This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft File: WDMpShzcE1ivxDnApyczsGWob4s.mft (raw, json) Hash identifier: tM31+la6zsMaqjemhBBv8FJBMXqQ+zHXfKD3PoWO6Ww= Subject key identifier: 3E:9A:6C:A6:C9:09:2E:88:78:F8:5B:C4:89:60:16:1B:39:7C:08:93 Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B Certificate issuer: /CN=5833294a1cdc1358afc439c0a72733b065a86f8b Certificate serial: 019B2552C444C12EF68F1A056C4114F19D4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft Manifest number: 14DF Signing time: Tue 16 Dec 2025 04:02:19 +0000 Manifest this update: Tue 16 Dec 2025 04:02:19 +0000 Manifest next update: Wed 17 Dec 2025 04:02:19 +0000 Files and hashes: 1: FEhWjmoWc9cum53HxeyUT2Qa6mw.roa (hash: kSh8B6Zq+kic4h5PjLJKx7l3r3KTkN44epk5FRWmu2U=) 2: K0HsWHysHMZq685uifFe67OOB8U.roa (hash: mIF7jMe84gl1h6EoDmzjdFHUQ2hvrkI5zhJWqQMrx4w=) 3: WDMpShzcE1ivxDnApyczsGWob4s.crl (hash: i2sMIxPmuErNbX+tlNc0Tq7jTqgWtV55Pw0cXkB7S1Q=) 4: hMmGvyz2W2EPSFxojtcmtvFemfI.roa (hash: Zkzb4yaO0yFYxaiPMOmQN6F3WGq60dEdcds/Vk7pzrc=) 5: kFJhvw8c8pO7-ui_KmaA5RNc_z4.roa (hash: YGEP4CjqmM4E2cc+zdPbvwB4J8vm3ddL4Eiaa6+UYhA=) 6: rVAMPxQEajIzgBDq_QlH1UB_rOs.roa (hash: i7dAzsdGsRXLSIsa/8df9dB0gK3gqAkFNHzOpoaptoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:c4:44:c1:2e:f6:8f:1a:05:6c:41:14:f1:9d:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b Validity Not Before: Dec 16 04:02:19 2025 GMT Not After : Dec 17 04:02:19 2025 GMT Subject: CN=3e9a6ca6c9092e8878f85bc48960161b397c0893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0f:8e:72:ee:a9:50:10:27:80:f4:9e:9b:5b: f9:74:b4:5f:41:81:9d:22:16:0f:e1:76:16:0f:13: df:a3:75:9c:a3:86:d6:3e:87:62:ed:ce:3c:3d:4c: 35:34:4b:2e:5e:48:c1:1a:3e:a9:d4:47:af:be:c4: c5:e8:15:bb:df:7c:c2:9f:83:29:6d:f5:0e:0c:24: 5f:98:5b:56:ef:aa:0b:b1:67:cf:e4:f7:a9:2f:0c: 8e:5b:48:1e:da:8d:3f:d2:29:a6:d5:1a:fc:ee:fd: f6:36:a8:ef:ee:b9:78:cb:b6:0e:58:32:8c:e3:6a: ff:e6:71:b6:6a:c7:2e:d9:90:d8:90:5e:07:5d:db: 5c:c6:2b:c4:65:b0:d0:54:de:be:3b:e8:f7:33:41: 39:df:f8:0d:b7:e9:27:e1:bd:b9:31:a2:eb:28:bb: 76:5f:41:73:6e:32:07:69:b7:cf:e5:50:6b:9f:3e: cb:d4:3e:93:9d:9c:88:30:0d:80:79:15:b5:18:47: d8:96:c2:26:96:31:4d:f5:4b:e8:7f:4d:bd:6a:fa: 04:11:c9:b7:78:e1:cf:3b:81:49:e9:82:9a:94:1e: a3:c8:ce:60:69:09:fb:c2:03:60:ed:2d:73:5f:49: 1c:1d:5e:ce:bb:85:04:48:e8:e4:f7:85:30:be:67: 7c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9A:6C:A6:C9:09:2E:88:78:F8:5B:C4:89:60:16:1B:39:7C:08:93 