This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft File: Wddq-QkdoVgbul7BPl29tzYtnQ8.mft (raw, json) Hash identifier: dxWVbBAHZIAqE67tDSZN4F48fkQPoZTXC1K37MaaURI= Subject key identifier: 93:67:D9:7A:6E:39:CF:0E:2B:68:1B:99:A3:72:EC:F9:F8:F6:1C:C3 Authority key identifier: 59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F Certificate issuer: /CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f Certificate serial: 019AF577CCA749648B55DF2B340A4049B488 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft Manifest number: 11F0 Signing time: Sat 06 Dec 2025 21:01:00 +0000 Manifest this update: Sat 06 Dec 2025 21:01:00 +0000 Manifest next update: Sun 07 Dec 2025 21:01:00 +0000 Files and hashes: 1: Wddq-QkdoVgbul7BPl29tzYtnQ8.crl (hash: q/ouGOu82WWTvjQKw+wZ4dpsb5kUe5t+D62eVIGET/E=) 2: WxX1Hu2E5PBSUGmsXjK9hC9MNwk.roa (hash: yTqA3ZGTODQnxMnTADEBGt1VqhX3aMRxsME8/St0wzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:cc:a7:49:64:8b:55:df:2b:34:0a:40:49:b4:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d76af9091da1581bba5ec13e5dbdb7362d9d0f Validity Not Before: Dec 6 21:01:00 2025 GMT Not After : Dec 7 21:01:00 2025 GMT Subject: CN=9367d97a6e39cf0e2b681b99a372ecf9f8f61cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:b0:06:e1:43:6c:eb:3e:24:31:10:4c:8d: 51:34:72:a3:7c:c1:2e:ed:75:e4:c9:f4:57:c0:7d: b4:bd:19:41:36:c4:40:0e:2e:94:dc:77:d7:7b:8a: 22:e3:a8:6f:b0:db:3a:2d:56:42:fd:62:89:83:cf: 02:08:c5:5c:ed:30:5a:f0:52:79:4e:d1:e9:4b:69: 72:fe:5f:48:84:39:c9:3d:ef:2c:8c:8b:2d:42:23: e5:a6:fa:8d:af:e1:cc:4d:18:65:c3:03:7f:11:ce: 51:ab:32:4b:4c:8b:53:4d:46:af:24:1f:30:1e:8f: a5:b3:5f:7d:99:23:52:02:e6:3a:82:cb:e3:88:02: cd:cf:fc:f0:da:38:18:c7:c4:6f:c1:78:3e:fc:69: 8d:ec:ef:b3:a6:81:eb:c7:fe:3a:67:86:b5:c8:89: 96:15:f2:71:b2:0e:bb:7b:7a:a7:28:fa:80:59:6f: 13:d5:a5:05:37:ef:75:cd:5b:af:9a:0e:2d:27:48: 3e:d4:51:6d:b5:7e:82:e1:4c:63:f8:a2:80:e0:46: 21:56:50:35:12:04:3c:60:18:09:95:ea:28:03:68: 02:51:14:da:d4:65:58:a8:37:a2:c4:c2:56:83:a7: c6:a3:4a:40:6d:ff:09:6e:9a:2c:d4:4e:29:ac:e1: c6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:67:D9:7A:6E:39:CF:0E:2B:68:1B:99:A3:72:EC:F9:F8:F6:1C:C3 X509v3 Authority Key Identifier: keyid:59:D7:6A:F9:09:1D:A1:58:1B:BA:5E:C1:3E:5D:BD:B7:36:2D:9D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wddq-QkdoVgbul7BPl29tzYtnQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/08d1cc-6373-4840-b48f-0aa08edb9063/1/Wddq-QkdoVgbul7BPl29tzYtnQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:38:53:dc:65:f5:0c:ed:16:59:fb:d8:b2:14:03:a6:32:a0: 