This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft File: WAFcyNofG780PiarII34uyb9U64.mft (raw, json) Hash identifier: 0JGeSoXRE5KNasKG/VYaPbBmYA4VHp/B058Fbkd6Mp8= Subject key identifier: A6:C0:43:E4:51:71:CC:F8:2F:C9:91:6C:42:D1:13:D7:F8:51:7F:BB Authority key identifier: 58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE Certificate issuer: /CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Certificate serial: 019AF19B84B5EBC6F312BC66CDD5FE55A5C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft Manifest number: 1771 Signing time: Sat 06 Dec 2025 03:01:32 +0000 Manifest this update: Sat 06 Dec 2025 03:01:32 +0000 Manifest next update: Sun 07 Dec 2025 03:01:32 +0000 Files and hashes: 1: 9t5l9DU2DQd9JSq54qDiGTsAgAw.roa (hash: vFDXt6Ws4OGlOdrYdsisaEM0Z4ldRcdznPar93jpV/Q=) 2: WAFcyNofG780PiarII34uyb9U64.crl (hash: utlnfqWGF5Al1OQAEW0X5kebuSG5nuv/0ORhY2f8FuI=) 3: m3VZjdzwzA2piVdwr0jRtcRx0nU.roa (hash: P1WYR9PHlhqL+0w0ThuMbIIaq+c1NvgD6JAgzrBxv9k=) 4: re1d3zENTmY783i31gdyUHSlGtY.roa (hash: Ro+9+t2bLbDvbfispb5KZEgQ9GFkkoG2WduZ/WVhIGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:84:b5:eb:c6:f3:12:bc:66:cd:d5:fe:55:a5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58015cc8da1f1bbf343e26ab208df8bb26fd53ae Validity Not Before: Dec 6 03:01:32 2025 GMT Not After : Dec 7 03:01:32 2025 GMT Subject: CN=a6c043e45171ccf82fc9916c42d113d7f8517fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:45:6b:c7:e7:a1:2a:a2:d6:7c:20:01:83:67: 05:1f:f1:b9:e4:81:31:4b:60:0e:05:c2:b3:4d:21: 66:30:e6:58:aa:d9:f8:d6:50:85:6b:ed:45:e3:f6: ad:f9:73:b6:ec:51:c1:e0:36:9d:7e:c0:75:92:4c: 13:f3:2a:70:a6:39:f9:82:b6:c5:9a:50:d6:fb:0c: 6a:94:d1:9b:38:c3:2b:e6:de:39:8e:de:33:ec:d7: 9e:4c:a6:1c:af:28:fc:5d:fc:85:1d:54:3a:6d:99: 0b:f1:75:62:f1:15:51:2d:e2:8c:8e:04:fc:5c:b3: fc:97:4b:40:42:50:91:12:fe:5e:50:39:0b:d6:5e: f7:7f:0c:a5:0e:ca:1a:43:41:7a:43:5f:5e:bb:3e: 65:bc:06:c8:7a:e2:64:cb:2c:69:8a:1d:73:ca:28: 11:34:06:ac:19:4f:47:49:13:85:59:92:0d:e4:d7: 38:56:d6:2c:d3:41:42:6e:b8:ef:fa:31:5d:d9:f2: 4c:35:20:7a:f9:de:40:4d:fd:a0:8d:3f:91:29:d0: 6f:31:1d:ce:d0:8f:34:a5:d4:5d:6e:d6:80:3f:27: 79:f8:8f:38:7f:7e:46:b4:3b:be:a5:b2:c8:d3:a3: 20:18:55:53:69:e0:31:f1:58:3d:f6:29:03:8f:9d: 37:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C0:43:E4:51:71:CC:F8:2F:C9:91:6C:42:D1:13:D7:F8:51:7F:BB X509v3 Authority Key Identifier: