This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json) Hash identifier: bhkuba+0lmdMJZbV+6lC+KhXPzcod1/2ZftoyMHA8Ao= Subject key identifier: 28:9A:F1:F7:76:21:D2:29:27:90:10:DA:94:D1:E4:55:1D:5A:99:1C Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Certificate serial: 019B3D22DC71D4ACA0B0CCE913A47C007DC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft Manifest number: 6B Signing time: Sat 20 Dec 2025 19:00:53 +0000 Manifest this update: Sat 20 Dec 2025 19:00:53 +0000 Manifest next update: Sun 21 Dec 2025 19:00:53 +0000 Files and hashes: 1: DOiHl6Blr58G7-g5ryQ14ob_BSQ.roa (hash: Lt0of1f9vpxCYESgZXRaRcNizfsrbZc9ngbx6gbOqaQ=) 2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: hZp6CVNwynbl2RftZeJF23Y09d0Xed7QHMPGhSPIqag=) 3: n0Me6wkjc8Xeyc2eu9TL-q59u8I.roa (hash: x0QsbLQxSgzw6qfolhfMqYovLG9uc3eYJ7ouYr0O1Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:dc:71:d4:ac:a0:b0:cc:e9:13:a4:7c:00:7d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Validity Not Before: Dec 20 19:00:53 2025 GMT Not After : Dec 21 19:00:53 2025 GMT Subject: CN=289af1f77621d229279010da94d1e4551d5a991c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b3:ed:90:9d:6d:e8:54:c3:3b:15:06:fe:5a: 82:76:35:20:74:2c:b0:0c:76:f7:4c:0e:eb:50:22: 7d:6b:29:82:e4:1a:52:94:a6:83:2a:d7:a7:80:8f: ef:a1:e0:0d:65:26:c2:fb:43:c6:55:80:fb:17:67: ae:fd:b0:5e:65:d8:92:57:45:22:a0:48:91:63:77: 96:a4:ca:97:8d:ce:ce:18:56:0a:88:fe:aa:e9:43: 88:a5:09:78:1a:4e:98:c2:67:9d:b1:08:25:e7:cd: 66:9d:6b:24:77:44:4f:16:ab:ef:49:56:0a:55:70: 48:5b:b7:78:6f:6e:2d:e4:21:45:ac:eb:88:6a:13: 20:d4:b4:b8:5f:bd:f5:95:bb:60:56:10:b0:f6:e7: 5a:32:c8:77:5f:8d:30:88:c6:04:ee:a0:a1:7a:e0: 20:be:ce:40:69:5d:bc:ba:f9:cd:67:ab:c4:c9:ad: 44:3f:aa:4a:c0:26:f0:2a:fa:3b:15:f7:13:9d:68: 22:d3:b0:b8:4f:bc:aa:92:6f:86:ff:cd:be:86:cf: 9b:53:bc:91:cb:73:c1:3a:98:d6:3c:ac:b2:44:0a: dd:b4:03:43:a4:26:ab:57:0b:f0:4f:aa:4e:3e:6a: 30:7d:70:57:da:5a:8e:27:4f:87:70:12:5f:87:5d: 2b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9A:F1:F7:76:21:D2:29:27:90:10:DA:94:D1:E4:55:1D:5A:99:1C X509v3 Authority Key Identifier: keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:9c:50:9e:bb:81:6e:ae:58:7d:f0:0d:df:9e:82:3a:24:af: 14:00:a9:5f:11:66:b3:e6:b1:1b:bb:67:f0:30:be:0f:82:06: a5:92:17:fe:71:bc:7d:1f:68:d0:30:1e:29:a4:88:2b:47:3f: 63:aa:ea:98:fb:a7:d4:2d:15:20:86:a5:c2:f6:de:f6:4e:ff: 7f:2c:b4:06:07:19:bc:90:62:0e:5b:f7:c2:03:98:34:dd:d9: 58:9a:1c:1c:d7:e7:24:b9:52:0b:36:23:0a:08:dc:c9:04:dd: 35:0e:ac:54:2e:81:ce:62:d5:82:52:dd:a3:b7:9c:d7:92:12: e6:63:03:3e:fc:79:9b:b4:07:85:c7:33:52:71:8b:fd:a5:73: 4b:9f:38:40:bc:29:1f:77:94:4a:6b:7a:35:57:2c:cf:d3:51: 8f:5e:b4:73:4d:98:bb:2f:f7:2c:cb:69:60:44:74:00:df:6c: a9:d6:69:97:e1:c3:be:a9:47:c5:21:34:9d:ee:64:0f:50:53: ee:31:23:86:4f:53:0b:ba:da:78:4c:40:c0:e8:4a:6a:d4:8c: 50:d0:5d:71:49:35:cb:89:22:30:ea:c3:67:ad:38:17:00:35: fe:5a:c6:48:97:9d:68:b6:92:5b:2d:9a:fd:ec:a1:94:14:da: f8:ee:ba:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Itxx1KygsMzpE6R8AH3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTM0NTU3NDZlYjcyYmI1NzZjN2I0MDRiMDQ2ZWY0NjBk MWFlMWMwHhcNMjUxMjIwMTkwMDUzWhcNMjUxMjIxMTkwMDUzWjAzMTEwLwYDVQQD EygyODlhZjFmNzc2MjFkMjI5Mjc5MDEwZGE5NGQxZTQ1NTFkNWE5OTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7PtkJ1t6FTDOxUG/lqCdjUgdCyw DHb3TA7rUCJ9aymC5BpSlKaDKtengI/voeANZSbC+0PGVYD7F2eu/bBeZdiSV0Ui oEiRY3eWpMqXjc7OGFYKiP6q6UOIpQl4Gk6YwmedsQgl581mnWskd0RPFqvvSVYK VXBIW7d4b24t5CFFrOuIahMg1LS4X731lbtgVhCw9udaMsh3X40wiMYE7qCheuAg vs5AaV28uvnNZ6vEya1EP6pKwCbwKvo7FfcTnWgi07C4T7yqkm+G/82+hs+bU7yR y3PBOpjWPKyyRArdtANDpCarVwvwT6pOPmowfXBX2lqOJ0+HcBJfh10rVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCia8fd2IdIpJ5AQ2pTR5FUdWpkcMB8GA1UdIwQY MBaAFFjjRVdG63K7V2x7QEsEbvRg0a4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQt NGU5ZDk4YTYwNjNiLzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQtNGU5ZDk4YTYwNjNi LzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASZxQnruB bq5YffAN356COiSvFACpXxFms+axG7tn8DC+D4IGpZIX/nG8fR9o0DAeKaSIK0c/ Y6rqmPun1C0VIIalwvbe9k7/fyy0BgcZvJBiDlv3wgOYNN3ZWJocHNfnJLlSCzYj CgjcyQTdNQ6sVC6BzmLVglLdo7ec15IS5mMDPvx5m7QHhcczUnGL/aVzS584QLwp H3eUSmt6NVcsz9NRj160c02Yuy/3LMtpYER0AN9sqdZpl+HDvqlHxSE0ne5kD1BT 7jEjhk9TC7raeExAwOhKatSMUNBdcUk1y4kiMOrDZ604FwA1/lrGSJedaLaSWy2a /eyhlBTa+O66UQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:44:50 2025 by rpki-client