This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft File: WfJfgmyjg6C3pcA2eteB_id_Z88.mft (raw, json) Hash identifier: o400x6TNz1EyEsL7YJ+KM528uK2+Sq0ksnC/w/nCnEw= Subject key identifier: D2:62:15:DD:AF:E8:A6:85:02:9D:68:64:8E:85:98:92:FB:13:B9:75 Authority key identifier: 59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF Certificate issuer: /CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf Certificate serial: 019B40C8C9C828FFE76D2F27218F10DAB207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 12:00:59 +0000 Manifest this update: Sun 21 Dec 2025 12:00:59 +0000 Manifest next update: Mon 22 Dec 2025 12:00:59 +0000 Files and hashes: 1: WfJfgmyjg6C3pcA2eteB_id_Z88.crl (hash: gPG9R4pjLQFWuaFVmVSL+e1l0birzyWFIR1HC7psU9g=) 2: Wmojj5WI86DdYFq5g4bYA7Nw2eQ.roa (hash: zUiZqLG6W26ho//gZg9iQz5Nrd2fw/u+RT7b1CbWXkM=) 3: kL9XeaVdFYIH8Ee21mjkEgEBZ5M.roa (hash: GmszFqPnsf/cmc4G3XaWK6S4KreytGM4kW7CsuDRkfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:c9:c8:28:ff:e7:6d:2f:27:21:8f:10:da:b2:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f25f826ca383a0b7a5c0367ad781fe277f67cf Validity Not Before: Dec 21 12:00:59 2025 GMT Not After : Dec 22 12:00:59 2025 GMT Subject: CN=d26215ddafe8a685029d68648e859892fb13b975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:fb:a9:90:60:94:9e:78:ae:0c:2c:e2:b1: 02:96:28:57:1c:ba:03:5d:0b:a9:0b:c1:6b:de:65: 06:7a:dd:eb:af:6b:d5:31:41:15:0f:e2:8d:e0:49: 72:aa:01:e1:2f:4f:c8:ac:98:cc:95:de:b8:cb:8b: b0:0e:f5:24:33:2b:79:de:e7:97:f2:d5:8d:7a:9d: 39:bf:0d:ac:de:e7:47:66:32:84:50:22:bc:97:39: 41:7e:66:04:70:f7:a8:b5:cf:54:dd:e5:17:47:4d: 46:fe:37:48:0d:b0:59:61:f3:40:c6:f5:e6:f8:1d: dc:d5:e0:44:00:ef:b0:91:44:fe:a7:32:e2:b2:33: 9d:93:e1:d0:fd:7a:fa:a5:33:80:66:b6:85:51:2c: f1:c2:e0:12:76:95:58:e4:2d:34:85:8a:75:63:db: d3:46:48:b9:6d:bb:01:92:22:4a:04:d0:84:01:75: 60:e3:ba:29:67:81:54:eb:a4:03:59:66:e8:1e:b1: 7f:60:2b:07:06:a7:eb:bb:8d:41:42:da:68:a4:41: 76:b3:e5:4f:74:b4:88:02:45:7f:70:3a:b6:24:5e: 12:d3:fb:c4:90:75:21:c2:32:17:a8:e4:51:77:92: 24:20:03:98:ba:3a:02:37:6a:e0:e6:2d:f1:ba:91: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:62:15:DD:AF:E8:A6:85:02:9D:68:64:8E:85:98:92:FB:13:B9:75 X509v3 Authority Key Identifier: keyid:59:F2:5F:82:6C:A3:83:A0:B7:A5:C0:36:7A:D7:81:FE:27:7F:67:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJfgmyjg6C3pcA2eteB_id_Z88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/0f06fb-a822-45e5-973e-6425e4382333/1/WfJfgmyjg6C3pcA2eteB_id_Z88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a3:f5:4b:9f:7c:a0:1c:af:28:db:28:dd:ee:cd:54:38:bf: 