keyid:58:01:5C:C8:DA:1F:1B:BF:34:3E:26:AB:20:8D:F8:BB:26:FD:53:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAFcyNofG780PiarII34uyb9U64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/d4175d-192c-418c-972f-8ee21b74dd56/1/WAFcyNofG780PiarII34uyb9U64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:7c:1a:cf:f2:e7:0b:cf:34:10:34:7d:41:f1:5e:a5:2e:50: 47:1c:34:b6:ee:1a:be:88:6e:9e:38:f2:b0:02:f6:46:e7:75: 0c:7b:b2:25:0a:71:56:8f:d5:27:3a:37:e3:ab:64:9e:49:71: 19:f3:5e:37:2f:8b:ab:b7:46:a6:50:f5:d1:c0:70:40:79:72: da:db:cb:91:f6:f6:d1:24:a1:e3:c5:08:fc:fc:bc:a9:17:a0: 2e:43:58:d0:fc:d5:4d:49:43:12:e6:c9:ee:48:af:fd:41:b3: 5c:0b:a7:41:6e:ac:b4:34:86:b6:dc:2d:a9:18:52:49:c6:67: 3b:a4:8f:1d:18:1f:d0:71:7b:89:5e:5d:5a:a6:6d:3a:9c:7b: cc:10:fd:77:90:01:ec:17:55:03:c8:f7:3a:5f:23:56:6b:3a: 4e:97:76:d4:ff:6c:b2:82:de:c9:08:80:90:0d:96:4e:a6:e5: 20:15:d3:31:e7:f5:2a:e7:78:72:07:6a:85:fb:4d:f1:f1:ab: fb:d5:08:65:9c:4e:fb:7c:a9:09:ea:cf:42:13:14:03:7d:46: 56:fd:20:3e:58:8a:c0:b9:43:4c:cd:23:48:97:f6:ac:6b:29: e7:c5:5a:af:16:73:89:ea:cd:5f:0d:3e:48:de:80:33:7f:e7: af:ed:5d:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4S168bzErxmzdX+VaXIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MDE1Y2M4ZGExZjFiYmYzNDNlMjZhYjIwOGRmOGJiMjZm ZDUzYWUwHhcNMjUxMjA2MDMwMTMyWhcNMjUxMjA3MDMwMTMyWjAzMTEwLwYDVQQD EyhhNmMwNDNlNDUxNzFjY2Y4MmZjOTkxNmM0MmQxMTNkN2Y4NTE3ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUVrx+ehKqLWfCABg2cFH/G55IEx S2AOBcKzTSFmMOZYqtn41lCFa+1F4/at+XO27FHB4DadfsB1kkwT8ypwpjn5grbF mlDW+wxqlNGbOMMr5t45jt4z7NeeTKYcryj8XfyFHVQ6bZkL8XVi8RVRLeKMjgT8 XLP8l0tAQlCREv5eUDkL1l73fwylDsoaQ0F6Q19euz5lvAbIeuJkyyxpih1zyigR NAasGU9HSROFWZIN5Nc4VtYs00FCbrjv+jFd2fJMNSB6+d5ATf2gjT+RKdBvMR3O 0I80pdRdbtaAPyd5+I84f35GtDu+pbLI06MgGFVTaeAx8Vg99ikDj503rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbAQ+RRccz4L8mRbELRE9f4UX+7MB8GA1UdIwQY MBaAFFgBXMjaHxu/ND4mqyCN+Lsm/VOuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYt OGVlMjFiNzRkZDU2LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9kNDE3NWQtMTkyYy00MThjLTk3MmYtOGVlMjFiNzRkZDU2 LzEvV0FGY3lOb2ZHNzgwUGlhcklJMzR1eWI5VTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHwaz/Ln C880EDR9QfFepS5QRxw0tu4avohunjjysAL2Rud1DHuyJQpxVo/VJzo346tknklx GfNeNy+Lq7dGplD10cBwQHly2tvLkfb20SSh48UI/Py8qRegLkNY0PzVTUlDEubJ 7kiv/UGzXAunQW6stDSGttwtqRhSScZnO6SPHRgf0HF7iV5dWqZtOpx7zBD9d5AB 7BdVA8j3Ol8jVms6Tpd21P9ssoLeyQiAkA2WTqblIBXTMef1Kud4cgdqhftN8fGr +9UIZZxO+3ypCerPQhMUA31GVv0gPliKwLlDTM0jSJf2rGsp58VarxZzierNXw0+ SN6AM3/nr+1d9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:25 2025 by rpki-client