This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json) Hash identifier: r/VTdK8PKa+0otg8U09EH8ANsoHTOzMCm0rk/GpsvO8= Subject key identifier: 0F:A5:F6:4B:87:05:E9:D6:E3:DA:DF:58:B1:3A:93:11:14:3D:DD:5F Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d Certificate serial: 019B6DD7F463A617BB29CDBFCEA3001BD503 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft Manifest number: 0417 Signing time: Tue 30 Dec 2025 06:00:27 +0000 Manifest this update: Tue 30 Dec 2025 06:00:27 +0000 Manifest next update: Wed 31 Dec 2025 06:00:27 +0000 Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=) 2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: HXkX9H6KLN02AZv0gzYQ2wRmZlr2JKgQu4InToOu4eU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 06:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:d7:f4:63:a6:17:bb:29:cd:bf:ce:a3:00:1b:d5:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d Validity Not Before: Dec 30 06:00:27 2025 GMT Not After : Dec 31 06:00:27 2025 GMT Subject: CN=0fa5f64b8705e9d6e3dadf58b13a9311143ddd5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a7:17:38:02:70:1e:d3:4c:aa:c0:fa:4c:4b: 15:6a:4c:44:ac:6a:04:11:69:b3:93:12:26:c5:85: 8b:de:c2:fa:9d:cd:8b:19:cb:ad:3e:59:44:15:e1: c8:bc:a7:3f:ee:6e:c6:eb:57:2d:e3:2f:74:e0:98: 0f:5a:84:ff:fc:58:fc:94:52:8b:29:a1:a3:9f:ea: 4d:09:c9:61:e7:c7:20:8f:39:8a:71:e5:4b:f0:75: 58:9a:76:c2:ce:d0:66:71:5f:58:44:51:3e:35:1e: 12:25:2e:fb:d3:14:e0:14:ee:a3:17:e9:40:35:80: 9c:d5:61:71:9e:a9:b5:df:91:6c:f9:34:64:be:c2: 5a:e9:de:9c:60:60:03:c9:69:8a:9e:8b:0f:d8:08: 6c:34:d0:66:29:2a:c2:03:c0:54:66:d5:dc:92:8e: e2:b8:54:e3:37:a3:8c:6b:74:8c:be:22:60:5e:6e: c1:b2:38:99:56:00:89:46:c7:a4:d3:64:0a:cf:22: a2:7e:51:61:b4:30:73:5b:cf:15:ee:bf:e8:9a:a4: 54:e6:eb:fc:7c:10:e9:3d:10:06:73:9e:a7:88:15: 2d:f8:00:40:56:08:e8:9d:91:e5:e6:01:29:2a:e0: a7:c5:36:7d:94:09:69:32:1e:ff:63:b1:bf:df:f7: 99:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A5:F6:4B:87:05:E9:D6:E3:DA:DF:58:B1:3A:93:11:14:3D:DD:5F X509v3 Authority Key Identifier: keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:c0:ac:ad:f6:b2:12:0d:20:60:a0:22:e2:03:da:b7:c0: 61:14:af:0e:fc:95:0e:90:75:18:ef:66:87:b4:30:04:3a:9e: 0e:e7:ec:1a:d0:67:96:f9:2d:b3:26:19:84:02:b5:35:64:7a: a3:0c:fe:d6:e1:f2:c1:b4:50:f9:7a:e0:73:74:c1:d7:f8:cc: 7f:5e:38:e4:9e:9d:52:44:86:7c:18:42:15:0a:6a:45:a2:0e: 98:15:06:78:ee:7c:e2:a2:b1:16:1d:67:a0:63:43:9d:a8:46: 15:ab:32:36:cf:8e:ab:db:63:c1:03:a5:54:ba:7b:a9:38:a0: 19:71:45:47:ed:9f:b8:5a:c0:95:40:82:68:23:b9:c5:54:35: 94:48:b1:26:a4:c1:fb:1d:01:29:3a:de:90:84:bd:9b:8c:13: 66:1b:f1:1d:c4:a5:b4:73:13:0d:15:ca:5a:7b:f5:b5:c3:79: aa:ff:bc:6e:c3:bc:f3:4c:73:ca:90:ba:0b:4e:61:a7:90:96: b5:f0:9d:8d:6d:5c:26:ca:04:3a:15:8f:86:6e:63:88:e4:7b: dd:a8:07:d0:c7:e7:0e:83:ba:c5:27:5b:a2:e9:a4:a7:03:01: 6c:c6:46:71:41:9f:d0:93:f3:6d:e1:d2:e6:af:c6:16:92:92: fa:2a:45:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtt1/Rjphe7Kc2/zqMAG9UDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz YjE3NmQwHhcNMjUxMjMwMDYwMDI3WhcNMjUxMjMxMDYwMDI3WjAzMTEwLwYDVQQD EygwZmE1ZjY0Yjg3MDVlOWQ2ZTNkYWRmNThiMTNhOTMxMTE0M2RkZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6cXOAJwHtNMqsD6TEsVakxErGoE EWmzkxImxYWL3sL6nc2LGcutPllEFeHIvKc/7m7G61ct4y904JgPWoT//Fj8lFKL KaGjn+pNCclh58cgjzmKceVL8HVYmnbCztBmcV9YRFE+NR4SJS770xTgFO6jF+lA NYCc1WFxnqm135Fs+TRkvsJa6d6cYGADyWmKnosP2AhsNNBmKSrCA8BUZtXcko7i uFTjN6OMa3SMviJgXm7BsjiZVgCJRsek02QKzyKiflFhtDBzW88V7r/omqRU5uv8 fBDpPRAGc56niBUt+ABAVgjonZHl5gEpKuCnxTZ9lAlpMh7/Y7G/3/eZWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+l9kuHBenW49rfWLE6kxEUPd1fMB8GA1UdIwQY MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt NDRkMGQwODkxOTg5LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5 LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASOHArK32 shINIGCgIuID2rfAYRSvDvyVDpB1GO9mh7QwBDqeDufsGtBnlvktsyYZhAK1NWR6 owz+1uHywbRQ+Xrgc3TB1/jMf1445J6dUkSGfBhCFQpqRaIOmBUGeO584qKxFh1n oGNDnahGFasyNs+Oq9tjwQOlVLp7qTigGXFFR+2fuFrAlUCCaCO5xVQ1lEixJqTB +x0BKTrekIS9m4wTZhvxHcSltHMTDRXKWnv1tcN5qv+8bsO880xzypC6C05hp5CW tfCdjW1cJsoEOhWPhm5jiOR73agH0MfnDoO6xSdboumkpwMBbMZGcUGf0JPzbeHS 5q/GFpKS+ipFXw== -----END CERTIFICATE-----Generated at Tue Dec 30 10:50:19 2025 by rpki-client