This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft File: wpdAm8J8WEPisWrGfNtqFVwvc_s.mft (raw, json) Hash identifier: IDkwNPFBCMqUQhjzvM2QkYz56bfF/CFFq/l4GDucWos= Subject key identifier: 98:DE:C6:CE:A9:F0:5D:8A:0A:90:A6:3D:68:2C:31:80:7D:EF:92:FD Authority key identifier: C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB Certificate issuer: /CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb Certificate serial: 019B4BF1B6AC7B1DA9E29C5230E9D59ABA6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft Manifest number: 133D Signing time: Tue 23 Dec 2025 16:01:30 +0000 Manifest this update: Tue 23 Dec 2025 16:01:30 +0000 Manifest next update: Wed 24 Dec 2025 16:01:30 +0000 Files and hashes: 1: V--AvBDy8CKLSulHA8-MpxkBUSk.roa (hash: 4mujn1g+vPNyUt+JT8wCWk11qrPBifj0bVJGlCn3/10=) 2: wpdAm8J8WEPisWrGfNtqFVwvc_s.crl (hash: kz4gIbtcvEUKMfMopZ9NcutdQnD7tgcOT/q1dD5K0gU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:b6:ac:7b:1d:a9:e2:9c:52:30:e9:d5:9a:ba:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c297409bc27c5843e2b16ac67cdb6a155c2f73fb Validity Not Before: Dec 23 16:01:30 2025 GMT Not After : Dec 24 16:01:30 2025 GMT Subject: CN=98dec6cea9f05d8a0a90a63d682c31807def92fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:2b:28:38:b5:04:a1:42:92:1b:73:f2:85: 61:56:d2:78:36:61:7a:47:3e:6c:30:04:ec:52:c3: 70:81:c0:b6:e1:0f:7b:cb:92:90:35:36:28:3a:6c: 96:eb:07:ec:40:de:c2:97:82:eb:a9:09:2b:bf:8f: 09:94:71:de:6f:d3:3b:03:e2:0c:d7:27:12:c1:f1: 30:5d:df:95:8e:38:5b:93:b1:da:38:aa:77:8c:36: c5:e3:df:b7:0e:cc:72:58:5b:6f:0a:a8:1b:42:fc: 72:51:ea:3e:5a:4f:e5:87:30:64:ba:0b:05:f0:a3: 56:28:2f:39:de:fc:f9:78:0b:e7:1b:cc:11:4d:16: 77:20:73:e9:50:bf:eb:de:69:07:29:44:6e:6f:19: ad:83:03:e9:6a:47:e1:82:20:e1:e2:ab:2e:06:70: ca:52:bb:64:40:eb:b7:fc:05:46:3e:90:da:15:fc: 5b:04:ae:b1:96:49:35:71:41:e5:c7:ef:a0:b7:bc: ae:4f:5d:6f:f7:25:55:a4:d7:57:92:fa:6e:15:47: e4:b1:a9:f1:b6:79:ba:a6:8b:8d:cb:dc:1e:f4:f4: 5f:96:db:d0:fa:2a:d1:b0:86:cf:79:ee:c6:f6:3f: 4b:3f:89:2a:36:e4:75:9d:59:26:4e:bd:45:24:ec: 30:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:DE:C6:CE:A9:F0:5D:8A:0A:90:A6:3D:68:2C:31:80:7D:EF:92:FD X509v3 Authority Key Identifier: keyid:C2:97:40:9B:C2:7C:58:43:E2:B1:6A:C6:7C:DB:6A:15:5C:2F:73:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpdAm8J8WEPisWrGfNtqFVwvc_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/c8bf8e-11ad-459e-b763-6c028a4d85da/1/wpdAm8J8WEPisWrGfNtqFVwvc_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:86:5e:a8:a1:76:94:dc:18:24:f4:c3:95:27:a3:cd:79:df: 