This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json) Hash identifier: +DNQPaRti42AcEkLBS9iTDTBGy3ooYPVlfAlq+KXoBQ= Subject key identifier: E1:D1:9A:59:D8:69:3D:7A:71:D9:32:60:8E:72:AC:17:83:C1:A4:10 Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Certificate serial: 019AF1D1A880B9384A2B935F5789DC688E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft Manifest number: 44 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: DOiHl6Blr58G7-g5ryQ14ob_BSQ.roa (hash: Lt0of1f9vpxCYESgZXRaRcNizfsrbZc9ngbx6gbOqaQ=) 2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: RIIQpwBj32iVFZwvaznDlcDFXeRluuV4nkwmJWWv0PQ=) 3: n0Me6wkjc8Xeyc2eu9TL-q59u8I.roa (hash: x0QsbLQxSgzw6qfolhfMqYovLG9uc3eYJ7ouYr0O1Vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a8:80:b9:38:4a:2b:93:5f:57:89:dc:68:8e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=e1d19a59d8693d7a71d932608e72ac1783c1a410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bf:7e:c4:42:7b:58:e0:bc:88:16:6b:cb:ef: 98:1c:0e:84:b5:ce:b6:03:7c:29:56:00:7e:04:f0: b2:0b:32:1a:5a:83:f2:86:d4:e1:b1:28:00:8d:1b: 17:1e:92:64:d2:5e:9a:c8:cf:ef:ea:d4:f3:f1:6e: 3c:84:a5:e3:b4:02:74:6c:8f:93:f7:5d:6d:d8:2a: 9c:c2:76:3e:60:11:3a:3f:52:1b:86:3a:ab:a8:08: 4c:3f:63:e9:11:d7:5f:15:09:b8:d4:92:b6:25:7b: 3c:57:66:0c:50:1e:0f:76:83:58:30:a8:a6:44:a1: 4b:b6:d6:8b:2e:dd:0e:32:3c:b7:c3:0e:cd:1b:6a: e4:42:e4:d0:e4:29:12:85:3f:ce:1a:58:1e:d2:92: bf:0d:5f:86:16:4e:e7:01:01:4c:a5:3e:3c:bc:80: 22:bf:4d:5c:c8:52:f4:c2:08:16:c9:79:4e:cb:4b: de:2a:bc:c6:26:23:51:29:0d:50:7f:5f:34:1e:d7: 90:5d:08:bb:f2:76:e5:66:12:77:47:85:74:6c:59: 71:93:5c:55:75:c4:f5:b8:e8:72:44:1a:b9:8d:71: 07:93:72:1a:0d:98:11:22:7c:ae:b5:06:0e:66:c8: e9:78:8e:ab:c0:a3:85:c5:88:56:bd:91:8d:fc:b6: 12:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D1:9A:59:D8:69:3D:7A:71:D9:32:60:8E:72:AC:17:83:C1:A4:10 X509v3 Authority Key Identifier: keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:65:dc:ea:8c:de:a0:f9:5c:2e:9e:1e:e4:62:69:83:b7:15: 9f:25:c6:42:51:3e:9e:ef:f2:49:2a:4e:52:97:ae:b7:53:e4: be:60:ca:6f:e8:08:25:90:ec:e2:da:90:c5:80:5c:ac:ae:11: e4:d6:4a:34:c4:99:88:9b:cb:4d:7f:4a:c9:c3:d3:ca:24:65: 2a:b0:f4:0f:10:53:20:b1:a2:55:09:55:49:66:4d:07:ae:ab: 63:cf:62:88:38:e2:cc:95:75:89:59:42:f4:1b:ef:ee:f4:fa: 79:e6:e6:bf:39:8a:f0:6a:59:90:da:4d:1f:bb:cb:ba:32:7d: 67:e8:f3:27:94:60:d9:98:26:9f:2b:53:74:e1:0f:08:82:c7: f8:72:8e:89:6c:03:ff:b1:4b:1b:aa:2c:34:f9:d3:ac:44:1b: cb:d0:cf:b5:5d:23:f0:ed:8d:1e:d1:08:1a:a8:f9:21:bd:af: f8:36:90:c3:2e:af:91:6b:a8:24:64:ba:fb:41:9c:70:9c:3a: 31:20:27:1c:1b:b3:74:c3:16:a9:3b:79:51:3d:03:22:ef:aa: 55:87:62:6f:d0:3a:02:d6:46:ad:1e:09:7c:c5:cb:e4:50:1d: 0f:d7:9c:e7:cf:7d:f8:14:f7:c0:ff:b1:dc:61:1a:ec:69:48: 84:e8:99:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aiAuThKK5NfV4ncaI4NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTM0NTU3NDZlYjcyYmI1NzZjN2I0MDRiMDQ2ZWY0NjBk MWFlMWMwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EyhlMWQxOWE1OWQ4NjkzZDdhNzFkOTMyNjA4ZTcyYWMxNzgzYzFhNDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA679+xEJ7WOC8iBZry++YHA6Etc62 A3wpVgB+BPCyCzIaWoPyhtThsSgAjRsXHpJk0l6ayM/v6tTz8W48hKXjtAJ0bI+T 911t2CqcwnY+YBE6P1IbhjqrqAhMP2PpEddfFQm41JK2JXs8V2YMUB4PdoNYMKim RKFLttaLLt0OMjy3ww7NG2rkQuTQ5CkShT/OGlge0pK/DV+GFk7nAQFMpT48vIAi v01cyFL0wggWyXlOy0veKrzGJiNRKQ1Qf180HteQXQi78nblZhJ3R4V0bFlxk1xV dcT1uOhyRBq5jXEHk3IaDZgRInyutQYOZsjpeI6rwKOFxYhWvZGN/LYSHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHRmlnYaT16cdkyYI5yrBeDwaQQMB8GA1UdIwQY MBaAFFjjRVdG63K7V2x7QEsEbvRg0a4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQt NGU5ZDk4YTYwNjNiLzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQtNGU5ZDk4YTYwNjNi LzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY2Xc6oze oPlcLp4e5GJpg7cVnyXGQlE+nu/ySSpOUpeut1PkvmDKb+gIJZDs4tqQxYBcrK4R 5NZKNMSZiJvLTX9KycPTyiRlKrD0DxBTILGiVQlVSWZNB66rY89iiDjizJV1iVlC 9Bvv7vT6eebmvzmK8GpZkNpNH7vLujJ9Z+jzJ5Rg2ZgmnytTdOEPCILH+HKOiWwD /7FLG6osNPnTrEQby9DPtV0j8O2NHtEIGqj5Ib2v+DaQwy6vkWuoJGS6+0GccJw6 MSAnHBuzdMMWqTt5UT0DIu+qVYdib9A6AtZGrR4JfMXL5FAdD9ec5899+BT3wP+x 3GEa7GlIhOiZRg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:03:19 2025 by rpki-client