This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft File: wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json) Hash identifier: QG8I9ra9FIip51PHQFEvnqYdMPu2j2HxIFluNblPq58= Subject key identifier: 48:00:8A:7F:D9:55:D5:F7:E5:C3:22:FF:FB:62:61:21:E3:36:EE:FE Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93 Certificate issuer: /CN=c25d43dcde10b923179d5b1bd74ea43acc221093 Certificate serial: 019AF3C08040CBB0B061B3E0DC2CDA2C460E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft Manifest number: 0CD7 Signing time: Sat 06 Dec 2025 13:01:10 +0000 Manifest this update: Sat 06 Dec 2025 13:01:10 +0000 Manifest next update: Sun 07 Dec 2025 13:01:10 +0000 Files and hashes: 1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: kzdVKjyK49N1eHGEtrqGKE6Ilfl/RaZKWWEECTGTSTQ=) 2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:80:40:cb:b0:b0:61:b3:e0:dc:2c:da:2c:46:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093 Validity Not Before: Dec 6 13:01:10 2025 GMT Not After : Dec 7 13:01:10 2025 GMT Subject: CN=48008a7fd955d5f7e5c322fffb626121e336eefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2e:ce:9e:ae:e6:6a:37:ff:88:e1:5a:a9:06: a5:52:a4:ab:f2:4c:f3:79:3f:63:4b:9c:13:3f:21: de:d2:83:b8:53:21:65:72:4b:34:7f:c7:90:22:09: c9:4b:21:3a:2a:33:14:65:ad:3e:de:92:9e:08:a3: f2:47:58:09:c7:5a:8b:61:de:a4:47:98:a8:3e:74: 84:68:53:c1:51:d1:39:f6:18:19:cb:65:4b:9d:67: 8e:26:04:05:8a:b3:88:82:4b:06:63:d3:b4:0b:2a: fb:75:7c:8a:5a:07:55:58:2a:e9:01:a1:d4:7d:20: e3:8c:89:fa:c5:01:49:24:1b:57:59:9c:55:e2:a3: d7:0d:37:b0:23:06:f9:22:8a:d9:8a:36:a0:a4:72: 69:b7:cc:98:94:5e:28:0d:f2:4e:8b:90:8b:a5:04: 5b:96:34:eb:fb:8d:cb:f7:a5:35:40:58:37:04:61: ad:f7:90:52:5f:14:c0:93:e7:a9:d4:cd:7d:23:ba: e5:ec:59:6c:e9:24:6d:eb:db:94:c5:a0:b1:d5:99: 34:cd:52:02:bb:6d:e9:3d:b0:15:e2:6f:da:6b:b9: 69:44:17:de:7c:01:01:61:04:46:4b:35:e8:94:13: 5c:28:d0:5e:85:ba:0d:15:65:5d:da:4c:26:5f:7e: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:00:8A:7F:D9:55:D5:F7:E5:C3:22:FF:FB:62:61:21:E3:36:EE:FE X509v3 Authority Key Identifier: keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a6:7c:12:8d:a0:76:47:62:52:47:42:85:7e:c7:60:55:f4: 1a:45:85:53:40:05:90:74:ce:75:e8:38:3a:c9:0b:d8:f0:27: e5:eb:2b:d6:3e:1e:d1:dc:3b:cb:a9:b6:56:a8:79:05:7a:1d: ba:aa:11:e4:0c:5c:82:d6:15:fa:b9:d2:ed:58:00:c0:7e:70: 64:2f:72:b8:ed:71:99:7c:8b:5f:8d:c8:82:1f:42:6e:59:89: c3:a7:6d:4d:1f:b7:18:4c:47:10:bf:44:9b:3d:12:79:10:c6: 92:9f:d0:fc:f7:6c:34:d9:60:34:d1:4a:d5:9e:d9:ef:f4:74: b9:45:b2:32:3d:0d:cf:62:5c:89:e4:b5:47:af:fb:1e:7e:a9: 49:22:d0:ea:69:84:56:e3:47:5b:26:41:07:a2:6b:9d:82:b2: dd:96:f8:5d:a8:64:9d:40:ff:d3:9e:62:7f:5f:13:94:22:44: a1:2e:02:3a:6d:0c:29:94:51:3e:9a:fc:a9:e5:09:af:b4:15: 9d:21:39:ab:68:c5:8c:9b:d1:88:05:f6:30:63:b8:c6:20:58: 76:50:88:f7:c0:be:00:84:dd:54:e8:b2:fb:c8:d2:d5:20:af: f9:8a:17:d4:88:d5:36:3f:c9:a7:a3:b6:6f:7b:d2:d2:83:ff: 07:63:87:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwIBAy7CwYbPg3CzaLEYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNWQ0M2RjZGUxMGI5MjMxNzlkNWIxYmQ3NGVhNDNhY2My MjEwOTMwHhcNMjUxMjA2MTMwMTEwWhcNMjUxMjA3MTMwMTEwWjAzMTEwLwYDVQQD Eyg0ODAwOGE3ZmQ5NTVkNWY3ZTVjMzIyZmZmYjYyNjEyMWUzMzZlZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy7Onq7majf/iOFaqQalUqSr8kzz eT9jS5wTPyHe0oO4UyFlcks0f8eQIgnJSyE6KjMUZa0+3pKeCKPyR1gJx1qLYd6k R5ioPnSEaFPBUdE59hgZy2VLnWeOJgQFirOIgksGY9O0Cyr7dXyKWgdVWCrpAaHU fSDjjIn6xQFJJBtXWZxV4qPXDTewIwb5IorZijagpHJpt8yYlF4oDfJOi5CLpQRb ljTr+43L96U1QFg3BGGt95BSXxTAk+ep1M19I7rl7Fls6SRt69uUxaCx1Zk0zVIC u23pPbAV4m/aa7lpRBfefAEBYQRGSzXolBNcKNBehboNFWVd2kwmX35WoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgAin/ZVdX35cMi//tiYSHjNu7+MB8GA1UdIwQY MBaAFMJdQ9zeELkjF51bG9dOpDrMIhCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEt NjQ5MzExMTM5ODgzLzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEtNjQ5MzExMTM5ODgz LzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANKZ8Eo2g dkdiUkdChX7HYFX0GkWFU0AFkHTOdeg4OskL2PAn5esr1j4e0dw7y6m2Vqh5BXod uqoR5AxcgtYV+rnS7VgAwH5wZC9yuO1xmXyLX43Igh9CblmJw6dtTR+3GExHEL9E mz0SeRDGkp/Q/PdsNNlgNNFK1Z7Z7/R0uUWyMj0Nz2JcieS1R6/7Hn6pSSLQ6mmE VuNHWyZBB6JrnYKy3Zb4XahknUD/055if18TlCJEoS4COm0MKZRRPpr8qeUJr7QV nSE5q2jFjJvRiAX2MGO4xiBYdlCI98C+AITdVOiy+8jS1SCv+YoX1IjVNj/Jp6O2 b3vS0oP/B2OHMA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:05:07 2025 by rpki-client