X509v3 Authority Key Identifier: keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:4c:c3:a8:d3:c1:21:61:87:88:4a:97:24:62:2b:f9:78:a7: 90:bb:1f:fc:f1:9d:02:f6:ba:18:1e:d8:3c:13:64:5b:e3:2e: d7:60:27:d5:6a:db:ff:e2:d0:1c:d7:68:7b:b4:f1:ee:0e:ec: 30:1c:af:ee:e3:fa:e2:e6:3d:dc:40:45:56:a3:c9:a3:fc:dc: 83:a3:b8:74:b8:1d:f0:27:9e:99:ab:01:e8:6a:dc:9f:fc:c3: 40:81:59:21:40:02:c9:6b:b2:04:d8:e2:d7:1c:70:50:56:58: 5f:d5:98:f4:f1:6c:9a:e5:bc:ff:dd:d7:53:b1:a4:d9:62:f5: 9a:e3:4b:0b:01:84:da:e6:c2:ed:69:cd:29:0e:ba:2c:79:5f: 81:20:c4:f7:2d:a8:7b:1d:aa:e4:2a:f9:e6:60:3c:7a:a7:e9: e3:84:96:ef:78:7e:f7:9a:27:41:e7:d0:7d:4c:08:a7:37:d4: ec:76:bb:c9:92:36:d2:8d:1b:a7:98:37:b3:e3:30:db:4f:37: 0d:ce:04:be:37:2f:ca:99:73:55:15:a2:16:bf:41:ee:ef:78: 75:5a:20:fc:64:c5:4a:b9:88:52:fa:d5:75:8a:86:5f:41:44: c1:4d:cd:c6:21:f8:b4:a7:b7:a5:23:73:7f:d7:e5:ba:89:74: 56:2c:6f:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUsREwS72jxoFbEEU8Z1PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MzMyOTRhMWNkYzEzNThhZmM0MzljMGE3MjczM2IwNjVh ODZmOGIwHhcNMjUxMjE2MDQwMjE5WhcNMjUxMjE3MDQwMjE5WjAzMTEwLwYDVQQD EygzZTlhNmNhNmM5MDkyZTg4NzhmODViYzQ4OTYwMTYxYjM5N2MwODkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw+Ocu6pUBAngPSem1v5dLRfQYGd IhYP4XYWDxPfo3Wco4bWPodi7c48PUw1NEsuXkjBGj6p1EevvsTF6BW733zCn4Mp bfUODCRfmFtW76oLsWfP5PepLwyOW0ge2o0/0imm1Rr87v32Nqjv7rl4y7YOWDKM 42r/5nG2ascu2ZDYkF4HXdtcxivEZbDQVN6+O+j3M0E53/gNt+kn4b25MaLrKLt2 X0FzbjIHabfP5VBrnz7L1D6TnZyIMA2AeRW1GEfYlsImljFN9Uvof029avoEEcm3 eOHPO4FJ6YKalB6jyM5gaQn7wgNg7S1zX0kcHV7Ou4UESOjk94Uwvmd88QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6abKbJCS6IePhbxIlgFhs5fAiTMB8GA1UdIwQY MBaAFFgzKUoc3BNYr8Q5wKcnM7BlqG+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDct YmI0YjY1YjZhMGQxLzEvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80YjQxOWMtY2Y4Zi00YzlhLTk0ZDctYmI0YjY1YjZhMGQx LzEvV0RNcFNoemNFMWl2eERuQXB5Y3pzR1dvYjRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0zDqNPB IWGHiEqXJGIr+XinkLsf/PGdAva6GB7YPBNkW+Mu12An1Wrb/+LQHNdoe7Tx7g7s MByv7uP64uY93EBFVqPJo/zcg6O4dLgd8CeemasB6Grcn/zDQIFZIUACyWuyBNji 1xxwUFZYX9WY9PFsmuW8/93XU7Gk2WL1muNLCwGE2ubC7WnNKQ66LHlfgSDE9y2o ex2q5Cr55mA8eqfp44SW73h+95onQefQfUwIpzfU7Ha7yZI20o0bp5g3s+Mw2083 Dc4EvjcvyplzVRWiFr9B7u94dVog/GTFSrmIUvrVdYqGX0FEwU3NxiH4tKe3pSNz f9fluol0Vixv+Q== -----END CERTIFICATE-----Generated at Tue Dec 16 07:03:07 2025 by rpki-client