This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft File: WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json) Hash identifier: A/UcZYRxY5DL818KcHHuvtbdNRZM0ptB/Wv1LZalIAI= Subject key identifier: 4F:FD:FC:FC:30:90:CC:F5:C7:7B:48:44:D0:AA:7C:AB:52:1C:D9:66 Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe Certificate serial: 019AF23F61BC75D6AFFA7A2083C9FCC7E3FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:31 +0000 Manifest this update: Sat 06 Dec 2025 06:00:31 +0000 Manifest next update: Sun 07 Dec 2025 06:00:31 +0000 Files and hashes: 1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=) 2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: aSXZvM2t9EpOPN5kDjtakBheCzCcWoaY4L21hStK+zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:61:bc:75:d6:af:fa:7a:20:83:c9:fc:c7:e3:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe Validity Not Before: Dec 6 06:00:31 2025 GMT Not After : Dec 7 06:00:31 2025 GMT Subject: CN=4ffdfcfc3090ccf5c77b4844d0aa7cab521cd966 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:71:79:35:b5:38:ef:b7:d8:0e:27:82:ae: 46:3b:cd:c9:fc:d7:cc:5f:95:a2:72:d7:40:c2:d2: 4c:d6:91:3e:52:21:18:dd:f1:30:82:f7:5b:db:4b: 70:89:42:d4:28:08:4a:3c:59:69:45:23:74:4b:43: b7:ed:47:34:4c:d0:53:da:e3:06:07:a7:bc:0b:ae: a0:30:5d:28:6c:41:d8:2c:f9:c4:16:b4:25:4a:c7: a4:98:0d:4b:c7:16:0c:cd:68:b7:80:28:84:47:89: ee:44:8d:fc:fd:42:55:19:ad:e3:8b:96:f0:95:b6: d6:06:e4:7b:de:2c:29:ac:69:1a:97:ba:b4:aa:44: f4:bd:33:76:ee:39:96:8c:54:74:b2:87:91:9e:42: 63:36:48:41:89:ce:09:4a:b1:c9:40:e5:30:d3:02: 97:66:47:74:32:28:c2:75:c3:16:b4:44:8f:9b:70: 8c:b0:ca:9b:33:c1:a6:55:c6:9a:a8:f1:e1:e7:bc: 1f:7c:10:6a:c5:47:ec:5e:87:5a:f6:da:72:a5:9d: 0e:d5:3c:8d:00:21:1b:7e:d1:7f:5a:c6:3b:c6:35: d6:99:4e:5a:4b:b7:92:b3:b2:3e:b7:96:50:c8:2a: 0c:1b:75:a0:b8:a9:be:1a:e2:f6:fa:3d:d7:1c:08: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FD:FC:FC:30:90:CC:F5:C7:7B:48:44:D0:AA:7C:AB:52:1C:D9:66 X509v3 Authority Key Identifier: keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d0:53:fe:ea:ae:b8:bd:3d:39:f0:43:11:b2:0d:82:32:97: b4:1c:a5:ce:f8:e6:a8:93:64:83:5a:9c:aa:15:3f:2a:b6:ee: 85:ac:f9:1d:28:db:be:48:92:77:f7:c1:1f:03:a2:40:8b:e6: 56:d0:d0:f7:8c:2d:a2:3a:20:c7:de:52:ff:89:94:e2:d3:a9: 2b:f7:b6:da:a0:cb:78:b3:0c:b4:04:22:37:7f:a0:9a:e5:4b: ec:c2:d7:b1:d6:42:6b:e2:69:4b:4b:af:3c:57:b2:ba:91:6e: e6:c6:04:34:4f:43:4b:fc:51:ec:d1:e0:39:de:d1:8b:da:25: 0f:bd:30:90:3f:65:e2:37:71:2d:0a:3d:63:a1:af:b8:01:2d: 33:62:50:f3:50:e7:26:1c:07:29:4d:25:bd:42:4f:ec:99:d8: ba:d7:fc:96:87:c8:3d:ac:82:af:82:e1:1d:6e:0a:8a:d9:6f: 33:45:de:f0:f3:97:03:31:91:06:dc:72:5b:38:fc:c8:ec:21: d1:78:f4:62:c8:91:46:e4:7f:23:3f:18:86:23:41:4d:7b:ba: 9d:04:bc:2d:3b:fb:3a:dd:04:9b:5a:be:3a:c9:8a:b7:69:c3: 4b:d5:53:0d:da:dc:d1:7e:b0:1b:cd:17:36:4e:ae:5a:a7:cd: 21:e2:e7:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2G8ddav+nogg8n8x+P8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDU5MGUyY2MxNGNhZDg0NGFlZjE1YWQ1ZjJkNDY3ZGU4 YTM3ZmUwHhcNMjUxMjA2MDYwMDMxWhcNMjUxMjA3MDYwMDMxWjAzMTEwLwYDVQQD Eyg0ZmZkZmNmYzMwOTBjY2Y1Yzc3YjQ4NDRkMGFhN2NhYjUyMWNkOTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9FxeTW1OO+32A4ngq5GO83J/NfM X5WictdAwtJM1pE+UiEY3fEwgvdb20twiULUKAhKPFlpRSN0S0O37Uc0TNBT2uMG B6e8C66gMF0obEHYLPnEFrQlSsekmA1LxxYMzWi3gCiER4nuRI38/UJVGa3ji5bw lbbWBuR73iwprGkal7q0qkT0vTN27jmWjFR0soeRnkJjNkhBic4JSrHJQOUw0wKX Zkd0MijCdcMWtESPm3CMsMqbM8GmVcaaqPHh57wffBBqxUfsXoda9tpypZ0O1TyN ACEbftF/WsY7xjXWmU5aS7eSs7I+t5ZQyCoMG3WguKm+GuL2+j3XHAikxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/9/PwwkMz1x3tIRNCqfKtSHNlmMB8GA1UdIwQY MBaAFFnVkOLMFMrYRK7xWtXy1Gfeijf+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUt ZmM5OWQzM2QzMzQ0LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUtZmM5OWQzM2QzMzQ0 LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9BT/uqu uL09OfBDEbINgjKXtBylzvjmqJNkg1qcqhU/Krbuhaz5HSjbvkiSd/fBHwOiQIvm VtDQ94wtojogx95S/4mU4tOpK/e22qDLeLMMtAQiN3+gmuVL7MLXsdZCa+JpS0uv PFeyupFu5sYENE9DS/xR7NHgOd7Ri9olD70wkD9l4jdxLQo9Y6GvuAEtM2JQ81Dn JhwHKU0lvUJP7JnYutf8lofIPayCr4LhHW4KitlvM0Xe8POXAzGRBtxyWzj8yOwh 0Xj0YsiRRuR/Iz8YhiNBTXu6nQS8LTv7Ot0Em1q+OsmKt2nDS9VTDdrc0X6wG80X Nk6uWqfNIeLnCw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:06:58 2025 by rpki-client