This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft File: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft (raw, json) Hash identifier: N3/IXrzZ+iR1WhQ1z4XgzwGPs3cxskXYArFbWdDiNRI= Subject key identifier: 53:92:93:44:BE:DB:AA:FA:BB:8D:7F:84:35:07:4A:E5:C9:1F:44:11 Authority key identifier: 58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22 Certificate issuer: /CN=58f7d27ebc269bf14b8d6895791affd429f70222 Certificate serial: 019AF1D204AC0AE949788E13A81C33FD5F7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: A2lRtYsynJJAILeNP4ol_NB53as.roa (hash: zgRdZJry0e4HRbPx+TfhqLtDE1uOOj3QlmHxDJhN/Mg=) 2: WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl (hash: fFsKzorMi+O+HC6DdpsAcMduxHhe6TD7n5UO4OETXaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:04:ac:0a:e9:49:78:8e:13:a8:1c:33:fd:5f:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f7d27ebc269bf14b8d6895791affd429f70222 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=53929344bedbaafabb8d7f8435074ae5c91f4411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:1e:7b:1e:4c:0a:ee:08:a4:bb:98:d6:aa: df:3d:ce:26:b5:b7:9f:27:c1:de:0e:f8:62:73:ab: 16:ca:85:29:88:89:1e:c9:76:e6:76:cd:c1:92:fa: 2f:fc:06:4a:04:be:33:40:1f:df:4c:47:62:d0:b5: 3c:2c:e6:af:22:b2:95:a8:e5:36:9e:3d:6e:dc:15: 94:b5:78:e3:84:ba:71:89:33:bb:33:88:27:f5:61: 7a:c0:b9:27:02:1d:c6:41:c0:70:cd:60:51:cd:c4: 03:98:e9:2c:bc:75:be:d0:e7:54:c4:ca:36:9e:67: 89:36:e1:e1:fd:d5:2f:11:28:27:57:b3:df:c9:19: d2:46:c9:f3:ab:b9:f3:50:0b:9e:3c:78:c9:d1:e1: 4f:3c:34:8b:1a:eb:10:5b:8a:1f:53:52:9c:5c:12: e0:c7:a3:99:b3:e1:34:02:00:0a:45:94:5b:b2:de: 49:d4:a0:52:9f:bc:1a:d6:36:6d:fe:63:8a:03:d7: 4f:ea:24:47:9e:a5:ab:6f:81:c2:4d:25:07:3f:1d: 82:3a:d6:44:9b:71:e0:e2:ca:7f:0c:44:4c:94:d1: 6e:d0:9d:08:b2:1b:00:ca:8c:00:8b:8e:e6:bf:9b: 80:80:43:90:0c:80:8e:87:f7:fb:f9:e8:67:ce:09: b3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:92:93:44:BE:DB:AA:FA:BB:8D:7F:84:35:07:4A:E5:C9:1F:44:11 X509v3 Authority Key Identifier: keyid:58:F7:D2:7E:BC:26:9B:F1:4B:8D:68:95:79:1A:FF:D4:29:F7:02:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/904a2a-6dd1-4974-bb29-4c92cec08ba8/1/WPfSfrwmm_FLjWiVeRr_1Cn3AiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:94:cd:b9:25:0b:3e:4c:a7:74:5c:4c:b7:ca:94:dc:88:2a: 5b:ce:6e:0e:1f:a4:c2:12:04:64:35:09:79:52:b6:2e:22:1b: ed:7a:56:b5:09:0e:3e:65:38:23:03:a3:17:ac:78:28:15:b6: a8:98:0e:04:79:63:11:28:1f:26:03:1e:c5:e0:6b:b5:92:05: 3f:1d:0c:75:91:3a:d9:94:8b:fd:df:39:cd:d5:c7:fb:84:d6: 49:84:2d:7c:2b:5d:cc:d9:b1:72:0f:9b:83:fd:81:6b:29:45: 73:56:0d:ca:cc:b4:8b:66:9c:57:c1:c6:89:68:86:9a:25:73: 9d:a9:06:32:4a:83:9e:7b:e6:28:18:d0:11:06:cd:83:7d:c8: 65:ae:01:72:c0:13:11:56:9b:b0:f8:92:f4:dc:58:76:ea:45: 5a:13:a7:ba:e9:33:3b:59:09:ba:f0:8a:60:a6:17:c1:0b:1c: 9f:69:9b:75:06:28:ef:e3:8a:e5:69:b2:c6:49:e9:d0:57:1e: 79:d5:25:8f:13:96:de:81:e4:ae:cc:e3:f2:cd:53:29:90:6b: 47:56:f1:e2:22:12:b8:db:6f:46:e4:65:22:79:51:15:67:45: c7:43:c3:71:01:b3:11:03:2a:18:42:7b:7d:b7:f0:be:7b:e7: 98:ef:99:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gSsCulJeI4TqBwz/V97MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZjdkMjdlYmMyNjliZjE0YjhkNjg5NTc5MWFmZmQ0Mjlm NzAyMjIwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD Eyg1MzkyOTM0NGJlZGJhYWZhYmI4ZDdmODQzNTA3NGFlNWM5MWY0NDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgweex5MCu4IpLuY1qrfPc4mtbef J8HeDvhic6sWyoUpiIkeyXbmds3Bkvov/AZKBL4zQB/fTEdi0LU8LOavIrKVqOU2 nj1u3BWUtXjjhLpxiTO7M4gn9WF6wLknAh3GQcBwzWBRzcQDmOksvHW+0OdUxMo2 nmeJNuHh/dUvESgnV7PfyRnSRsnzq7nzUAuePHjJ0eFPPDSLGusQW4ofU1KcXBLg x6OZs+E0AgAKRZRbst5J1KBSn7wa1jZt/mOKA9dP6iRHnqWrb4HCTSUHPx2COtZE m3Hg4sp/DERMlNFu0J0IshsAyowAi47mv5uAgEOQDICOh/f7+ehnzgmz8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOSk0S+26r6u41/hDUHSuXJH0QRMB8GA1UdIwQY MBaAFFj30n68JpvxS41olXka/9Qp9wIiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjkt NGM5MmNlYzA4YmE4LzEvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC85MDRhMmEtNmRkMS00OTc0LWJiMjktNGM5MmNlYzA4YmE4 LzEvV1BmU2Zyd21tX0ZMaldpVmVScl8xQ24zQWlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJTNuSUL PkyndFxMt8qU3IgqW85uDh+kwhIEZDUJeVK2LiIb7XpWtQkOPmU4IwOjF6x4KBW2 qJgOBHljESgfJgMexeBrtZIFPx0MdZE62ZSL/d85zdXH+4TWSYQtfCtdzNmxcg+b g/2BaylFc1YNysy0i2acV8HGiWiGmiVznakGMkqDnnvmKBjQEQbNg33IZa4BcsAT EVabsPiS9NxYdupFWhOnuukzO1kJuvCKYKYXwQscn2mbdQYo7+OK5Wmyxknp0Fce edUljxOW3oHkrszj8s1TKZBrR1bx4iISuNtvRuRlInlRFWdFx0PDcQGzEQMqGEJ7 fbfwvnvnmO+ZlA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:25 2025 by rpki-client