This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft File: WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json) Hash identifier: wi0avo0a+UHC5h+GXHs+0I0EcsYrNLSOvASeRuudt64= Subject key identifier: B2:51:1B:BE:E1:56:A8:AB:60:CC:22:3D:68:41:B1:3E:E0:79:0F:81 Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11 Certificate issuer: /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11 Certificate serial: 019AF5AEC1C567E8047719B633C2A4AB8005 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft Manifest number: 04CC Signing time: Sat 06 Dec 2025 22:01:02 +0000 Manifest this update: Sat 06 Dec 2025 22:01:02 +0000 Manifest next update: Sun 07 Dec 2025 22:01:02 +0000 Files and hashes: 1: 42R2lijOQVfdsdzNrv0Z2vRUmkg.roa (hash: UQwQltW8Fzy4ppc7tQ1/N7xDTvj6DuRNwJcbzfolfVY=) 2: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: 4q3iWlRsl+Dk+1NkuF+IMvVm/P/jhxpH1MrQFzZ1xjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:c1:c5:67:e8:04:77:19:b6:33:c2:a4:ab:80:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11 Validity Not Before: Dec 6 22:01:02 2025 GMT Not After : Dec 7 22:01:02 2025 GMT Subject: CN=b2511bbee156a8ab60cc223d6841b13ee0790f81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:54:cc:3d:71:a0:ad:26:b0:09:14:65:60: 49:05:c5:ea:ec:e0:5a:c6:00:c2:88:bb:1b:cb:ca: 00:5a:99:d9:d3:9d:91:70:69:d0:3f:46:4f:1a:8b: 05:72:0e:43:33:75:f0:54:41:6b:1b:04:73:27:1e: 21:a1:a2:d3:b1:79:df:7c:6f:81:6b:15:87:23:99: ba:f3:af:df:50:84:1f:f7:53:bf:d5:79:49:3b:d5: eb:95:59:6e:3c:c7:b0:ce:b5:ee:47:66:66:69:92: bc:36:23:9b:26:10:be:6b:0a:7e:f5:23:1f:20:38: a4:2d:eb:31:70:df:6f:59:d9:2b:58:a3:7f:a3:a1: 10:d9:73:34:f0:9b:31:81:c5:7e:3d:2a:18:08:55: 56:16:f5:df:c9:92:6c:9c:0c:6a:aa:dc:78:c2:b9: 9b:93:3f:d1:bf:b0:85:28:e9:59:bd:a8:47:16:bc: 30:a1:68:82:4d:c6:cb:27:06:e9:9e:54:99:b6:29: 0c:07:ac:c5:07:b4:da:d2:ba:75:9f:2d:28:92:a2: 6c:f6:d2:0e:e1:d0:1d:d5:1e:12:cf:33:6a:82:bf: 93:b5:2d:26:00:24:32:87:11:c2:52:ae:0a:37:0d: c5:f5:8d:bc:4d:07:97:a1:91:4c:50:d4:0e:29:7e: c6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:51:1B:BE:E1:56:A8:AB:60:CC:22:3D:68:41:B1:3E:E0:79:0F:81 X509v3 Authority Key Identifier: keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:c1:90:bc:2d:a9:28:e2:a3:97:69:fc:f1:1d:06:35:b8:7d: 7a:61:d6:93:b6:1b:5a:0e:5f:e1:00:f2:b0:18:c7:ac:fb:64: 84:aa:9f:b8:98:cd:56:01:12:8d:4a:d1:0e:be:36:a0:89:14: 80:6f:e4:4e:ce:9d:0c:b1:27:8e:ac:13:31:6b:2c:98:73:51: 7f:a7:8d:d1:3b:46:e7:48:90:8b:b9:38:00:3d:06:ec:ce:19: 13:2d:4e:48:59:21:98:95:ba:14:66:07:a0:b7:ee:92:b8:e0: ba:54:05:c1:49:05:8e:09:50:ec:b0:0e:69:27:5c:f6:dd:1b: c0:60:d1:b6:99:44:3e:95:5c:b2:6e:40:cb:bd:4f:7e:0d:47: 1e:43:a6:94:6f:67:85:8e:fc:fa:28:4f:c6:8f:dd:fb:c4:d8: c3:ab:53:57:e4:a0:b4:65:2e:05:9d:de:69:ad:64:51:d6:ae: 76:7e:22:ad:42:e7:87:d9:4e:ce:ac:de:bd:77:a5:50:48:cb: 04:12:3d:de:a2:dc:a5:7b:d6:1f:34:f6:cc:cd:7e:74:25:3f: 3c:e9:d6:33:b0:a4:e9:68:14:64:23:49:57:5d:1a:78:05:35: 33:ac:a8:df:2f:21:bf:43:d1:45:67:15:a0:44:ff:de:7b:17: 15:8b:50:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rsHFZ+gEdxm2M8Kkq4AFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MGRkZGI1MTE2MDNlNDFjMmI3YWJiYTNkMjQ5ZDVlZjVl ZDRkMTEwHhcNMjUxMjA2MjIwMTAyWhcNMjUxMjA3MjIwMTAyWjAzMTEwLwYDVQQD EyhiMjUxMWJiZWUxNTZhOGFiNjBjYzIyM2Q2ODQxYjEzZWUwNzkwZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwlUzD1xoK0msAkUZWBJBcXq7OBa xgDCiLsby8oAWpnZ052RcGnQP0ZPGosFcg5DM3XwVEFrGwRzJx4hoaLTsXnffG+B axWHI5m686/fUIQf91O/1XlJO9XrlVluPMewzrXuR2ZmaZK8NiObJhC+awp+9SMf IDikLesxcN9vWdkrWKN/o6EQ2XM08JsxgcV+PSoYCFVWFvXfyZJsnAxqqtx4wrmb kz/Rv7CFKOlZvahHFrwwoWiCTcbLJwbpnlSZtikMB6zFB7Ta0rp1ny0okqJs9tIO 4dAd1R4SzzNqgr+TtS0mACQyhxHCUq4KNw3F9Y28TQeXoZFMUNQOKX7GJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJRG77hVqirYMwiPWhBsT7geQ+BMB8GA1UdIwQY MBaAFFgN3bURYD5Bwreruj0knV717U0RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGIt M2NkNDE3YWVlOWNlLzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mYzk2YTQtMzZkMS00YzNkLTg1MGItM2NkNDE3YWVlOWNl LzEvV0EzZHRSRmdQa0hDdDZ1NlBTU2RYdlh0VFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA08GQvC2p KOKjl2n88R0GNbh9emHWk7YbWg5f4QDysBjHrPtkhKqfuJjNVgESjUrRDr42oIkU gG/kTs6dDLEnjqwTMWssmHNRf6eN0TtG50iQi7k4AD0G7M4ZEy1OSFkhmJW6FGYH oLfukrjgulQFwUkFjglQ7LAOaSdc9t0bwGDRtplEPpVcsm5Ay71Pfg1HHkOmlG9n hY78+ihPxo/d+8TYw6tTV+SgtGUuBZ3eaa1kUdaudn4irULnh9lOzqzevXelUEjL BBI93qLcpXvWHzT2zM1+dCU/POnWM7Ck6WgUZCNJV10aeAU1M6yo3y8hv0PRRWcV oET/3nsXFYtQSw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:32:53 2025 by rpki-client