46:15:1e:fe:2f:e0:2a:0c:dd:8d:43:6d:90:21:fa:77:bb:78: 9c:eb:02:f4:64:fa:4a:06:e5:b2:55:b8:c1:11:06:e2:cb:f7: 49:e0:79:35:06:ec:27:dc:06:ac:7d:4c:64:91:f8:3f:51:4c: 7c:b6:12:85:c0:d7:fb:56:de:0e:66:6e:fa:2a:a8:7c:8d:fc: 31:0f:99:ff:76:bc:d4:22:85:eb:54:4f:6c:51:34:f7:e1:70: ef:69:f3:c5:71:13:e5:9a:8f:aa:3b:85:35:de:2e:ba:4a:c5: 0f:de:46:d4:0e:9e:2c:62:b4:6d:fd:fb:55:a1:72:ed:f3:38: 81:96:ab:a0:97:fa:18:43:ff:69:60:4a:28:ff:b2:0b:60:34: 39:cb:4a:94:3a:01:c8:66:9c:ff:10:8c:5b:c1:53:b1:fd:90: 7d:2a:8f:5e:54:32:66:57:09:b8:21:b4:53:fe:f5:7e:18:ac: 6f:ca:f5:0a:2c:e2:49:ec:e4:5e:25:37:f6:ca:64:87:bb:8f: 23:4f:fc:64:03:44:95:16:f7:d8:ed:08:27:db:e2:01:df:90: 81:ac:b2:25:2e:d8:5b:3a:a4:ed:4d:90:8e:6c:7d:f9:6b:f7: 8f:f5:6f:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8ynSWSLVd8rNApASbSIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDc2YWY5MDkxZGExNTgxYmJhNWVjMTNlNWRiZGI3MzYy ZDlkMGYwHhcNMjUxMjA2MjEwMTAwWhcNMjUxMjA3MjEwMTAwWjAzMTEwLwYDVQQD Eyg5MzY3ZDk3YTZlMzljZjBlMmI2ODFiOTlhMzcyZWNmOWY4ZjYxY2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslOwBuFDbOs+JDEQTI1RNHKjfMEu 7XXkyfRXwH20vRlBNsRADi6U3HfXe4oi46hvsNs6LVZC/WKJg88CCMVc7TBa8FJ5 TtHpS2ly/l9IhDnJPe8sjIstQiPlpvqNr+HMTRhlwwN/Ec5RqzJLTItTTUavJB8w Ho+ls199mSNSAuY6gsvjiALNz/zw2jgYx8RvwXg+/GmN7O+zpoHrx/46Z4a1yImW FfJxsg67e3qnKPqAWW8T1aUFN+91zVuvmg4tJ0g+1FFttX6C4Uxj+KKA4EYhVlA1 EgQ8YBgJleooA2gCURTa1GVYqDeixMJWg6fGo0pAbf8Jbpos1E4prOHGVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNn2XpuOc8OK2gbmaNy7Pn49hzDMB8GA1UdIwQY MBaAFFnXavkJHaFYG7pewT5dvbc2LZ0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2RkcS1Ra2RvVmdidWw3QlBsMjl0ell0blE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wOGQxY2MtNjM3My00ODQwLWI0OGYt MGFhMDhlZGI5MDYzLzEvV2RkcS1Ra2RvVmdidWw3QlBsMjl0ell0blE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8wOGQxY2MtNjM3My00ODQwLWI0OGYtMGFhMDhlZGI5MDYz LzEvV2RkcS1Ra2RvVmdidWw3QlBsMjl0ell0blE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDhT3GX1 DO0WWfvYshQDpjKgRhUe/i/gKgzdjUNtkCH6d7t4nOsC9GT6SgblslW4wREG4sv3 SeB5NQbsJ9wGrH1MZJH4P1FMfLYShcDX+1beDmZu+iqofI38MQ+Z/3a81CKF61RP bFE09+Fw72nzxXET5ZqPqjuFNd4uukrFD95G1A6eLGK0bf37VaFy7fM4gZaroJf6 GEP/aWBKKP+yC2A0OctKlDoByGac/xCMW8FTsf2QfSqPXlQyZlcJuCG0U/71fhis b8r1CiziSezkXiU39spkh7uPI0/8ZANElRb32O0IJ9viAd+QgayyJS7YWzqk7U2Q jmx9+Wv3j/VvbQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:46:19 2025 by rpki-client