This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json) Hash identifier: IwOKAKW20ibW7A+0bGIac/orxTfE2p+IpiQY1mXrz1k= Subject key identifier: 3D:28:BB:25:F9:96:7A:1C:09:89:A2:86:4C:D4:9E:E5:95:6B:F1:99 Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d Certificate serial: 019AF23FEF7AFF9CCD02329310EA59A634EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft Manifest number: 03D7 Signing time: Sat 06 Dec 2025 06:01:07 +0000 Manifest this update: Sat 06 Dec 2025 06:01:07 +0000 Manifest next update: Sun 07 Dec 2025 06:01:07 +0000 Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=) 2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: gyp+OtJK6s2eIHPt1JknnhQt1Ijy3XgRxvGEq4ZLAx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ef:7a:ff:9c:cd:02:32:93:10:ea:59:a6:34:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d Validity Not Before: Dec 6 06:01:07 2025 GMT Not After : Dec 7 06:01:07 2025 GMT Subject: CN=3d28bb25f9967a1c0989a2864cd49ee5956bf199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:44:4e:28:50:44:b1:f5:bb:f2:80:98:fd:4b: 4e:ca:3b:f9:0e:33:1c:38:13:8d:d7:ca:80:80:1b: 76:6e:46:d8:62:46:a6:91:6c:f6:89:25:5c:a6:a9: 32:4c:04:35:6b:d4:be:d4:f6:fa:95:fc:10:42:7e: 89:b8:cc:d6:5f:91:aa:c1:31:ae:26:62:1c:24:0e: be:b2:b6:6f:2c:22:ed:de:4f:15:ae:4d:ca:ef:e2: b7:93:dd:c2:60:3d:14:a8:12:b6:fd:10:34:7e:e2: 36:b2:ae:25:af:a7:7b:00:00:bd:b8:5e:4e:bd:8c: de:51:b1:9a:d6:60:54:ea:26:82:06:85:42:08:d0: 46:71:6d:36:b9:e2:20:9a:4d:13:30:cd:72:85:61: 83:98:04:38:d7:2f:2c:ff:eb:ef:3f:5d:85:47:5d: d5:89:91:c6:d5:3b:be:4b:c4:4c:84:0c:6e:e7:b4: 93:9e:0c:94:2d:ce:d4:5b:7e:bd:9c:83:97:4c:f6: af:41:69:cf:1c:43:5f:e5:e0:49:61:8f:32:43:0e: 88:fb:1e:9e:c5:e8:37:fe:02:87:cd:0d:e0:47:5e: a6:21:a3:4a:55:dc:07:18:31:ba:43:05:40:0f:df: 9f:48:2b:f1:85:75:1e:db:fb:4c:44:d4:82:88:fc: 2f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:28:BB:25:F9:96:7A:1C:09:89:A2:86:4C:D4:9E:E5:95:6B:F1:99 X509v3 Authority Key Identifier: keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:45:e5:5b:28:16:87:6b:8c:76:84:94:26:4c:14:95:39:d9: 36:c5:64:51:ff:cf:82:9e:e4:8f:9f:c7:96:ff:92:43:c2:ee: 24:8b:a6:58:f9:1f:8c:52:d7:9e:7a:d4:d9:85:61:62:87:32: b5:85:e1:3a:78:54:74:1b:3f:6b:47:c9:a6:11:5c:bf:84:bf: c1:5d:a8:d6:b6:43:82:ac:b9:73:ce:11:61:ff:16:01:5e:ff: 9f:28:c0:4b:93:bd:fa:da:08:d6:12:74:43:04:b7:d8:f9:3b: 7f:78:b3:c6:c9:1e:10:c6:2d:79:ba:50:f0:e7:66:50:b7:8c: be:e7:d8:58:1b:7c:70:19:64:a1:26:4d:bd:8e:00:ce:fb:d6: 70:0f:61:12:55:71:6d:de:13:1d:a1:1d:f5:47:2d:7f:5d:da: d4:a0:b1:a9:00:70:34:82:7f:4e:e6:ae:ed:77:bd:c2:d9:23: d7:f6:a0:ec:6d:a5:00:98:ba:11:78:70:df:20:95:73:10:a8: 92:a2:24:dc:72:02:96:81:76:83:64:f9:8f:c7:e8:f1:b9:37: 72:b7:bc:26:92:4d:90:8a:96:4a:88:8b:2f:45:8e:1b:5a:ac: ab:ec:27:e8:07:a1:d8:e5:e8:49:2d:e1:94:c1:10:fe:5b:7c: ef:fd:c9:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+96/5zNAjKTEOpZpjTsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz YjE3NmQwHhcNMjUxMjA2MDYwMTA3WhcNMjUxMjA3MDYwMTA3WjAzMTEwLwYDVQQD EygzZDI4YmIyNWY5OTY3YTFjMDk4OWEyODY0Y2Q0OWVlNTk1NmJmMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EROKFBEsfW78oCY/UtOyjv5DjMc OBON18qAgBt2bkbYYkamkWz2iSVcpqkyTAQ1a9S+1Pb6lfwQQn6JuMzWX5GqwTGu JmIcJA6+srZvLCLt3k8Vrk3K7+K3k93CYD0UqBK2/RA0fuI2sq4lr6d7AAC9uF5O vYzeUbGa1mBU6iaCBoVCCNBGcW02ueIgmk0TMM1yhWGDmAQ41y8s/+vvP12FR13V iZHG1Tu+S8RMhAxu57STngyULc7UW369nIOXTPavQWnPHENf5eBJYY8yQw6I+x6e xeg3/gKHzQ3gR16mIaNKVdwHGDG6QwVAD9+fSCvxhXUe2/tMRNSCiPwvsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0ouyX5lnocCYmihkzUnuWVa/GZMB8GA1UdIwQY MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt NDRkMGQwODkxOTg5LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5 LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEEXlWygW h2uMdoSUJkwUlTnZNsVkUf/Pgp7kj5/Hlv+SQ8LuJIumWPkfjFLXnnrU2YVhYocy tYXhOnhUdBs/a0fJphFcv4S/wV2o1rZDgqy5c84RYf8WAV7/nyjAS5O9+toI1hJ0 QwS32Pk7f3izxskeEMYtebpQ8OdmULeMvufYWBt8cBlkoSZNvY4AzvvWcA9hElVx bd4THaEd9Uctf13a1KCxqQBwNIJ/Tuau7Xe9wtkj1/ag7G2lAJi6EXhw3yCVcxCo kqIk3HICloF2g2T5j8fo8bk3cre8JpJNkIqWSoiLL0WOG1qsq+wn6Aeh2OXoSS3h lMEQ/lt87/3JZA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:51:55 2025 by rpki-client