This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft File: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft (raw, json) Hash identifier: FzCLIykI1F6Fc/BJpbjnjxuI6bhlIWTV6/b+ZC+Nb2s= Subject key identifier: 13:1D:B0:2D:46:7F:96:9A:1F:2D:95:7C:AA:3D:95:E0:B3:E6:8D:A1 Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85 Certificate issuer: /CN=c0c9413f076a782110c14490d890f1b3e98e0785 Certificate serial: 019B4249C84EC912CEEFA475779864BB4B2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft Manifest number: 0D39 Signing time: Sun 21 Dec 2025 19:01:30 +0000 Manifest this update: Sun 21 Dec 2025 19:01:30 +0000 Manifest next update: Mon 22 Dec 2025 19:01:30 +0000 Files and hashes: 1: XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa (hash: 6D9O10hjXxh7sEXhihEUoyls7053T5SpuEJHdN4TtnE=) 2: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl (hash: DZhI98q/H1yh4ZTAl5/cYM9bgRiOULLc82ywAHryRBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:c8:4e:c9:12:ce:ef:a4:75:77:98:64:bb:4b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785 Validity Not Before: Dec 21 19:01:30 2025 GMT Not After : Dec 22 19:01:30 2025 GMT Subject: CN=131db02d467f969a1f2d957caa3d95e0b3e68da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b0:9b:33:f4:2c:cb:5c:60:2e:32:9c:bd:c1: 12:73:eb:1e:99:c2:80:07:a6:c1:bf:4a:68:df:9f: 71:7f:20:2b:19:f2:fb:40:39:7b:df:72:39:e7:d3: 4e:15:d8:af:99:fd:27:c1:5b:18:38:dc:e9:54:8d: cc:16:43:aa:ab:47:05:34:dc:89:4f:28:bd:1f:d4: d8:8f:f2:f8:2a:4f:e7:5a:83:77:07:a5:f0:dc:1a: 84:00:1a:0d:6a:0e:4c:1c:81:28:98:48:44:03:b2: 17:81:47:62:08:09:71:5e:5f:e1:5a:ea:62:d8:35: 8d:ed:51:ca:a7:c4:dd:6a:5e:8b:5f:41:0c:d4:5f: 80:a3:1a:90:ca:6d:88:db:a2:3b:f3:94:dd:99:b3: 33:82:1f:ee:08:a4:21:2e:35:95:f0:ed:55:2f:8f: 65:6f:8d:ea:3b:f3:08:0c:9e:aa:07:22:db:7d:3f: 4c:2e:fe:be:09:b9:3f:07:53:7c:54:d3:82:03:bb: 68:51:c1:6c:4d:00:8d:81:00:96:ed:28:fb:9a:77: 7a:56:86:7b:4c:53:8f:b3:b8:05:4e:02:8f:d5:b1: 60:5b:2e:53:da:39:67:5d:02:a0:be:3c:68:03:52: a5:4b:50:f0:2b:67:e8:3f:55:76:1a:b7:99:d1:3c: 6a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:1D:B0:2D:46:7F:96:9A:1F:2D:95:7C:AA:3D:95:E0:B3:E6:8D:A1 X509v3 Authority Key Identifier: keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:90:59:e8:1c:21:4f:21:a3:ac:7c:9c:ab:95:28:4a:9b:4e: 42:0e:b0:61:c5:ab:98:2b:56:d0:ac:72:2f:b4:05:72:48:3e: 5a:b5:1d:92:8d:1d:39:e5:13:28:ab:e9:5f:1c:28:8c:1c:ba: 79:d3:8d:23:ac:b1:f1:af:5c:84:a8:f8:1d:f2:9b:bd:80:03: bd:a5:a3:c5:50:ac:20:ea:22:cd:c8:0d:99:f5:7a:5c:79:85: 07:92:07:03:8f:fe:3e:e4:15:4f:88:ea:45:b7:6b:33:b1:41: 0a:5a:60:39:5f:0d:ec:94:a4:2e:c6:fd:53:89:10:a0:2e:13: 5f:53:68:1a:35:bd:85:19:d1:f7:74:a5:28:16:b8:1c:89:1e: f4:ec:0c:aa:9f:43:c6:f0:24:12:9b:23:b4:3c:2c:53:0b:0c: 12:70:11:18:cd:f3:7e:f0:7c:38:ed:0b:3f:6e:9d:e6:aa:df: 0b:b2:ef:f2:ab:55:d7:86:f9:01:f5:f1:cf:68:05:2c:d3:c1: cd:82:7a:18:56:77:5f:a5:c4:90:ff:d0:25:6b:83:08:9d:2d: 0e:a3:c4:33:73:3e:f1:76:f1:b0:c2:94:91:1a:87:bf:74:8e: 68:f4:b9:0e:03:71:62:09:ee:bb:1e:c8:f3:2a:fd:b4:68:66: 99:23:9f:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSchOyRLO76R1d5hku0srMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYzk0MTNmMDc2YTc4MjExMGMxNDQ5MGQ4OTBmMWIzZTk4 ZTA3ODUwHhcNMjUxMjIxMTkwMTMwWhcNMjUxMjIyMTkwMTMwWjAzMTEwLwYDVQQD EygxMzFkYjAyZDQ2N2Y5NjlhMWYyZDk1N2NhYTNkOTVlMGIzZTY4ZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LCbM/Qsy1xgLjKcvcESc+semcKA B6bBv0po359xfyArGfL7QDl733I559NOFdivmf0nwVsYONzpVI3MFkOqq0cFNNyJ Tyi9H9TYj/L4Kk/nWoN3B6Xw3BqEABoNag5MHIEomEhEA7IXgUdiCAlxXl/hWupi 2DWN7VHKp8Tdal6LX0EM1F+AoxqQym2I26I785TdmbMzgh/uCKQhLjWV8O1VL49l b43qO/MIDJ6qByLbfT9MLv6+Cbk/B1N8VNOCA7toUcFsTQCNgQCW7Sj7mnd6VoZ7 TFOPs7gFTgKP1bFgWy5T2jlnXQKgvjxoA1KlS1DwK2foP1V2GreZ0TxqHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMdsC1Gf5aaHy2VfKo9leCz5o2hMB8GA1UdIwQY MBaAFMDJQT8HanghEMFEkNiQ8bPpjgeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMt YTQ1MjE4YzU4NDE4LzEvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMtYTQ1MjE4YzU4NDE4 LzEvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5BZ6Bwh TyGjrHycq5UoSptOQg6wYcWrmCtW0KxyL7QFckg+WrUdko0dOeUTKKvpXxwojBy6 edONI6yx8a9chKj4HfKbvYADvaWjxVCsIOoizcgNmfV6XHmFB5IHA4/+PuQVT4jq RbdrM7FBClpgOV8N7JSkLsb9U4kQoC4TX1NoGjW9hRnR93SlKBa4HIke9OwMqp9D xvAkEpsjtDwsUwsMEnARGM3zfvB8OO0LP26d5qrfC7Lv8qtV14b5AfXxz2gFLNPB zYJ6GFZ3X6XEkP/QJWuDCJ0tDqPEM3M+8XbxsMKUkRqHv3SOaPS5DgNxYgnuux7I 8yr9tGhmmSOf2A== -----END CERTIFICATE-----Generated at Sun Dec 21 23:38:34 2025 by rpki-client