This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json) Hash identifier: G9KDlBjh1FZAG5d0NcGmGMneZUiGEwPxkDR5lFiH2wU= Subject key identifier: D6:03:37:DE:7A:EE:B6:15:7A:FA:31:F7:5A:5E:8C:08:FC:23:88:A0 Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Certificate serial: 019B2E8B4165DFEBD8838DD5FB2BA9783EF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft Manifest number: 0564 Signing time: Wed 17 Dec 2025 23:00:36 +0000 Manifest this update: Wed 17 Dec 2025 23:00:36 +0000 Manifest next update: Thu 18 Dec 2025 23:00:36 +0000 Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=) 2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: A+v6oi3rNtxLYGOyKpOWbdYyujU9YPdw9Glq6FJ9L64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:41:65:df:eb:d8:83:8d:d5:fb:2b:a9:78:3e:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Validity Not Before: Dec 17 23:00:36 2025 GMT Not After : Dec 18 23:00:36 2025 GMT Subject: CN=d60337de7aeeb6157afa31f75a5e8c08fc2388a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:cb:e8:2b:16:39:94:d3:b5:4b:af:7a:cc:a9: a9:59:73:f7:ca:4e:3b:74:6a:89:7c:b2:8c:70:cc: 89:67:ab:c2:c6:ea:9d:4f:de:f5:13:98:f8:3e:bd: 1b:8c:a3:4c:f5:ec:6c:a8:89:74:b6:09:91:56:50: a4:ab:dd:9f:69:56:2c:9a:dd:2d:50:2f:30:ce:49: 31:8c:41:b9:89:b8:ee:e5:5c:1b:fe:42:a1:4f:4b: 22:e1:7b:78:71:29:66:4f:3b:47:c4:36:5c:a6:1b: 5c:9e:fd:91:21:4d:f0:58:d4:93:3b:1a:df:ae:77: ad:64:d8:ed:b6:57:49:9d:21:36:19:38:a5:37:a6: 8a:28:9b:99:ea:2c:78:3d:13:cf:35:54:79:b8:43: 07:c9:b1:e3:cb:30:f4:51:28:9a:3c:d6:c7:db:73: f8:16:f8:2a:25:fa:00:cc:fc:c1:55:fb:5b:99:0d: 00:d8:6b:d7:9b:ee:4d:97:08:d0:07:45:60:8f:25: 1f:96:4d:b2:e7:89:af:17:26:21:08:df:2b:8d:3e: 89:da:9f:95:f0:e0:81:a0:94:93:ad:8e:c0:19:3b: bc:53:5d:ff:31:d2:d4:eb:45:e3:59:51:d4:df:4b: 3f:f1:75:6b:6b:27:e3:b2:dc:b8:26:f7:1f:98:24: 7e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:03:37:DE:7A:EE:B6:15:7A:FA:31:F7:5A:5E:8C:08:FC:23:88:A0 X509v3 Authority Key Identifier: keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7d:da:d8:fe:4d:51:ca:89:d8:f2:ce:e9:1d:f2:38:d7:b7: b9:a0:b7:e4:c6:c7:2d:8e:80:3e:48:1c:ce:68:23:5b:d7:3f: a0:a2:82:df:d1:ee:11:d7:77:d3:f7:b8:f6:b6:a5:ab:9d:0e: 7c:5c:b4:37:a0:f4:1d:10:5d:98:31:ea:db:71:a9:df:2d:49: 88:f2:a3:1f:2f:17:b2:d1:d6:0c:d3:aa:26:55:87:b0:03:2f: 44:28:0f:00:75:f5:6e:f5:5d:85:cb:64:f7:fb:57:d6:32:15: 7e:66:a9:f7:fb:84:20:e2:8a:bd:27:cc:cc:70:94:ab:a8:21: 76:8c:7d:fc:54:ae:cd:d4:04:92:23:2e:88:44:db:63:42:16: 32:35:d1:2f:10:78:e8:4b:d4:84:0a:5c:85:70:ba:1f:18:8b: d7:21:1a:ac:b8:f7:25:7c:15:5e:2e:ee:ea:ff:76:0d:ff:2a: ca:2b:87:b3:2a:70:3c:b3:57:1c:b0:a5:cc:2d:ed:1e:ff:56: e1:c8:3a:a9:0c:6c:84:4a:be:3c:8d:dd:c7:cf:70:44:0b:80: 9b:e0:cc:6a:b7:53:b1:7f:e7:fc:ec:48:b4:e8:dd:e0:2b:b3: bd:9f:4b:f5:58:0e:a0:59:3f:ab:fd:ba:60:6a:b6:30:94:a1: 63:b9:39:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui0Fl3+vYg43V+yupeD7yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj ZmVmZDcwHhcNMjUxMjE3MjMwMDM2WhcNMjUxMjE4MjMwMDM2WjAzMTEwLwYDVQQD EyhkNjAzMzdkZTdhZWViNjE1N2FmYTMxZjc1YTVlOGMwOGZjMjM4OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8voKxY5lNO1S696zKmpWXP3yk47 dGqJfLKMcMyJZ6vCxuqdT971E5j4Pr0bjKNM9exsqIl0tgmRVlCkq92faVYsmt0t UC8wzkkxjEG5ibju5Vwb/kKhT0si4Xt4cSlmTztHxDZcphtcnv2RIU3wWNSTOxrf rnetZNjttldJnSE2GTilN6aKKJuZ6ix4PRPPNVR5uEMHybHjyzD0USiaPNbH23P4 FvgqJfoAzPzBVftbmQ0A2GvXm+5NlwjQB0VgjyUflk2y54mvFyYhCN8rjT6J2p+V 8OCBoJSTrY7AGTu8U13/MdLU60XjWVHU30s/8XVrayfjsty4JvcfmCR+lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYDN9567rYVevox91pejAj8I4igMB8GA1UdIwQY MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5 LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM33a2P5N UcqJ2PLO6R3yONe3uaC35MbHLY6APkgczmgjW9c/oKKC39HuEdd30/e49ralq50O fFy0N6D0HRBdmDHq23Gp3y1JiPKjHy8XstHWDNOqJlWHsAMvRCgPAHX1bvVdhctk 9/tX1jIVfmap9/uEIOKKvSfMzHCUq6ghdox9/FSuzdQEkiMuiETbY0IWMjXRLxB4 6EvUhApchXC6HxiL1yEarLj3JXwVXi7u6v92Df8qyiuHsypwPLNXHLClzC3tHv9W 4cg6qQxshEq+PI3dx89wRAuAm+DMardTsX/n/OxItOjd4CuzvZ9L9VgOoFk/q/26 YGq2MJShY7k5XA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:13:13 2025 by rpki-client