This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft File: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft (raw, json) Hash identifier: YgaLqSxFEW5EeYQiOXQE6X4uRJyBnVq0VNtJv2ZN6yk= Subject key identifier: 24:F1:93:7E:4F:C3:11:DF:05:D5:E2:19:51:A8:8F:B8:4D:72:4C:A6 Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8 Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8 Certificate serial: 019B2BC1B778D27BB9286E88C275B7058FA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft Manifest number: 01E1 Signing time: Wed 17 Dec 2025 10:01:14 +0000 Manifest this update: Wed 17 Dec 2025 10:01:14 +0000 Manifest next update: Thu 18 Dec 2025 10:01:14 +0000 Files and hashes: 1: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl (hash: OCM4807cKFMtLyIItxMNA0+IMhsH3J4o2IZYaOM7ePc=) 2: od-eaeRv-_TtiWVxF1AsQmL-p6M.roa (hash: xxM+CC0rClETGMS9YhA+QBIZ3skgkCaIksfRH7MZZ+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:b7:78:d2:7b:b9:28:6e:88:c2:75:b7:05:8f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8 Validity Not Before: Dec 17 10:01:14 2025 GMT Not After : Dec 18 10:01:14 2025 GMT Subject: CN=24f1937e4fc311df05d5e21951a88fb84d724ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:60:00:fe:3f:da:c7:6d:98:cc:95:4d:07: b0:85:27:4b:7c:62:8a:a5:b2:62:49:40:bc:e2:63: 42:af:9a:a9:b1:d1:bf:d3:b1:91:87:07:77:74:df: fd:80:66:7a:ff:44:2f:6a:12:c0:51:4b:1b:ae:d7: 36:8f:da:1a:7c:c7:13:4b:27:de:74:cb:d4:ab:39: 6d:76:47:78:fd:01:4a:55:12:03:fe:26:71:9b:08: c4:5b:e0:54:25:aa:c5:79:73:b2:25:7b:4c:57:63: 06:a3:71:98:fd:1b:9c:68:63:b1:c9:50:75:7c:85: 33:95:68:ff:6c:15:14:06:c4:24:9c:2c:b3:38:db: b7:fa:80:e0:1e:bc:9a:8c:8d:fe:1c:f2:5e:20:2e: 00:e8:25:0f:db:46:31:11:db:16:86:12:89:1f:bf: d8:93:f4:57:19:20:c2:56:27:cf:30:cc:ba:7b:be: eb:01:4a:76:50:4b:01:63:e7:b7:f9:4e:a0:af:da: 91:dc:50:5d:cc:55:65:34:b7:b9:ad:6c:35:fd:4b: 72:a0:f9:0b:4f:51:7a:52:3b:5d:0f:1a:9c:1d:c1: 32:c2:51:06:64:91:21:e3:34:b8:39:22:6b:34:3d: bc:ee:32:db:79:26:17:df:ee:9a:e7:07:9c:f6:21: 39:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F1:93:7E:4F:C3:11:DF:05:D5:E2:19:51:A8:8F:B8:4D:72:4C:A6 X509v3 Authority Key Identifier: keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:06:34:58:db:9f:53:2a:af:e8:d8:11:17:4d:11:29:a4:90: 7a:39:a3:3c:6c:06:b2:a9:e8:d6:04:23:47:cd:be:13:ee:dd: f0:a4:42:ec:2a:d0:1e:e1:88:b4:c7:d8:15:b7:e6:c6:04:b1: fd:fa:8e:c3:b7:ed:7b:29:74:5d:93:72:d1:73:99:2e:bb:17: 7e:af:ec:2a:8e:77:7c:5e:17:f1:8e:72:0c:c1:3f:4b:e2:49: 6b:ef:6e:d9:c5:4c:33:30:30:cb:7e:89:65:8f:53:43:99:4a: 09:e0:31:34:66:2c:f3:f0:7f:89:d2:fd:83:13:e5:26:ae:4a: 5d:16:c4:89:9c:91:af:86:3b:03:0c:20:ce:27:91:00:62:d7: 66:19:1a:01:04:0a:8e:ea:14:4d:aa:2b:d7:ec:3d:1e:f9:ac: 76:68:55:f2:5f:6a:81:6e:6d:ba:a8:96:0b:85:06:ef:2e:2a: c4:26:83:f5:67:e1:e3:42:2e:d7:66:be:4d:74:5f:77:02:23: 85:51:c7:43:ec:4b:8c:56:6d:56:0d:0b:41:da:0a:a9:7d:f5: bb:c3:d1:6e:67:54:c8:14:31:92:40:11:6c:4f:da:94:36:8e: d2:dc:7f:72:9d:9c:5e:f9:bb:a7:70:c4:21:24:84:82:b9:85: c2:b0:8f:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwbd40nu5KG6IwnW3BY+nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQwNTc0NmY5YTI4ODc1NmMzMGFmYThjNDU5OTViNzc1 MDU1ZjgwHhcNMjUxMjE3MTAwMTE0WhcNMjUxMjE4MTAwMTE0WjAzMTEwLwYDVQQD EygyNGYxOTM3ZTRmYzMxMWRmMDVkNWUyMTk1MWE4OGZiODRkNzI0Y2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbRgAP4/2sdtmMyVTQewhSdLfGKK pbJiSUC84mNCr5qpsdG/07GRhwd3dN/9gGZ6/0QvahLAUUsbrtc2j9oafMcTSyfe dMvUqzltdkd4/QFKVRID/iZxmwjEW+BUJarFeXOyJXtMV2MGo3GY/RucaGOxyVB1 fIUzlWj/bBUUBsQknCyzONu3+oDgHryajI3+HPJeIC4A6CUP20YxEdsWhhKJH7/Y k/RXGSDCVifPMMy6e77rAUp2UEsBY+e3+U6gr9qR3FBdzFVlNLe5rWw1/UtyoPkL T1F6UjtdDxqcHcEywlEGZJEh4zS4OSJrND287jLbeSYX3+6a5wec9iE5rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCTxk35PwxHfBdXiGVGoj7hNckymMB8GA1UdIwQY MBaAFFndBXRvmiiHVsMK+oxFmVt3UFX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYzliNmYtM2UxZi00MzRjLTkzMjMt YzJjZTE3OGRmMWM0LzEvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYzliNmYtM2UxZi00MzRjLTkzMjMtYzJjZTE3OGRmMWM0 LzEvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACAY0WNuf Uyqv6NgRF00RKaSQejmjPGwGsqno1gQjR82+E+7d8KRC7CrQHuGItMfYFbfmxgSx /fqOw7fteyl0XZNy0XOZLrsXfq/sKo53fF4X8Y5yDME/S+JJa+9u2cVMMzAwy36J ZY9TQ5lKCeAxNGYs8/B/idL9gxPlJq5KXRbEiZyRr4Y7AwwgzieRAGLXZhkaAQQK juoUTaor1+w9HvmsdmhV8l9qgW5tuqiWC4UG7y4qxCaD9Wfh40Iu12a+TXRfdwIj hVHHQ+xLjFZtVg0LQdoKqX31u8PRbmdUyBQxkkARbE/alDaO0tx/cp2cXvm7p3DE ISSEgrmFwrCP/A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:37:05 2025 by rpki-client