This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft File: wd13fOfXCSaMDFWlnADGrqWyGb0.mft (raw, json) Hash identifier: gqd5hIjo30v2FGMHR1JBNAoEq7R9WiFEw+BBCB36WiI= Subject key identifier: 30:68:15:C7:EA:F5:CF:EE:63:8C:10:47:BB:C2:75:98:98:F6:FB:07 Authority key identifier: C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD Certificate issuer: /CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd Certificate serial: 019AF1D2457B311700DD6E4E43D187D79E72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft Manifest number: 124F Signing time: Sat 06 Dec 2025 04:01:20 +0000 Manifest this update: Sat 06 Dec 2025 04:01:20 +0000 Manifest next update: Sun 07 Dec 2025 04:01:20 +0000 Files and hashes: 1: Ex-cB_4h1wPjXU2C6qgnvAowG6s.roa (hash: Pfofg8M1L5a51wZ24aPVDYrdbmmkhLSc6VaiAue9C68=) 2: wd13fOfXCSaMDFWlnADGrqWyGb0.crl (hash: qcQmxibyHO7ZYRUFWZfB+ACP1D2PUUsZe3etnJoHg1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:45:7b:31:17:00:dd:6e:4e:43:d1:87:d7:9e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1dd777ce7d709268c0c55a59c00c6aea5b219bd Validity Not Before: Dec 6 04:01:20 2025 GMT Not After : Dec 7 04:01:20 2025 GMT Subject: CN=306815c7eaf5cfee638c1047bbc2759898f6fb07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4e:8a:80:f1:f2:ad:da:e7:c9:6f:7a:f8:f5: 8e:8e:c1:aa:38:e3:38:e2:6f:d9:16:35:65:59:48: ab:47:5e:22:2f:5b:28:52:02:66:43:e4:ca:e3:d4: 30:59:fe:e9:d0:34:11:86:70:91:4e:49:15:84:c3: 8b:43:7a:5b:14:db:ab:0a:99:55:3b:4c:5c:2b:92: 86:96:86:07:5e:d7:91:c1:f6:5a:22:ea:72:01:ff: 61:5f:de:2f:d3:72:f8:bd:e2:63:75:b0:a9:ed:49: 33:68:ac:dc:9b:90:73:aa:33:0d:48:c4:1a:d5:79: 6d:24:85:61:3e:4b:b4:22:b3:4c:cf:45:57:11:72: b0:7b:89:52:11:11:f3:a5:cc:13:b9:ff:0f:bb:83: 64:14:28:bf:91:f7:fc:6a:df:ba:19:d4:cb:44:9c: 10:f1:b2:dd:05:f7:75:c8:f2:2b:10:25:21:c4:af: 34:25:86:65:43:6a:e9:f2:e5:c6:c6:c7:0a:22:ad: f3:a4:f2:a2:77:36:37:a1:25:09:30:94:df:bf:51: cc:03:2c:43:80:f0:37:7b:67:56:8d:01:22:c9:f0: 9b:d0:51:12:1e:f5:40:78:6e:27:a6:1c:8d:01:f3: d6:c5:19:b3:ae:a1:b9:bb:2a:6e:91:ec:35:49:e0: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:68:15:C7:EA:F5:CF:EE:63:8C:10:47:BB:C2:75:98:98:F6:FB:07 X509v3 Authority Key Identifier: keyid:C1:DD:77:7C:E7:D7:09:26:8C:0C:55:A5:9C:00:C6:AE:A5:B2:19:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wd13fOfXCSaMDFWlnADGrqWyGb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/59e107-704f-4480-b69e-f06a761c9a20/1/wd13fOfXCSaMDFWlnADGrqWyGb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:07:23:fc:3a:f4:97:37:bf:0a:cf:37:49:69:7a:e6:38:ef: 