This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft File: wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json) Hash identifier: ga7oOzu/da/Pcjje3L3/Y4CZP4rsF3R++7WK43Nk/d0= Subject key identifier: 1A:13:A7:5D:78:A6:A0:3D:91:6E:2B:0E:80:C2:96:F2:9E:CD:91:4E Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08 Certificate issuer: /CN=c1db041afabfd8c11f0b10b523799b65cfde3908 Certificate serial: 019B3AFD59A18D56F3997B84F99B286B68AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft Manifest number: 0740 Signing time: Sat 20 Dec 2025 09:00:40 +0000 Manifest this update: Sat 20 Dec 2025 09:00:40 +0000 Manifest next update: Sun 21 Dec 2025 09:00:40 +0000 Files and hashes: 1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=) 2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: Gx8LL8GI9NZzmpR6Du5a4nz5vvcfAKRsb21p8U5fyjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:59:a1:8d:56:f3:99:7b:84:f9:9b:28:6b:68:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908 Validity Not Before: Dec 20 09:00:40 2025 GMT Not After : Dec 21 09:00:40 2025 GMT Subject: CN=1a13a75d78a6a03d916e2b0e80c296f29ecd914e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:31:c1:4a:b0:e6:d6:86:cc:37:b0:c2:0d: 5d:74:74:0b:f3:da:b1:e9:d3:f1:ff:53:c1:f9:2c: 92:f4:73:89:c9:67:75:20:17:4d:01:9e:2d:a0:ad: 8b:4b:2e:ad:77:b7:21:48:f8:7d:d4:16:8a:65:fe: 98:9c:df:04:b4:a0:fd:1e:2e:34:01:2d:25:fb:64: 15:c9:96:0b:ff:a9:2d:93:b4:45:49:c6:ad:f7:f3: 77:42:e3:06:7a:a7:d7:ca:3b:92:73:a4:fc:84:c3: 3d:f6:a9:3c:9a:31:7f:c6:36:06:2b:31:8e:c9:09: 34:7f:98:eb:bb:ae:5b:70:05:5e:d0:a9:4e:92:7e: 41:af:d7:65:de:80:09:74:89:d4:23:6e:bf:16:a4: 48:9c:1e:8f:50:9b:30:be:2f:89:ca:ce:48:75:06: 2c:0c:ff:53:6b:a5:a3:ac:91:4c:24:c3:c5:10:63: 15:2b:15:84:49:24:4e:d5:21:db:85:4b:79:b2:2b: 2a:b7:0a:f7:86:4f:77:4a:aa:16:2e:50:af:5a:85: ac:47:ee:a6:c1:d8:37:11:db:60:b5:77:20:16:ed: b8:ac:14:9c:ba:ce:b8:2a:04:70:31:5f:dc:3c:8f: 05:5b:57:89:7c:07:8d:56:cb:f7:bb:e8:c3:7d:cd: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:13:A7:5D:78:A6:A0:3D:91:6E:2B:0E:80:C2:96:F2:9E:CD:91:4E X509v3 Authority Key Identifier: keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:d2:a2:38:64:cb:ee:82:a6:4c:96:16:37:10:25:1f:bb:4c: 5a:16:60:3e:e3:11:60:39:01:ef:23:53:8c:2e:8a:49:23:7d: c0:b6:0b:44:9e:4d:77:c1:0a:4f:94:ea:a4:3b:54:87:af:fd: 6d:32:34:f0:b2:e9:ec:6b:32:71:bd:19:d6:d5:0b:17:25:13: 50:f6:86:f6:24:9c:13:b6:23:0f:93:13:0b:74:9e:82:34:0a: 31:ec:16:6f:39:27:69:40:aa:24:32:8b:f6:2b:cc:ae:87:81: 18:8a:7b:bf:48:db:12:c2:f0:13:5a:ab:ed:ba:74:05:f8:3f: 35:b3:50:99:49:0c:46:34:df:49:91:12:7b:97:43:98:1e:04: c6:18:f0:92:08:eb:63:53:b9:7a:02:19:fe:79:47:c9:8e:d2: 38:99:0f:45:8e:7f:78:0d:33:6c:29:1b:30:12:33:29:55:12: 43:a8:60:7d:5e:3a:68:58:31:d9:64:70:6a:24:12:4a:d4:de: 3b:b3:0a:3a:12:a3:3a:d1:15:16:58:cc:51:ee:ee:2c:e6:03: b6:31:14:51:a2:f6:ec:58:95:0c:f0:4e:ab:e3:ed:8d:e3:ee: be:04:73:eb:02:24:10:7e:ca:d9:e0:7f:79:fa:9d:54:0d:1c: e5:d9:d1:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/VmhjVbzmXuE+Zsoa2itMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZGIwNDFhZmFiZmQ4YzExZjBiMTBiNTIzNzk5YjY1Y2Zk ZTM5MDgwHhcNMjUxMjIwMDkwMDQwWhcNMjUxMjIxMDkwMDQwWjAzMTEwLwYDVQQD EygxYTEzYTc1ZDc4YTZhMDNkOTE2ZTJiMGU4MGMyOTZmMjllY2Q5MTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNsxwUqw5taGzDewwg1ddHQL89qx 6dPx/1PB+SyS9HOJyWd1IBdNAZ4toK2LSy6td7chSPh91BaKZf6YnN8EtKD9Hi40 AS0l+2QVyZYL/6ktk7RFScat9/N3QuMGeqfXyjuSc6T8hMM99qk8mjF/xjYGKzGO yQk0f5jru65bcAVe0KlOkn5Br9dl3oAJdInUI26/FqRInB6PUJswvi+Jys5IdQYs DP9Ta6WjrJFMJMPFEGMVKxWESSRO1SHbhUt5sisqtwr3hk93SqoWLlCvWoWsR+6m wdg3EdtgtXcgFu24rBScus64KgRwMV/cPI8FW1eJfAeNVsv3u+jDfc0gowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoTp114pqA9kW4rDoDClvKezZFOMB8GA1UdIwQY MBaAFMHbBBr6v9jBHwsQtSN5m2XP3jkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAt MmZiMDk0NGI1MTk0LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81ZTA0ODktMTdjZi00MjJjLWFhNDAtMmZiMDk0NGI1MTk0 LzEvd2RzRUd2cV8yTUVmQ3hDMUkzbWJaY19lT1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdKiOGTL 7oKmTJYWNxAlH7tMWhZgPuMRYDkB7yNTjC6KSSN9wLYLRJ5Nd8EKT5TqpDtUh6/9 bTI08LLp7Gsycb0Z1tULFyUTUPaG9iScE7YjD5MTC3SegjQKMewWbzknaUCqJDKL 9ivMroeBGIp7v0jbEsLwE1qr7bp0Bfg/NbNQmUkMRjTfSZESe5dDmB4Exhjwkgjr Y1O5egIZ/nlHyY7SOJkPRY5/eA0zbCkbMBIzKVUSQ6hgfV46aFgx2WRwaiQSStTe O7MKOhKjOtEVFljMUe7uLOYDtjEUUaL27FiVDPBOq+PtjePuvgRz6wIkEH7K2eB/ efqdVA0c5dnRwA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:07:01 2025 by rpki-client