This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft File: wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json) Hash identifier: kSKT8FlPTgcxrnm8j+oti5QlgYx+sj+QhheXDDliJx0= Subject key identifier: 14:00:DB:83:98:D9:33:F4:4B:31:D7:4C:5F:CE:22:B5:13:FD:86:E9 Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 Certificate issuer: /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Certificate serial: 019B3CEBAA6F038B076D511142A23244D3B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft Manifest number: 11D7 Signing time: Sat 20 Dec 2025 18:00:36 +0000 Manifest this update: Sat 20 Dec 2025 18:00:36 +0000 Manifest next update: Sun 21 Dec 2025 18:00:36 +0000 Files and hashes: 1: 1-f9PBVCsqBgm5V29oKXRRYWkevY.roa (hash: 7Ql3JH1RgsBJ7ZK4VNDw9mOs8UhnRqnrPre6nqQT+h0=) 2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: C8DKlM/CtD1pvG6evyMQrBzCof4i06grko9m/PhcyZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:aa:6f:03:8b:07:6d:51:11:42:a2:32:44:d3:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Validity Not Before: Dec 20 18:00:36 2025 GMT Not After : Dec 21 18:00:36 2025 GMT Subject: CN=1400db8398d933f44b31d74c5fce22b513fd86e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:70:de:cb:95:60:58:97:44:11:d8:51:ce: 67:02:a2:b3:70:32:c7:52:8c:d7:de:82:df:57:7b: 58:38:8b:0c:86:40:a7:36:00:70:ea:ad:97:98:12: 8b:84:aa:f3:97:03:c4:ce:25:02:5d:1e:72:c5:cb: 3f:77:53:21:f9:56:0a:79:a2:00:c0:ab:65:b8:45: ff:c1:f1:4c:75:7d:bd:3f:3e:20:46:2a:54:ca:6b: a6:5a:76:94:be:da:4f:46:9f:34:c8:a8:65:f6:4d: 06:bf:b6:bd:7f:e3:22:73:0d:5f:41:9a:7e:b2:58: 0a:46:d5:9b:5a:74:33:46:2e:f3:50:a7:e6:cd:54: 0c:d7:2a:01:a0:49:51:7b:66:e5:74:95:71:c8:6b: d8:b6:7e:f4:c2:d3:0c:c8:61:1c:2e:70:2f:8d:f5: d0:18:e9:a4:d7:06:d3:4b:09:36:e2:8b:06:3a:fd: 6b:e0:b0:d0:e4:ca:a8:ea:e1:a9:1f:13:d4:91:b2: 2b:5b:ab:d1:e0:ec:1a:76:b1:ba:13:81:b0:ed:22: 6f:07:9e:ed:9a:22:a0:48:9b:c3:fa:31:39:26:15: 65:f9:e7:6c:12:07:db:15:81:e6:72:b6:f1:49:fb: c7:04:99:0a:b4:bd:96:0a:cd:50:0e:92:5c:92:19: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:00:DB:83:98:D9:33:F4:4B:31:D7:4C:5F:CE:22:B5:13:FD:86:E9 X509v3 Authority Key Identifier: keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:45:05:95:47:65:06:cb:a5:14:0e:72:a3:1f:89:2e:4e:76: b3:99:93:d9:95:e9:12:92:73:22:dc:4c:10:16:b5:af:e0:f7: 9e:76:27:45:73:8c:96:3a:d1:da:63:bf:55:84:db:34:73:ea: d2:23:ea:ee:86:9d:a9:91:30:11:f5:a4:18:1c:33:14:5c:37: ca:a5:ab:d1:15:f4:e8:fc:31:10:aa:ab:93:bf:ed:e6:1e:3e: 9b:f1:00:13:d8:ef:c4:65:95:49:fb:6c:68:bd:0e:58:c4:a1: 45:57:07:2c:0b:b3:46:b6:1c:25:9a:2e:71:a9:84:fa:f6:43: f8:b7:79:b1:0f:57:98:f6:81:df:88:ee:78:88:f7:4b:16:4e: 1d:03:c8:b1:0c:83:88:e3:97:2c:d6:b7:04:de:0c:b1:50:7c: b2:97:a9:c0:ba:d8:1e:e6:74:57:39:6f:eb:dc:ae:c5:51:8f: 08:0b:0e:fb:cb:82:12:ab:a7:88:66:30:b9:39:55:6d:b1:c4: 2a:ea:cf:86:34:2e:ec:a9:45:b9:69:14:02:78:94:36:ff:a6: bf:19:4a:de:4b:e3:79:63:d7:21:95:16:ad:6a:94:d4:82:24: ea:f8:f5:84:76:33:9a:c2:88:96:d3:70:79:c6:2c:46:43:6b: 27:d7:46:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs866pvA4sHbVERQqIyRNOzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjY5ZDJmNDc0NDc0ZGJiNTdmNmJlYzhjMmQ2NWQ1ZTBj Mjk2NjEwHhcNMjUxMjIwMTgwMDM2WhcNMjUxMjIxMTgwMDM2WjAzMTEwLwYDVQQD EygxNDAwZGI4Mzk4ZDkzM2Y0NGIzMWQ3NGM1ZmNlMjJiNTEzZmQ4NmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zJw3suVYFiXRBHYUc5nAqKzcDLH UozX3oLfV3tYOIsMhkCnNgBw6q2XmBKLhKrzlwPEziUCXR5yxcs/d1Mh+VYKeaIA wKtluEX/wfFMdX29Pz4gRipUymumWnaUvtpPRp80yKhl9k0Gv7a9f+Micw1fQZp+ slgKRtWbWnQzRi7zUKfmzVQM1yoBoElRe2bldJVxyGvYtn70wtMMyGEcLnAvjfXQ GOmk1wbTSwk24osGOv1r4LDQ5Mqo6uGpHxPUkbIrW6vR4OwadrG6E4Gw7SJvB57t miKgSJvD+jE5JhVl+edsEgfbFYHmcrbxSfvHBJkKtL2WCs1QDpJckhlfTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQA24OY2TP0SzHXTF/OIrUT/YbpMB8GA1UdIwQY MBaAFMD2nS9HRHTbtX9r7IwtZdXgwpZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUt MjU5MDRiYTlhMzU1LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUtMjU5MDRiYTlhMzU1 LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0UFlUdl BsulFA5yox+JLk52s5mT2ZXpEpJzItxMEBa1r+D3nnYnRXOMljrR2mO/VYTbNHPq 0iPq7oadqZEwEfWkGBwzFFw3yqWr0RX06PwxEKqrk7/t5h4+m/EAE9jvxGWVSfts aL0OWMShRVcHLAuzRrYcJZoucamE+vZD+Ld5sQ9XmPaB34jueIj3SxZOHQPIsQyD iOOXLNa3BN4MsVB8spepwLrYHuZ0Vzlv69yuxVGPCAsO+8uCEquniGYwuTlVbbHE KurPhjQu7KlFuWkUAniUNv+mvxlK3kvjeWPXIZUWrWqU1IIk6vj1hHYzmsKIltNw ecYsRkNrJ9dGIA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:19:56 2025 by rpki-client