This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft File: WAFhHoC63kAvvWDnhvNPtxctIlo.mft (raw, json) Hash identifier: R+9EY2+Ei3OUCZYOgELleyzTMivvr8gKAJAyOkA0RSg= Subject key identifier: 10:6A:44:AE:E5:5C:4E:D7:44:F8:67:F6:97:99:E5:69:B5:D5:B8:E0 Authority key identifier: 58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A Certificate issuer: /CN=5801611e80bade402fbd60e786f34fb7172d225a Certificate serial: 019AF208B71307C3632A6A5C0C28AD62C4F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft Manifest number: 14C1 Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: WAFhHoC63kAvvWDnhvNPtxctIlo.crl (hash: 6pSkdYjS966NlwCWJKfC+5MKMITyGrFDlIkLSB/a+hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b7:13:07:c3:63:2a:6a:5c:0c:28:ad:62:c4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5801611e80bade402fbd60e786f34fb7172d225a Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=106a44aee55c4ed744f867f69799e569b5d5b8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:43:27:5c:d9:b7:45:9b:17:d1:a7:ce:4f: 04:87:5d:d9:3c:e5:73:40:7c:04:cc:dc:f1:41:ee: 42:72:be:95:5e:27:b7:74:12:e8:21:86:3a:23:e6: 45:7e:8c:fa:c7:7b:71:09:8b:75:3d:9c:15:46:95: c6:9e:12:37:27:4e:37:6c:58:aa:0c:0d:7e:61:2d: 69:53:4f:83:ad:5a:6a:61:9f:9e:7a:23:71:77:37: ec:94:e7:d1:d6:47:21:98:bc:5b:2d:50:1a:8d:84: 1f:9f:5b:0d:78:00:0a:5d:4a:4e:ad:27:71:7c:b9: 86:c4:70:77:9c:d7:91:27:ae:c1:e6:f1:16:92:dc: 8a:47:7e:57:ce:f6:e6:9a:60:b3:41:89:d3:cc:1a: 8f:55:23:aa:95:78:71:d6:e8:f0:e6:ab:1f:31:25: f1:b7:78:df:a2:9f:d1:c8:c6:a3:fe:94:14:44:6e: 30:73:3e:2a:16:d7:11:62:16:9f:db:c0:ea:b8:82: 92:eb:62:83:a2:78:e4:6e:e4:ed:6d:da:c4:ad:b1: a7:2b:b4:3a:a4:51:e4:42:81:e7:40:24:4d:9c:6e: 4f:ae:3b:8c:b9:8b:d7:28:60:9b:32:cb:e2:05:ed: e7:bf:2b:50:20:0d:4b:bf:c6:e7:f6:84:eb:9f:94: 7f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6A:44:AE:E5:5C:4E:D7:44:F8:67:F6:97:99:E5:69:B5:D5:B8:E0 X509v3 Authority Key Identifier: keyid:58:01:61:1E:80:BA:DE:40:2F:BD:60:E7:86:F3:4F:B7:17:2D:22:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFhHoC63kAvvWDnhvNPtxctIlo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5fdc69-64c2-4b47-a4f8-ab39be656057/1/WAFhHoC63kAvvWDnhvNPtxctIlo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:93:09:5c:ac:2e:a3:0c:98:8b:f4:76:2d:38:e0:4e:f9:73: f0:bc:f4:a5:60:20:37:d4:60:21:ff:dc:1a:9f:71:c8:59:36: 67:0b:97:c7:b5:60:9c:1e:f7:ce:fe:ee:83:4d:f3:d5:6a:9b: 23:04:ab:02:e1:12:e7:45:f1:79:a2:16:c3:57:4a:d1:b9:bb: 54:43:15:06:89:90:6e:d3:4f:56:91:28:d1:b7:04:00:d7:35: d9:75:6b:e9:dd:b1:e4:72:b5:4f:6b:0c:71:c2:c5:ed:de:55: 20:08:72:1e:2d:4a:40:22:30:08:c9:2c:43:03:f3:5b:f2:7a: ea:70:ed:0e:fe:d3:b7:c8:5a:54:0b:38:56:c9:65:31:ae:c6: 61:32:39:ee:60:07:e3:b0:5a:87:80:d8:e7:0d:8c:5b:f1:0e: ef:7f:fd:7a:d9:77:56:c9:66:0e:2c:71:79:94:9a:f0:b9:fb: d9:e7:38:ac:1f:bb:69:e0:35:c0:b5:fc:28:50:dd:19:d6:bc: ae:a6:f3:fe:61:64:b8:7e:58:c4:d9:eb:b2:2e:ac:1b:c7:6c: 91:b7:ae:fe:eb:35:eb:fa:11:30:68:a1:75:e1:17:bf:6e:77: 09:49:ba:34:3d:60:2d:cb:8a:b5:49:9a:a6:27:2a:d3:40:33: 0e:b1:8f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLcTB8NjKmpcDCitYsT1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE2MTFlODBiYWRlNDAyZmJkNjBlNzg2ZjM0ZmI3MTcy ZDIyNWEwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD EygxMDZhNDRhZWU1NWM0ZWQ3NDRmODY3ZjY5Nzk5ZTU2OWI1ZDViOGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdNDJ1zZt0WbF9Gnzk8Eh13ZPOVz QHwEzNzxQe5Ccr6VXie3dBLoIYY6I+ZFfoz6x3txCYt1PZwVRpXGnhI3J043bFiq DA1+YS1pU0+DrVpqYZ+eeiNxdzfslOfR1kchmLxbLVAajYQfn1sNeAAKXUpOrSdx fLmGxHB3nNeRJ67B5vEWktyKR35XzvbmmmCzQYnTzBqPVSOqlXhx1ujw5qsfMSXx t3jfop/RyMaj/pQURG4wcz4qFtcRYhaf28DquIKS62KDonjkbuTtbdrErbGnK7Q6 pFHkQoHnQCRNnG5PrjuMuYvXKGCbMsviBe3nvytQIA1Lv8bn9oTrn5R/jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBqRK7lXE7XRPhn9peZ5Wm11bjgMB8GA1UdIwQY MBaAFFgBYR6Aut5AL71g54bzT7cXLSJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81ZmRjNjktNjRjMi00YjQ3LWE0Zjgt YWIzOWJlNjU2MDU3LzEvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81ZmRjNjktNjRjMi00YjQ3LWE0ZjgtYWIzOWJlNjU2MDU3 LzEvV0FGaEhvQzYza0F2dldEbmh2TlB0eGN0SWxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpMJXKwu owyYi/R2LTjgTvlz8Lz0pWAgN9RgIf/cGp9xyFk2ZwuXx7VgnB73zv7ug03z1Wqb IwSrAuES50XxeaIWw1dK0bm7VEMVBomQbtNPVpEo0bcEANc12XVr6d2x5HK1T2sM ccLF7d5VIAhyHi1KQCIwCMksQwPzW/J66nDtDv7Tt8haVAs4VsllMa7GYTI57mAH 47Bah4DY5w2MW/EO73/9etl3VslmDixxeZSa8Ln72ec4rB+7aeA1wLX8KFDdGda8 rqbz/mFkuH5YxNnrsi6sG8dskbeu/us16/oRMGihdeEXv253CUm6ND1gLcuKtUma picq00AzDrGPyg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:10 2025 by rpki-client