This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft File: WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft (raw, json) Hash identifier: bwh231PQDiERsGlarJLeL3e+3t9g+8DZERh2ZRT+VOk= Subject key identifier: FD:75:1F:31:23:B0:47:6A:2E:B1:FE:CD:CE:57:FE:C5:2D:B6:C3:86 Authority key identifier: 59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5 Certificate issuer: /CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5 Certificate serial: 019AF465432EF2CF03D07B63E3DA3A520622 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft Manifest number: 14A1 Signing time: Sat 06 Dec 2025 16:01:08 +0000 Manifest this update: Sat 06 Dec 2025 16:01:08 +0000 Manifest next update: Sun 07 Dec 2025 16:01:08 +0000 Files and hashes: 1: WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl (hash: j5rZYoCp57V1UdNGiIQOreaAm6fXyTfhtug2ccDt0DQ=) 2: Xihi8aGiKGmm1wm5o0bdg-SFO4M.roa (hash: UB6flWnnaqdKwm5uBg0CvnmFwbf9VSTpt0Wz6M2wzJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:43:2e:f2:cf:03:d0:7b:63:e3:da:3a:52:06:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5 Validity Not Before: Dec 6 16:01:08 2025 GMT Not After : Dec 7 16:01:08 2025 GMT Subject: CN=fd751f3123b0476a2eb1fecdce57fec52db6c386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:85:a5:8f:88:64:97:7d:3f:f5:b3:c2:d3:5f: 34:1a:f2:90:b0:cb:7e:af:7e:98:be:59:b5:8c:22: f6:d1:79:45:9f:0f:96:e5:b8:15:e2:df:a2:90:b8: 9d:a1:9c:3c:46:49:4b:1c:66:e8:d7:e0:eb:36:d8: cd:aa:77:73:21:73:5d:07:86:8b:33:c7:14:25:ba: 8c:44:1c:75:a9:bc:a9:2c:dc:3e:1b:c4:a3:84:2b: c4:97:43:0b:b7:0d:6b:0e:2f:ef:80:c3:aa:dc:6b: 96:70:fb:46:e6:c4:ec:b9:cb:8a:55:2e:a1:04:99: 09:be:96:05:74:40:65:50:86:d8:34:b7:15:20:d8: cc:a1:22:bf:33:c7:bb:b1:42:f8:fb:72:dd:6c:f8: 09:8f:cd:6d:e2:24:51:50:d1:38:54:48:24:a9:85: f5:17:b3:10:01:b0:4d:3b:22:63:d6:c7:93:b5:f0: 50:77:a7:a6:c4:7f:b2:b9:7f:6a:3b:a8:3a:3e:37: 1c:7b:76:6f:c3:d0:1e:96:5a:39:7b:4f:35:c1:a8: ba:12:81:ec:a0:05:8b:ba:67:c9:4b:af:cc:d3:a2: e7:a4:21:c0:01:33:70:54:71:e8:54:92:d6:04:8f: 0d:fe:e1:2c:a6:2f:a6:53:ec:6a:11:73:6f:e9:3b: 85:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:75:1F:31:23:B0:47:6A:2E:B1:FE:CD:CE:57:FE:C5:2D:B6:C3:86 X509v3 Authority Key Identifier: keyid:59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:94:12:41:c2:bb:ec:a4:05:fa:ba:87:cb:33:84:88:7a:be: 77:99:8b:c3:e4:b3:cb:5f:81:59:9c:0e:d2:22:78:b6:34:db: 9a:a0:cc:04:e9:ee:99:b7:65:53:5e:cd:57:57:d3:91:39:c5: f7:c9:1e:50:9a:0e:45:85:db:d2:22:ff:01:6d:57:9d:85:3e: 2c:d9:e8:3f:6d:22:f7:f4:e4:d0:3c:85:d6:a2:d7:0e:94:6d: 64:15:5d:7f:53:ae:87:af:ff:aa:53:03:90:8d:00:ca:6d:94: 74:80:73:0b:b1:e4:5a:9d:41:3e:46:54:fd:cf:3c:4b:f8:dd: 59:00:02:d7:8a:9e:e7:7b:96:5a:92:f4:48:f8:71:26:cd:bc: 6d:47:97:fc:7c:d7:d9:31:b8:a3:d2:aa:aa:41:92:0d:f6:ab: 1c:db:17:3d:2c:f5:0e:e6:26:eb:0b:a9:11:50:a3:fd:9d:8b: 11:cc:a8:8b:36:3e:97:79:54:c7:f1:36:dc:44:a8:61:e4:a0: 51:1b:d4:89:ad:c0:64:5c:d7:1f:6d:c8:b7:7c:f5:72:11:8b: c9:d5:c6:06:cf:d7:20:2f:f3:3e:99:69:f5:a7:88:71:70:49: 89:70:f2:0e:4e:5b:b4:2a:9c:fc:e9:ea:8b:0a:df:5f:95:7c: f2:bd:50:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUMu8s8D0Htj49o6UgYiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NjAyZTRiMDg1OTRjNWNhZmZiZWI1MGQxZTBhOWQ0NzBl YjkyZTUwHhcNMjUxMjA2MTYwMTA4WhcNMjUxMjA3MTYwMTA4WjAzMTEwLwYDVQQD EyhmZDc1MWYzMTIzYjA0NzZhMmViMWZlY2RjZTU3ZmVjNTJkYjZjMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIWlj4hkl30/9bPC0180GvKQsMt+ r36Yvlm1jCL20XlFnw+W5bgV4t+ikLidoZw8RklLHGbo1+DrNtjNqndzIXNdB4aL M8cUJbqMRBx1qbypLNw+G8SjhCvEl0MLtw1rDi/vgMOq3GuWcPtG5sTsucuKVS6h BJkJvpYFdEBlUIbYNLcVINjMoSK/M8e7sUL4+3LdbPgJj81t4iRRUNE4VEgkqYX1 F7MQAbBNOyJj1seTtfBQd6emxH+yuX9qO6g6Pjcce3Zvw9Aello5e081wai6EoHs oAWLumfJS6/M06LnpCHAATNwVHHoVJLWBI8N/uEspi+mU+xqEXNv6TuFQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP11HzEjsEdqLrH+zc5X/sUttsOGMB8GA1UdIwQY MBaAFFlgLksIWUxcr/vrUNHgqdRw65LlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNzkxMWItMDY0Zi00ZDYyLWJhMWMt ZTY2MjZhZjc1OWI3LzEvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yNzkxMWItMDY0Zi00ZDYyLWJhMWMtZTY2MjZhZjc1OWI3 LzEvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZQSQcK7 7KQF+rqHyzOEiHq+d5mLw+Szy1+BWZwO0iJ4tjTbmqDMBOnumbdlU17NV1fTkTnF 98keUJoORYXb0iL/AW1XnYU+LNnoP20i9/Tk0DyF1qLXDpRtZBVdf1Ouh6//qlMD kI0Aym2UdIBzC7HkWp1BPkZU/c88S/jdWQAC14qe53uWWpL0SPhxJs28bUeX/HzX 2TG4o9KqqkGSDfarHNsXPSz1DuYm6wupEVCj/Z2LEcyoizY+l3lUx/E23ESoYeSg URvUia3AZFzXH23It3z1chGLydXGBs/XIC/zPplp9aeIcXBJiXDyDk5btCqc/Onq iwrfX5V88r1Q8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:47 2025 by rpki-client