7a:c6:c4:de:9c:43:61:3d:03:34:15:26:7d:27:a7:c9:ad:9b: 16:80:43:05:3a:55:c3:14:55:40:ed:35:de:44:60:b0:ef:81: fb:34:41:ec:6c:c8:30:61:d6:d4:7a:60:db:17:d1:fb:05:65: d5:c2:17:72:81:bf:a2:11:68:61:9a:25:99:1e:88:26:76:a9: 81:c6:85:4c:fc:1c:76:6f:79:65:86:1a:1a:0d:e0:5b:36:8e: 8e:c0:f3:8e:48:77:c8:c9:2c:40:e5:9b:32:4d:14:ea:e7:0d: 57:bb:8e:30:d5:40:93:f7:e2:2f:0f:b8:09:a1:2b:78:f4:47: 08:cc:04:b6:e5:86:63:f8:46:83:2b:a4:f3:2f:ca:b8:e4:35: ca:76:95:9f:48:2c:b6:70:44:51:a1:08:a4:95:12:1a:70:de: a1:ec:91:e4:d4:c2:b5:a1:9b:e4:0b:45:fd:2c:77:86:a1:92: 4d:3e:c9:39:a7:4e:53:44:0e:9e:7f:ea:86:09:13:5f:f9:d3: 1e:3c:c3:e8:c5:78:e8:14:d9:33:3c:49:80:54:e0:12:ee:7d: 71:20:4f:5e:4c:92:bf:1f:72:ff:2e:80:af:aa:d3:8d:0d:c6: 0b:c3:db:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0kV7MRcA3W5OQ9GH155yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZGQ3NzdjZTdkNzA5MjY4YzBjNTVhNTljMDBjNmFlYTVi MjE5YmQwHhcNMjUxMjA2MDQwMTIwWhcNMjUxMjA3MDQwMTIwWjAzMTEwLwYDVQQD EygzMDY4MTVjN2VhZjVjZmVlNjM4YzEwNDdiYmMyNzU5ODk4ZjZmYjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k6KgPHyrdrnyW96+PWOjsGqOOM4 4m/ZFjVlWUirR14iL1soUgJmQ+TK49QwWf7p0DQRhnCRTkkVhMOLQ3pbFNurCplV O0xcK5KGloYHXteRwfZaIupyAf9hX94v03L4veJjdbCp7UkzaKzcm5BzqjMNSMQa 1XltJIVhPku0IrNMz0VXEXKwe4lSERHzpcwTuf8Pu4NkFCi/kff8at+6GdTLRJwQ 8bLdBfd1yPIrECUhxK80JYZlQ2rp8uXGxscKIq3zpPKidzY3oSUJMJTfv1HMAyxD gPA3e2dWjQEiyfCb0FESHvVAeG4nphyNAfPWxRmzrqG5uypukew1SeCBCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBoFcfq9c/uY4wQR7vCdZiY9vsHMB8GA1UdIwQY MBaAFMHdd3zn1wkmjAxVpZwAxq6lshm9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2QxM2ZPZlhDU2FNREZXbG5BREdycVd5R2IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS81OWUxMDctNzA0Zi00NDgwLWI2OWUt ZjA2YTc2MWM5YTIwLzEvd2QxM2ZPZlhDU2FNREZXbG5BREdycVd5R2IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS81OWUxMDctNzA0Zi00NDgwLWI2OWUtZjA2YTc2MWM5YTIw LzEvd2QxM2ZPZlhDU2FNREZXbG5BREdycVd5R2IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQcj/Dr0 lze/Cs83SWl65jjvesbE3pxDYT0DNBUmfSenya2bFoBDBTpVwxRVQO013kRgsO+B +zRB7GzIMGHW1Hpg2xfR+wVl1cIXcoG/ohFoYZolmR6IJnapgcaFTPwcdm95ZYYa Gg3gWzaOjsDzjkh3yMksQOWbMk0U6ucNV7uOMNVAk/fiLw+4CaErePRHCMwEtuWG Y/hGgyuk8y/KuOQ1ynaVn0gstnBEUaEIpJUSGnDeoeyR5NTCtaGb5AtF/Sx3hqGS TT7JOadOU0QOnn/qhgkTX/nTHjzD6MV46BTZMzxJgFTgEu59cSBPXkySvx9y/y6A r6rTjQ3GC8PbMg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:49:46 2025 by rpki-client