This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft File: wPDumEJicDHsomTaxl5f72OUP5g.mft (raw, json) Hash identifier: ANPYE/DTsj2uGpeaIfRD2Us6pdrZi7iwNnrh6sz6XIA= Subject key identifier: 0B:75:C9:52:E5:0A:7D:C9:5C:E8:F3:3E:A4:38:50:DF:CC:48:34:F5 Authority key identifier: C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98 Certificate issuer: /CN=c0f0ee9842627031eca264dac65e5fef63943f98 Certificate serial: 019B4702631037AD8FA3C8132B611A88518E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft Manifest number: 0E5C Signing time: Mon 22 Dec 2025 17:01:37 +0000 Manifest this update: Mon 22 Dec 2025 17:01:37 +0000 Manifest next update: Tue 23 Dec 2025 17:01:37 +0000 Files and hashes: 1: KyVtpyRTcvgBS4JaV8NPZOuwdLQ.roa (hash: iY3Qd0RfijC3WmQCC9uFX5dUNLie0ZRKHtS62kmKzs8=) 2: wPDumEJicDHsomTaxl5f72OUP5g.crl (hash: trDiK44F1LpE3KRiL2jM5dyciKHPsvKt8LaLZ4EUUxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:02:63:10:37:ad:8f:a3:c8:13:2b:61:1a:88:51:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f0ee9842627031eca264dac65e5fef63943f98 Validity Not Before: Dec 22 17:01:37 2025 GMT Not After : Dec 23 17:01:37 2025 GMT Subject: CN=0b75c952e50a7dc95ce8f33ea43850dfcc4834f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:c0:28:08:07:52:83:bf:4e:4f:01:46:71: 9e:4d:40:30:78:18:74:58:16:3e:f4:c1:df:f9:74: 74:6d:e7:23:40:a5:89:2e:10:0e:dd:af:45:f4:57: ca:e6:52:7e:aa:25:be:6f:6d:37:eb:66:ec:b3:c9: 3d:62:f2:35:42:23:ba:a4:d3:24:4e:e1:9d:bf:c8: 94:2e:d7:d6:3c:f3:a1:1e:82:13:03:f1:ae:97:46: 50:3c:6f:7d:93:12:39:08:2b:86:57:65:4a:a5:17: b8:09:66:bf:48:1c:05:9f:b7:90:a0:ef:c1:62:41: 8b:03:80:b0:72:87:e6:1a:29:65:74:1c:d7:e1:12: 7b:3d:9d:bd:0a:8c:10:ee:00:76:86:86:b4:99:51: bd:2b:50:d4:58:63:0e:c7:cb:6f:ae:8a:dd:b2:06: 57:5e:a9:23:45:86:2c:60:16:ca:70:c5:19:c2:e5: 6a:e0:a3:cc:33:2c:0d:d7:02:e7:27:1e:bf:bf:0e: 5a:32:7e:29:d8:60:94:f6:63:30:ff:eb:07:37:a7: 5a:36:85:8b:c5:d9:f6:2c:56:94:d8:4e:2e:b3:c9: cd:7b:b1:18:8c:21:93:d4:02:63:e6:dc:76:38:01: 9c:d2:4d:47:b1:50:9f:d7:83:e5:05:af:be:60:3c: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:75:C9:52:E5:0A:7D:C9:5C:E8:F3:3E:A4:38:50:DF:CC:48:34:F5 X509v3 Authority Key Identifier: keyid:C0:F0:EE:98:42:62:70:31:EC:A2:64:DA:C6:5E:5F:EF:63:94:3F:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPDumEJicDHsomTaxl5f72OUP5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5047e8-c547-4b75-afc0-c6ece5901580/1/wPDumEJicDHsomTaxl5f72OUP5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:d1:3e:69:d5:e6:af:a8:9d:27:b4:c6:87:50:9b:71:68:6c: 