This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft File: wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json) Hash identifier: B02HjDgTbp3/4MEdDbmryr4Hp3xYanA5NvY10WV5GoE= Subject key identifier: F8:23:0D:02:7E:36:86:DD:BC:36:F4:FD:9B:93:2F:86:98:8E:87:5F Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88 Certificate issuer: /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88 Certificate serial: 019AF42E7010C03F391AD6656E5D9091200B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft Manifest number: 0DC9 Signing time: Sat 06 Dec 2025 15:01:15 +0000 Manifest this update: Sat 06 Dec 2025 15:01:15 +0000 Manifest next update: Sun 07 Dec 2025 15:01:15 +0000 Files and hashes: 1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=) 2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: Qoe+zin1bWdYnjaedd/AMTltIdm0jh3Hv02W33+GbgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:70:10:c0:3f:39:1a:d6:65:6e:5d:90:91:20:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88 Validity Not Before: Dec 6 15:01:15 2025 GMT Not After : Dec 7 15:01:15 2025 GMT Subject: CN=f8230d027e3686ddbc36f4fd9b932f86988e875f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:bf:b0:ae:5b:3f:8d:8e:c1:e5:a7:bc:20:77: 29:d2:f0:d1:77:ce:05:2b:cd:b7:3d:e0:e6:03:7a: f5:8e:90:b2:a3:93:de:07:63:d4:d1:c1:95:b6:8e: e4:d8:54:0e:2c:29:57:48:19:62:ea:d6:e0:c7:c6: a2:23:2d:11:1b:72:9c:13:2d:15:8a:ce:7b:85:7a: db:79:8f:31:bf:92:b1:32:7e:c9:72:53:e7:34:f9: 13:8a:73:17:1c:9f:69:15:b2:1f:35:82:5b:cf:46: 7a:90:6a:26:a5:c9:6b:41:e1:f3:04:2d:db:f9:a8: d9:21:21:85:3b:07:16:90:c5:e8:32:8d:1e:22:41: 58:66:bc:70:d3:e5:2a:d6:43:4a:9d:5e:a4:3f:16: 7e:56:4a:87:e5:56:aa:1e:8f:04:a4:f5:6b:4f:91: aa:4c:1b:49:a2:21:df:bf:9b:d9:b6:25:ab:9b:ce: 36:5e:c8:21:75:82:d4:22:d0:ae:15:7b:6c:f8:f1: ca:fc:33:89:85:d3:1c:5f:98:3a:b3:1c:36:c3:3d: b5:b0:3f:70:18:c0:66:ea:1c:1e:3e:92:d0:4c:1e: db:f0:70:4b:1e:d6:28:41:14:7f:ef:8d:f9:6d:01: 3c:35:44:36:da:e0:c7:2a:46:88:93:8b:24:51:c6: 61:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:23:0D:02:7E:36:86:DD:BC:36:F4:FD:9B:93:2F:86:98:8E:87:5F X509v3 Authority Key Identifier: keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:09:41:c3:f9:11:3d:11:9a:c4:14:15:6a:21:98:05:23:8a: ac:2c:5c:93:cd:f6:f2:55:16:16:b1:39:ed:34:75:d7:f7:cf: 9f:22:34:35:77:c6:03:dd:5e:ca:53:ec:49:79:45:b8:90:78: c1:df:dc:a5:b9:86:f1:e8:59:98:68:ca:07:94:96:3a:68:09: db:36:d5:7c:c0:77:ab:23:1e:14:3d:a8:c4:90:ae:8c:74:62: 1b:c2:4f:97:c6:ad:da:3d:b0:60:21:da:a9:00:9f:3c:d9:99: 7d:29:22:ae:da:03:d4:b1:60:e8:60:1d:dd:fc:a4:83:e0:75: 93:ec:bc:0b:dc:82:e0:f3:4d:ba:09:ef:ad:72:f8:5e:7c:e7: 73:f7:a1:0c:74:71:35:ae:c4:6f:37:04:ab:34:a8:fd:e7:b5: e9:32:80:c2:43:ea:6f:9d:d7:f0:e2:a4:74:14:37:02:e3:a9: c6:71:d6:22:ec:43:89:b9:52:d0:c4:f8:e7:b2:47:10:2c:d8: 3b:bd:b8:6f:53:9b:35:c7:5e:a6:2f:34:88:ec:a7:09:8c:8d: 8e:c7:d3:b7:b3:e4:b9:ae:4e:5a:df:a6:fc:54:a9:80:1b:53: 17:20:3a:a6:79:f7:f1:32:b1:88:68:3c:2c:b4:3f:4f:49:8f: b3:c2:6d:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LnAQwD85GtZlbl2QkSALMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2MyOTU2NmVmNTlmY2YxYTkwZDgyZDA4YWUxMGM2MzBm OTRiODgwHhcNMjUxMjA2MTUwMTE1WhcNMjUxMjA3MTUwMTE1WjAzMTEwLwYDVQQD EyhmODIzMGQwMjdlMzY4NmRkYmMzNmY0ZmQ5YjkzMmY4Njk4OGU4NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL+wrls/jY7B5ae8IHcp0vDRd84F K823PeDmA3r1jpCyo5PeB2PU0cGVto7k2FQOLClXSBli6tbgx8aiIy0RG3KcEy0V is57hXrbeY8xv5KxMn7JclPnNPkTinMXHJ9pFbIfNYJbz0Z6kGompclrQeHzBC3b +ajZISGFOwcWkMXoMo0eIkFYZrxw0+Uq1kNKnV6kPxZ+VkqH5VaqHo8EpPVrT5Gq TBtJoiHfv5vZtiWrm842XsghdYLUItCuFXts+PHK/DOJhdMcX5g6sxw2wz21sD9w GMBm6hwePpLQTB7b8HBLHtYoQRR/7435bQE8NUQ22uDHKkaIk4skUcZhswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgjDQJ+NobdvDb0/ZuTL4aYjodfMB8GA1UdIwQY MBaAFMA8KVZu9Z/PGpDYLQiuEMYw+UuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYt MDgxMTExMDNjY2Y5LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lZmMxNzItNGI5NC00YzU1LTlkMzYtMDgxMTExMDNjY2Y5 LzEvd0R3cFZtNzFuODhha05ndENLNFF4akQ1UzRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASglBw/kR PRGaxBQVaiGYBSOKrCxck8328lUWFrE57TR11/fPnyI0NXfGA91eylPsSXlFuJB4 wd/cpbmG8ehZmGjKB5SWOmgJ2zbVfMB3qyMeFD2oxJCujHRiG8JPl8at2j2wYCHa qQCfPNmZfSkirtoD1LFg6GAd3fykg+B1k+y8C9yC4PNNugnvrXL4Xnznc/ehDHRx Na7EbzcEqzSo/ee16TKAwkPqb53X8OKkdBQ3AuOpxnHWIuxDiblS0MT457JHECzY O724b1ObNcdepi80iOynCYyNjsfTt7Pkua5OWt+m/FSpgBtTFyA6pnn38TKxiGg8 LLQ/T0mPs8JtFA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:04 2025 by rpki-client