This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft File: WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json) Hash identifier: 3DfuTuD9j9OnHZDZbhSDCsDwWVPTD+AgWvykVmP2GHc= Subject key identifier: DC:A6:77:68:83:05:07:5F:53:82:FF:6A:53:E1:28:DE:57:AB:15:02 Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA Certificate issuer: /CN=5806da5a59251275ceb18694e17415352aedd6aa Certificate serial: 019B405C4AEED11A330678C87A1D9503318A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft Manifest number: 14C0 Signing time: Sun 21 Dec 2025 10:02:28 +0000 Manifest this update: Sun 21 Dec 2025 10:02:28 +0000 Manifest next update: Mon 22 Dec 2025 10:02:28 +0000 Files and hashes: 1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=) 2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=) 3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=) 4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=) 5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=) 6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: M+GugPz54bupsbDuxOoLwkfqKskq+0wWjJAGHPUueiw=) 7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=) 8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=) 9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=) 10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=) 11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=) 12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=) 13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:4a:ee:d1:1a:33:06:78:c8:7a:1d:95:03:31:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa Validity Not Before: Dec 21 10:02:28 2025 GMT Not After : Dec 22 10:02:28 2025 GMT Subject: CN=dca677688305075f5382ff6a53e128de57ab1502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f7:61:10:b9:94:a0:06:42:53:ca:06:82:9a: da:39:72:a9:02:08:b5:08:f3:6b:cc:bb:c5:8c:48: 56:97:8d:3b:7d:c5:82:7e:a5:80:e4:8f:71:89:59: c1:a9:05:5e:02:f5:27:48:31:ac:a7:7b:11:a1:f2: d5:36:a0:1a:6c:0b:30:2a:5b:97:6d:2b:3b:b5:03: b6:f1:73:23:84:8e:32:ce:5b:84:83:95:eb:f8:ca: f7:18:f8:d2:67:23:3a:2f:91:a4:69:52:c6:10:d9: ae:57:ff:4a:6d:1d:4c:7a:38:29:a8:10:e7:b0:a2: 49:6e:92:3b:9c:04:fc:6c:ef:84:dd:90:70:7d:3e: 27:13:b3:65:49:eb:a8:97:5b:ae:32:7f:a8:80:24: 61:94:b4:e8:c1:16:75:35:0d:ec:08:df:41:b0:75: fb:ac:28:4e:f6:ec:5b:4a:ab:37:49:21:24:16:9f: 8b:5d:97:8d:2c:cc:84:f3:2b:2e:d4:09:19:19:37: 64:d7:3f:1b:9d:5e:c5:ae:7c:bb:75:63:36:af:48: f4:8e:3e:a7:83:8f:85:8f:22:7d:eb:7e:cc:66:36: 99:59:7f:04:ed:1c:bb:d0:c6:5f:94:4c:fa:42:fe: 8f:17:4d:5e:47:64:66:f4:cb:f6:e2:ca:13:70:c0: 5b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A6:77:68:83:05:07:5F:53:82:FF:6A:53:E1:28:DE:57:AB:15:02 X509v3 Authority Key Identifier: keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:57:59:d1:cd:77:7f:91:2d:60:ac:ef:3e:0f:56:2c:44:a2: db:9e:0f:d0:00:5f:9b:9f:70:66:0c:f6:56:dc:3e:55:21:1d: ea:eb:8c:7e:64:91:7d:cb:59:53:c6:f1:fe:c2:be:b7:77:ad: 05:c6:80:7a:d7:6b:d5:c7:66:04:e8:0b:51:6f:9d:14:32:b7: 21:d2:34:df:c1:76:c0:b6:3e:fb:c2:52:ac:d2:09:05:03:8a: 6d:51:eb:85:67:98:09:27:5e:d7:8c:9d:c9:1b:22:29:de:52: b3:12:10:5c:5a:ef:a8:e1:92:af:79:98:83:bc:bc:3f:89:b5: 2d:0b:1c:3f:79:9f:b9:e7:92:9e:4f:6c:8b:ed:c7:e0:02:18: 7d:ad:d3:cb:bf:99:38:1b:1a:0e:46:e2:de:c8:57:ae:c7:52: 6d:fa:10:9a:72:3e:d3:b5:3c:45:dc:70:d3:2e:e9:81:da:ae: 8a:51:01:cc:fa:f9:21:7f:6d:c9:a1:e4:02:28:b1:f4:99:11: a3:07:4c:8e:52:34:6a:70:d7:48:6e:59:bf:d8:61:9e:72:1e: af:da:d3:ed:c0:a5:4a:b7:a4:15:ee:13:01:8f:ca:0b:3a:c9: 3b:c8:89:c4:88:68:19:e5:cf:1f:47:69:53:80:9c:6b:41:f6: 22:f7:eb:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXEru0RozBnjIeh2VAzGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDZkYTVhNTkyNTEyNzVjZWIxODY5NGUxNzQxNTM1MmFl ZGQ2YWEwHhcNMjUxMjIxMTAwMjI4WhcNMjUxMjIyMTAwMjI4WjAzMTEwLwYDVQQD EyhkY2E2Nzc2ODgzMDUwNzVmNTM4MmZmNmE1M2UxMjhkZTU3YWIxNTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PdhELmUoAZCU8oGgpraOXKpAgi1 CPNrzLvFjEhWl407fcWCfqWA5I9xiVnBqQVeAvUnSDGsp3sRofLVNqAabAswKluX bSs7tQO28XMjhI4yzluEg5Xr+Mr3GPjSZyM6L5GkaVLGENmuV/9KbR1MejgpqBDn sKJJbpI7nAT8bO+E3ZBwfT4nE7NlSeuol1uuMn+ogCRhlLTowRZ1NQ3sCN9BsHX7 rChO9uxbSqs3SSEkFp+LXZeNLMyE8ysu1AkZGTdk1z8bnV7Frny7dWM2r0j0jj6n g4+FjyJ9637MZjaZWX8E7Ry70MZflEz6Qv6PF01eR2Rm9Mv24soTcMBbFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNymd2iDBQdfU4L/alPhKN5XqxUCMB8GA1UdIwQY MBaAFFgG2lpZJRJ1zrGGlOF0FTUq7daqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYt Zjc5Y2NjM2Y0ZWFmLzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81ZGYxMTktYjFkZi00Y2ViLWJkNGYtZjc5Y2NjM2Y0ZWFm LzEvV0FiYVdsa2xFblhPc1lhVTRYUVZOU3J0MXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVdZ0c13 f5EtYKzvPg9WLESi254P0ABfm59wZgz2Vtw+VSEd6uuMfmSRfctZU8bx/sK+t3et BcaAetdr1cdmBOgLUW+dFDK3IdI038F2wLY++8JSrNIJBQOKbVHrhWeYCSde14yd yRsiKd5SsxIQXFrvqOGSr3mYg7y8P4m1LQscP3mfueeSnk9si+3H4AIYfa3Ty7+Z OBsaDkbi3shXrsdSbfoQmnI+07U8Rdxw0y7pgdquilEBzPr5IX9tyaHkAiix9JkR owdMjlI0anDXSG5Zv9hhnnIer9rT7cClSrekFe4TAY/KCzrJO8iJxIhoGeXPH0dp U4Cca0H2Ivfr9g== -----END CERTIFICATE-----Generated at Sun Dec 21 13:52:40 2025 by rpki-client