This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft File: WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft (raw, json) Hash identifier: dbTVCK4rECb9VDUGsOQ5LmKVXH7VH3/ICwb1U3xM5NE= Subject key identifier: 3A:19:21:C2:27:B4:E3:4F:11:FD:3D:5A:93:D6:BD:A8:6F:40:FF:2D Authority key identifier: 59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28 Certificate issuer: /CN=59fad388bea71da2f43f39a45e10141d6f29c428 Certificate serial: 019AF31B593EEBC2A8EBDB19A47C2B538009 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft Manifest number: 167B Signing time: Sat 06 Dec 2025 10:00:46 +0000 Manifest this update: Sat 06 Dec 2025 10:00:46 +0000 Manifest next update: Sun 07 Dec 2025 10:00:46 +0000 Files and hashes: 1: LYb-x1oBjYV986-WVWGm87nYs0w.roa (hash: Hdp26qwcmy9Rb38THuQbvn6WpSeZJ3xKyk1AFGilm9k=) 2: WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl (hash: GrPH4XWd4z3rzc9JMoxgLOyLemfJzQAj+QnD1h0d/pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:59:3e:eb:c2:a8:eb:db:19:a4:7c:2b:53:80:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59fad388bea71da2f43f39a45e10141d6f29c428 Validity Not Before: Dec 6 10:00:46 2025 GMT Not After : Dec 7 10:00:46 2025 GMT Subject: CN=3a1921c227b4e34f11fd3d5a93d6bda86f40ff2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a7:e8:a0:d4:b9:a1:67:35:50:66:6f:3b:b6: d6:c1:15:a5:01:9d:27:c2:7d:61:30:1e:8f:c9:f8: 6d:4a:4e:08:94:0a:f4:dc:63:26:7b:f5:c1:80:c8: 10:0f:d7:d4:e9:57:47:68:44:79:21:10:42:3b:0d: 23:5a:d7:63:f7:c8:22:86:8d:94:59:3b:d7:aa:df: 16:f4:31:c8:cc:2e:e8:42:7f:33:b5:f0:b4:ab:e8: 08:96:11:98:6e:ac:aa:2e:22:fa:3d:be:26:03:99: b5:11:f2:b8:ee:6f:fe:80:8d:04:93:48:6c:b9:e1: 82:bc:11:59:4a:e6:bd:28:ec:98:4f:6a:97:3b:f6: e6:18:00:06:94:82:46:81:64:be:be:8d:2c:34:32: 46:c1:8e:10:e4:82:aa:dd:ac:c9:7f:bb:eb:76:f4: 07:a7:01:88:73:93:3c:62:b1:86:bd:bc:e4:d5:ce: 76:65:be:29:2d:1d:aa:50:2b:ce:b1:60:d5:a9:1e: c4:51:64:cd:6e:f7:15:a0:24:92:3e:3f:16:f7:65: 10:7a:4a:61:84:e6:86:38:23:ea:47:cf:6a:8b:c9: 05:6c:87:56:2e:b3:cf:86:97:ef:94:7f:f2:8d:f2: 13:e3:f8:3b:34:f2:ca:95:8f:2f:b3:59:bc:bc:6e: 5f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:21:C2:27:B4:E3:4F:11:FD:3D:5A:93:D6:BD:A8:6F:40:FF:2D X509v3 Authority Key Identifier: keyid:59:FA:D3:88:BE:A7:1D:A2:F4:3F:39:A4:5E:10:14:1D:6F:29:C4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfrTiL6nHaL0PzmkXhAUHW8pxCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4ea481-ba97-4b94-b000-35bd65f1f2a4/1/WfrTiL6nHaL0PzmkXhAUHW8pxCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d0:10:8f:da:59:5e:16:33:75:d4:43:e8:e1:97:81:b3:c3: