This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft File: WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft (raw, json) Hash identifier: HNkB4n+1OqjEMcR1Sgye3NvHvUs1lMrB/hS1NOtNZ0g= Subject key identifier: 1A:BC:09:D7:8F:A9:92:1F:80:A4:9D:06:BB:7D:E3:73:10:41:41:0E Authority key identifier: 58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8 Certificate issuer: /CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8 Certificate serial: 019B56071758638AB3FF3060D9E99D1D2159 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft Manifest number: 0D75 Signing time: Thu 25 Dec 2025 15:01:03 +0000 Manifest this update: Thu 25 Dec 2025 15:01:03 +0000 Manifest next update: Fri 26 Dec 2025 15:01:03 +0000 Files and hashes: 1: D1M0sjr1PH8Yys4-1MS43KjOpQM.roa (hash: 2Q7ZkQbIGE2fBfzNEEGOF12hD07hA4SM+mHj72HM/gU=) 2: WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl (hash: u+tMwr9W9dF7tdP0QZkikVApCXE/S+Jhtu4velZmaSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:07:17:58:63:8a:b3:ff:30:60:d9:e9:9d:1d:21:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=583ee3c2ec4a19025c0392ad1ee6a4641bcdd0c8 Validity Not Before: Dec 25 15:01:03 2025 GMT Not After : Dec 26 15:01:03 2025 GMT Subject: CN=1abc09d78fa9921f80a49d06bb7de3731041410e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:d0:b6:b0:11:63:83:1d:46:30:04:43:c3: e8:b1:d8:22:f7:ad:45:0a:bb:56:72:2d:4c:25:bd: f5:46:0a:81:bc:e0:4c:59:78:aa:e2:a3:38:74:05: 5a:ff:ab:e4:3c:0f:8d:f5:2a:41:41:b2:32:ad:63: 49:8b:c1:35:72:79:23:88:f3:c8:34:6a:18:c5:3f: 04:fc:10:16:98:a4:c9:42:35:f2:a6:51:4f:93:9b: fd:5e:06:70:af:20:ac:81:c2:be:b8:18:55:94:ce: 53:29:25:e0:b6:77:3c:a5:bb:f8:ba:76:31:45:4b: 28:f3:27:37:37:13:e9:6a:cc:c1:ae:9c:d7:c3:4a: db:9a:aa:e8:b2:39:40:e3:d4:39:64:a7:fe:7c:65: 20:4e:ce:a7:10:39:43:7d:e5:2c:fd:56:6d:45:8c: 73:66:bc:88:82:80:6e:70:5a:c1:57:8f:b2:f0:7d: 8a:ec:99:08:fb:33:e5:3e:50:8b:61:b1:9d:dd:8c: 84:2a:fb:c8:92:35:0e:61:91:be:54:69:66:f9:52: cf:dc:cd:58:70:ea:55:38:a1:7b:0a:9f:44:f1:9a: 82:30:56:32:ab:0c:68:d2:cb:2a:42:4f:d7:6f:f2: 47:d0:4f:1b:30:95:07:85:f4:c9:4e:80:18:a6:5a: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:BC:09:D7:8F:A9:92:1F:80:A4:9D:06:BB:7D:E3:73:10:41:41:0E X509v3 Authority Key Identifier: