This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft File: wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft (raw, json) Hash identifier: nRbzBYe7EQ/EHsklnNnfEV+xjK9DeZCvnljg37FoRCw= Subject key identifier: 41:61:4F:E2:5B:2F:E1:6B:0E:14:52:26:91:4D:00:8C:66:83:A4:36 Authority key identifier: C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32 Certificate issuer: /CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32 Certificate serial: 019AF5E5DA64B9DA735FB9F90B2BDB04658F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft Manifest number: 1037 Signing time: Sat 06 Dec 2025 23:01:12 +0000 Manifest this update: Sat 06 Dec 2025 23:01:12 +0000 Manifest next update: Sun 07 Dec 2025 23:01:12 +0000 Files and hashes: 1: T_9TOa_stF5E9eIWRjxCGlAnn6k.roa (hash: 4V/y6Lec10YacV5wmtQBGvh+cufcrshrFw6PyKn/laI=) 2: wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl (hash: ZTBuy6hNuUh94MZ5giQ6AoclOx3eCqc3X94FSFb1Rgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:da:64:b9:da:73:5f:b9:f9:0b:2b:db:04:65:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c07750b83111d4171bbf55ca02322c1a0dc0ac32 Validity Not Before: Dec 6 23:01:12 2025 GMT Not After : Dec 7 23:01:12 2025 GMT Subject: CN=41614fe25b2fe16b0e145226914d008c6683a436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7a:ee:42:f6:97:59:75:7d:8e:37:6c:57:91: 36:5c:53:a4:5f:23:d9:55:bf:8d:9d:6c:77:07:80: b9:4f:ca:fa:b5:9d:b7:d5:aa:88:ee:79:ba:1d:df: 9f:f0:da:da:d6:67:4d:95:7d:23:98:88:0f:c9:96: 48:6a:f7:a1:c3:e1:6a:0c:f3:21:c0:3d:f6:82:66: 56:8a:15:d4:f4:26:d8:be:4b:a3:97:8a:17:b8:38: c5:ee:90:aa:20:15:95:86:15:be:f6:0f:1b:18:3f: d5:d5:19:7b:4e:ac:95:15:52:c9:be:e4:ff:2b:a9: b4:d1:76:17:55:eb:61:9a:fa:88:65:8f:1b:4e:ad: a8:8d:68:fc:88:4b:de:1c:7a:43:66:fa:7d:30:b8: e4:c6:fe:1a:03:f0:b6:9b:d0:d9:24:42:5c:2a:65: 8d:c9:23:0f:96:79:b4:87:25:3e:44:97:e3:6a:b8: 57:8b:02:84:aa:84:68:d9:a0:a1:a0:53:1f:ca:ba: 1c:30:f9:c0:8a:64:dc:4d:57:09:e1:04:8b:02:1a: f1:99:b6:b7:dc:ec:9c:58:b9:76:4a:be:d3:5d:3c: 0d:d1:53:88:25:a4:29:96:08:3b:4e:73:0a:44:5f: ef:52:a8:c5:19:1d:20:a8:ae:e6:35:4e:26:1a:e9: 56:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:4F:E2:5B:2F:E1:6B:0E:14:52:26:91:4D:00:8C:66:83:A4:36 X509v3 Authority Key Identifier: