This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json) Hash identifier: 0HVSMYKr99StqHzBanxxwppCmA2nWEqsBzgBnryQ1rI= Subject key identifier: 56:A2:07:51:9E:00:E1:48:92:39:5D:0C:B9:21:C1:49:C7:27:49:8E Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Certificate serial: 019AF49BB4B4D5119667D76E1419BACE0434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft Manifest number: 0546 Signing time: Sat 06 Dec 2025 17:00:36 +0000 Manifest this update: Sat 06 Dec 2025 17:00:36 +0000 Manifest next update: Sun 07 Dec 2025 17:00:36 +0000 Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=) 2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: lBOygTfu3+ql2eyaAt6lB4zzb2T617Dwy1RaVn6wzpw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b4:b4:d5:11:96:67:d7:6e:14:19:ba:ce:04:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Validity Not Before: Dec 6 17:00:36 2025 GMT Not After : Dec 7 17:00:36 2025 GMT Subject: CN=56a207519e00e14892395d0cb921c149c727498e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:52:1e:61:35:a2:af:c0:d5:0e:c7:c7:39:8a: 6e:fe:36:e0:5b:4d:cb:72:ad:be:72:3b:05:e8:95: 19:37:ec:92:06:4b:4b:f7:00:f1:15:1b:a3:94:81: 29:e3:dc:6f:02:2f:bf:3c:9d:44:33:eb:5c:22:d0: 20:25:59:76:da:de:4d:2e:e7:55:bf:e9:61:68:cb: 2a:16:96:a9:a6:71:42:2c:19:c9:41:32:ab:81:65: b2:c1:8c:80:a2:b3:19:7e:f5:e7:cb:1b:7f:5c:1d: b7:d4:4d:2d:b0:e9:e9:c0:17:b1:e8:d3:f5:56:f7: fd:12:d5:6f:96:b4:6c:e9:34:c4:f7:32:33:87:b2: aa:7c:17:f7:a5:c1:64:28:b3:56:44:46:b6:29:04: 23:e3:94:bb:29:e0:94:63:f6:b0:43:be:33:fd:23: e2:fe:c7:ed:5b:1b:63:fd:5e:c5:5d:c4:b9:7c:95: 7d:be:66:44:83:01:81:33:52:98:b3:f8:ed:c8:d0: fe:a4:f7:25:07:ed:9e:5f:ea:c5:d8:3d:87:c0:9d: 7e:0a:4a:c9:8e:fb:a4:39:c5:55:9b:23:35:7a:c7: a7:71:09:84:7e:a5:31:0c:14:3f:ac:25:92:d0:b8: e9:3b:5b:8f:62:8e:74:49:c7:cd:d0:ea:3e:ba:e8: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A2:07:51:9E:00:E1:48:92:39:5D:0C:B9:21:C1:49:C7:27:49:8E X509v3 Authority Key Identifier: keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:8f:2e:8a:a1:60:33:c8:f5:37:65:77:1c:64:e3:a1:65:64: ad:ab:e0:42:ea:e1:80:5d:e8:dd:ad:c7:2e:e5:28:14:4f:8c: f8:d9:d1:da:86:60:86:f4:13:c0:1b:2e:a8:79:87:ae:cc:24: 84:c7:b6:a0:09:8c:1a:80:96:88:81:ff:84:c7:76:e2:89:13: e6:a3:16:2f:f9:df:40:ce:6a:0d:ad:12:f7:73:3c:2c:53:4d: ff:c1:d8:62:ba:c7:7c:2a:0d:9f:13:6c:15:f5:56:0c:8d:74: 82:ce:b6:c0:be:9c:74:94:55:78:0e:90:5d:80:b3:92:e8:08: 00:57:6e:27:f7:ac:7d:de:7e:fb:1a:9f:6c:14:70:8b:13:bc: e5:28:37:2b:aa:9a:2d:f1:5c:58:8d:4a:b2:4a:20:63:91:e0: c3:4a:30:a2:91:0a:bb:dd:15:44:6e:61:96:21:16:3e:3f:85: fc:ba:d7:e8:13:76:c5:6a:d9:a3:f7:df:e7:16:71:6c:45:24: 8b:ed:ac:cf:e5:ce:32:05:9c:19:38:31:61:98:18:bf:36:69: 41:9b:57:39:fb:01:f1:95:09:34:85:04:18:5b:e9:cb:3c:f6: c8:92:04:cb:1b:c2:97:5d:07:ee:3a:ab:f0:de:ca:db:ed:22: 16:3c:d1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7S01RGWZ9duFBm6zgQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj ZmVmZDcwHhcNMjUxMjA2MTcwMDM2WhcNMjUxMjA3MTcwMDM2WjAzMTEwLwYDVQQD Eyg1NmEyMDc1MTllMDBlMTQ4OTIzOTVkMGNiOTIxYzE0OWM3Mjc0OThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VIeYTWir8DVDsfHOYpu/jbgW03L cq2+cjsF6JUZN+ySBktL9wDxFRujlIEp49xvAi+/PJ1EM+tcItAgJVl22t5NLudV v+lhaMsqFpappnFCLBnJQTKrgWWywYyAorMZfvXnyxt/XB231E0tsOnpwBex6NP1 Vvf9EtVvlrRs6TTE9zIzh7KqfBf3pcFkKLNWREa2KQQj45S7KeCUY/awQ74z/SPi /sftWxtj/V7FXcS5fJV9vmZEgwGBM1KYs/jtyND+pPclB+2eX+rF2D2HwJ1+CkrJ jvukOcVVmyM1esencQmEfqUxDBQ/rCWS0LjpO1uPYo50ScfN0Oo+uuh2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaiB1GeAOFIkjldDLkhwUnHJ0mOMB8GA1UdIwQY MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5 LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb48uiqFg M8j1N2V3HGTjoWVkravgQurhgF3o3a3HLuUoFE+M+NnR2oZghvQTwBsuqHmHrswk hMe2oAmMGoCWiIH/hMd24okT5qMWL/nfQM5qDa0S93M8LFNN/8HYYrrHfCoNnxNs FfVWDI10gs62wL6cdJRVeA6QXYCzkugIAFduJ/esfd5++xqfbBRwixO85Sg3K6qa LfFcWI1KskogY5Hgw0owopEKu90VRG5hliEWPj+F/LrX6BN2xWrZo/ff5xZxbEUk i+2sz+XOMgWcGTgxYZgYvzZpQZtXOfsB8ZUJNIUEGFvpyzz2yJIEyxvCl10H7jqr 8N7K2+0iFjzRGg== -----END CERTIFICATE-----Generated at Sat Dec 6 23:35:34 2025 by rpki-client