This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json) Hash identifier: CDi4FJui01vUfSiJibsU98Y+ahqTrfcPl2/UleDAzuA= Subject key identifier: B5:E0:26:51:6D:84:C4:AB:20:C1:87:A8:BD:66:A7:8D:E9:E9:0E:A5 Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d Certificate serial: 019B3F7F4BD07CCCFF22F89641A3CCD81BA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft Manifest number: 03FF Signing time: Sun 21 Dec 2025 06:01:05 +0000 Manifest this update: Sun 21 Dec 2025 06:01:05 +0000 Manifest next update: Mon 22 Dec 2025 06:01:05 +0000 Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=) 2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: inlDwpc3y7sUourR1djgIv2S/6873qEJpk4Qz4P0hQI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:4b:d0:7c:cc:ff:22:f8:96:41:a3:cc:d8:1b:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d Validity Not Before: Dec 21 06:01:05 2025 GMT Not After : Dec 22 06:01:05 2025 GMT Subject: CN=b5e026516d84c4ab20c187a8bd66a78de9e90ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:59:e7:fd:83:3e:2b:eb:d0:48:4a:6f:cf:bd: 1e:de:7f:74:d7:61:11:d5:80:e0:46:2f:37:96:0d: 50:4a:c3:6b:e4:3b:2b:9b:b8:07:0d:94:3b:84:5e: 6b:11:f3:87:02:ad:9f:98:ba:3d:ae:84:7c:c8:7b: d2:fc:64:3d:df:8e:3b:b1:31:ae:95:47:57:82:3e: 3b:9a:3e:0d:14:08:e7:31:33:13:31:38:19:10:48: ce:f7:23:a8:ba:d8:ba:64:c9:e1:8a:63:7f:a6:13: dc:67:74:8c:df:e1:04:14:b8:d7:94:ea:e2:29:3b: 4a:e6:08:01:cf:15:a3:47:fc:9f:b9:1d:d8:f6:a8: c0:cc:ad:eb:50:b1:d8:0d:d4:10:8c:0f:ba:f6:70: fa:6c:f5:32:be:e8:75:b2:8b:1c:a6:73:3a:f8:52: 68:d6:02:dd:f4:49:41:d0:cb:70:a2:bb:5d:2b:70: 8d:8f:f7:2c:98:1b:35:03:df:45:39:9e:c3:3c:22: 25:59:c2:d1:81:c1:87:db:3e:e3:81:01:f1:b7:a8: e8:bd:34:b2:26:c7:71:07:df:e7:b8:69:58:e6:8e: ee:c2:8e:e7:c9:11:62:1e:48:1b:ce:5d:95:5e:40: ba:89:4e:04:34:d1:5e:b4:12:28:38:2e:84:31:4a: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E0:26:51:6D:84:C4:AB:20:C1:87:A8:BD:66:A7:8D:E9:E9:0E:A5 X509v3 Authority Key Identifier: keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:ef:08:b7:86:22:a5:b4:2b:23:9d:86:21:e7:6c:93:3a:27: 7c:15:6c:9e:02:0f:ff:fa:ab:a2:c5:19:4b:82:b0:24:d1:f6: 56:2f:c6:e9:02:29:2a:a6:47:c4:c2:11:68:b0:16:f8:c3:c8: c3:d4:11:95:dd:12:bf:a2:57:22:00:7b:da:7a:6c:f9:83:78: 4c:04:ad:91:0e:62:40:6a:af:d4:e9:69:1b:81:04:3f:84:81: cb:b7:c0:2b:0b:36:02:0e:2d:df:19:c2:a0:1b:99:60:49:0b: bb:66:c8:ea:0f:cb:b1:34:7a:5f:72:56:93:eb:5a:a5:e8:00: b4:50:c3:78:5f:36:44:d3:fc:7c:8a:53:c8:48:e6:58:d3:3f: a0:04:ae:b1:6f:87:e3:61:e3:6f:20:da:8e:ab:a4:73:bf:5f: 93:e6:f1:a1:bd:ad:8d:4a:e4:40:66:25:38:7c:81:70:ef:61: 63:f6:39:e3:4b:5c:3f:6d:93:60:ec:a8:b9:a7:72:73:55:28: 6e:12:19:1b:6a:a6:61:f3:40:5b:1c:b9:0d:68:ad:31:4d:b4: cc:85:30:0a:3c:a5:f6:1c:2b:19:3b:e3:ae:df:e5:e3:69:50: bd:c0:39:1a:31:32:6a:e8:cd:ec:32:48:96:f9:f5:8f:a2:43: 9a:de:6f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f0vQfMz/IviWQaPM2BuhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz YjE3NmQwHhcNMjUxMjIxMDYwMTA1WhcNMjUxMjIyMDYwMTA1WjAzMTEwLwYDVQQD EyhiNWUwMjY1MTZkODRjNGFiMjBjMTg3YThiZDY2YTc4ZGU5ZTkwZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA21nn/YM+K+vQSEpvz70e3n9012ER 1YDgRi83lg1QSsNr5Dsrm7gHDZQ7hF5rEfOHAq2fmLo9roR8yHvS/GQ93447sTGu lUdXgj47mj4NFAjnMTMTMTgZEEjO9yOouti6ZMnhimN/phPcZ3SM3+EEFLjXlOri KTtK5ggBzxWjR/yfuR3Y9qjAzK3rULHYDdQQjA+69nD6bPUyvuh1soscpnM6+FJo 1gLd9ElB0MtwortdK3CNj/csmBs1A99FOZ7DPCIlWcLRgcGH2z7jgQHxt6jovTSy JsdxB9/nuGlY5o7uwo7nyRFiHkgbzl2VXkC6iU4ENNFetBIoOC6EMUpR2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXgJlFthMSrIMGHqL1mp43p6Q6lMB8GA1UdIwQY MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt NDRkMGQwODkxOTg5LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5 LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm+8It4Yi pbQrI52GIedskzonfBVsngIP//qrosUZS4KwJNH2Vi/G6QIpKqZHxMIRaLAW+MPI w9QRld0Sv6JXIgB72nps+YN4TAStkQ5iQGqv1OlpG4EEP4SBy7fAKws2Ag4t3xnC oBuZYEkLu2bI6g/LsTR6X3JWk+tapegAtFDDeF82RNP8fIpTyEjmWNM/oASusW+H 42HjbyDajqukc79fk+bxob2tjUrkQGYlOHyBcO9hY/Y540tcP22TYOyouadyc1Uo bhIZG2qmYfNAWxy5DWitMU20zIUwCjyl9hwrGTvjrt/l42lQvcA5GjEyaujN7DJI lvn1j6JDmt5vrw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:48:31 2025 by rpki-client