This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json) Hash identifier: qTXHg7dC4FNfKyv63mRng43VNpZCHzaRtIg5EkV3xgA= Subject key identifier: EB:C7:46:10:A4:BB:2D:E0:A1:A4:0D:48:12:64:F3:2A:AC:7D:22:71 Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407 Certificate serial: 019AF464BFA6F1DA676A1BB8B648BFDEE406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft Manifest number: 0A7E Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=) 2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: AMMgqeLYPVoypE/21giqiqN4s0WZSAdKW9/NV9f7xiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:bf:a6:f1:da:67:6a:1b:b8:b6:48:bf:de:e4:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c070ee8dc8378086960182e3309226717e83e407 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=ebc74610a4bb2de0a1a40d481264f32aac7d2271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:52:77:76:76:99:88:ee:98:5c:9b:ea:24:63: 78:39:d4:1b:74:8f:b5:60:ac:e3:79:d4:1f:cc:04: 36:a9:f2:d1:e9:29:5b:24:aa:a5:39:3b:16:21:2c: 02:d7:d0:44:8e:59:f1:a1:bb:72:b7:c6:83:88:6f: db:8e:85:bc:8f:3b:a7:63:38:37:28:56:13:b6:92: ee:f6:4d:aa:08:ff:38:0c:4c:a9:60:dc:58:01:42: ac:ea:5e:e1:2b:56:3e:78:ce:fc:28:a0:0f:a7:41: cf:2d:28:2c:35:95:11:30:b8:59:56:8c:f0:e2:f1: 3f:53:84:7a:cb:44:fc:eb:cd:68:ef:70:21:cd:b5: 53:f9:ec:3a:49:bd:45:4d:21:dc:6f:d6:ba:28:3f: a4:61:06:88:e8:1f:d1:f6:71:6a:a4:19:c7:7e:bd: 92:93:d9:66:b5:45:1d:41:70:99:91:bc:d2:51:20: b6:70:68:73:f6:fa:c3:c1:ea:8e:d7:8a:0b:fe:70: 63:87:73:4c:f2:ff:a5:58:9b:67:a0:2d:77:e9:27: fc:11:45:89:9d:97:d0:38:95:31:9d:99:98:98:1b: 65:0d:be:a8:ae:f4:e5:55:80:b3:a8:0d:08:a4:a0: ba:64:72:0d:2c:6d:2d:13:70:24:b9:b9:61:15:ca: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C7:46:10:A4:BB:2D:E0:A1:A4:0D:48:12:64:F3:2A:AC:7D:22:71 X509v3 Authority Key Identifier: keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7e:cd:78:e2:53:58:19:43:8c:28:ea:35:4f:f3:ab:01:f8: fd:d8:46:e4:06:0f:80:43:27:78:64:d3:ea:3b:88:5c:f2:54: b1:30:5e:08:83:c9:a8:aa:3c:db:a4:6a:c7:dc:58:fb:35:09: c9:2f:37:a9:46:cd:9c:be:64:6d:2a:44:2f:4a:b4:19:ec:11: 59:9f:95:39:9e:9c:12:05:ce:8f:ca:68:a9:3b:a2:65:24:c3: 11:ef:f6:29:70:a2:09:06:5a:60:7e:6b:2b:fe:e3:73:b2:d1: 92:eb:46:f6:11:72:71:e1:c5:86:16:be:eb:51:e7:56:a2:6d: 80:ac:58:87:cb:f7:d7:eb:12:09:b9:c3:0d:6b:82:e7:c8:2e: 88:7d:6c:f1:54:6d:56:f4:ee:94:5d:5e:86:20:78:0f:53:49: b1:56:f9:e5:9e:b2:ef:6b:01:fb:de:a2:8f:f8:09:cc:c3:97: e7:58:06:71:60:93:4a:83:d0:05:c9:d7:b2:e0:47:ec:b4:ce: 48:7f:c1:1b:02:d4:ff:31:0b:b8:c6:1a:2f:ca:8a:15:de:34: a1:dc:53:b3:66:c5:71:89:94:31:e7:20:a1:2b:1f:a1:27:27: 5a:60:95:fd:05:11:70:ca:fe:43:e6:0f:25:39:f9:40:b7:a2: 14:5f:de:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZL+m8dpnahu4tki/3uQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4 M2U0MDcwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD EyhlYmM3NDYxMGE0YmIyZGUwYTFhNDBkNDgxMjY0ZjMyYWFjN2QyMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFJ3dnaZiO6YXJvqJGN4OdQbdI+1 YKzjedQfzAQ2qfLR6SlbJKqlOTsWISwC19BEjlnxobtyt8aDiG/bjoW8jzunYzg3 KFYTtpLu9k2qCP84DEypYNxYAUKs6l7hK1Y+eM78KKAPp0HPLSgsNZURMLhZVozw 4vE/U4R6y0T8681o73AhzbVT+ew6Sb1FTSHcb9a6KD+kYQaI6B/R9nFqpBnHfr2S k9lmtUUdQXCZkbzSUSC2cGhz9vrDweqO14oL/nBjh3NM8v+lWJtnoC136Sf8EUWJ nZfQOJUxnZmYmBtlDb6orvTlVYCzqA0IpKC6ZHINLG0tE3AkublhFcrdLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvHRhCkuy3goaQNSBJk8yqsfSJxMB8GA1UdIwQY MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt NDVhN2I2OTc4NDkzLzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVH7NeOJT WBlDjCjqNU/zqwH4/dhG5AYPgEMneGTT6juIXPJUsTBeCIPJqKo826Rqx9xY+zUJ yS83qUbNnL5kbSpEL0q0GewRWZ+VOZ6cEgXOj8poqTuiZSTDEe/2KXCiCQZaYH5r K/7jc7LRkutG9hFyceHFhha+61HnVqJtgKxYh8v31+sSCbnDDWuC58guiH1s8VRt VvTulF1ehiB4D1NJsVb55Z6y72sB+96ij/gJzMOX51gGcWCTSoPQBcnXsuBH7LTO SH/BGwLU/zELuMYaL8qKFd40odxTs2bFcYmUMecgoSsfoScnWmCV/QURcMr+Q+YP JTn5QLeiFF/e7w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:47 2025 by rpki-client