This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft File: WdCj-cNDB7Cls20ubRiZrv57vrQ.mft (raw, json) Hash identifier: 8UK+bxY22eD7avPGbhnL/q9JbJwrwjjWKKAhhi+6m94= Subject key identifier: BC:E0:D9:ED:9A:38:01:66:FC:33:5E:FE:18:97:47:8C:10:34:78:00 Authority key identifier: 59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4 Certificate issuer: /CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4 Certificate serial: 019AF1D1CAC83FEB3E3CBFCE54D7F00E1AFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: WdCj-cNDB7Cls20ubRiZrv57vrQ.crl (hash: bBwRjuT2TN1PmA06qkpcqDS9ZRPWvR+Tf/PRqXsPTOE=) 2: qnyT4xJfydWnP5jn7MY2v2jL3y4.roa (hash: OVzltJuTj7ZgLCXEnxygFrh+27k2M7PI7mlew2jPilY=) 3: rGsU2ZkcNAPfnTYcJ0xOGkEFav8.roa (hash: pob5Gk3ii6Z8pPugpFKGScd6y3cYxp1AE5yYcUpWbig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ca:c8:3f:eb:3e:3c:bf:ce:54:d7:f0:0e:1a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d0a3f9c34307b0a5b36d2e6d1899aefe7bbeb4 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=bce0d9ed9a380166fc335efe1897478c10347800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:17:1a:d9:80:34:98:18:99:e8:1e:5b:2c:c8: cb:08:ca:8e:3a:2e:26:27:8e:4a:87:0b:9b:69:e8: bc:9f:62:c0:9d:7d:65:f0:a5:ae:8b:2a:49:5e:fa: 1e:e4:68:8e:b1:06:a1:eb:6a:02:e9:e4:77:15:69: 64:14:46:cb:c6:dc:f2:b7:46:3c:4b:ad:39:c0:37: 94:1d:67:62:3a:5e:a4:70:78:b1:1e:05:ef:0f:51: 61:26:ac:0a:69:c1:e2:a3:31:78:f8:e4:d1:e8:fd: 64:78:2c:eb:d1:26:df:40:cd:23:fa:ee:37:6f:58: 89:b7:11:23:ae:4b:53:e2:1a:b9:90:84:8c:69:05: 60:94:65:05:39:e0:45:bf:e9:3b:a2:78:70:90:92: e6:34:8c:26:b0:f1:dd:5e:09:91:d6:cd:27:85:72: 02:e4:06:e9:8c:b8:28:94:cf:79:7b:01:c5:14:78: 75:76:1b:a1:77:41:d3:99:93:6f:cd:c3:b0:62:6d: 87:18:b5:92:c0:e5:84:c0:8b:32:a4:52:cc:f6:38: 02:20:35:c4:5c:6c:be:83:a2:c2:69:44:66:d8:e7: e0:f9:4f:53:34:f9:87:b3:6e:8f:1e:41:bd:f2:2e: 11:7c:fc:05:50:d3:5c:2b:7b:8f:04:32:c4:f6:fe: 1d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:D9:ED:9A:38:01:66:FC:33:5E:FE:18:97:47:8C:10:34:78:00 X509v3 Authority Key Identifier: keyid:59:D0:A3:F9:C3:43:07:B0:A5:B3:6D:2E:6D:18:99:AE:FE:7B:BE:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdCj-cNDB7Cls20ubRiZrv57vrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/791c33-a10e-43a9-ac29-e0d13230b9d5/1/WdCj-cNDB7Cls20ubRiZrv57vrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:27:a4:a0:40:9a:c9:cf:f9:4f:b3:37:3f:c8:e3:15:94:48: 