This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json) Hash identifier: ekCEAin/7vbEZWvu/1o3dcJ2p8mIEJ/7dRAdtZlw6tI= Subject key identifier: FF:94:5C:00:37:0D:85:22:85:B9:17:65:E4:24:4F:7A:10:52:4C:37 Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Certificate serial: 019AF208AD9F05891337A5C7681AA5972788 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft Manifest number: 0CBB Signing time: Sat 06 Dec 2025 05:00:46 +0000 Manifest this update: Sat 06 Dec 2025 05:00:46 +0000 Manifest next update: Sun 07 Dec 2025 05:00:46 +0000 Files and hashes: 1: UA_CLesELhQ-K1ritg7wCW9o0fw.roa (hash: hqf0nplvHISKqpfSG16CNVc9bBoJPdoMfb/a7H1JSQw=) 2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: BAguCQfuifk5f2mX9vbFzd7gZNnzsV5zx23v/aITG3A=) 3: xPTlfZcqBmFHE8DqUkWLvX-OfrY.roa (hash: hULrZXIf+9xvKQAU881NPQxtxECyTMfIWjcDLv4pIxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ad:9f:05:89:13:37:a5:c7:68:1a:a5:97:27:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Validity Not Before: Dec 6 05:00:46 2025 GMT Not After : Dec 7 05:00:46 2025 GMT Subject: CN=ff945c00370d852285b91765e4244f7a10524c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c2:90:7b:60:2d:8d:9d:d0:74:60:df:0e:d3: 97:7a:7d:41:34:f6:e3:49:50:74:0b:35:f1:b9:40: 97:ae:77:74:95:83:f2:2b:98:a6:46:aa:d7:55:33: e8:64:77:64:5c:27:14:a4:03:53:b9:92:5f:26:0d: 1f:ad:2e:1b:cf:b8:30:57:52:06:d2:51:b5:39:f5: 0a:61:39:76:01:8e:fd:18:94:09:8b:12:e2:98:71: b9:fa:51:13:51:f3:b2:eb:43:cb:4b:02:8e:d8:73: 54:b3:d0:43:40:8f:8a:28:8f:c3:5e:bb:70:16:92: b9:cd:16:e6:22:27:da:d3:43:c7:ad:cf:38:d5:a1: 0e:3a:12:50:28:b6:48:8a:7f:af:a6:48:4b:3c:48: 2d:76:39:3c:29:d1:1b:8b:5a:42:bf:c9:ad:f5:07: 53:94:e5:7d:9e:ea:53:33:7f:0b:cd:79:0a:35:1f: 29:92:12:6a:79:f3:ac:89:85:4d:d7:f0:ea:a8:4b: a5:f3:33:e0:e8:a5:11:f3:5d:09:94:9e:33:d8:82: 03:50:04:a3:12:1a:79:50:0e:66:46:1c:10:30:d3: c9:e1:c8:98:30:0d:22:ef:b0:64:c4:a4:a2:cf:67: ca:a2:e2:66:88:e5:c6:65:04:fa:63:7e:52:c3:0b: 93:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:94:5C:00:37:0D:85:22:85:B9:17:65:E4:24:4F:7A:10:52:4C:37 X509v3 Authority Key Identifier: keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:42:fc:7e:6b:4a:6a:d0:a1:d7:7d:04:41:4d:f1:25:bd:cb: e9:d0:b2:53:7f:53:f2:cf:5a:40:d5:e9:0c:84:dd:d5:ca:d8: 89:d6:47:4c:a0:6b:54:a4:72:ac:79:13:c8:a4:6e:3a:89:0d: 6a:57:7f:55:41:77:51:d5:c7:ae:55:05:79:11:48:38:0d:c5: 07:e3:b8:f2:9b:0d:63:a8:ba:cb:5c:76:76:73:52:70:0d:f5: 10:3c:cc:ad:44:25:d6:02:53:96:73:ce:c3:7d:2b:40:c0:eb: bb:43:c2:aa:ad:43:2b:f5:8e:33:e0:d6:0c:d5:2b:5c:8a:0f: 4b:14:cf:c0:2e:cb:4f:d8:9f:84:75:9e:aa:76:20:15:fe:23: 01:c6:e4:44:51:8b:b7:02:01:0c:c6:c7:d1:61:db:8c:44:a3: ba:59:c8:18:02:6d:0e:05:4c:52:08:aa:47:13:23:99:85:81: 90:fb:50:6c:7c:3e:b8:df:1e:4b:b0:f1:dc:70:df:76:09:e2: ec:77:d5:e9:51:72:48:89:39:98:eb:a9:f9:32:b0:cf:82:88: f0:64:0e:5a:db:ba:3e:90:3d:8b:fb:3a:f2:20:38:7e:4e:c6: 1f:be:96:7a:ea:5b:00:c6:cb:a6:7c:e3:0f:d7:b5:7c:49:b2: a0:ac:55:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCK2fBYkTN6XHaBqllyeIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz NWZiZjEwHhcNMjUxMjA2MDUwMDQ2WhcNMjUxMjA3MDUwMDQ2WjAzMTEwLwYDVQQD EyhmZjk0NWMwMDM3MGQ4NTIyODViOTE3NjVlNDI0NGY3YTEwNTI0YzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8KQe2AtjZ3QdGDfDtOXen1BNPbj SVB0CzXxuUCXrnd0lYPyK5imRqrXVTPoZHdkXCcUpANTuZJfJg0frS4bz7gwV1IG 0lG1OfUKYTl2AY79GJQJixLimHG5+lETUfOy60PLSwKO2HNUs9BDQI+KKI/DXrtw FpK5zRbmIifa00PHrc841aEOOhJQKLZIin+vpkhLPEgtdjk8KdEbi1pCv8mt9QdT lOV9nupTM38LzXkKNR8pkhJqefOsiYVN1/DqqEul8zPg6KUR810JlJ4z2IIDUASj Ehp5UA5mRhwQMNPJ4ciYMA0i77BkxKSiz2fKouJmiOXGZQT6Y35SwwuT+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+UXAA3DYUihbkXZeQkT3oQUkw3MB8GA1UdIwQY MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt NmJhZjMwMDc5MDVjLzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV0L8fmtK atCh130EQU3xJb3L6dCyU39T8s9aQNXpDITd1crYidZHTKBrVKRyrHkTyKRuOokN ald/VUF3UdXHrlUFeRFIOA3FB+O48psNY6i6y1x2dnNScA31EDzMrUQl1gJTlnPO w30rQMDru0PCqq1DK/WOM+DWDNUrXIoPSxTPwC7LT9ifhHWeqnYgFf4jAcbkRFGL twIBDMbH0WHbjESjulnIGAJtDgVMUgiqRxMjmYWBkPtQbHw+uN8eS7Dx3HDfdgni 7HfV6VFySIk5mOup+TKwz4KI8GQOWtu6PpA9i/s68iA4fk7GH76WeupbAMbLpnzj D9e1fEmyoKxVAw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:46 2025 by rpki-client