This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft File: wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json) Hash identifier: WCBdBgy/xp1/XjBW/9fL63kp+S0wf8EN17gLsLnQM4A= Subject key identifier: D0:F9:36:C6:4D:9E:58:CC:00:BC:F7:CD:6E:59:3C:08:9B:69:5D:5D Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 Certificate issuer: /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Certificate serial: 019B6F2213363E86F1456908660E7FE89158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft Manifest number: 11F1 Signing time: Tue 30 Dec 2025 12:01:02 +0000 Manifest this update: Tue 30 Dec 2025 12:01:02 +0000 Manifest next update: Wed 31 Dec 2025 12:01:02 +0000 Files and hashes: 1: 1-f9PBVCsqBgm5V29oKXRRYWkevY.roa (hash: 7Ql3JH1RgsBJ7ZK4VNDw9mOs8UhnRqnrPre6nqQT+h0=) 2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: E5gc76t64g8Nmz4Rjg1+cCzOFuIH2X7n+h/up1IukYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:22:13:36:3e:86:f1:45:69:08:66:0e:7f:e8:91:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Validity Not Before: Dec 30 12:01:02 2025 GMT Not After : Dec 31 12:01:02 2025 GMT Subject: CN=d0f936c64d9e58cc00bcf7cd6e593c089b695d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:b1:1b:c4:17:d5:c6:d0:d4:8d:02:b9:68: d9:b7:c1:8d:72:1c:0c:e3:1f:03:be:84:95:c7:67: 15:ca:ed:73:c8:45:13:5b:bc:ca:9d:de:bc:8c:e6: 8b:de:27:4a:ac:c5:60:fd:83:ac:d0:b4:17:78:97: d6:52:ff:4a:b9:12:62:ce:d6:1c:e7:4a:9e:21:8b: ff:92:2a:7b:dc:45:68:a7:bb:d4:83:5e:93:85:fc: 88:d4:1d:e7:2d:f8:09:19:e2:98:83:f1:83:ad:a8: 3d:73:7b:2c:4c:41:a4:74:1a:c2:c7:05:6c:f9:24: 58:e4:81:75:0c:3f:13:36:09:fe:c9:40:13:44:03: ea:75:da:62:e1:28:44:65:e0:1e:7c:3c:7b:ed:68: db:10:51:19:5d:c0:ce:cf:c4:42:c9:78:34:c3:b3: d0:14:ca:c4:d7:af:c7:7f:88:2b:10:f2:a5:e3:28: f7:ef:f2:07:ef:b2:5d:d3:f9:bb:8d:bc:dd:e8:38: 96:43:e1:dc:8c:45:56:2b:67:19:4a:0e:1c:ef:08: 29:3e:63:be:4e:3f:36:af:e7:a4:6c:a4:45:16:3b: fc:d8:f9:98:39:8d:d0:bc:31:0e:5d:26:ce:fd:62: 51:a9:3e:26:5b:a1:f7:8b:0e:39:2b:09:7e:76:ac: 2a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F9:36:C6:4D:9E:58:CC:00:BC:F7:CD:6E:59:3C:08:9B:69:5D:5D X509v3 Authority Key Identifier: keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:3b:f3:de:b0:fb:1a:91:d3:b5:14:5a:65:6c:97:c6:72:8c: 83:08:dc:2b:df:ba:01:76:6f:57:ce:28:69:a2:33:fd:c6:fa: f5:5f:db:d1:85:d5:1b:12:4c:ff:71:53:bf:be:8b:a2:a9:4d: 12:d3:f3:7d:c5:10:a7:80:ff:e0:89:35:15:3c:f8:cf:90:25: 75:54:06:b5:4b:5b:03:aa:a5:43:25:7f:34:6c:2a:6c:ef:d0: 8d:22:5b:1a:fe:e1:00:0e:6f:94:d3:e6:80:6a:2b:82:88:61: 3c:7d:3d:bc:42:e7:b6:f0:2e:8c:81:8d:87:33:f1:4a:c7:c2: cd:1a:1e:9c:61:d1:24:34:9a:9e:45:84:bc:fd:23:9e:98:bd: 62:49:c7:bd:1b:ab:bc:7f:e9:2a:70:53:a0:db:a5:cc:21:0c: d8:db:c0:df:c2:a7:4d:22:74:d3:84:07:aa:e6:2c:0a:06:62: 83:a2:1f:14:82:ac:5a:8c:a7:9f:b5:4f:7d:a5:0f:f3:07:d3: 90:37:f8:81:be:b0:7f:40:06:e9:64:23:58:51:69:f4:6b:a3: 7d:ac:3c:2a:fb:73:49:1c:aa:81:73:41:14:26:28:31:32:59: 96:7c:9a:df:74:b5:91:d5:ba:ef:a2:e2:46:ca:5a:f9:85:cd: bc:ab:30:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIhM2PobxRWkIZg5/6JFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjY5ZDJmNDc0NDc0ZGJiNTdmNmJlYzhjMmQ2NWQ1ZTBj Mjk2NjEwHhcNMjUxMjMwMTIwMTAyWhcNMjUxMjMxMTIwMTAyWjAzMTEwLwYDVQQD EyhkMGY5MzZjNjRkOWU1OGNjMDBiY2Y3Y2Q2ZTU5M2MwODliNjk1ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArROxG8QX1cbQ1I0CuWjZt8GNchwM 4x8DvoSVx2cVyu1zyEUTW7zKnd68jOaL3idKrMVg/YOs0LQXeJfWUv9KuRJiztYc 50qeIYv/kip73EVop7vUg16ThfyI1B3nLfgJGeKYg/GDrag9c3ssTEGkdBrCxwVs +SRY5IF1DD8TNgn+yUATRAPqddpi4ShEZeAefDx77WjbEFEZXcDOz8RCyXg0w7PQ FMrE16/Hf4grEPKl4yj37/IH77Jd0/m7jbzd6DiWQ+HcjEVWK2cZSg4c7wgpPmO+ Tj82r+ekbKRFFjv82PmYOY3QvDEOXSbO/WJRqT4mW6H3iw45Kwl+dqwqhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFND5NsZNnljMALz3zW5ZPAibaV1dMB8GA1UdIwQY MBaAFMD2nS9HRHTbtX9r7IwtZdXgwpZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUt MjU5MDRiYTlhMzU1LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUtMjU5MDRiYTlhMzU1 LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTvz3rD7 GpHTtRRaZWyXxnKMgwjcK9+6AXZvV84oaaIz/cb69V/b0YXVGxJM/3FTv76LoqlN EtPzfcUQp4D/4Ik1FTz4z5AldVQGtUtbA6qlQyV/NGwqbO/QjSJbGv7hAA5vlNPm gGorgohhPH09vELntvAujIGNhzPxSsfCzRoenGHRJDSankWEvP0jnpi9YknHvRur vH/pKnBToNulzCEM2NvA38KnTSJ004QHquYsCgZig6IfFIKsWoynn7VPfaUP8wfT kDf4gb6wf0AG6WQjWFFp9Gujfaw8KvtzSRyqgXNBFCYoMTJZlnya33S1kdW676Li Rspa+YXNvKswLA== -----END CERTIFICATE-----Generated at Tue Dec 30 18:40:18 2025 by rpki-client