This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft File: WjdsgAjWq9liNBVj3SpNzK8VPLo.mft (raw, json) Hash identifier: fJw9bw9gEvCOhrRHXbPF5WwdeH2pSJEyOE/M8QZE21s= Subject key identifier: 15:A9:69:A9:96:5C:64:ED:41:42:98:43:53:22:3A:92:FA:67:D3:B0 Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba Certificate serial: 019AF19B51955BC1E199B99F37FD4F5A34FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft Manifest number: 16CC Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: EKyKkfExKOAAfgUa49KGNc0Qw50.roa (hash: T6try+upukSYveRrF7Ngn0n48Pen4Fo2hLE/yndxdPw=) 2: Q0CbneGz9VPt3mPY6xSo63TADaU.roa (hash: pAxMVwFhUWIIq2G6scJwVhOTQgiFD5igDlPa6vqnvkw=) 3: UtIToTT3ux8XXdreVVh-fgtF4EM.roa (hash: Zfj+rc5eqdy5LLDisheb00XcoM/0Aa2BkpeAquuq3GI=) 4: WjdsgAjWq9liNBVj3SpNzK8VPLo.crl (hash: RSZK34dDASKGOy9bxJL5fjPMnjoWvbnFJv1raCgaGBo=) 5: YTt-w92v-yglPtABnig5iH6xH6I.roa (hash: p/KD+Q5hRnH7xR7jl3dB3wnRrz1Be4KgzVQqkbYpwvI=) 6: d15xqRAnKAAHzf4cOWP5GpMA26U.roa (hash: BSGf+nc0kXxGqfwctZauJAHJAYXY4Sl7m0vyGO3LlUY=) 7: dpe_f3yMpnjw9YR6OHNOsWUso2M.roa (hash: DeAk7ys+DAS/JWs8unj6/6ajATyweyijk2iB3Ci6BGc=) 8: nfD7LT9GPb8B3IWXrNgp9yNRKFM.roa (hash: b36GHnPs6yg9PaGmKtpH7d96QFYypHwjs6V3s7xb87Q=) 9: pifimVDv85PglaCrpv2aovKKBOw.roa (hash: 4burZ4msm3NFIAmTTb3XGkpBVR6gJT/l7KX/I56Rfyw=) 10: sebyor6upBoiHgbxsrkZxw7Vey0.roa (hash: DtPsXiVyhLLqXKtLDteGJryb2rrevAa/dyXKJS9Y6mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:51:95:5b:c1:e1:99:b9:9f:37:fd:4f:5a:34:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=15a969a9965c64ed4142984353223a92fa67d3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a6:bc:13:6a:49:d1:c9:ea:0f:cf:0e:bf:56: 91:1a:1c:b0:82:83:b8:70:88:68:7a:f4:44:86:94: 1c:8d:ff:60:49:db:c7:5f:ae:d5:37:53:2c:4b:4b: a6:50:35:6b:7a:76:79:ac:81:98:76:10:12:51:89: e7:e0:3b:55:85:8e:02:f1:54:b6:a4:57:a0:47:8d: e4:17:0f:ca:21:2f:36:44:c1:6f:a5:af:ba:69:97: f0:c0:bd:1a:c5:09:52:f6:a0:94:b0:46:95:f4:96: ec:78:92:13:18:35:88:03:d7:15:bc:17:54:16:71: 56:de:49:07:e8:1c:38:19:08:27:02:3c:a7:2a:ca: 8a:6c:26:e5:da:1c:27:7b:af:ce:d3:d8:85:e2:bc: 33:9e:8f:30:e1:ce:3b:a9:06:46:2f:84:89:c5:13: 1f:45:70:31:a2:5c:e4:6c:ca:2e:75:ab:a7:aa:de: de:3d:3b:c6:b1:f7:19:68:ca:a0:b6:1d:43:6d:11: 99:74:c6:69:2b:58:30:2f:69:da:c5:9b:01:31:fa: 34:a2:bd:f8:f3:e3:b8:47:8d:50:03:b8:75:a6:7e: 11:a7:e1:6e:b0:7b:51:89:bd:39:d4:65:8f:df:62: 44:ef:db:e4:95:3f:8e:3f:c0:e8:5f:c1:bf:99:c6: c7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A9:69:A9:96:5C:64:ED:41:42:98:43:53:22:3A:92:FA:67:D3:B0 X509v3 Authority Key Identifier: keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:0c:53:22:4f:05:b7:82:ed:a3:a4:ab:d4:35:ac:6a:f6:76: 85:dd:a9:b3:85:04:27:af:c4:78:f0:89:9b:16:79:cd:e1:d0: 16:d2:21:8d:3c:36:2b:0a:f4:54:1d:ae:ab:6d:05:53:df:75: c1:1a:4d:2c:e2:6d:eb:99:32:a3:d6:44:6c:93:5b:b2:95:14: 74:43:aa:40:90:f1:e5:f6:7b:5c:80:be:b6:d8:df:31:51:56: 10:ca:80:7f:bf:96:ca:85:c5:9d:b0:d5:65:f4:91:9f:77:ef: 1d:af:e6:65:b1:76:5a:13:55:e7:e2:39:d5:3c:56:e2:83:89: 59:1f:4a:5f:a7:27:e9:71:86:72:4c:02:47:d1:b7:1c:65:a6: be:e6:03:d9:83:95:99:be:8a:ca:a8:f3:be:a1:84:aa:3e:41: 04:f5:9c:49:f1:08:61:e8:65:d3:0d:cd:7b:56:16:e8:f9:04: 58:00:37:ee:d5:e5:0e:a6:bf:54:bb:ef:81:29:5e:5e:dd:e3: 94:73:ec:93:18:1b:b8:55:83:e2:8f:df:87:72:ef:c8:d1:d2: 1f:e8:df:48:00:7a:8d:ed:86:99:7c:5c:51:31:f6:64:7d:e4: 70:99:45:fc:08:e3:19:c2:df:03:8b:12:97:40:ee:e2:ec:1c: 2e:88:e4:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1GVW8HhmbmfN/1PWjT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMzc2YzgwMDhkNmFiZDk2MjM0MTU2M2RkMmE0ZGNjYWYx NTNjYmEwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD EygxNWE5NjlhOTk2NWM2NGVkNDE0Mjk4NDM1MzIyM2E5MmZhNjdkM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ka8E2pJ0cnqD88Ov1aRGhywgoO4 cIhoevREhpQcjf9gSdvHX67VN1MsS0umUDVrenZ5rIGYdhASUYnn4DtVhY4C8VS2 pFegR43kFw/KIS82RMFvpa+6aZfwwL0axQlS9qCUsEaV9JbseJITGDWIA9cVvBdU FnFW3kkH6Bw4GQgnAjynKsqKbCbl2hwne6/O09iF4rwzno8w4c47qQZGL4SJxRMf RXAxolzkbMoudaunqt7ePTvGsfcZaMqgth1DbRGZdMZpK1gwL2naxZsBMfo0or34 8+O4R41QA7h1pn4Rp+FusHtRib051GWP32JE79vklT+OP8DoX8G/mcbHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWpaamWXGTtQUKYQ1MiOpL6Z9OwMB8GA1UdIwQY MBaAFFo3bIAI1qvZYjQVY90qTcyvFTy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEt NjViZTU1MDMxNjVkLzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9jYWE3NDMtMWMxMy00YTI1LTlmNmEtNjViZTU1MDMxNjVk LzEvV2pkc2dBaldxOWxpTkJWajNTcE56SzhWUExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoAxTIk8F t4Lto6Sr1DWsavZ2hd2ps4UEJ6/EePCJmxZ5zeHQFtIhjTw2Kwr0VB2uq20FU991 wRpNLOJt65kyo9ZEbJNbspUUdEOqQJDx5fZ7XIC+ttjfMVFWEMqAf7+WyoXFnbDV ZfSRn3fvHa/mZbF2WhNV5+I51TxW4oOJWR9KX6cn6XGGckwCR9G3HGWmvuYD2YOV mb6KyqjzvqGEqj5BBPWcSfEIYehl0w3Ne1YW6PkEWAA37tXlDqa/VLvvgSleXt3j lHPskxgbuFWD4o/fh3LvyNHSH+jfSAB6je2GmXxcUTH2ZH3kcJlF/AjjGcLfA4sS l0Du4uwcLojkmQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:38:33 2025 by rpki-client