keyid:C0:77:50:B8:31:11:D4:17:1B:BF:55:CA:02:32:2C:1A:0D:C0:AC:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHdQuDER1Bcbv1XKAjIsGg3ArDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/be9311-66d8-4c19-8267-3c529bf62e54/1/wHdQuDER1Bcbv1XKAjIsGg3ArDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:96:70:eb:48:be:f5:d0:9f:46:17:43:6e:e8:fe:dc:02:f0: 93:b1:4f:7a:7b:bd:60:e7:90:ba:c4:e6:76:43:d4:21:1c:db: ae:82:e5:d1:dc:6b:78:21:a8:32:39:99:af:e9:ac:28:8c:ad: ed:a6:85:1b:af:c7:ee:30:b5:a6:f2:94:b6:63:22:ce:24:c8: 92:f0:97:19:bf:d0:e2:08:b4:3c:4f:3d:4f:5e:d8:32:ab:fc: e8:d0:e5:f5:ee:b6:62:1a:55:50:b9:dd:0d:25:e3:39:c1:89: 4d:18:10:b2:7e:10:33:86:c2:e6:74:36:85:38:07:e5:ce:8c: 64:e6:47:21:65:47:7a:44:7c:de:85:bb:ff:21:29:34:6a:df: 60:f1:a1:9e:b1:1f:0d:17:5b:09:4a:f2:f9:fd:92:a3:f1:58: 14:06:5b:aa:2a:3a:0e:6e:ae:ad:e1:17:1a:65:29:b6:da:c3: 2d:02:ca:f6:7a:98:22:b9:94:6b:ee:2a:e7:da:b7:35:d0:1c: b7:5a:fa:1a:4f:6d:c0:cc:2a:d7:f5:1d:c0:11:17:0d:8a:11: 97:4c:0c:6e:6f:44:0e:93:37:bd:ac:19:a5:d6:cd:45:d2:2c: 35:37:ad:0c:fd:1f:b5:02:54:4f:9e:fc:ec:3a:75:b2:89:4d: 08:a4:de:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15dpkudpzX7n5CyvbBGWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzc1MGI4MzExMWQ0MTcxYmJmNTVjYTAyMzIyYzFhMGRj MGFjMzIwHhcNMjUxMjA2MjMwMTEyWhcNMjUxMjA3MjMwMTEyWjAzMTEwLwYDVQQD Eyg0MTYxNGZlMjViMmZlMTZiMGUxNDUyMjY5MTRkMDA4YzY2ODNhNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHruQvaXWXV9jjdsV5E2XFOkXyPZ Vb+NnWx3B4C5T8r6tZ231aqI7nm6Hd+f8Nra1mdNlX0jmIgPyZZIavehw+FqDPMh wD32gmZWihXU9CbYvkujl4oXuDjF7pCqIBWVhhW+9g8bGD/V1Rl7TqyVFVLJvuT/ K6m00XYXVethmvqIZY8bTq2ojWj8iEveHHpDZvp9MLjkxv4aA/C2m9DZJEJcKmWN ySMPlnm0hyU+RJfjarhXiwKEqoRo2aChoFMfyrocMPnAimTcTVcJ4QSLAhrxmba3 3OycWLl2Sr7TXTwN0VOIJaQplgg7TnMKRF/vUqjFGR0gqK7mNU4mGulWiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFhT+JbL+FrDhRSJpFNAIxmg6Q2MB8GA1UdIwQY MBaAFMB3ULgxEdQXG79VygIyLBoNwKwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjct M2M1MjliZjYyZTU0LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iZTkzMTEtNjZkOC00YzE5LTgyNjctM2M1MjliZjYyZTU0 LzEvd0hkUXVERVIxQmNidjFYS0FqSXNHZzNBckRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAZZw60i+ 9dCfRhdDbuj+3ALwk7FPenu9YOeQusTmdkPUIRzbroLl0dxreCGoMjmZr+msKIyt 7aaFG6/H7jC1pvKUtmMiziTIkvCXGb/Q4gi0PE89T17YMqv86NDl9e62YhpVULnd DSXjOcGJTRgQsn4QM4bC5nQ2hTgH5c6MZOZHIWVHekR83oW7/yEpNGrfYPGhnrEf DRdbCUry+f2So/FYFAZbqio6Dm6ureEXGmUpttrDLQLK9nqYIrmUa+4q59q3NdAc t1r6Gk9twMwq1/UdwBEXDYoRl0wMbm9EDpM3vawZpdbNRdIsNTetDP0ftQJUT578 7Dp1solNCKTeUA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:26 2025 by rpki-client