This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json) Hash identifier: jLbYPv5tQ1lOmjGVejKXC9aoWadtTDsDj+9/ei1JVIc= Subject key identifier: BD:1A:34:2C:29:50:27:F0:1D:66:F9:16:C9:83:8A:21:22:EA:72:EA Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Certificate serial: 019AF878967446B16A88B457F3901EF82BAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft Manifest number: 12E1 Signing time: Sun 07 Dec 2025 11:00:43 +0000 Manifest this update: Sun 07 Dec 2025 11:00:43 +0000 Manifest next update: Mon 08 Dec 2025 11:00:43 +0000 Files and hashes: 1: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: nJ1nqFohA7uOVu9nwlCaugJdESRysbSJ3OoJpgz+jeo=) 2: dNOgTjs7jrbB9SKSSUszlaLVAjo.roa (hash: 8MLaPme8W4wf5oENh8ADBmwmizbYMot4/vQ2rLYnm0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:78:96:74:46:b1:6a:88:b4:57:f3:90:1e:f8:2b:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Validity Not Before: Dec 7 11:00:43 2025 GMT Not After : Dec 8 11:00:43 2025 GMT Subject: CN=bd1a342c295027f01d66f916c9838a2122ea72ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ae:83:40:df:8e:ba:0c:b9:ee:4a:97:8c:dd: cb:4f:9a:1e:72:09:8f:00:fa:81:ba:f0:0f:87:8b: 12:57:37:ed:b9:3d:7c:0a:c8:59:f3:70:72:0c:b6: 57:d8:7a:5e:da:49:44:19:3a:f8:02:ce:d0:ed:e0: 68:28:8b:47:33:20:50:c9:08:1b:a0:11:e8:72:82: 71:f6:41:c2:78:fd:f1:b2:45:95:cf:3c:df:de:01: 29:a7:30:fc:dd:c8:51:ed:c4:ca:27:c3:d7:33:78: 34:ba:a1:ca:24:91:c2:50:62:d2:01:32:b1:9a:11: 7c:b0:df:57:d7:8b:69:d6:b7:1f:01:51:8b:92:ec: b4:15:63:61:a9:9e:7f:ad:34:1c:e3:86:3f:6f:90: c2:0c:34:65:8e:5a:9e:7e:e0:49:44:e3:f3:49:e0: eb:a8:bf:af:17:95:9f:7d:f4:4c:95:c7:9a:6a:ca: 43:02:f5:d1:88:32:77:38:c6:48:c4:42:a5:72:13: 24:35:0c:6e:57:0e:b6:45:92:5a:e2:94:61:6e:10: ec:c0:34:fe:4b:d9:03:ba:e0:18:19:48:45:fb:c7: 35:af:bc:a8:be:ee:2a:ef:50:75:18:7c:cc:8c:23: 67:ac:da:28:93:59:ad:cc:ea:01:33:4b:80:6b:83: d0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1A:34:2C:29:50:27:F0:1D:66:F9:16:C9:83:8A:21:22:EA:72:EA X509v3 Authority Key Identifier: keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:66:8b:d5:37:fd:40:1e:61:1f:88:1d:44:9f:fa:8c:23:ba: 5c:ff:54:c8:3e:17:fb:ce:6f:49:05:5c:56:95:7b:8d:c3:ac: 4c:8c:7a:b6:73:4b:d0:9a:b0:23:65:e7:9d:e0:7c:0a:79:07: 60:7d:cb:c1:38:81:1c:4f:ca:61:ab:4e:bc:bd:f6:97:38:c8: 50:93:14:b8:62:5d:2d:d8:e4:28:95:e8:aa:5e:8f:18:61:9d: 27:88:16:90:9f:bf:4b:03:30:ed:6e:3e:79:d7:e8:78:5a:ff: e8:87:ed:06:06:0d:e8:1e:76:ba:a0:00:89:f0:ac:0d:04:58: 5b:d2:93:71:73:6b:c2:4e:70:40:42:44:bd:31:a5:4e:93:63: bf:4e:ee:d3:9e:1d:7b:0a:08:9e:80:10:80:58:78:43:92:d6: 3e:3d:f2:a5:2a:77:c5:52:41:8c:bb:86:ba:62:29:be:1d:38: 6a:41:ad:bf:b6:d9:fc:c6:52:14:06:0d:b2:1c:f7:2b:c8:ab: 7a:4f:c5:da:1a:da:dd:88:15:f4:0e:ad:75:d2:7b:a2:f9:4a: 76:6f:55:5a:c5:c7:39:70:ab:c9:e2:2e:19:46:36:c8:b5:c8: 35:b5:78:46:a7:10:a4:f7:0e:a2:26:d0:92:b6:e4:54:96:06: 52:fe:1a:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4eJZ0RrFqiLRX85Ae+CusMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1 NTcyODgwHhcNMjUxMjA3MTEwMDQzWhcNMjUxMjA4MTEwMDQzWjAzMTEwLwYDVQQD EyhiZDFhMzQyYzI5NTAyN2YwMWQ2NmY5MTZjOTgzOGEyMTIyZWE3MmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA066DQN+Ougy57kqXjN3LT5oecgmP APqBuvAPh4sSVzftuT18CshZ83ByDLZX2Hpe2klEGTr4As7Q7eBoKItHMyBQyQgb oBHocoJx9kHCeP3xskWVzzzf3gEppzD83chR7cTKJ8PXM3g0uqHKJJHCUGLSATKx mhF8sN9X14tp1rcfAVGLkuy0FWNhqZ5/rTQc44Y/b5DCDDRljlqefuBJROPzSeDr qL+vF5WfffRMlceaaspDAvXRiDJ3OMZIxEKlchMkNQxuVw62RZJa4pRhbhDswDT+ S9kDuuAYGUhF+8c1r7yovu4q71B1GHzMjCNnrNook1mtzOoBM0uAa4PQkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0aNCwpUCfwHWb5FsmDiiEi6nLqMB8GA1UdIwQY MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWaL1Tf9 QB5hH4gdRJ/6jCO6XP9UyD4X+85vSQVcVpV7jcOsTIx6tnNL0JqwI2XnneB8CnkH YH3LwTiBHE/KYatOvL32lzjIUJMUuGJdLdjkKJXoql6PGGGdJ4gWkJ+/SwMw7W4+ edfoeFr/6IftBgYN6B52uqAAifCsDQRYW9KTcXNrwk5wQEJEvTGlTpNjv07u054d ewoInoAQgFh4Q5LWPj3ypSp3xVJBjLuGumIpvh04akGtv7bZ/MZSFAYNshz3K8ir ek/F2hra3YgV9A6tddJ7ovlKdm9VWsXHOXCryeIuGUY2yLXINbV4RqcQpPcOoibQ krbkVJYGUv4akg== -----END CERTIFICATE-----Generated at Sun Dec 7 17:41:10 2025 by rpki-client