5f:cf:46:d8:23:dc:ac:ff:29:03:54:b1:99:27:2e:cb:40:ae: 3f:05:b5:cd:62:7b:1a:de:55:10:bb:07:e9:e0:ab:4f:01:25: cd:5d:49:93:5b:a8:7c:5c:74:0e:b0:86:52:a3:23:09:fe:d7: 05:f5:53:b8:12:aa:6d:d1:00:7d:51:32:1e:41:0b:55:bf:80: 9f:22:ec:01:b2:c1:a3:43:19:f7:6b:bc:dd:5b:46:1b:1b:01: 1c:1d:68:14:e0:ba:da:1e:d4:1b:17:17:ec:5e:f3:33:09:7a: a3:8c:86:4c:3c:66:76:cc:35:28:54:f8:71:fc:9f:51:cc:74: 90:c6:8d:45:0d:58:96:1e:e4:5c:22:cf:f1:26:65:4c:ea:bc: 68:c6:fc:57:69:50:3f:e5:60:2e:e2:e2:86:84:43:49:82:8b: be:12:a1:05:d6:c8:6e:f0:6f:3f:55:91:71:f0:c8:66:52:68: 6c:4d:f1:e2:ca:ab:18:d6:1b:5d:56:3f:22:47:b1:9c:86:80: bb:f7:52:15:fb:f7:8b:fd:27:4f:84:6c:4d:5e:57:eb:35:9d: f9:22:f5:01:3a:58:52:91:fe:58:15:61:cb:97:a2:a8:5b:32: 9d:48:15:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyMnIKP/nbS8nIY8Q2rIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI1ZjgyNmNhMzgzYTBiN2E1YzAzNjdhZDc4MWZlMjc3 ZjY3Y2YwHhcNMjUxMjIxMTIwMDU5WhcNMjUxMjIyMTIwMDU5WjAzMTEwLwYDVQQD EyhkMjYyMTVkZGFmZThhNjg1MDI5ZDY4NjQ4ZTg1OTg5MmZiMTNiOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKP7qZBglJ54rgws4rEClihXHLoD XQupC8Fr3mUGet3rr2vVMUEVD+KN4ElyqgHhL0/IrJjMld64y4uwDvUkMyt53ueX 8tWNep05vw2s3udHZjKEUCK8lzlBfmYEcPeotc9U3eUXR01G/jdIDbBZYfNAxvXm +B3c1eBEAO+wkUT+pzLisjOdk+HQ/Xr6pTOAZraFUSzxwuASdpVY5C00hYp1Y9vT Rki5bbsBkiJKBNCEAXVg47opZ4FU66QDWWboHrF/YCsHBqfru41BQtpopEF2s+VP dLSIAkV/cDq2JF4S0/vEkHUhwjIXqORRd5IkIAOYujoCN2rg5i3xupGEAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJiFd2v6KaFAp1oZI6FmJL7E7l1MB8GA1UdIwQY MBaAFFnyX4Jso4Ogt6XANnrXgf4nf2fPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2Ut NjQyNWU0MzgyMzMzLzEvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8wZjA2ZmItYTgyMi00NWU1LTk3M2UtNjQyNWU0MzgyMzMz LzEvV2ZKZmdteWpnNkMzcGNBMmV0ZUJfaWRfWjg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6P1S598 oByvKNso3e7NVDi/X89G2CPcrP8pA1SxmScuy0CuPwW1zWJ7Gt5VELsH6eCrTwEl zV1Jk1uofFx0DrCGUqMjCf7XBfVTuBKqbdEAfVEyHkELVb+AnyLsAbLBo0MZ92u8 3VtGGxsBHB1oFOC62h7UGxcX7F7zMwl6o4yGTDxmdsw1KFT4cfyfUcx0kMaNRQ1Y lh7kXCLP8SZlTOq8aMb8V2lQP+VgLuLihoRDSYKLvhKhBdbIbvBvP1WRcfDIZlJo bE3x4sqrGNYbXVY/IkexnIaAu/dSFfv3i/0nT4RsTV5X6zWd+SL1ATpYUpH+WBVh y5eiqFsynUgVow== -----END CERTIFICATE-----Generated at Sun Dec 21 19:01:01 2025 by rpki-client