This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft File: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft (raw, json) Hash identifier: QK5SN91Q3XvUqc2LB7Er4pT/ZzwJ4cLVtuy/CTiv1SU= Subject key identifier: EF:DC:14:0D:FD:EE:B2:83:6F:A0:41:96:6A:E0:06:56:F1:10:2E:29 Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8 Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8 Certificate serial: 019AF3BFE61787A24FC5261388470B7173B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft Manifest number: 01C4 Signing time: Sat 06 Dec 2025 13:00:30 +0000 Manifest this update: Sat 06 Dec 2025 13:00:30 +0000 Manifest next update: Sun 07 Dec 2025 13:00:30 +0000 Files and hashes: 1: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl (hash: xAmcF6ssXZRf3f/D8NkA2Lcy+EV+hblMDUVZDQTZggY=) 2: od-eaeRv-_TtiWVxF1AsQmL-p6M.roa (hash: xxM+CC0rClETGMS9YhA+QBIZ3skgkCaIksfRH7MZZ+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e6:17:87:a2:4f:c5:26:13:88:47:0b:71:73:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8 Validity Not Before: Dec 6 13:00:30 2025 GMT Not After : Dec 7 13:00:30 2025 GMT Subject: CN=efdc140dfdeeb2836fa041966ae00656f1102e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:ba:78:f4:75:b5:06:e3:0c:1f:fa:b3:7e: 54:d6:0a:93:9b:59:39:cb:80:0c:c7:10:9a:40:ea: 2a:9d:e8:88:81:c6:81:16:38:22:ec:72:09:73:b2: 13:7d:9e:40:32:c2:d0:a4:18:d3:7f:7b:ca:17:84: cd:d9:b4:f0:12:33:fa:e8:b0:43:cc:16:2f:e2:35: 1a:ee:c9:16:a7:37:ce:25:d9:88:52:09:28:80:70: 59:9f:0d:75:02:35:80:2a:27:c2:3c:65:2d:2d:04: 83:f8:3c:14:11:ae:29:eb:38:d9:19:f4:1b:ff:a7: c6:a5:71:84:3d:b1:76:d8:d3:39:8f:08:71:6c:be: ce:82:bd:58:09:9c:43:41:16:08:50:ac:0e:6d:00: a1:6b:a6:e3:58:15:af:52:d7:5d:89:e4:d6:50:58: f7:c0:47:db:c5:5a:ed:07:d5:f7:71:90:80:ac:12: 21:c5:25:ce:01:47:2f:2f:98:8d:65:3e:17:57:a5: 34:18:ce:3a:b3:bf:d6:43:c7:f3:07:72:cd:e9:47: 3c:1d:c7:d1:bc:22:cb:a2:43:6c:f9:00:ad:ce:be: 1b:49:f7:b3:a9:37:e8:d0:e2:22:d9:0c:be:66:3a: 93:25:79:47:47:0d:be:28:7d:a0:d2:cb:be:82:eb: 66:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DC:14:0D:FD:EE:B2:83:6F:A0:41:96:6A:E0:06:56:F1:10:2E:29 X509v3 Authority Key Identifier: keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3e:f6:b2:3c:5f:0b:61:94:fd:0e:d8:bc:a5:0b:ca:22:53: bc:cd:8d:fc:c9:03:4d:57:58:76:80:92:aa:b8:b2:43:be:03: 61:df:f0:04:b3:1d:ca:40:b4:c8:a6:a5:f7:55:17:45:bb:14: f4:9f:b6:bd:a4:c6:34:54:95:a4:a0:af:9d:75:db:c6:42:99: b0:7a:21:75:98:17:7b:af:f0:22:7c:38:08:9c:e8:79:29:94: d3:7c:19:59:e3:59:b8:1a:10:c7:fa:a6:98:e5:5a:5c:eb:d6: d7:da:3a:7d:db:ab:ce:8c:9a:2f:b6:49:94:fa:d3:2c:63:1e: 02:33:11:0e:87:4b:88:d3:fe:03:02:25:ad:7f:d9:6c:18:e3: 8a:fa:3d:cd:9c:da:d6:a2:5f:ca:f6:99:d1:4a:d4:b9:99:1e: a6:97:d3:dd:a4:29:26:54:b1:4a:5f:97:12:9f:0d:95:d3:ea: 5b:46:55:67:9d:ef:5e:b7:d5:67:03:c6:28:1c:d2:36:66:7f: 2f:b9:b5:e1:2d:c4:f7:b8:68:b6:ac:0b:ba:38:17:4f:21:4a: f9:c3:9c:a0:62:e7:fc:66:e8:5a:d5:33:7f:df:8e:cd:17:2f: f8:5e:8a:b6:e9:c1:ce:9b:d2:57:72:cb:71:c9:d4:ed:8d:fc: 9c:a4:74:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+YXh6JPxSYTiEcLcXO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQwNTc0NmY5YTI4ODc1NmMzMGFmYThjNDU5OTViNzc1 MDU1ZjgwHhcNMjUxMjA2MTMwMDMwWhcNMjUxMjA3MTMwMDMwWjAzMTEwLwYDVQQD EyhlZmRjMTQwZGZkZWViMjgzNmZhMDQxOTY2YWUwMDY1NmYxMTAyZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpK6ePR1tQbjDB/6s35U1gqTm1k5 y4AMxxCaQOoqneiIgcaBFjgi7HIJc7ITfZ5AMsLQpBjTf3vKF4TN2bTwEjP66LBD zBYv4jUa7skWpzfOJdmIUgkogHBZnw11AjWAKifCPGUtLQSD+DwUEa4p6zjZGfQb /6fGpXGEPbF22NM5jwhxbL7Ogr1YCZxDQRYIUKwObQCha6bjWBWvUtddieTWUFj3 wEfbxVrtB9X3cZCArBIhxSXOAUcvL5iNZT4XV6U0GM46s7/WQ8fzB3LN6Uc8HcfR vCLLokNs+QCtzr4bSfezqTfo0OIi2Qy+ZjqTJXlHRw2+KH2g0su+gutmtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/cFA397rKDb6BBlmrgBlbxEC4pMB8GA1UdIwQY MBaAFFndBXRvmiiHVsMK+oxFmVt3UFX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYzliNmYtM2UxZi00MzRjLTkzMjMt YzJjZTE3OGRmMWM0LzEvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYzliNmYtM2UxZi00MzRjLTkzMjMtYzJjZTE3OGRmMWM0 LzEvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz72sjxf C2GU/Q7YvKULyiJTvM2N/MkDTVdYdoCSqriyQ74DYd/wBLMdykC0yKal91UXRbsU 9J+2vaTGNFSVpKCvnXXbxkKZsHohdZgXe6/wInw4CJzoeSmU03wZWeNZuBoQx/qm mOVaXOvW19o6fdurzoyaL7ZJlPrTLGMeAjMRDodLiNP+AwIlrX/ZbBjjivo9zZza 1qJfyvaZ0UrUuZkeppfT3aQpJlSxSl+XEp8NldPqW0ZVZ53vXrfVZwPGKBzSNmZ/ L7m14S3E97hotqwLujgXTyFK+cOcoGLn/GboWtUzf9+OzRcv+F6KtunBzpvSV3LL ccnU7Y38nKR0Lg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:47:23 2025 by rpki-client