09:81:4c:0a:65:3d:e5:1a:41:63:90:d6:0a:a2:43:db:1f:56: e1:77:ee:2d:8d:ed:68:39:66:13:7c:83:56:8c:7e:66:59:d1: 12:86:8f:2c:0e:b0:c1:6a:1d:cc:49:4e:23:74:8c:80:05:8c: dd:05:f0:94:15:91:1d:18:b9:c9:89:19:ff:a6:fd:3e:42:69: ca:9c:d6:f8:08:85:45:c4:1a:50:97:d1:37:36:aa:d4:dd:c8: 72:b4:33:b4:4d:ef:ce:33:61:bc:fc:ee:82:df:d6:d2:ca:18: 5d:a9:71:99:46:61:e9:8e:ea:1f:11:ea:2a:8a:7e:78:6e:54: 94:04:54:3f:59:18:b2:cc:7b:03:82:a8:4b:41:26:9f:eb:c8: 7e:2f:52:7f:b5:19:53:27:d5:d0:3b:ee:98:1e:e3:db:c6:78: c4:60:8a:a3:06:cc:f7:82:8d:5c:d1:04:64:34:d7:e9:28:ad: 6c:96:74:78:05:91:87:f5:59:79:be:05:5a:5b:f8:37:0a:0c: 6a:f5:c2:a7:bb:3d:8a:b1:0d:8c:c5:28:af:f7:84:c5:60:84: 0a:9a:02:3c:f2:68:68:1c:12:6f:0f:7e:e7:1c:48:b9:49:7c: 0e:15:09:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0crIP+s+PL/OVNfwDhr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDBhM2Y5YzM0MzA3YjBhNWIzNmQyZTZkMTg5OWFlZmU3 YmJlYjQwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD EyhiY2UwZDllZDlhMzgwMTY2ZmMzMzVlZmUxODk3NDc4YzEwMzQ3ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxca2YA0mBiZ6B5bLMjLCMqOOi4m J45Khwubaei8n2LAnX1l8KWuiypJXvoe5GiOsQah62oC6eR3FWlkFEbLxtzyt0Y8 S605wDeUHWdiOl6kcHixHgXvD1FhJqwKacHiozF4+OTR6P1keCzr0SbfQM0j+u43 b1iJtxEjrktT4hq5kISMaQVglGUFOeBFv+k7onhwkJLmNIwmsPHdXgmR1s0nhXIC 5AbpjLgolM95ewHFFHh1dhuhd0HTmZNvzcOwYm2HGLWSwOWEwIsypFLM9jgCIDXE XGy+g6LCaURm2Ofg+U9TNPmHs26PHkG98i4RfPwFUNNcK3uPBDLE9v4dFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzg2e2aOAFm/DNe/hiXR4wQNHgAMB8GA1UdIwQY MBaAFFnQo/nDQwewpbNtLm0Yma7+e760MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2RDai1jTkRCN0NsczIwdWJSaVpydjU3dnJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83OTFjMzMtYTEwZS00M2E5LWFjMjkt ZTBkMTMyMzBiOWQ1LzEvV2RDai1jTkRCN0NsczIwdWJSaVpydjU3dnJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83OTFjMzMtYTEwZS00M2E5LWFjMjktZTBkMTMyMzBiOWQ1 LzEvV2RDai1jTkRCN0NsczIwdWJSaVpydjU3dnJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSekoECa yc/5T7M3P8jjFZRICYFMCmU95RpBY5DWCqJD2x9W4XfuLY3taDlmE3yDVox+ZlnR EoaPLA6wwWodzElOI3SMgAWM3QXwlBWRHRi5yYkZ/6b9PkJpypzW+AiFRcQaUJfR Nzaq1N3IcrQztE3vzjNhvPzugt/W0soYXalxmUZh6Y7qHxHqKop+eG5UlARUP1kY ssx7A4KoS0Emn+vIfi9Sf7UZUyfV0DvumB7j28Z4xGCKowbM94KNXNEEZDTX6Sit bJZ0eAWRh/VZeb4FWlv4NwoMavXCp7s9irENjMUor/eExWCECpoCPPJoaBwSbw9+ 5xxIuUl8DhUJnw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:35 2025 by rpki-client