This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json) Hash identifier: Wt4pq1A8iU4X0bw+uZq5dNzmXSH1DgLOO5G26QOJntc= Subject key identifier: E1:E7:14:41:31:48:36:56:31:8F:EC:48:4B:BA:1E:3D:64:82:38:C7 Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Certificate serial: 019B44A6182DA3AF8D9BA782B74C6E7A56DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft Manifest number: 179E Signing time: Mon 22 Dec 2025 06:01:34 +0000 Manifest this update: Mon 22 Dec 2025 06:01:34 +0000 Manifest next update: Tue 23 Dec 2025 06:01:34 +0000 Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=) 2: BY0duX9kQwVXjgquhsR-munhjnQ.asa (hash: NvBZnkapjPSPy1tNHiYvTA3NcGg5KXOBAdMekZQ3UrA=) 3: WAFcyNofG780PiarII34uyb9U64.crl (hash: QZmSaoe9Xj0NviI9PjyUj4IgnWqo1KNkPFGK3cb7OyY=) 4: Wr5va4tlLM7OArIc13NwZVzUZSM.asa (hash: ZnrWop8OkpeoCvz/MYLeKchWVnb3K25hWmby4HEumAM=) 5: m3VZjdzwzA2piVdwr0jRtcRx0nU.roa (hash: P1WYR9PHlhqL+0w0ThuMbIIaq+c1NvgD6JAgzrBxv9k=) 6: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=) 7: z0dUAUAYs2FDj8KE93GCEX_1moY.asa (hash: jkyk8H05lxWxlsGkVRiKoTC3QiMwT13kS4SkDxeCCDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:a6:18:2d:a3:af:8d:9b:a7:82:b7:4c:6e:7a:56:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Validity Not Before: Dec 22 06:01:34 2025 GMT Not After : Dec 23 06:01:34 2025 GMT Subject: CN=e1e7144131483656318fec484bba1e3d648238c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:22:d2:5f:ff:ef:d6:61:12:f6:16:54:54:ce: 35:5b:0f:6c:0f:0f:53:72:6c:14:05:80:53:aa:f7: eb:ce:26:df:ae:06:d1:6e:3b:e6:d1:07:43:0d:cc: 8f:29:2d:56:7b:ad:16:29:b0:42:53:1d:91:d8:ea: 07:f6:5e:7b:40:52:de:50:47:b4:61:54:85:97:e2: 1e:8d:29:41:c9:d4:fd:67:eb:1e:39:6a:49:60:f8: a3:70:45:2e:2d:c4:2b:d6:bd:92:99:b5:31:f4:6f: 69:8b:f8:ce:80:59:cf:d4:5f:e0:63:06:c4:74:3a: 74:f0:0b:dd:0d:17:40:90:4a:c0:79:b3:d7:fa:3a: 9a:f6:3f:9d:db:9a:cf:e1:af:e3:e5:5d:a9:3d:a2: 58:6e:bb:d1:d4:ff:76:a3:9f:fe:a2:12:58:85:30: e7:de:1c:9d:fa:47:12:63:f4:fa:d8:bb:12:28:f9: cf:87:52:ed:b4:9a:49:76:b0:ff:30:6a:12:a5:85: 67:e5:8c:22:55:c1:b2:b2:8f:bf:9b:3a:ca:84:6e: 60:fb:69:da:98:45:11:63:a3:c8:03:ef:72:98:58: ac:df:c9:b0:57:16:e3:f0:fd:6d:61:65:52:41:9b: 7d:a6:64:e8:1e:10:7a:f3:12:20:bc:81:35:d3:52: df:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E7:14:41:31:48:36:56:31:8F:EC:48:4B:BA:1E:3D:64:82:38:C7 X509v3 Authority Key Identifier: keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:5d:e7:04:10:7d:71:35:ed:33:aa:78:51:49:23:53:4a:18: 06:f4:76:5d:01:4f:0a:c5:e8:0e:d6:14:c0:20:46:b4:f4:56: 51:9a:6c:5e:d1:d1:72:26:b8:0f:2c:2d:9c:26:1d:b8:c1:56: 6a:da:32:62:d4:fd:25:e4:f6:92:28:02:da:91:60:57:cd:af: fb:f0:cd:39:da:10:de:18:92:9a:cc:a9:f4:73:d7:c7:5c:f7: 7c:0d:95:e5:d4:cf:d2:24:0e:99:b5:e4:ed:7b:56:1b:da:99: 00:00:7e:94:e3:9a:2b:2e:1f:37:ae:b5:e0:89:0c:d1:2d:5a: 65:39:e0:b1:15:2d:cc:fe:71:b4:d8:af:46:86:b8:74:78:b2: aa:29:ab:11:87:b4:36:04:00:96:c9:a8:e4:7c:51:2f:36:b2: 21:92:88:2e:e6:3b:8b:bf:32:0b:36:98:88:a9:8e:2c:5a:07: 6b:85:cb:8b:eb:1d:24:60:5b:e3:7a:8a:71:75:ed:1c:04:1c: f2:4a:05:49:35:7b:fa:01:6b:5e:af:eb:60:db:ac:06:9e:c4: e9:43:2f:88:bc:85:8d:e9:ed:3d:06:72:43:10:9d:97:dd:79: be:e4:0a:48:68:ba:ab:68:57:b6:8c:55:0c:d3:73:88:b2:cb: 88:a6:16:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEphgto6+Nm6eCt0xuelbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm ZDUzYWUwHhcNMjUxMjIyMDYwMTM0WhcNMjUxMjIzMDYwMTM0WjAzMTEwLwYDVQQD EyhlMWU3MTQ0MTMxNDgzNjU2MzE4ZmVjNDg0YmJhMWUzZDY0ODIzOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSLSX//v1mES9hZUVM41Ww9sDw9T cmwUBYBTqvfrzibfrgbRbjvm0QdDDcyPKS1We60WKbBCUx2R2OoH9l57QFLeUEe0 YVSFl+IejSlBydT9Z+seOWpJYPijcEUuLcQr1r2SmbUx9G9pi/jOgFnP1F/gYwbE dDp08AvdDRdAkErAebPX+jqa9j+d25rP4a/j5V2pPaJYbrvR1P92o5/+ohJYhTDn 3hyd+kcSY/T62LsSKPnPh1LttJpJdrD/MGoSpYVn5YwiVcGyso+/mzrKhG5g+2na mEURY6PIA+9ymFis38mwVxbj8P1tYWVSQZt9pmToHhB68xIgvIE101Lf8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHnFEExSDZWMY/sSEu6Hj1kgjjHMB8GA1UdIwQY MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt OGVlMjFiNzRkZDU2LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2 LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGF3nBBB9 cTXtM6p4UUkjU0oYBvR2XQFPCsXoDtYUwCBGtPRWUZpsXtHRcia4DywtnCYduMFW atoyYtT9JeT2kigC2pFgV82v+/DNOdoQ3hiSmsyp9HPXx1z3fA2V5dTP0iQOmbXk 7XtWG9qZAAB+lOOaKy4fN6614IkM0S1aZTngsRUtzP5xtNivRoa4dHiyqimrEYe0 NgQAlsmo5HxRLzayIZKILuY7i78yCzaYiKmOLFoHa4XLi+sdJGBb43qKcXXtHAQc 8koFSTV7+gFrXq/rYNusBp7E6UMviLyFjentPQZyQxCdl915vuQKSGi6q2hXtoxV DNNziLLLiKYW5A== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:25 2025 by rpki-client