This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json) Hash identifier: KUSjdBvRI4lTZewalE8AuK/BkJj5XUH1GhJqlYXNBd8= Subject key identifier: D8:D5:DC:A8:40:13:9F:49:8E:B1:3E:F3:EA:F8:75:BA:D7:F9:1B:DB Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b Certificate serial: 019B3DC7C7A9A51506ABBA870C1FBC242E15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft Manifest number: 0BF3 Signing time: Sat 20 Dec 2025 22:01:01 +0000 Manifest this update: Sat 20 Dec 2025 22:01:01 +0000 Manifest next update: Sun 21 Dec 2025 22:01:01 +0000 Files and hashes: 1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=) 2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: zSl/tCgmmbaHTmNW6dlU+7x561GSke7SvehQ9m69GUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:c7:a9:a5:15:06:ab:ba:87:0c:1f:bc:24:2e:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c29c1007746981fcc408839965b1671c037d121b Validity Not Before: Dec 20 22:01:01 2025 GMT Not After : Dec 21 22:01:01 2025 GMT Subject: CN=d8d5dca840139f498eb13ef3eaf875bad7f91bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:75:c4:b3:1a:3d:6d:3b:b4:da:3a:8f:4f: e0:bf:61:4b:3a:3a:37:21:ba:60:f5:22:aa:03:fc: a6:6c:1d:c4:c4:77:e1:a7:3d:9f:c4:3d:a4:0d:96: 95:66:db:7e:fb:a7:fb:d4:48:a1:ed:e6:f6:92:bd: 4d:36:7e:ae:c3:07:9f:5e:62:08:f1:4f:be:b8:5d: 12:22:c2:fd:af:fb:d4:25:92:f7:0b:ef:09:7b:11: fd:a8:59:2f:02:8a:82:5f:aa:98:10:25:59:ff:83: 07:b8:ef:16:59:19:ca:f0:c3:91:0a:51:a6:10:fc: 9f:4d:c8:67:5b:96:c5:5d:3e:2d:2c:b0:d7:58:d1: 59:d6:e9:34:3c:f0:e7:ae:4e:5b:af:c9:0f:bd:6b: 3a:35:52:42:47:f5:f1:ce:78:99:62:df:00:af:c3: 60:df:f5:ac:7b:fb:08:29:ef:03:b6:89:1d:51:87: 66:4d:4b:2d:35:81:fa:3a:76:3f:7b:13:d4:5e:41: c1:08:1e:be:d5:46:e5:e8:6b:ba:7e:30:c8:f6:c9: 3c:04:f6:95:70:09:72:7f:31:ab:07:ff:36:35:02: c8:0f:27:0d:fe:b2:e9:e1:b6:99:11:85:76:44:e5: 69:09:24:8b:0f:43:28:cc:68:3b:6a:e7:cb:a9:ba: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D5:DC:A8:40:13:9F:49:8E:B1:3E:F3:EA:F8:75:BA:D7:F9:1B:DB X509v3 Authority Key Identifier: keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9a:87:ce:e5:ae:30:c9:36:73:a3:17:20:ab:03:bf:15:67: 1d:83:cd:22:8b:70:ed:9b:0f:1e:d5:c7:b0:3c:25:f5:b7:7a: 42:b9:30:1a:f2:0a:56:40:2b:2b:f5:7a:57:64:0b:29:07:aa: 06:40:34:84:23:42:c1:98:47:ce:82:81:fc:bd:44:91:4f:da: 2e:0a:77:43:99:1b:26:8f:7e:93:af:55:6f:aa:c9:0c:42:01: 51:e5:ed:f5:a5:6f:fe:1d:00:07:08:66:e6:50:f3:eb:b9:be: 85:d7:06:0d:ae:ec:11:7a:fb:8f:59:86:22:35:5b:04:a8:2e: 9e:4e:e8:b9:be:22:d5:5d:12:6a:e1:4c:9c:07:be:ad:84:e0: 2e:de:8e:4a:d8:f9:46:42:7f:82:e0:bf:e6:a1:5b:02:ee:d9: df:66:04:ca:9d:c5:16:8e:ab:bc:1f:04:72:ea:5e:6b:b1:90: 26:80:85:0e:ce:e5:2d:e4:89:d7:2c:c3:92:77:2d:aa:10:36: b3:f6:a6:27:f1:29:75:cc:73:b8:e8:36:29:c0:8c:bf:1c:29: 7b:a8:26:fd:70:c9:51:3d:9e:87:f6:6c:d5:60:15:5d:42:5a: 58:5e:c1:cb:58:3e:4d:ad:f6:1f:21:80:15:34:77:8c:62:84: 75:c3:f6:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8eppRUGq7qHDB+8JC4VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOWMxMDA3NzQ2OTgxZmNjNDA4ODM5OTY1YjE2NzFjMDM3 ZDEyMWIwHhcNMjUxMjIwMjIwMTAxWhcNMjUxMjIxMjIwMTAxWjAzMTEwLwYDVQQD EyhkOGQ1ZGNhODQwMTM5ZjQ5OGViMTNlZjNlYWY4NzViYWQ3ZjkxYmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul91xLMaPW07tNo6j0/gv2FLOjo3 Ibpg9SKqA/ymbB3ExHfhpz2fxD2kDZaVZtt++6f71Eih7eb2kr1NNn6uwwefXmII 8U++uF0SIsL9r/vUJZL3C+8JexH9qFkvAoqCX6qYECVZ/4MHuO8WWRnK8MORClGm EPyfTchnW5bFXT4tLLDXWNFZ1uk0PPDnrk5br8kPvWs6NVJCR/XxzniZYt8Ar8Ng 3/Wse/sIKe8DtokdUYdmTUstNYH6OnY/exPUXkHBCB6+1Ubl6Gu6fjDI9sk8BPaV cAlyfzGrB/82NQLIDycN/rLp4baZEYV2ROVpCSSLD0MozGg7aufLqbqQ1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjV3KhAE59JjrE+8+r4dbrX+RvbMB8GA1UdIwQY MBaAFMKcEAd0aYH8xAiDmWWxZxwDfRIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDkt OGZjOTMwZDg3MDJhLzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDktOGZjOTMwZDg3MDJh LzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5qHzuWu MMk2c6MXIKsDvxVnHYPNIotw7ZsPHtXHsDwl9bd6QrkwGvIKVkArK/V6V2QLKQeq BkA0hCNCwZhHzoKB/L1EkU/aLgp3Q5kbJo9+k69Vb6rJDEIBUeXt9aVv/h0ABwhm 5lDz67m+hdcGDa7sEXr7j1mGIjVbBKgunk7oub4i1V0SauFMnAe+rYTgLt6OStj5 RkJ/guC/5qFbAu7Z32YEyp3FFo6rvB8Ecupea7GQJoCFDs7lLeSJ1yzDknctqhA2 s/amJ/EpdcxzuOg2KcCMvxwpe6gm/XDJUT2eh/Zs1WAVXUJaWF7By1g+Ta32HyGA FTR3jGKEdcP2cQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:18:50 2025 by rpki-client