This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft File: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft (raw, json) Hash identifier: KBLfrw1z8wTxf5aQLYAT4Bz8QBXwQ/raXlTaLM0sRTk= Subject key identifier: A5:CE:01:9F:BE:EC:72:8A:2B:23:4F:F8:4F:AC:8A:3E:3E:28:48:C8 Authority key identifier: 59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 Certificate issuer: /CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Certificate serial: 019AF16428D05C3E39C76FB32882E8E30C31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft Manifest number: 0171 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl (hash: 48bxXKcbDV3DYbx8qunJIWczd7swWxl68pKeQRLku5c=) 2: o0U8osvjVfiUePXARN4QCTizNIY.roa (hash: ya55CYA+rU6mfw44B9MOjIiEFlx2IM7GsmvEpJ7vX+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:28:d0:5c:3e:39:c7:6f:b3:28:82:e8:e3:0c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59fa7027661ac8c4a77ff2abd59686af99f15928 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=a5ce019fbeec728a2b234ff84fac8a3e3e2848c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:d5:04:3f:67:6e:49:20:ed:50:2c:ab:f6: e3:fb:2d:78:e1:84:69:6d:6e:f5:43:ce:e7:14:37: f1:3a:26:f4:0b:9d:42:a5:27:80:89:1b:10:8c:e3: a8:2c:89:fe:37:9d:b8:45:75:c7:dd:18:b1:fd:a6: 2b:08:cc:c4:8a:42:da:f6:f4:f2:ee:10:f0:21:18: a6:c3:de:67:44:1c:79:a8:84:9c:2c:b5:ef:4c:66: d5:e3:81:5c:97:ed:28:65:93:f5:8a:71:88:6b:23: 0a:df:73:3a:e9:0e:f0:f5:89:57:cc:2c:04:f7:b3: 54:a7:ae:1d:59:e1:8b:9a:47:53:56:3a:b5:48:e4: 19:8f:f6:a3:31:82:2d:cd:cb:7c:4f:b1:c4:f4:a2: 1c:c3:84:53:ba:3f:95:0c:35:c0:f5:de:b6:7f:58: 46:8b:b6:1d:08:b0:2d:b4:72:ee:92:4b:ec:a9:51: 93:5a:4c:91:4e:53:82:c7:4d:2a:ad:c4:35:e6:8e: 37:22:e2:89:4b:91:de:19:76:57:57:71:5c:51:23: 0a:1a:92:76:c0:86:04:2b:c8:d9:61:51:6b:13:af: e3:b8:fd:1a:18:c9:d7:29:62:3e:92:a1:44:ed:94: 8a:86:fd:8c:66:83:44:bf:55:0d:8e:92:da:dc:3c: 20:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CE:01:9F:BE:EC:72:8A:2B:23:4F:F8:4F:AC:8A:3E:3E:28:48:C8 X509v3 Authority Key Identifier: keyid:59:FA:70:27:66:1A:C8:C4:A7:7F:F2:AB:D5:96:86:AF:99:F1:59:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbd9d1-84a4-451d-9214-0906da1b23a6/1/WfpwJ2YayMSnf_Kr1ZaGr5nxWSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7d:f4:a5:e2:55:0e:90:28:c1:a2:a2:06:de:22:8d:12:17: 4e:cf:df:f3:9b:17:27:be:59:c1:dc:5e:13:62:ba:97:4e:30: 11:74:1f:26:66:53:7b:10:52:cf:b2:2d:8f:92:89:63:2a:c5: 8d:5f:c7:b1:65:48:b6:31:00:d5:2f:8f:0b:5c:c2:b9:8a:c3: ea:a1:2a:c5:1f:0b:f9:66:d3:84:e2:c9:7e:28:5b:ee:02:ba: ba:0b:7b:2e:77:6e:dc:36:b0:3f:48:f1:09:dc:99:c7:a4:be: 30:86:ef:90:ae:32:30:4a:69:7c:f4:f2:75:0e:13:01:74:9d: d7:23:82:ce:dd:72:70:08:3a:a9:66:2e:6b:b5:8c:66:63:9b: 42:e8:63:7e:1c:b0:3e:9b:fa:67:b2:02:58:96:97:db:64:a1: 85:83:fa:09:a2:85:cb:b8:fc:4c:9b:fc:31:d1:9f:2e:1c:45: d2:42:59:1c:d1:45:3b:19:83:de:4b:22:8b:6b:84:e8:21:5e: 00:0b:1e:54:65:6c:e8:10:ed:2e:f2:fd:3d:76:96:2b:6a:a8: 7d:c3:01:15:80:f9:75:b4:b9:0f:9f:56:a1:93:8a:66:18:21: a8:ad:d7:19:38:d9:cb:4b:69:71:ff:14:3b:d1:84:69:54:7c: d6:d4:f1:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCjQXD45x2+zKILo4wwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZmE3MDI3NjYxYWM4YzRhNzdmZjJhYmQ1OTY4NmFmOTlm MTU5MjgwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EyhhNWNlMDE5ZmJlZWM3MjhhMmIyMzRmZjg0ZmFjOGEzZTNlMjg0OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YnVBD9nbkkg7VAsq/bj+y144YRp bW71Q87nFDfxOib0C51CpSeAiRsQjOOoLIn+N524RXXH3Rix/aYrCMzEikLa9vTy 7hDwIRimw95nRBx5qIScLLXvTGbV44Fcl+0oZZP1inGIayMK33M66Q7w9YlXzCwE 97NUp64dWeGLmkdTVjq1SOQZj/ajMYItzct8T7HE9KIcw4RTuj+VDDXA9d62f1hG i7YdCLAttHLukkvsqVGTWkyRTlOCx00qrcQ15o43IuKJS5HeGXZXV3FcUSMKGpJ2 wIYEK8jZYVFrE6/juP0aGMnXKWI+kqFE7ZSKhv2MZoNEv1UNjpLa3Dwg5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXOAZ++7HKKKyNP+E+sij4+KEjIMB8GA1UdIwQY MBaAFFn6cCdmGsjEp3/yq9WWhq+Z8VkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQt MDkwNmRhMWIyM2E2LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jYmQ5ZDEtODRhNC00NTFkLTkyMTQtMDkwNmRhMWIyM2E2 LzEvV2Zwd0oyWWF5TVNuZl9LcjFaYUdyNW54V1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg330peJV DpAowaKiBt4ijRIXTs/f85sXJ75ZwdxeE2K6l04wEXQfJmZTexBSz7Itj5KJYyrF jV/HsWVItjEA1S+PC1zCuYrD6qEqxR8L+WbThOLJfihb7gK6ugt7Lndu3DawP0jx CdyZx6S+MIbvkK4yMEppfPTydQ4TAXSd1yOCzt1ycAg6qWYua7WMZmObQuhjfhyw Ppv6Z7ICWJaX22ShhYP6CaKFy7j8TJv8MdGfLhxF0kJZHNFFOxmD3ksii2uE6CFe AAseVGVs6BDtLvL9PXaWK2qofcMBFYD5dbS5D59WoZOKZhghqK3XGTjZy0tpcf8U O9GEaVR81tTxnw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:58:52 2025 by rpki-client