ44N9ruwKc66268.crl (hash: hjgWnBg57cAIKZeMlHu5ag/WMstXCYzQvdYDot0zwy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:42:bc:38:0c:51:fe:f6:74:66:43:72:eb:db:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1fb492f0a188f0014278e0df6bbb029cebadbaf Validity Not Before: Dec 21 14:00:33 2025 GMT Not After : Dec 22 14:00:33 2025 GMT Subject: CN=ca207e6c0c04e9a33a78918067793425a018da14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:d0:0c:2f:9f:97:cc:ac:14:a2:61:8d:3e: ad:ea:24:42:6d:32:d8:87:88:a2:fd:3e:67:a1:29: fa:06:87:2a:ae:ef:2d:f9:19:72:f1:e9:7f:86:02: 1e:48:b5:ce:94:10:dc:d8:8c:4b:eb:36:ee:1e:b2: 9c:93:8d:ce:00:9d:49:17:42:7c:f6:a6:69:49:81: e5:ed:ab:1b:a5:c9:58:8f:58:4a:b2:76:69:d5:7c: 32:2f:7d:27:f6:f8:43:59:dc:6c:ab:e7:a5:b0:ee: be:b7:dd:24:ab:79:39:4a:17:1b:20:8c:92:d7:9d: 71:a5:a4:98:82:c2:f1:63:ad:94:b2:7c:d9:5a:0b: 57:d8:5e:2e:51:18:40:b6:c8:34:d0:1f:6c:53:f2: d1:7d:55:5a:0f:2e:55:66:a3:d4:b4:a1:93:a6:e4: ea:99:3a:ea:ca:35:15:a8:e5:f5:57:e3:29:2a:b8: 04:6b:6a:2a:c6:ef:1b:39:17:f5:0f:71:c8:c5:0e: 72:ba:b6:7e:01:1a:43:ac:80:42:f2:5f:19:4c:4b: 11:40:2b:8b:8d:f9:b3:97:c8:32:53:15:7f:cf:78: e2:77:41:ea:c4:22:b0:90:d4:55:ae:33:af:d6:46: 7f:27:39:47:a6:3d:1b:78:4b:7f:c7:31:b3:34:3c: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:20:7E:6C:0C:04:E9:A3:3A:78:91:80:67:79:34:25:A0:18:DA:14 X509v3 Authority Key Identifier: keyid:C1:FB:49:2F:0A:18:8F:00:14:27:8E:0D:F6:BB:B0:29:CE:BA:DB:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wftJLwoYjwAUJ44N9ruwKc66268.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/cfdd72-ac43-47f2-a88d-515a0ef686ab/1/wftJLwoYjwAUJ44N9ruwKc66268.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b3:a7:27:cf:37:d9:5d:15:41:cf:21:eb:a0:f2:f7:6e:ea: cc:7f:43:81:3f:9b:59:76:c7:f4:3f:19:59:f2:24:b8:de:ab: 22:78:aa:da:a2:e8:70:23:99:9f:89:18:0d:b1:ab:5b:c3:a9: e8:aa:43:db:6f:e9:e3:a0:8d:4e:99:79:bd:fe:fa:86:66:f1: de:ee:f8:75:fb:2e:64:d6:db:16:27:49:df:3c:ab:9f:dd:23: 85:13:08:67:00:fc:60:30:97:76:a1:6b:66:d3:03:be:1f:30: 0d:00:c8:89:dd:ea:7d:5d:48:80:7f:96:87:89:d7:d8:d1:6e: f2:e6:36:e1:f6:51:ae:39:3a:6c:c9:e1:34:7f:74:be:a3:a7: ad:de:fe:cd:4b:03:f8:35:52:61:0d:9b:a0:d7:ae:47:e2:b9: 26:b2:c6:35:43:a0:f3:5a:1e:a0:0f:67:f6:fb:15:73:14:2d: 86:df:60:76:72:9e:0b:c5:be:70:ec:2a:60:fb:41:1b:41:a2: 0c:47:07:be:e4:d0:40:57:05:28:c2:2c:2a:18:87:d9:1a:74: a3:6b:8c:2c:7c:ed:96:90:42:f6:8f:83:2f:4a:ce:1d:b2:3b: d1:c7:e7:9c:71:04:4f:8e:01:12:7b:e7:0e:72:c3:f5:62:05: f5:ef:35:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNkK8OAxR/vZ0ZkNy69uFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZmI0OTJmMGExODhmMDAxNDI3OGUwZGY2YmJiMDI5Y2Vi YWRiYWYwHhcNMjUxMjIxMTQwMDMzWhcNMjUxMjIyMTQwMDMzWjAzMTEwLwYDVQQD EyhjYTIwN2U2YzBjMDRlOWEzM2E3ODkxODA2Nzc5MzQyNWEwMThkYTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXbQDC+fl8ysFKJhjT6t6iRCbTLY h4ii/T5noSn6Bocqru8t+Rly8el/hgIeSLXOlBDc2IxL6zbuHrKck43OAJ1JF0J8 9qZpSYHl7asbpclYj1hKsnZp1XwyL30n9vhDWdxsq+elsO6+t90kq3k5ShcbIIyS 151xpaSYgsLxY62UsnzZWgtX2F4uURhAtsg00B9sU/LRfVVaDy5VZqPUtKGTpuTq mTrqyjUVqOX1V+MpKrgEa2oqxu8bORf1D3HIxQ5yurZ+ARpDrIBC8l8ZTEsRQCuL jfmzl8gyUxV/z3jid0HqxCKwkNRVrjOv1kZ/JzlHpj0beEt/xzGzNDymYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMogfmwMBOmjOniRgGd5NCWgGNoUMB8GA1UdIwQY MBaAFMH7SS8KGI8AFCeODfa7sCnOutuvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQt NTE1YTBlZjY4NmFiLzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jZmRkNzItYWM0My00N2YyLWE4OGQtNTE1YTBlZjY4NmFi LzEvd2Z0Skx3b1lqd0FVSjQ0TjlydXdLYzY2MjY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILOnJ883 2V0VQc8h66Dy927qzH9DgT+bWXbH9D8ZWfIkuN6rIniq2qLocCOZn4kYDbGrW8Op 6KpD22/p46CNTpl5vf76hmbx3u74dfsuZNbbFidJ3zyrn90jhRMIZwD8YDCXdqFr ZtMDvh8wDQDIid3qfV1IgH+Wh4nX2NFu8uY24fZRrjk6bMnhNH90vqOnrd7+zUsD +DVSYQ2boNeuR+K5JrLGNUOg81oeoA9n9vsVcxQtht9gdnKeC8W+cOwqYPtBG0Gi DEcHvuTQQFcFKMIsKhiH2Rp0o2uMLHztlpBC9o+DL0rOHbI70cfnnHEET44BEnvn DnLD9WIF9e81qA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:32:06 2025 by rpki-client