This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json) Hash identifier: BMV3T8G7/qw5oZw8wg6YHa3cYHZ7/bCMRPJO7/mDobo= Subject key identifier: 4B:63:FC:81:88:4F:00:C3:56:DD:84:1D:FD:62:3C:15:F2:7D:D6:36 Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Certificate serial: 019B3D5A5046DC2AE85FC26C41A850733EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft Manifest number: 0CE2 Signing time: Sat 20 Dec 2025 20:01:27 +0000 Manifest this update: Sat 20 Dec 2025 20:01:27 +0000 Manifest next update: Sun 21 Dec 2025 20:01:27 +0000 Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=) 2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: A+n97A8w15PXywnLp8vQxdgCnu4HhWwPfqpVCfvn3Mo=) 3: xPTlfZcqBmFHE8DqUkWLvX-OfrY.roa (hash: hULrZXIf+9xvKQAU881NPQxtxECyTMfIWjcDLv4pIxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:50:46:dc:2a:e8:5f:c2:6c:41:a8:50:73:3e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Validity Not Before: Dec 20 20:01:27 2025 GMT Not After : Dec 21 20:01:27 2025 GMT Subject: CN=4b63fc81884f00c356dd841dfd623c15f27dd636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1a:79:2d:db:79:3a:de:1d:dc:e1:a8:d0:45: ee:87:8e:9a:9d:06:7c:f5:f1:9b:05:47:7d:dc:7c: 27:b4:04:3a:bb:f1:50:79:19:6f:f5:10:0b:65:3d: b6:e7:0e:0b:9a:87:35:f9:6e:52:cf:2f:a3:3c:17: 6d:d6:7a:2f:b4:43:0f:f9:c7:24:ee:b4:8f:e3:d5: 8a:87:e7:c0:8d:e9:89:9d:7b:b8:29:bd:49:fb:4c: c4:28:0a:9d:51:24:1f:82:8c:1b:ad:26:ee:e6:7b: 89:f9:7e:12:8a:71:02:14:43:2d:34:05:a3:c7:be: d8:3d:73:59:c2:66:02:4c:fa:2a:22:bf:87:82:8b: 18:92:b5:94:9d:79:92:52:a9:b6:49:38:40:55:1b: 59:5c:f3:6f:9d:e6:95:83:2f:30:2b:7b:b2:51:30: 25:56:68:ed:12:60:5e:28:d0:42:d0:b8:d7:00:e8: c4:7e:69:5b:fe:e6:63:a3:a0:9e:15:dd:50:46:27: 18:19:0a:cc:c4:a7:f7:23:2c:7d:ab:fe:1a:1a:44: 1c:f6:85:82:7e:3f:d4:26:df:f4:37:97:75:d5:83: 52:59:96:9e:15:6f:d2:e6:a5:ac:bb:6a:cc:18:29: f7:b6:b2:cb:1f:79:2c:d9:ed:37:30:8f:82:76:1d: 65:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:63:FC:81:88:4F:00:C3:56:DD:84:1D:FD:62:3C:15:F2:7D:D6:36 X509v3 Authority Key Identifier: keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:11:d4:fc:35:f9:dd:da:b8:4e:7b:87:9c:0a:05:7f:67:05: 44:6e:4d:1f:d6:ff:ba:f9:b6:f6:e1:e4:ae:32:09:12:dd:69: 4b:d4:14:0f:5d:ed:a7:30:57:07:7c:7f:c6:b0:fb:a8:10:31: 67:92:f8:f0:6c:0e:54:7c:9f:a4:82:ff:54:89:9c:62:a1:f3: 85:ef:95:b2:58:65:c2:eb:12:5f:09:04:fd:db:23:c4:ce:0a: a9:a6:4c:d4:bb:ff:c9:74:46:d6:fd:5d:9b:47:b2:4e:3e:cd: ac:75:fe:74:d7:3e:09:55:ed:d7:b0:d6:6c:4b:e8:ae:1e:7a: 7f:47:81:08:d9:4d:dd:39:33:77:2a:46:4e:26:58:85:8c:45: 86:37:cb:f4:ad:5f:55:8f:a5:b1:ef:7b:5b:87:11:6f:25:a5: bf:e1:75:9f:a5:d1:4e:39:ff:43:ce:fe:7b:07:65:e2:52:62: 02:d4:fc:f6:76:4a:03:aa:86:91:07:43:65:ed:e1:63:cf:12: 03:b5:28:db:b0:e6:12:41:1e:c0:82:03:93:2a:a4:38:68:a1: a7:e2:0e:38:99:c8:96:46:db:9b:b1:0e:e8:3c:78:bb:14:27: 15:2b:0c:db:37:5b:50:b0:6f:31:e7:29:61:a3:44:98:d0:9d: 8d:f4:be:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WlBG3CroX8JsQahQcz6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz NWZiZjEwHhcNMjUxMjIwMjAwMTI3WhcNMjUxMjIxMjAwMTI3WjAzMTEwLwYDVQQD Eyg0YjYzZmM4MTg4NGYwMGMzNTZkZDg0MWRmZDYyM2MxNWYyN2RkNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRp5Ldt5Ot4d3OGo0EXuh46anQZ8 9fGbBUd93HwntAQ6u/FQeRlv9RALZT225w4Lmoc1+W5Szy+jPBdt1novtEMP+cck 7rSP49WKh+fAjemJnXu4Kb1J+0zEKAqdUSQfgowbrSbu5nuJ+X4SinECFEMtNAWj x77YPXNZwmYCTPoqIr+HgosYkrWUnXmSUqm2SThAVRtZXPNvneaVgy8wK3uyUTAl VmjtEmBeKNBC0LjXAOjEfmlb/uZjo6CeFd1QRicYGQrMxKf3Iyx9q/4aGkQc9oWC fj/UJt/0N5d11YNSWZaeFW/S5qWsu2rMGCn3trLLH3ks2e03MI+Cdh1lVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtj/IGITwDDVt2EHf1iPBXyfdY2MB8GA1UdIwQY MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt NmJhZjMwMDc5MDVjLzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRHU/DX5 3dq4TnuHnAoFf2cFRG5NH9b/uvm29uHkrjIJEt1pS9QUD13tpzBXB3x/xrD7qBAx Z5L48GwOVHyfpIL/VImcYqHzhe+VslhlwusSXwkE/dsjxM4KqaZM1Lv/yXRG1v1d m0eyTj7NrHX+dNc+CVXt17DWbEvorh56f0eBCNlN3TkzdypGTiZYhYxFhjfL9K1f VY+lse97W4cRbyWlv+F1n6XRTjn/Q87+ewdl4lJiAtT89nZKA6qGkQdDZe3hY88S A7Uo27DmEkEewIIDkyqkOGihp+IOOJnIlkbbm7EO6Dx4uxQnFSsM2zdbULBvMecp YaNEmNCdjfS+vQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:43:59 2025 by rpki-client