This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json) Hash identifier: vDQKj3A/eaeUuI0u6VvKuvhM7IZ7eRGf2SIy3cDKAuk= Subject key identifier: DB:DA:CF:45:4F:58:DB:AC:F9:31:87:7A:40:73:5E:76:87:76:D1:03 Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Certificate serial: 019AF1D215364D54406E98FDE46FBE07FAED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=) 2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: yLfX1FOZ6F0q+AmI9wqbBwxx6C9DzOBK31MhNGRgFRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:15:36:4d:54:40:6e:98:fd:e4:6f:be:07:fa:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=dbdacf454f58dbacf931877a40735e768776d103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a3:9a:bd:88:cf:0a:9d:d9:31:2b:34:39:08: eb:77:ca:31:6a:e2:05:a9:c1:51:ec:8f:fa:a4:3f: ff:ce:d7:29:57:04:bf:52:fc:7c:90:d1:2b:48:7a: e2:09:1f:61:72:26:2a:69:9c:4e:54:07:8c:bf:e6: 6a:b2:77:1f:90:f0:6e:bc:19:e5:06:37:3e:dc:bf: 6c:3d:2d:c5:32:24:1e:34:b6:3f:44:2c:f9:31:ec: 0c:6c:a3:2b:cb:df:66:fe:00:e2:c0:20:31:98:58: db:94:ce:7c:0a:e4:45:0a:f9:18:b2:6e:f1:f0:01: f6:82:ad:fc:c7:b5:7d:bb:41:c0:64:3a:47:f7:7b: b9:ff:1b:b1:66:01:ff:42:fa:7b:e6:a9:d9:14:da: 65:03:34:c6:28:95:cc:5e:66:9d:d7:0f:9b:bb:4a: c0:97:c4:ac:49:be:b3:3a:ce:ba:1e:a9:f3:1c:53: fa:55:f9:2d:e6:63:4c:cd:70:59:b8:2e:f1:dd:f9: 3a:ff:32:ea:28:90:d2:ba:dd:31:e0:41:7b:de:e5: 33:7b:a9:11:45:9e:c8:d2:e0:25:5a:7a:b2:d6:90: 48:fa:17:8b:38:c2:42:3f:13:d6:da:97:f5:45:c0: 5a:e4:34:57:0e:db:3b:82:dd:2c:68:50:97:e0:93: ce:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DA:CF:45:4F:58:DB:AC:F9:31:87:7A:40:73:5E:76:87:76:D1:03 X509v3 Authority Key Identifier: keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e3:d1:b0:64:fc:fb:83:c8:f9:e4:fb:1a:2e:ab:85:af:3e: 7c:b3:5e:ef:81:46:aa:5c:7f:3d:d4:db:6c:38:9f:09:79:db: d1:6a:ad:97:46:6f:2f:74:d2:d4:ba:40:de:27:6a:aa:09:c8: 37:4a:46:85:74:e3:1c:e9:a3:16:0a:f0:26:f9:ea:e1:25:e4: b5:45:70:60:fb:12:56:f6:4e:b5:ee:6d:94:1a:b1:bc:cf:a3: f6:d2:46:f0:c9:32:5c:ab:fa:ff:57:77:6e:19:2a:cc:46:48: 5d:60:83:ea:21:d6:15:e4:38:4b:ca:e0:55:dd:3d:a8:84:44: 5c:09:56:60:32:97:79:77:08:78:f5:a8:e6:28:c2:4a:8b:00: 66:67:56:1c:b0:59:7f:2b:66:96:51:34:01:9e:cc:81:43:d6: b9:67:26:e0:58:3d:d0:ce:a8:8d:84:1d:7f:76:bf:82:ad:8f: 66:67:4a:6c:35:62:62:97:eb:37:08:14:50:64:4c:a0:53:3d: 24:5d:21:59:aa:e3:53:03:10:15:1b:57:d4:78:4a:de:df:0d: 1d:a3:50:fe:e2:e7:0c:18:51:0f:08:04:0c:8c:54:da:5b:8d: eb:51:c2:92:f5:6c:f3:7e:14:11:2d:08:e2:4d:7f:84:c0:ca: 46:7d:e1:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hU2TVRAbpj95G++B/rtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNjdjNTkxY2MxYjk2YTFjYTRmOTEwZmUxMDFlZjkwNGRh MWUyMTgwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EyhkYmRhY2Y0NTRmNThkYmFjZjkzMTg3N2E0MDczNWU3Njg3NzZkMTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqOavYjPCp3ZMSs0OQjrd8oxauIF qcFR7I/6pD//ztcpVwS/Uvx8kNErSHriCR9hciYqaZxOVAeMv+ZqsncfkPBuvBnl Bjc+3L9sPS3FMiQeNLY/RCz5MewMbKMry99m/gDiwCAxmFjblM58CuRFCvkYsm7x 8AH2gq38x7V9u0HAZDpH93u5/xuxZgH/Qvp75qnZFNplAzTGKJXMXmad1w+bu0rA l8SsSb6zOs66HqnzHFP6Vfkt5mNMzXBZuC7x3fk6/zLqKJDSut0x4EF73uUze6kR RZ7I0uAlWnqy1pBI+heLOMJCPxPW2pf1RcBa5DRXDts7gt0saFCX4JPO4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvaz0VPWNus+TGHekBzXnaHdtEDMB8GA1UdIwQY MBaAFMFnxZHMG5ahyk+RD+EB75BNoeIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDkt OWNhMzBmMTkxOTM0LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDktOWNhMzBmMTkxOTM0 LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOPRsGT8 +4PI+eT7Gi6rha8+fLNe74FGqlx/PdTbbDifCXnb0Wqtl0ZvL3TS1LpA3idqqgnI N0pGhXTjHOmjFgrwJvnq4SXktUVwYPsSVvZOte5tlBqxvM+j9tJG8MkyXKv6/1d3 bhkqzEZIXWCD6iHWFeQ4S8rgVd09qIREXAlWYDKXeXcIePWo5ijCSosAZmdWHLBZ fytmllE0AZ7MgUPWuWcm4Fg90M6ojYQdf3a/gq2PZmdKbDViYpfrNwgUUGRMoFM9 JF0hWarjUwMQFRtX1HhK3t8NHaNQ/uLnDBhRDwgEDIxU2luN61HCkvVs834UES0I 4k1/hMDKRn3hSA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:45 2025 by rpki-client