This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft File: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft (raw, json) Hash identifier: S18kXgnrv1liYjDyh1fn9p30L99+rAtGVRHnpL3K2Vo= Subject key identifier: 40:1B:6C:A4:71:B2:9E:5A:CE:76:FB:4C:A6:D9:34:C1:21:23:F9:01 Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5 Certificate issuer: /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5 Certificate serial: 019AF1D20C3E5D4C9CCA3692D829D240F574 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 04:01:05 +0000 Manifest this update: Sat 06 Dec 2025 04:01:05 +0000 Manifest next update: Sun 07 Dec 2025 04:01:05 +0000 Files and hashes: 1: WQIOJXHFculSf7VKNcTI4G1FzB0.roa (hash: 1m31qu3p2ND5PEv0/zfE1Skv8FXpx3eh76tg/GNUGqE=) 2: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl (hash: ptYzERLURzdSol4Eun50d/1tXwmK2xSGnqqZAhjP/LQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:0c:3e:5d:4c:9c:ca:36:92:d8:29:d2:40:f5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5 Validity Not Before: Dec 6 04:01:05 2025 GMT Not After : Dec 7 04:01:05 2025 GMT Subject: CN=401b6ca471b29e5ace76fb4ca6d934c12123f901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:12:a8:29:16:e4:36:88:cd:6b:e1:d0:f4:65: e5:2b:b2:c6:2d:2d:15:32:53:ac:c3:df:8f:78:9b: 8b:0c:86:bf:ab:05:f4:4f:00:3c:16:eb:9f:32:f8: 41:ae:7e:e2:e0:a8:55:00:82:d0:e8:f6:44:d8:b3: a3:b6:54:13:1b:41:c8:3f:91:29:dc:ad:7d:d3:db: 63:0a:42:2d:e1:2f:b7:89:d3:2e:13:2d:a4:b6:a1: aa:aa:80:e8:14:6c:0b:3c:28:a6:a0:16:61:1b:06: 38:40:aa:f0:3a:0f:c0:29:04:64:19:32:b9:af:e7: b4:54:83:96:41:e5:c9:69:ae:f4:14:e2:1e:65:df: e2:08:44:35:7f:67:ed:e4:57:5c:7b:e3:a4:a9:6a: 6a:74:06:7b:d6:09:a9:6a:5f:0f:ad:29:0f:48:57: ab:80:cc:68:1d:a1:f9:9a:65:64:6f:c0:47:eb:9b: a8:fb:7d:88:b1:41:3d:74:37:ee:61:a9:31:26:98: e8:b9:e9:97:7e:50:f4:f2:55:1f:07:73:2a:57:8f: ef:95:5c:1f:9f:c6:13:89:d0:01:d3:42:bb:ba:30: 22:4f:01:eb:0f:be:d6:06:c0:87:79:5a:02:9d:b2: 70:bc:37:db:2d:4f:b5:d7:cb:7e:d5:25:76:90:74: 58:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1B:6C:A4:71:B2:9E:5A:CE:76:FB:4C:A6:D9:34:C1:21:23:F9:01 X509v3 Authority Key Identifier: keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:37:b4:97:8e:26:0c:c7:1b:60:dc:6a:29:3e:64:9f:8d:8b: 9c:0a:f5:60:ef:69:b9:b4:fd:08:e7:c3:fb:81:d4:3b:d8:49: 91:e0:0e:74:48:a8:35:01:38:41:93:30:8f:cf:e9:a6:5f:a0: 03:f9:a6:4b:22:a6:09:d8:75:3e:83:cf:ad:9e:bd:7d:e0:a8: 71:bf:91:61:7d:29:5c:67:9d:84:7a:ca:52:d5:b4:86:71:1a: ca:e0:27:ec:99:8a:87:80:1f:7e:0e:aa:36:c1:4e:37:d5:c3: ce:42:22:7b:00:8c:f0:06:cb:8a:aa:cc:f5:f1:26:5f:0d:4e: 53:df:7f:1b:ae:a6:96:0a:5a:f6:d8:21:23:7f:ab:ea:86:a8: 5c:22:a6:ea:f8:50:c8:f8:91:63:66:30:ca:64:b3:c0:ed:fc: b0:72:a2:21:60:fc:d8:e1:58:0c:19:37:a4:9c:ac:01:a8:ef: ae:b4:fc:07:5f:d7:22:d1:52:07:61:cb:33:8f:e7:ef:4d:00: 1c:8e:c7:f0:fc:0e:f9:a8:8f:ea:f0:e0:ff:7a:e8:b7:6a:19: ca:ed:67:fc:a2:6a:3d:c1:b4:ba:c8:79:3c:5e:47:79:17:d1: 2a:dd:dd:49:03:54:22:33:e7:93:ea:11:73:0e:e6:51:30:c2: df:49:d4:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gw+XUycyjaS2CnSQPV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NTRjN2I3ZTZkZjc1Nzg0NjZkODJiNTI3MTVjYjIwOWY3 ZjIxYzUwHhcNMjUxMjA2MDQwMTA1WhcNMjUxMjA3MDQwMTA1WjAzMTEwLwYDVQQD Eyg0MDFiNmNhNDcxYjI5ZTVhY2U3NmZiNGNhNmQ5MzRjMTIxMjNmOTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRKoKRbkNojNa+HQ9GXlK7LGLS0V MlOsw9+PeJuLDIa/qwX0TwA8FuufMvhBrn7i4KhVAILQ6PZE2LOjtlQTG0HIP5Ep 3K1909tjCkIt4S+3idMuEy2ktqGqqoDoFGwLPCimoBZhGwY4QKrwOg/AKQRkGTK5 r+e0VIOWQeXJaa70FOIeZd/iCEQ1f2ft5Fdce+OkqWpqdAZ71gmpal8PrSkPSFer gMxoHaH5mmVkb8BH65uo+32IsUE9dDfuYakxJpjouemXflD08lUfB3MqV4/vlVwf n8YTidAB00K7ujAiTwHrD77WBsCHeVoCnbJwvDfbLU+118t+1SV2kHRYxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAbbKRxsp5aznb7TKbZNMEhI/kBMB8GA1UdIwQY MBaAFFlUx7fm33V4Rm2CtScVyyCffyHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDVmZDAtZTY5Yi00ZTMyLWE0Mjct OGIxMDUyZmZjZjZkLzEvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lNDVmZDAtZTY5Yi00ZTMyLWE0MjctOGIxMDUyZmZjZjZk LzEvV1ZUSHQtYmZkWGhHYllLMUp4WExJSjlfSWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArje0l44m DMcbYNxqKT5kn42LnAr1YO9pubT9COfD+4HUO9hJkeAOdEioNQE4QZMwj8/ppl+g A/mmSyKmCdh1PoPPrZ69feCocb+RYX0pXGedhHrKUtW0hnEayuAn7JmKh4Affg6q NsFON9XDzkIiewCM8AbLiqrM9fEmXw1OU99/G66mlgpa9tghI3+r6oaoXCKm6vhQ yPiRY2YwymSzwO38sHKiIWD82OFYDBk3pJysAajvrrT8B1/XItFSB2HLM4/n700A HI7H8PwO+aiP6vDg/3rot2oZyu1n/KJqPcG0ush5PF5HeRfRKt3dSQNUIjPnk+oR cw7mUTDC30nUQw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:20 2025 by rpki-client