keyid:58:3E:E3:C2:EC:4A:19:02:5C:03:92:AD:1E:E6:A4:64:1B:CD:D0:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD7jwuxKGQJcA5KtHuakZBvN0Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b73b0b-7c0c-448a-8bcc-35cc214dea81/1/WD7jwuxKGQJcA5KtHuakZBvN0Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:5d:2a:cd:62:20:4a:0d:3f:ad:b3:1c:a8:f9:0f:f6:e9:48: 07:19:54:a6:0f:fa:1a:27:9c:31:cf:da:29:04:2b:36:20:07: ce:1c:08:c3:9f:9e:d9:f8:a2:ee:08:aa:eb:66:3f:50:c2:21: b8:69:fb:94:b6:54:7a:5f:bf:9b:53:04:1e:2d:06:cc:7b:ec: d9:d5:29:24:04:3b:12:47:18:3b:e8:c0:10:33:9d:41:ac:31: 2e:07:f6:d4:ca:6a:e1:76:d0:27:03:06:4b:b4:75:79:76:8f: a5:3c:93:ce:ce:4d:c8:c5:df:33:09:b0:b2:f3:9c:fb:84:44: 98:ae:c9:94:99:a3:f5:d7:69:b0:6c:83:4a:b0:82:8d:0d:9b: 91:1a:25:aa:1d:ef:21:3b:04:ea:c8:53:f5:e2:13:95:bd:e8: bf:5e:28:40:b4:7c:6c:78:a9:db:82:36:eb:87:3c:57:b5:24: b3:2c:49:7d:cb:85:a7:9f:ee:1a:fc:cf:40:0d:9b:5c:75:f2: 2e:dd:2b:94:52:48:f5:38:c7:32:74:ef:7b:cc:eb:b9:46:d2: 74:06:58:72:8a:37:7c:49:d2:d7:5c:bf:63:ef:af:15:d6:e6: 8a:01:d0:4c:ab:f2:de:1e:e8:fc:b9:0e:e1:90:66:60:96:5c: cf:89:63:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBxdYY4qz/zBg2emdHSFZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4M2VlM2MyZWM0YTE5MDI1YzAzOTJhZDFlZTZhNDY0MWJj ZGQwYzgwHhcNMjUxMjI1MTUwMTAzWhcNMjUxMjI2MTUwMTAzWjAzMTEwLwYDVQQD EygxYWJjMDlkNzhmYTk5MjFmODBhNDlkMDZiYjdkZTM3MzEwNDE0MTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubvQtrARY4MdRjAEQ8Posdgi961F CrtWci1MJb31RgqBvOBMWXiq4qM4dAVa/6vkPA+N9SpBQbIyrWNJi8E1cnkjiPPI NGoYxT8E/BAWmKTJQjXyplFPk5v9XgZwryCsgcK+uBhVlM5TKSXgtnc8pbv4unYx RUso8yc3NxPpaszBrpzXw0rbmqrosjlA49Q5ZKf+fGUgTs6nEDlDfeUs/VZtRYxz ZryIgoBucFrBV4+y8H2K7JkI+zPlPlCLYbGd3YyEKvvIkjUOYZG+VGlm+VLP3M1Y cOpVOKF7Cp9E8ZqCMFYyqwxo0ssqQk/Xb/JH0E8bMJUHhfTJToAYplqG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq8CdePqZIfgKSdBrt943MQQUEOMB8GA1UdIwQY MBaAFFg+48LsShkCXAOSrR7mpGQbzdDIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2Mt MzVjYzIxNGRlYTgxLzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9iNzNiMGItN2MwYy00NDhhLThiY2MtMzVjYzIxNGRlYTgx LzEvV0Q3and1eEtHUUpjQTVLdEh1YWtaQnZOME1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA110qzWIg Sg0/rbMcqPkP9ulIBxlUpg/6GiecMc/aKQQrNiAHzhwIw5+e2fii7giq62Y/UMIh uGn7lLZUel+/m1MEHi0GzHvs2dUpJAQ7EkcYO+jAEDOdQawxLgf21Mpq4XbQJwMG S7R1eXaPpTyTzs5NyMXfMwmwsvOc+4REmK7JlJmj9ddpsGyDSrCCjQ2bkRolqh3v ITsE6shT9eITlb3ov14oQLR8bHip24I264c8V7UksyxJfcuFp5/uGvzPQA2bXHXy Lt0rlFJI9TjHMnTve8zruUbSdAZYcoo3fEnS11y/Y++vFdbmigHQTKvy3h7o/LkO 4ZBmYJZcz4ljmw== -----END CERTIFICATE-----Generated at Fri Dec 26 00:17:10 2025 by rpki-client