88:24:25:8e:3d:0f:30:32:4e:b7:cb:22:f8:97:68:a6:de:07: db:75:52:45:87:80:3b:13:ac:f0:21:46:e8:5f:05:46:f1:38: e2:d3:42:18:98:6b:fc:9c:3b:bb:99:29:57:77:43:98:0f:03: 2f:ab:6a:5e:60:31:e7:78:f0:43:5f:89:09:70:b0:62:33:c7: eb:0c:22:82:6d:aa:a1:29:ab:44:b3:20:47:4c:d5:dd:64:8b: 63:3e:dd:38:bd:a8:43:30:ad:06:22:0f:34:8a:8c:5e:63:16: 65:1b:a2:e0:b1:aa:48:77:d4:8d:62:a6:61:8d:39:22:18:d2: a0:06:ab:9b:71:09:c0:9a:87:04:48:7a:86:fe:f7:78:5d:a9: 9f:cc:ce:79:96:29:c4:cc:45:bf:64:f0:fd:7f:73:90:1b:b7: a3:d6:c0:f4:b4:7e:a2:2d:fd:15:02:a2:f4:5c:fc:d7:23:57: 1b:e2:75:45:69:cc:67:e3:35:e7:ed:71:a9:1b:2f:94:fc:dd: 81:9f:22:6b:7c:e1:23:41:22:f9:6e:4a:d9:a0:a1:24:9b:15: 2e:bb:07:47:f6:5c:4e:14:05:e5:4f:fe:0e:a1:55:bb:0c:70: 2c:f1:81:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAmMQN62Po8gTK2EaiFGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjBlZTk4NDI2MjcwMzFlY2EyNjRkYWM2NWU1ZmVmNjM5 NDNmOTgwHhcNMjUxMjIyMTcwMTM3WhcNMjUxMjIzMTcwMTM3WjAzMTEwLwYDVQQD EygwYjc1Yzk1MmU1MGE3ZGM5NWNlOGYzM2VhNDM4NTBkZmNjNDgzNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02LAKAgHUoO/Tk8BRnGeTUAweBh0 WBY+9MHf+XR0becjQKWJLhAO3a9F9FfK5lJ+qiW+b20362bss8k9YvI1QiO6pNMk TuGdv8iULtfWPPOhHoITA/Gul0ZQPG99kxI5CCuGV2VKpRe4CWa/SBwFn7eQoO/B YkGLA4CwcofmGilldBzX4RJ7PZ29CowQ7gB2hoa0mVG9K1DUWGMOx8tvrordsgZX XqkjRYYsYBbKcMUZwuVq4KPMMywN1wLnJx6/vw5aMn4p2GCU9mMw/+sHN6daNoWL xdn2LFaU2E4us8nNe7EYjCGT1AJj5tx2OAGc0k1HsVCf14PlBa++YDzlmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAt1yVLlCn3JXOjzPqQ4UN/MSDT1MB8GA1UdIwQY MBaAFMDw7phCYnAx7KJk2sZeX+9jlD+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAt YzZlY2U1OTAxNTgwLzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy81MDQ3ZTgtYzU0Ny00Yjc1LWFmYzAtYzZlY2U1OTAxNTgw LzEvd1BEdW1FSmljREhzb21UYXhsNWY3Mk9VUDVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNE+adXm r6idJ7TGh1CbcWhsiCQljj0PMDJOt8si+Jdopt4H23VSRYeAOxOs8CFG6F8FRvE4 4tNCGJhr/Jw7u5kpV3dDmA8DL6tqXmAx53jwQ1+JCXCwYjPH6wwigm2qoSmrRLMg R0zV3WSLYz7dOL2oQzCtBiIPNIqMXmMWZRui4LGqSHfUjWKmYY05IhjSoAarm3EJ wJqHBEh6hv73eF2pn8zOeZYpxMxFv2Tw/X9zkBu3o9bA9LR+oi39FQKi9Fz81yNX G+J1RWnMZ+M15+1xqRsvlPzdgZ8ia3zhI0Ei+W5K2aChJJsVLrsHR/ZcThQF5U/+ DqFVuwxwLPGBCg== -----END CERTIFICATE-----Generated at Mon Dec 22 22:53:54 2025 by rpki-client