This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft File: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json) Hash identifier: 8CUjynPIzrAi2bRpRaw86MZUks4nvrKQPq+uYX2PcXA= Subject key identifier: EB:B5:C7:27:86:6A:80:CC:13:78:24:BD:3E:1A:09:3D:CA:D5:F6:8F Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Certificate serial: 019AF38A04A908EA90031970D4B50C179AE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft Manifest number: 0727 Signing time: Sat 06 Dec 2025 12:01:39 +0000 Manifest this update: Sat 06 Dec 2025 12:01:39 +0000 Manifest next update: Sun 07 Dec 2025 12:01:39 +0000 Files and hashes: 1: RpRW6TZvmlJBGznF3-hnJMYz2K4.roa (hash: xykvfoJNE09ErVanuSOIuIu5xVg3V0n12SrhzPJXXrg=) 2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: NNQSkzor0MXZXrjqaBW1AOiamTl+0P0xUtHPZXnKWog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:04:a9:08:ea:90:03:19:70:d4:b5:0c:17:9a:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Validity Not Before: Dec 6 12:01:39 2025 GMT Not After : Dec 7 12:01:39 2025 GMT Subject: CN=ebb5c727866a80cc137824bd3e1a093dcad5f68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9a:2d:e9:3e:d7:cb:4c:50:e3:71:a1:cf:1b: d3:43:cb:24:08:35:9d:a3:af:55:f1:c3:85:c3:af: 5c:34:5e:8f:4c:27:a4:6b:2c:8f:f2:04:dd:f6:a3: 13:95:90:61:b8:f8:e6:24:f3:96:e6:c8:ea:bc:cc: ae:3b:2b:55:ac:7e:d1:cb:07:9f:21:a2:54:65:49: 75:44:16:7e:38:b9:9a:c2:b8:10:1a:1c:df:17:6c: 9e:67:f5:d0:07:17:6d:f0:4f:19:85:5b:4e:f0:37: 2c:c7:41:12:30:8f:69:e8:cf:7b:2f:95:e5:72:3d: c1:48:3a:cf:92:a3:0e:59:39:02:50:96:d6:60:5d: 7b:28:50:8b:2f:ea:bf:2e:df:86:1c:c7:d0:a8:63: 5c:49:4c:8b:db:42:0d:52:de:67:fa:50:96:b7:79: 1d:c0:51:a6:97:40:a2:ae:a5:56:3c:eb:67:40:81: bd:e2:30:0a:55:ee:7a:ca:37:61:05:0b:aa:5a:9d: 79:a7:04:7c:bf:6c:9c:ef:5f:d4:99:54:a1:f9:89: cc:fd:f6:55:18:00:c6:42:57:d3:21:77:50:30:79: bc:6b:87:53:57:c3:f8:90:c9:58:d6:ab:fb:d6:3f: 8b:b8:25:75:fa:4f:6b:d4:b7:84:2a:8e:cb:39:aa: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B5:C7:27:86:6A:80:CC:13:78:24:BD:3E:1A:09:3D:CA:D5:F6:8F X509v3 Authority Key Identifier: keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a0:f2:8a:85:8e:eb:78:5e:fa:e5:5d:5d:08:59:38:a7:7e: 98:75:d3:bc:3b:b7:7b:28:63:f3:57:f6:4a:25:dd:33:45:dc: e6:f4:4f:5c:67:a4:6f:9b:6f:c6:f9:32:e3:fd:4f:93:10:af: 3d:c2:bb:fc:b4:c8:ae:f4:4e:34:49:7a:6d:72:1c:e3:bc:29: 40:c5:ee:09:e8:d2:b8:53:f8:f9:57:61:8f:63:7a:2d:1e:26: 5a:f0:ff:8d:22:45:d9:0b:6b:02:51:bd:78:47:bd:a7:34:52: 0d:e9:7a:ee:05:e1:02:88:51:9d:02:97:9d:13:5a:19:7a:74: 26:2c:17:36:00:2d:d0:92:a1:6b:6f:11:1d:c8:92:97:d7:35: d1:25:01:52:23:dc:5d:07:3c:6a:82:ec:8c:e4:dd:28:7d:54: df:21:56:9a:b7:39:4b:ea:de:2f:c1:b8:fb:15:a8:1b:c8:54: 6d:58:e6:f3:9e:40:f0:63:b9:73:3e:73:02:25:23:ac:d3:be: 5d:69:41:78:ec:4d:fd:c3:43:ac:bb:18:93:59:bc:f4:7f:c3: a8:d8:f2:9c:39:63:bb:a1:66:41:20:c6:5c:f4:f4:f8:98:00: 41:d3:08:67:4a:f1:45:a1:8e:64:12:32:06:46:38:30:a6:3a: 9d:61:1f:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzigSpCOqQAxlw1LUMF5rhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYmE1MGZjYTMzYjE4MGQ2ODQzNmU3ZWYwY2JmNjkwNGJh ZjQ1ZDQwHhcNMjUxMjA2MTIwMTM5WhcNMjUxMjA3MTIwMTM5WjAzMTEwLwYDVQQD EyhlYmI1YzcyNzg2NmE4MGNjMTM3ODI0YmQzZTFhMDkzZGNhZDVmNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zot6T7Xy0xQ43GhzxvTQ8skCDWd o69V8cOFw69cNF6PTCekayyP8gTd9qMTlZBhuPjmJPOW5sjqvMyuOytVrH7Rywef IaJUZUl1RBZ+OLmawrgQGhzfF2yeZ/XQBxdt8E8ZhVtO8Dcsx0ESMI9p6M97L5Xl cj3BSDrPkqMOWTkCUJbWYF17KFCLL+q/Lt+GHMfQqGNcSUyL20INUt5n+lCWt3kd wFGml0CirqVWPOtnQIG94jAKVe56yjdhBQuqWp15pwR8v2yc71/UmVSh+YnM/fZV GADGQlfTIXdQMHm8a4dTV8P4kMlY1qv71j+LuCV1+k9r1LeEKo7LOarikQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOu1xyeGaoDME3gkvT4aCT3K1faPMB8GA1UdIwQY MBaAFMC6UPyjOxgNaENufvDL9pBLr0XUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgt ZDFmYmU1YTkxZDcwLzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgtZDFmYmU1YTkxZDcw LzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd6DyioWO 63he+uVdXQhZOKd+mHXTvDu3eyhj81f2SiXdM0Xc5vRPXGekb5tvxvky4/1PkxCv PcK7/LTIrvRONEl6bXIc47wpQMXuCejSuFP4+Vdhj2N6LR4mWvD/jSJF2QtrAlG9 eEe9pzRSDel67gXhAohRnQKXnRNaGXp0JiwXNgAt0JKha28RHciSl9c10SUBUiPc XQc8aoLsjOTdKH1U3yFWmrc5S+reL8G4+xWoG8hUbVjm855A8GO5cz5zAiUjrNO+ XWlBeOxN/cNDrLsYk1m89H/DqNjynDlju6FmQSDGXPT0+JgAQdMIZ0rxRaGOZBIy BkY4MKY6nWEfKw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:55:48 2025 by rpki-client