b8:9a:d8:0f:56:cf:f5:be:17:68:7a:4e:79:c6:36:03:f3:9e: 97:43:07:3a:ca:b9:1b:9d:d9:ec:e2:8d:c2:6a:8d:c4:8c:2f: e8:9b:ef:79:c8:90:d7:2c:37:ea:0e:84:d0:84:ed:a3:0e:09: 90:33:06:9d:36:50:c4:f3:10:58:fd:6b:05:7d:f5:37:a7:8e: 82:cd:59:eb:97:35:65:aa:11:6b:5a:1d:f7:b3:14:b6:6b:17: df:e6:63:98:c4:a6:4e:07:16:a7:de:f2:5b:fd:2d:66:40:85: ca:dd:8c:78:00:14:eb:54:10:de:a6:49:fc:35:fe:23:c7:a8: 74:7f:6c:ff:89:88:c2:4d:d3:39:1b:58:5e:10:9b:41:8f:56: 6d:d9:41:fa:ee:d7:ea:67:63:3d:c5:37:65:33:e5:65:8f:c5: ab:61:8d:e3:3f:44:dc:bf:67:2d:bf:bd:68:12:0e:08:3e:9e: 32:84:db:b5:0c:75:d8:e7:92:d0:79:a2:b6:d3:63:ea:be:7b: 6d:ee:f2:0d:bb:b2:d7:8a:e7:f4:ab:61:8d:7e:e8:6a:2f:f1: f1:3d:94:a0:5f:fc:95:d5:3a:ad:be:fd:68:91:c5:b7:1d:42: 31:db:eb:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1k+68Ko69sZpHwrU4AJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZmFkMzg4YmVhNzFkYTJmNDNmMzlhNDVlMTAxNDFkNmYy OWM0MjgwHhcNMjUxMjA2MTAwMDQ2WhcNMjUxMjA3MTAwMDQ2WjAzMTEwLwYDVQQD EygzYTE5MjFjMjI3YjRlMzRmMTFmZDNkNWE5M2Q2YmRhODZmNDBmZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06fooNS5oWc1UGZvO7bWwRWlAZ0n wn1hMB6PyfhtSk4IlAr03GMme/XBgMgQD9fU6VdHaER5IRBCOw0jWtdj98giho2U WTvXqt8W9DHIzC7oQn8ztfC0q+gIlhGYbqyqLiL6Pb4mA5m1EfK47m/+gI0Ek0hs ueGCvBFZSua9KOyYT2qXO/bmGAAGlIJGgWS+vo0sNDJGwY4Q5IKq3azJf7vrdvQH pwGIc5M8YrGGvbzk1c52Zb4pLR2qUCvOsWDVqR7EUWTNbvcVoCSSPj8W92UQekph hOaGOCPqR89qi8kFbIdWLrPPhpfvlH/yjfIT4/g7NPLKlY8vs1m8vG5fZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDoZIcIntONPEf09WpPWvahvQP8tMB8GA1UdIwQY MBaAFFn604i+px2i9D85pF4QFB1vKcQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi80ZWE0ODEtYmE5Ny00Yjk0LWIwMDAt MzViZDY1ZjFmMmE0LzEvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi80ZWE0ODEtYmE5Ny00Yjk0LWIwMDAtMzViZDY1ZjFmMmE0 LzEvV2ZyVGlMNm5IYUwwUHpta1hoQVVIVzhweENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtAQj9pZ XhYzddRD6OGXgbPDuJrYD1bP9b4XaHpOecY2A/Oel0MHOsq5G53Z7OKNwmqNxIwv 6JvveciQ1yw36g6E0ITtow4JkDMGnTZQxPMQWP1rBX31N6eOgs1Z65c1ZaoRa1od 97MUtmsX3+ZjmMSmTgcWp97yW/0tZkCFyt2MeAAU61QQ3qZJ/DX+I8eodH9s/4mI wk3TORtYXhCbQY9WbdlB+u7X6mdjPcU3ZTPlZY/Fq2GN4z9E3L9nLb+9aBIOCD6e MoTbtQx12OeS0HmittNj6r57be7yDbuy14rn9KthjX7oai/x8T2UoF/8ldU6rb79 aJHFtx1CMdvrbw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:35:13 2025 by rpki-client