This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json) Hash identifier: cttkSUvNwiV+8kpt2UjtDhdc7WItMBexu5IQSmtwqOQ= Subject key identifier: 0A:09:B4:BB:74:9C:36:D5:E4:3C:F4:4C:EB:82:5D:85:71:29:80:3B Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8 Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8 Certificate serial: 019AF19AD465AC00AFC58905C148777194DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft Manifest number: 0D41 Signing time: Sat 06 Dec 2025 03:00:47 +0000 Manifest this update: Sat 06 Dec 2025 03:00:47 +0000 Manifest next update: Sun 07 Dec 2025 03:00:47 +0000 Files and hashes: 1: D1M0sjr1PH8Yys4-1MS43KjOpQM.roa (hash: 2Q7ZkQbIGE2fBfzNEEGOF12hD07hA4SM+mHj72HM/gU=) 2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: Utk1KVbb4iKXX8PmGQMRFfw3TBbFnE/hvyCVx7aBY5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d4:65:ac:00:af:c5:89:05:c1:48:77:71:94:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8 Validity Not Before: Dec 6 03:00:47 2025 GMT Not After : Dec 7 03:00:47 2025 GMT Subject: CN=0a09b4bb749c36d5e43cf44ceb825d857129803b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0c:72:6b:45:45:72:3c:ac:ee:1d:f0:90:64: 40:45:de:5e:37:13:3d:f3:6b:d7:61:be:d0:14:54: 37:65:2b:8e:84:47:41:a6:02:43:5f:45:72:14:e6: b8:10:21:8a:2f:8a:91:0a:38:04:d4:28:da:b9:30: 5e:d4:ae:4e:b4:57:3c:30:d2:98:d5:ff:69:67:32: 95:9f:17:c1:95:f8:97:2c:62:61:eb:1b:f1:2e:b6: cc:77:d2:0c:91:39:73:9b:5e:a3:1d:f9:cd:0b:21: 98:67:eb:21:db:80:a2:64:28:19:d7:bd:49:98:13: e2:c2:a4:8a:84:1f:ff:4a:e7:37:0e:2a:2c:b2:9d: c1:8a:7d:c2:27:dd:c6:95:96:41:13:a0:9c:64:18: 2f:63:9c:2b:d2:2f:90:f9:6c:e8:3d:c1:a8:69:63: 08:d8:96:3c:37:e3:a8:4c:d4:11:4d:e8:3d:c2:eb: a0:31:1e:6d:9f:05:9a:bc:3f:ca:71:da:74:cd:13: 1d:73:c0:7d:91:f5:5b:39:a4:9a:67:ce:7e:0c:54: 37:85:42:a5:8d:4f:d2:df:c7:ef:e1:94:dc:30:9e: b1:a0:99:a7:b7:e5:18:15:41:d7:94:52:f6:0c:36: 24:0d:64:a2:6e:63:86:38:0a:5f:5c:c8:30:4e:ad: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:B4:BB:74:9C:36:D5:E4:3C:F4:4C:EB:82:5D:85:71:29:80:3B X509v3 Authority Key Identifier: keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d8:89:f2:59:0a:e3:b7:36:38:d7:c5:13:b3:11:ae:0f:9c: 77:cf:fc:58:5f:b9:6d:ff:00:e3:21:fa:57:26:73:7a:6b:94: 69:8c:d1:20:d2:0f:d8:01:c0:5f:cd:5b:e3:57:41:06:a9:1c: b6:51:e1:1e:b0:34:c8:bf:32:a1:81:42:37:31:2a:fd:0b:3b: cd:08:7e:9c:aa:9d:cf:c0:2e:0d:cb:38:72:9d:25:10:1e:f6: 69:75:fa:4e:56:4e:dc:b7:7d:ef:cf:74:94:5b:b2:67:08:3e: 69:07:3a:60:31:7a:1d:d9:34:04:ff:f0:d8:3b:dd:3a:78:38: db:e5:ff:9b:41:3e:ce:bf:f5:d0:e6:bd:0f:17:61:47:fe:b7: 07:6f:64:53:a5:8f:bd:c8:46:f6:d9:74:4e:78:12:a5:22:19: 83:41:fd:14:68:c4:a3:d2:69:45:0b:6c:ee:f6:d1:f4:60:c2: 6f:6d:3b:85:ad:60:a9:2e:97:72:3c:c1:df:d9:e4:72:59:a4: bc:74:35:0b:5a:67:34:f2:27:10:4a:9f:b0:8c:77:6d:1b:b7: 9a:9d:2a:a1:4f:1e:e6:61:5c:ab:01:29:b5:27:c1:1f:1d:67: 10:56:26:c0:45:a9:6b:86:5e:e8:29:da:be:f3:3d:be:63:ac: 49:7c:fc:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtRlrACvxYkFwUh3cZTdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2VlM2MyZWM0YTE5MDI1YzAzOTJhZDFlZTZhNDY0MWJj ZGQwYzgwHhcNMjUxMjA2MDMwMDQ3WhcNMjUxMjA3MDMwMDQ3WjAzMTEwLwYDVQQD EygwYTA5YjRiYjc0OWMzNmQ1ZTQzY2Y0NGNlYjgyNWQ4NTcxMjk4MDNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygxya0VFcjys7h3wkGRARd5eNxM9 82vXYb7QFFQ3ZSuOhEdBpgJDX0VyFOa4ECGKL4qRCjgE1CjauTBe1K5OtFc8MNKY 1f9pZzKVnxfBlfiXLGJh6xvxLrbMd9IMkTlzm16jHfnNCyGYZ+sh24CiZCgZ171J mBPiwqSKhB//Suc3Diossp3Bin3CJ93GlZZBE6CcZBgvY5wr0i+Q+WzoPcGoaWMI 2JY8N+OoTNQRTeg9wuugMR5tnwWavD/Kcdp0zRMdc8B9kfVbOaSaZ85+DFQ3hUKl jU/S38fv4ZTcMJ6xoJmnt+UYFUHXlFL2DDYkDWSibmOGOApfXMgwTq0EMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoJtLt0nDbV5Dz0TOuCXYVxKYA7MB8GA1UdIwQY MBaAFFg+48LsShkCXAOSrR7mpGQbzdDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2Mt MzVjYzIxNGRlYTgxLzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2MtMzVjYzIxNGRlYTgx LzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtiJ8lkK 47c2ONfFE7MRrg+cd8/8WF+5bf8A4yH6VyZzemuUaYzRINIP2AHAX81b41dBBqkc tlHhHrA0yL8yoYFCNzEq/Qs7zQh+nKqdz8AuDcs4cp0lEB72aXX6TlZO3Ld97890 lFuyZwg+aQc6YDF6Hdk0BP/w2DvdOng42+X/m0E+zr/10Oa9DxdhR/63B29kU6WP vchG9tl0TngSpSIZg0H9FGjEo9JpRQts7vbR9GDCb207ha1gqS6XcjzB39nkclmk vHQ1C1pnNPInEEqfsIx3bRu3mp0qoU8e5mFcqwEptSfBHx1nEFYmwEWpa4Ze6Cna vvM9vmOsSXz8DA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:49 2025 by rpki-client