This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft File: wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json) Hash identifier: St1frYLLlNM6qZK1rPihq2DA90brkKDhDPA6GP9U4Gg= Subject key identifier: B0:36:40:03:81:3E:0C:7A:E5:1F:C8:E9:60:20:5E:3C:63:F3:DA:44 Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0 Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0 Certificate serial: 019B273FD63A7B398B4DA5BBE21FC3833684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft Manifest number: 0916 Signing time: Tue 16 Dec 2025 13:00:53 +0000 Manifest this update: Tue 16 Dec 2025 13:00:53 +0000 Manifest next update: Wed 17 Dec 2025 13:00:53 +0000 Files and hashes: 1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=) 2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: hmt3jeVzQ7NfIgi6ug/n7GVGyQ0qkxQgytsFeq0bx84=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:d6:3a:7b:39:8b:4d:a5:bb:e2:1f:c3:83:36:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0 Validity Not Before: Dec 16 13:00:53 2025 GMT Not After : Dec 17 13:00:53 2025 GMT Subject: CN=b0364003813e0c7ae51fc8e960205e3c63f3da44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:a1:e4:ba:1c:11:2f:49:67:bf:b8:0a:bd: 2d:ce:56:97:3d:85:3f:51:5b:79:44:06:8c:0b:91: fa:e7:9d:a2:8f:09:b0:a8:c1:8d:8e:a2:8e:9d:08: 42:b7:84:a8:9e:be:15:99:d7:d9:d7:bb:3e:7e:10: 02:65:e2:ea:c7:db:8b:13:a0:04:08:7d:20:1a:94: 85:33:2e:b9:44:dd:cc:95:7e:1c:9e:a9:c9:b1:d7: f2:62:52:65:b5:42:0f:e0:ce:8d:01:9b:84:16:58: 97:68:01:06:6c:34:fc:5e:48:d4:bb:17:80:85:d8: eb:7b:a7:c9:85:0d:b0:15:4c:b4:18:24:06:e9:da: 86:b4:1c:81:9b:a5:c9:fa:51:79:12:d4:d0:77:e0: 56:a7:7c:af:0d:bc:20:91:12:68:e5:58:43:47:de: 92:18:78:09:38:8a:11:a0:8d:34:91:d4:74:eb:d7: 29:b3:ee:01:12:a2:4d:83:9a:ef:62:58:6f:10:27: f6:d4:4f:f7:67:2f:92:db:f2:b8:3b:77:4e:3e:77: 2f:ef:1e:d3:7d:0a:2a:ba:53:d9:f7:b8:67:14:b7: 89:09:0b:d8:79:83:02:9f:c9:4d:61:b1:3f:e0:d9: 57:85:0b:bc:03:f1:94:16:ba:b7:07:ba:aa:8d:7c: 4d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:36:40:03:81:3E:0C:7A:E5:1F:C8:E9:60:20:5E:3C:63:F3:DA:44 X509v3 Authority Key Identifier: keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:eb:43:74:88:b6:5f:cd:49:69:b4:dc:a6:e3:b9:8d:87:de: 5b:74:17:be:12:f8:0e:95:ef:2f:08:ea:ad:4b:a7:0a:aa:59: 11:89:96:73:4c:fa:c4:e6:2f:0e:60:fe:61:5b:d3:ae:e4:7f: 83:9b:af:6b:14:64:cc:7b:fa:3e:ad:a9:b6:df:df:3b:25:64: a0:84:56:e4:1f:f5:58:e5:47:8e:2f:e6:ab:21:c3:01:10:6b: 79:89:2d:8e:dd:7f:6d:bf:59:fb:97:63:7a:c1:7d:76:0b:5b: 20:b6:7c:b0:a0:c3:e5:7f:ee:1e:b7:5e:ba:7e:e3:d2:ff:9d: 88:a7:25:2b:27:03:28:ae:f7:0d:db:84:0d:fe:a1:d1:96:cf: c5:9c:e6:16:31:18:0d:37:fb:16:59:0d:11:53:18:7a:0d:f3: da:3e:c4:3d:f1:f8:85:d2:67:78:43:95:15:c6:40:0c:26:03: 56:ad:fd:96:82:af:f2:48:f0:49:40:10:2c:22:9a:08:50:8d: 5e:fd:4b:f5:63:2a:fe:e0:fc:cb:c2:0d:1a:73:62:74:8d:b8: d8:a0:d2:ff:1d:f8:73:76:ee:1a:fc:49:3e:d4:8f:cd:1b:df: 18:d2:64:23:d5:29:dd:62:92:50:b4:09:b1:97:6c:9d:45:77: cf:36:f0:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP9Y6ezmLTaW74h/DgzaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw ODE3YTAwHhcNMjUxMjE2MTMwMDUzWhcNMjUxMjE3MTMwMDUzWjAzMTEwLwYDVQQD EyhiMDM2NDAwMzgxM2UwYzdhZTUxZmM4ZTk2MDIwNWUzYzYzZjNkYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPSh5LocES9JZ7+4Cr0tzlaXPYU/ UVt5RAaMC5H6552ijwmwqMGNjqKOnQhCt4Sonr4VmdfZ17s+fhACZeLqx9uLE6AE CH0gGpSFMy65RN3MlX4cnqnJsdfyYlJltUIP4M6NAZuEFliXaAEGbDT8XkjUuxeA hdjre6fJhQ2wFUy0GCQG6dqGtByBm6XJ+lF5EtTQd+BWp3yvDbwgkRJo5VhDR96S GHgJOIoRoI00kdR069cps+4BEqJNg5rvYlhvECf21E/3Zy+S2/K4O3dOPncv7x7T fQoqulPZ97hnFLeJCQvYeYMCn8lNYbE/4NlXhQu8A/GUFrq3B7qqjXxNjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA2QAOBPgx65R/I6WAgXjxj89pEMB8GA1UdIwQY MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+tDdIi2 X81JabTcpuO5jYfeW3QXvhL4DpXvLwjqrUunCqpZEYmWc0z6xOYvDmD+YVvTruR/ g5uvaxRkzHv6Pq2ptt/fOyVkoIRW5B/1WOVHji/mqyHDARBreYktjt1/bb9Z+5dj esF9dgtbILZ8sKDD5X/uHrdeun7j0v+diKclKycDKK73DduEDf6h0ZbPxZzmFjEY DTf7FlkNEVMYeg3z2j7EPfH4hdJneEOVFcZADCYDVq39loKv8kjwSUAQLCKaCFCN Xv1L9WMq/uD8y8INGnNidI242KDS/x34c3buGvxJPtSPzRvfGNJkI9Up3WKSULQJ sZdsnUV3zzbw3Q== -----END CERTIFICATE-----Generated at Tue Dec 16 22:31:04 2025 by rpki-client