This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft File: wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json) Hash identifier: NL2l6m5W5LO1TzkkMqMdWRJDssJcprrwEoEt+ILm/fY= Subject key identifier: 28:8D:DE:44:B0:A4:FA:35:DD:66:1C:CC:13:84:4B:F4:B6:C0:49:67 Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 Certificate issuer: /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Certificate serial: 019AF3895E22A44BF74792437774748CC27C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft Manifest number: 11B1 Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: 1-f9PBVCsqBgm5V29oKXRRYWkevY.roa (hash: 7Ql3JH1RgsBJ7ZK4VNDw9mOs8UhnRqnrPre6nqQT+h0=) 2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: uTz/8mMCFb72sNbyoQIWx34It1BTqsIOHi7/H5NPKsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5e:22:a4:4b:f7:47:92:43:77:74:74:8c:c2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=288dde44b0a4fa35dd661ccc13844bf4b6c04967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7b:2e:a7:5b:73:d1:2a:9d:0a:7a:1d:77:95: 9d:5a:09:5e:c9:6f:37:32:d6:0a:7b:76:ae:1b:a8: 1b:28:48:f3:5f:8d:7e:24:6f:e4:4b:bc:1f:90:78: 4b:07:69:4c:90:92:c1:78:ce:15:d0:9b:7d:43:f2: a3:56:e1:c5:39:24:46:19:6f:bf:d5:7d:3e:eb:0c: 7c:a2:dd:e8:8d:d8:fa:8f:4b:8e:32:66:7f:12:9d: 7f:09:52:5a:47:f7:67:3f:a0:53:0c:5c:d1:06:37: fa:2a:47:09:5b:92:3f:d9:90:c2:aa:15:03:3c:6b: 05:3e:24:d1:81:ff:32:8e:b8:df:5e:ff:74:3a:9d: e5:98:bb:bd:0a:1e:95:ea:3b:fb:8c:34:bc:31:7d: 53:88:a0:a6:fa:5d:c9:54:3f:02:60:8e:10:91:54: 3b:3c:9b:ab:36:9c:73:dd:65:83:f1:ca:72:9b:cf: 4d:68:51:ae:0c:79:5b:a5:f1:29:8c:a1:ac:f4:8e: 03:75:20:76:e6:bf:ab:b7:9c:1e:d3:da:54:b2:f7: 65:ed:ad:0c:ac:12:cd:d8:66:8b:46:40:3e:c4:f1: 00:2f:f7:36:8b:cd:9a:aa:80:46:02:38:d6:7e:2c: 01:58:09:1a:51:b7:d5:da:ad:38:50:c8:c6:30:b2: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:8D:DE:44:B0:A4:FA:35:DD:66:1C:CC:13:84:4B:F4:B6:C0:49:67 X509v3 Authority Key Identifier: keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:53:60:08:48:5b:00:e5:83:9d:6e:12:37:b1:9a:db:13:f5: c3:0c:1c:31:62:17:94:51:42:ca:ce:9b:33:3a:d4:c3:91:fd: 3d:b0:c9:77:2b:3a:15:b1:01:da:c5:68:ad:4e:55:4d:6e:00: 16:61:75:ab:ea:d9:8f:6f:08:60:47:db:bc:9a:41:6c:2a:05: e6:a0:9a:0d:46:f2:4b:53:58:14:e1:9f:09:2b:80:88:e2:85: f6:ff:aa:9d:1b:58:d4:18:66:2f:94:e2:fa:73:f5:5c:6f:45: 2f:e4:ac:91:a1:f0:c5:5f:e6:57:69:4b:ff:5b:53:c9:ed:8d: 36:f8:19:f1:3a:95:a1:3a:7e:4b:0d:c5:79:4f:eb:3a:2d:c5: a4:ae:15:1b:32:25:b3:28:ca:a7:fb:fb:7b:73:cf:9d:df:b4: da:b2:37:aa:0d:cb:4d:e1:bf:71:18:59:1f:6f:aa:b0:dc:9f: 26:1f:ef:70:aa:e2:4a:78:57:18:cd:82:fb:c0:f3:86:79:b2: b7:a1:cf:ef:4b:76:95:1a:f2:bc:7c:64:22:7d:53:b3:e6:1a: 2a:63:85:05:0b:02:1a:82:47:14:8f:22:b7:eb:58:0a:88:28: 98:80:91:b5:3e:62:83:f7:27:1d:5b:f4:a2:c9:08:1f:ff:c4: 25:d2:4e:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV4ipEv3R5JDd3R0jMJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjY5ZDJmNDc0NDc0ZGJiNTdmNmJlYzhjMmQ2NWQ1ZTBj Mjk2NjEwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD EygyODhkZGU0NGIwYTRmYTM1ZGQ2NjFjY2MxMzg0NGJmNGI2YzA0OTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnsup1tz0SqdCnodd5WdWgleyW83 MtYKe3auG6gbKEjzX41+JG/kS7wfkHhLB2lMkJLBeM4V0Jt9Q/KjVuHFOSRGGW+/ 1X0+6wx8ot3ojdj6j0uOMmZ/Ep1/CVJaR/dnP6BTDFzRBjf6KkcJW5I/2ZDCqhUD PGsFPiTRgf8yjrjfXv90Op3lmLu9Ch6V6jv7jDS8MX1TiKCm+l3JVD8CYI4QkVQ7 PJurNpxz3WWD8cpym89NaFGuDHlbpfEpjKGs9I4DdSB25r+rt5we09pUsvdl7a0M rBLN2GaLRkA+xPEAL/c2i82aqoBGAjjWfiwBWAkaUbfV2q04UMjGMLJiHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiN3kSwpPo13WYczBOES/S2wElnMB8GA1UdIwQY MBaAFMD2nS9HRHTbtX9r7IwtZdXgwpZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUt MjU5MDRiYTlhMzU1LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUtMjU5MDRiYTlhMzU1 LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglNgCEhb AOWDnW4SN7Ga2xP1wwwcMWIXlFFCys6bMzrUw5H9PbDJdys6FbEB2sVorU5VTW4A FmF1q+rZj28IYEfbvJpBbCoF5qCaDUbyS1NYFOGfCSuAiOKF9v+qnRtY1BhmL5Ti +nP1XG9FL+SskaHwxV/mV2lL/1tTye2NNvgZ8TqVoTp+Sw3FeU/rOi3FpK4VGzIl syjKp/v7e3PPnd+02rI3qg3LTeG/cRhZH2+qsNyfJh/vcKriSnhXGM2C+8Dzhnmy t6HP70t2lRryvHxkIn1Ts+YaKmOFBQsCGoJHFI8it+tYCogomICRtT5ig/cnHVv0 oskIH//EJdJOqw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:03:13 2025 by rpki-client