32:bb:a8:35:04:ba:2f:80:5b:31:bf:f5:c5:20:29:4d:87:ea: 56:38:ca:e6:d8:6e:63:74:c2:f4:6b:b7:68:16:f2:63:af:a2: 37:9c:ec:56:ce:ee:e5:82:f6:81:bd:62:04:30:e4:cc:c7:1f: f1:41:96:ec:b5:28:6a:20:06:44:68:c0:0b:cb:54:79:4b:b8: 33:c6:a9:5b:cb:7c:48:fa:34:50:cb:98:5b:0e:c9:5c:92:93: 23:0a:85:49:15:af:c7:90:54:2a:98:66:12:3d:06:c4:fb:a9: 3e:6b:15:65:cb:72:c0:81:66:27:38:3d:38:bf:8f:1f:35:28: ff:27:a2:00:ef:3f:29:21:00:e2:60:b6:26:06:f3:d3:d2:42: 36:c2:b7:67:31:8f:34:90:7b:0a:e4:2a:83:44:72:a3:7b:0a: de:0b:82:f0:c2:80:2d:2c:92:ed:8e:30:30:8c:42:da:ea:51: b9:01:dd:10:80:d1:44:2c:7f:7f:d3:cb:7b:c3:f4:3e:f0:5f: 55:33:93:2d:59:02:ca:a6:58:b2:3a:c2:a4:cb:a3:6a:4e:99: f0:cc:e6:92:c5:21:2b:12:0b:8a:dd:af:c6:5b:32:fd:21:74: 34:5c:0a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8basex2p4pxSMOnVmrpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOTc0MDliYzI3YzU4NDNlMmIxNmFjNjdjZGI2YTE1NWMy ZjczZmIwHhcNMjUxMjIzMTYwMTMwWhcNMjUxMjI0MTYwMTMwWjAzMTEwLwYDVQQD Eyg5OGRlYzZjZWE5ZjA1ZDhhMGE5MGE2M2Q2ODJjMzE4MDdkZWY5MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCkrKDi1BKFCkhtz8oVhVtJ4NmF6 Rz5sMATsUsNwgcC24Q97y5KQNTYoOmyW6wfsQN7Cl4LrqQkrv48JlHHeb9M7A+IM 1ycSwfEwXd+Vjjhbk7HaOKp3jDbF49+3DsxyWFtvCqgbQvxyUeo+Wk/lhzBkugsF 8KNWKC853vz5eAvnG8wRTRZ3IHPpUL/r3mkHKURubxmtgwPpakfhgiDh4qsuBnDK UrtkQOu3/AVGPpDaFfxbBK6xlkk1cUHlx++gt7yuT11v9yVVpNdXkvpuFUfksanx tnm6pouNy9we9PRfltvQ+irRsIbPee7G9j9LP4kqNuR1nVkmTr1FJOww4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjexs6p8F2KCpCmPWgsMYB975L9MB8GA1UdIwQY MBaAFMKXQJvCfFhD4rFqxnzbahVcL3P7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMt NmMwMjhhNGQ4NWRhLzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9jOGJmOGUtMTFhZC00NTllLWI3NjMtNmMwMjhhNGQ4NWRh LzEvd3BkQW04SjhXRVBpc1dyR2ZOdHFGVnd2Y19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiIZeqKF2 lNwYJPTDlSejzXnfMruoNQS6L4BbMb/1xSApTYfqVjjK5thuY3TC9Gu3aBbyY6+i N5zsVs7u5YL2gb1iBDDkzMcf8UGW7LUoaiAGRGjAC8tUeUu4M8apW8t8SPo0UMuY Ww7JXJKTIwqFSRWvx5BUKphmEj0GxPupPmsVZctywIFmJzg9OL+PHzUo/yeiAO8/ KSEA4mC2Jgbz09JCNsK3ZzGPNJB7CuQqg0Ryo3sK3guC8MKALSyS7Y4wMIxC2upR uQHdEIDRRCx/f9PLe8P0PvBfVTOTLVkCyqZYsjrCpMujak6Z8MzmksUhKxILit2v xlsy/SF0NFwKwg== -----END CERTIFICATE-----Generated at Tue Dec 23 22:25:21 2025 by rpki-client