This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json) Hash identifier: mHZdFutmhzoshYTxrBHTHsPF1K/XtH5bIR5HaVCAVYg= Subject key identifier: 0E:E0:8B:0F:21:15:6E:29:82:57:4E:0B:92:3B:9C:02:D9:E2:B4:16 Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Certificate serial: 019B3C0FDCC844EA2C2D382127ECA50D7A55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft Manifest number: 056B Signing time: Sat 20 Dec 2025 14:00:31 +0000 Manifest this update: Sat 20 Dec 2025 14:00:31 +0000 Manifest next update: Sun 21 Dec 2025 14:00:31 +0000 Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=) 2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: +5xQDp2PRnpgFoSGRQWqzazRfgpOdayTCLdRj5HMQpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:dc:c8:44:ea:2c:2d:38:21:27:ec:a5:0d:7a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Validity Not Before: Dec 20 14:00:31 2025 GMT Not After : Dec 21 14:00:31 2025 GMT Subject: CN=0ee08b0f21156e2982574e0b923b9c02d9e2b416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:6e:2f:82:d2:2a:f1:34:9c:3d:e2:95:74: 0c:a3:fa:a1:0c:59:43:c7:1d:81:3e:94:80:cb:3c: bc:8b:b5:a0:48:f8:9d:2c:87:8c:82:05:18:d8:ac: 9d:00:67:b0:f4:46:81:e3:ca:45:b4:68:81:46:07: 09:8f:24:d8:37:e2:cf:d5:66:c6:6d:27:27:ac:93: 08:68:66:6d:8a:15:08:eb:58:cc:e0:a7:37:4d:8e: 29:9b:b9:a2:9c:d8:43:b6:2e:98:14:03:20:db:e4: b6:47:ec:c5:93:2f:41:38:11:08:79:01:88:b7:23: 6c:b1:2e:f0:e3:02:a8:b9:ae:c7:b7:aa:94:40:64: 6e:f6:d9:6b:e0:75:22:a0:ed:e7:06:30:ed:f4:04: c2:fe:cb:9a:e1:9c:d5:77:c3:1d:87:42:cf:10:99: 30:5a:8d:e7:d3:59:5f:57:b1:2c:ff:2f:89:af:c4: 0e:0a:88:40:9a:24:fa:4c:e0:a8:b7:be:14:33:cf: 45:64:c0:01:ef:4a:9b:3f:a2:9f:d6:9e:ce:cc:b6: c9:2a:23:d2:99:dc:ea:18:e0:76:fc:92:9d:ed:bb: 79:24:a4:3b:1e:72:cd:64:e6:fc:28:ef:ec:14:84: 2d:a3:0f:d0:ec:c4:17:5b:ed:81:38:77:09:f6:98: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:8B:0F:21:15:6E:29:82:57:4E:0B:92:3B:9C:02:D9:E2:B4:16 X509v3 Authority Key Identifier: keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:0b:f9:0f:13:7c:87:fa:cf:ed:8d:02:a0:af:97:fc:1d:9c: b3:4d:ca:91:ca:99:0c:73:46:99:52:c9:37:2c:07:8e:3e:79: b3:15:02:62:6f:ab:bf:7d:10:f3:a4:47:aa:3b:36:71:ad:7f: d1:2e:11:45:23:20:85:4d:e2:73:c6:84:d4:53:18:1a:99:a0: 27:b3:db:33:fb:d0:78:0a:5a:3d:d3:97:24:33:82:d8:4a:98: c4:77:02:06:54:93:ca:07:d9:40:8c:fd:f1:40:17:82:ab:cf: cb:79:e0:e6:16:52:30:fa:d4:3a:60:83:97:9c:e6:20:75:e0: 88:4d:43:65:a2:56:41:c2:2b:49:1e:d6:e0:11:f2:7e:8c:c5: 62:d2:56:03:d7:48:8e:4f:50:9c:ca:d3:7b:47:b1:70:f9:65: e6:d6:af:90:b3:0d:90:b8:e8:66:f3:ac:00:c3:71:47:f8:df: b3:bd:9e:45:92:0a:7d:36:84:6c:79:49:41:71:f8:fc:f8:2e: f5:89:16:73:f0:21:71:c3:38:a6:aa:85:09:5d:c9:3f:e1:5c: 10:c9:d2:c2:41:f7:a0:6b:e7:5a:31:24:4d:44:ba:6c:80:a9: dc:d4:d1:b4:dc:b3:eb:91:82:2d:d1:e4:05:d6:9c:c2:e5:1f: 1f:3a:e6:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9zIROosLTghJ+ylDXpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj ZmVmZDcwHhcNMjUxMjIwMTQwMDMxWhcNMjUxMjIxMTQwMDMxWjAzMTEwLwYDVQQD EygwZWUwOGIwZjIxMTU2ZTI5ODI1NzRlMGI5MjNiOWMwMmQ5ZTJiNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vVuL4LSKvE0nD3ilXQMo/qhDFlD xx2BPpSAyzy8i7WgSPidLIeMggUY2KydAGew9EaB48pFtGiBRgcJjyTYN+LP1WbG bScnrJMIaGZtihUI61jM4Kc3TY4pm7minNhDti6YFAMg2+S2R+zFky9BOBEIeQGI tyNssS7w4wKoua7Ht6qUQGRu9tlr4HUioO3nBjDt9ATC/sua4ZzVd8Mdh0LPEJkw Wo3n01lfV7Es/y+Jr8QOCohAmiT6TOCot74UM89FZMAB70qbP6Kf1p7OzLbJKiPS mdzqGOB2/JKd7bt5JKQ7HnLNZOb8KO/sFIQtow/Q7MQXW+2BOHcJ9piUSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7giw8hFW4pgldOC5I7nALZ4rQWMB8GA1UdIwQY MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5 LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgv5DxN8 h/rP7Y0CoK+X/B2cs03KkcqZDHNGmVLJNywHjj55sxUCYm+rv30Q86RHqjs2ca1/ 0S4RRSMghU3ic8aE1FMYGpmgJ7PbM/vQeApaPdOXJDOC2EqYxHcCBlSTygfZQIz9 8UAXgqvPy3ng5hZSMPrUOmCDl5zmIHXgiE1DZaJWQcIrSR7W4BHyfozFYtJWA9dI jk9QnMrTe0excPll5tavkLMNkLjoZvOsAMNxR/jfs72eRZIKfTaEbHlJQXH4/Pgu 9YkWc/AhccM4pqqFCV3JP+FcEMnSwkH3oGvnWjEkTUS6bICp3NTRtNyz65GCLdHk BdacwuUfHzrmSA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:06:11 2025 by rpki-client