This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json) Hash identifier: j5L1FbAHRRKWG8fqfP9Ylv6kYMfJkfcVF5JyrfurFRo= Subject key identifier: 84:BB:00:FD:7C:46:64:6C:17:46:DF:31:00:A9:EC:BF:36:4D:77:66 Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98 Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98 Certificate serial: 019B3B6B71A1E868892EE451DD90E2D8315B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft Manifest number: 0E56 Signing time: Sat 20 Dec 2025 11:00:55 +0000 Manifest this update: Sat 20 Dec 2025 11:00:55 +0000 Manifest next update: Sun 21 Dec 2025 11:00:55 +0000 Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=) 2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: 5idEf8ym6NI6syym+mQ92q3JrTvcKA9JRyh9R9dQXpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:71:a1:e8:68:89:2e:e4:51:dd:90:e2:d8:31:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98 Validity Not Before: Dec 20 11:00:55 2025 GMT Not After : Dec 21 11:00:55 2025 GMT Subject: CN=84bb00fd7c46646c1746df3100a9ecbf364d7766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4f:68:24:f9:dc:f2:e3:b6:e7:8c:f6:92:c3: 70:3c:b6:d7:7b:24:f6:44:ff:d1:cd:0e:16:26:8c: cc:7c:2f:59:dd:53:e3:41:d1:a1:88:71:e4:71:fb: 6a:eb:69:ce:31:fe:b2:a2:cf:0d:75:6e:69:24:85: 6b:4b:51:7d:8d:ab:60:6b:25:44:5e:50:30:77:fb: 01:90:61:18:de:70:ce:54:e1:9e:96:ed:4e:e6:1d: a3:d2:72:43:4b:3a:a5:7e:1a:fc:5f:4d:b7:b3:5c: c0:07:58:56:60:78:07:8a:7d:51:ae:8a:c2:75:3d: c3:a1:4b:3e:b3:aa:c7:be:23:92:63:63:3c:96:51: df:07:71:87:08:46:01:50:16:18:50:2a:09:a1:a8: d9:7d:c3:e8:16:d4:12:57:be:7d:75:b0:eb:48:ea: 24:de:71:cb:00:91:46:01:d4:e9:24:03:bb:c3:63: 6f:1b:f2:c3:e8:6a:6c:ba:c7:15:34:d1:29:93:f8: e0:78:97:3e:49:af:13:29:39:c9:de:18:7b:85:61: f8:d6:ff:c3:c3:32:3b:c1:4f:71:9f:32:35:56:99: 35:77:22:07:af:96:31:8a:dc:cd:5e:ec:bc:c8:de: 10:75:5a:a7:d0:3f:da:9f:0c:fc:09:e6:8b:46:c9: 2a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BB:00:FD:7C:46:64:6C:17:46:DF:31:00:A9:EC:BF:36:4D:77:66 X509v3 Authority Key Identifier: keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:de:a4:08:d4:b4:47:bf:4a:a4:77:46:fb:37:8c:28:2c:fb: 6a:2c:80:06:97:e0:fc:c8:75:88:2c:ab:9c:db:ef:7d:ee:8b: a4:65:e0:1a:40:f1:c4:48:5a:8d:76:5c:3b:b3:01:17:93:24: 57:c1:08:7e:b6:98:23:85:ac:30:8c:37:11:f7:e8:9a:be:56: 78:7f:94:7d:0a:19:cd:5e:fb:57:99:b0:79:e1:2b:3d:05:03: 6f:b0:58:df:dc:78:05:74:5e:dd:ee:4f:ce:92:39:fd:71:db: 82:10:a4:3d:09:14:d4:bd:ad:1b:e1:9e:27:b2:b0:60:eb:6e: ae:13:01:35:24:92:3a:24:29:51:d2:7e:e0:44:4e:13:ac:47: 0c:8c:a5:5d:e8:7d:cc:81:6f:04:6b:08:11:fe:b3:1a:bf:a8: cb:fd:9b:45:ab:8f:b1:ea:18:a6:d5:0a:7e:8f:50:02:9f:08: 0a:d3:37:3a:95:5c:00:4c:ba:d0:a5:e0:05:44:2b:d8:96:93: 02:69:f4:91:3b:2f:ea:79:71:39:38:88:9c:5b:86:be:a6:0a: 8a:7b:e7:3d:36:18:58:60:f4:97:31:3a:b4:68:8f:da:57:b4: 6a:3f:96:11:c2:5c:0b:59:cc:7f:d2:11:7e:a8:a2:b7:8d:46: ba:c4:01:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a3Gh6GiJLuRR3ZDi2DFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjBlZTk4NDI2MjcwMzFlY2EyNjRkYWM2NWU1ZmVmNjM5 NDNmOTgwHhcNMjUxMjIwMTEwMDU1WhcNMjUxMjIxMTEwMDU1WjAzMTEwLwYDVQQD Eyg4NGJiMDBmZDdjNDY2NDZjMTc0NmRmMzEwMGE5ZWNiZjM2NGQ3NzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU9oJPnc8uO254z2ksNwPLbXeyT2 RP/RzQ4WJozMfC9Z3VPjQdGhiHHkcftq62nOMf6yos8NdW5pJIVrS1F9jatgayVE XlAwd/sBkGEY3nDOVOGelu1O5h2j0nJDSzqlfhr8X023s1zAB1hWYHgHin1RrorC dT3DoUs+s6rHviOSY2M8llHfB3GHCEYBUBYYUCoJoajZfcPoFtQSV759dbDrSOok 3nHLAJFGAdTpJAO7w2NvG/LD6GpsuscVNNEpk/jgeJc+Sa8TKTnJ3hh7hWH41v/D wzI7wU9xnzI1Vpk1dyIHr5YxitzNXuy8yN4QdVqn0D/anwz8CeaLRskqjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS7AP18RmRsF0bfMQCp7L82TXdmMB8GA1UdIwQY MBaAFMDw7phCYnAx7KJk2sZeX+9jlD+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAt YzZlY2U1OTAxNTgwLzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAtYzZlY2U1OTAxNTgw LzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbt6kCNS0 R79KpHdG+zeMKCz7aiyABpfg/Mh1iCyrnNvvfe6LpGXgGkDxxEhajXZcO7MBF5Mk V8EIfraYI4WsMIw3Effomr5WeH+UfQoZzV77V5mweeErPQUDb7BY39x4BXRe3e5P zpI5/XHbghCkPQkU1L2tG+GeJ7KwYOturhMBNSSSOiQpUdJ+4EROE6xHDIylXeh9 zIFvBGsIEf6zGr+oy/2bRauPseoYptUKfo9QAp8ICtM3OpVcAEy60KXgBUQr2JaT Amn0kTsv6nlxOTiInFuGvqYKinvnPTYYWGD0lzE6tGiP2le0aj+WEcJcC1nMf9IR fqiit41GusQBmA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:54:33 2025 by rpki-client