This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft File: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json) Hash identifier: qpAYyMV7dNeG8HJ42ttfqzgS1yvtHpHVRSc5iv9uspA= Subject key identifier: 41:81:6F:6B:35:59:01:69:EF:38:9E:47:C2:10:08:00:B9:19:F0:D3 Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Certificate serial: 019B3C0FDEBCE7B04A8A50BB02784B929D3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft Manifest number: 074D Signing time: Sat 20 Dec 2025 14:00:31 +0000 Manifest this update: Sat 20 Dec 2025 14:00:31 +0000 Manifest next update: Sun 21 Dec 2025 14:00:31 +0000 Files and hashes: 1: iXKePU1MhfMj_Ffi0i3iTBdPQkI.roa (hash: bDo44FzoFFr9RyRvLSrFxMRFhrYySuyVvMJPoVIhUAM=) 2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: HR5KyC+1uA6nnBlw4Er8/9W789vMYJ0fj6tAZ2ymArk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:de:bc:e7:b0:4a:8a:50:bb:02:78:4b:92:9d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Validity Not Before: Dec 20 14:00:31 2025 GMT Not After : Dec 21 14:00:31 2025 GMT Subject: CN=41816f6b35590169ef389e47c2100800b919f0d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0e:10:5e:72:52:36:eb:73:a5:50:07:0b:0f: 52:24:d2:d1:60:d0:93:f7:4a:35:95:a9:ae:ca:5e: 7e:53:bf:8f:30:6e:e8:32:e2:be:bd:30:09:16:9b: 34:05:06:44:39:b2:71:cb:f4:5b:2d:5c:84:a8:41: c3:64:78:c2:26:70:e5:3f:7e:43:35:1c:09:f7:9b: 80:69:88:2f:fb:fa:54:37:c5:d3:96:1c:f5:b6:22: 6b:34:f9:65:c1:a3:45:e6:23:60:fe:a8:73:10:d1: a0:26:31:b6:d0:53:d5:57:05:78:a2:e6:90:29:45: 14:04:d3:89:8e:5d:1e:e1:25:c0:2e:73:a8:1c:4b: fa:9d:4b:bb:c8:dc:a1:81:53:1d:bf:44:43:cb:64: d3:08:8e:09:6b:7b:d5:68:6a:ec:25:6b:4a:80:e8: a4:07:7f:87:cf:8e:ba:85:54:7f:a7:88:6f:25:6a: 4d:9a:18:d9:dc:4e:8b:26:c7:78:ab:2a:b5:fe:97: 64:1d:7e:7f:f3:83:8b:b7:14:d7:81:46:3f:fb:2f: 35:b7:4d:c8:06:5a:60:3c:84:60:47:3d:c3:e3:ba: cb:a2:c5:5a:a5:88:d3:47:49:d3:32:5e:f5:7b:48: a4:1a:e5:ce:09:bd:4c:67:41:6a:2c:99:03:b1:94: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:6F:6B:35:59:01:69:EF:38:9E:47:C2:10:08:00:B9:19:F0:D3 X509v3 Authority Key Identifier: keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:0b:57:94:45:d3:8a:1f:2e:d7:2b:17:71:51:75:99:bf:8f: 0e:d8:90:76:40:71:18:af:92:76:63:61:a7:b4:e3:a7:3f:8e: 24:df:6b:ca:4f:6d:75:9b:ab:f3:56:14:f9:87:58:b4:19:f1: 56:15:40:c3:62:a4:8e:0b:13:f8:16:b5:80:0f:04:05:94:28: 7f:8f:32:ca:5c:ab:59:c6:79:dd:f6:de:d7:16:e0:b2:cb:c0: 75:8c:3a:5c:6c:53:4d:63:16:ba:bb:81:44:78:02:3b:ac:3b: 66:a4:81:c5:65:f9:6e:56:fa:b2:9a:76:8d:d0:71:68:62:13: 2d:f0:8d:d4:46:ab:4a:97:b2:d7:dd:12:2d:ba:9d:21:92:a8: 98:80:99:1d:9c:00:20:34:6c:50:4e:53:cb:9d:f1:0c:08:ca: ba:57:c9:5b:f9:1d:7e:6d:59:3a:6c:7d:2a:9c:74:d5:71:d4: 51:52:18:f4:6f:66:b1:d9:c1:f0:f8:3a:e2:c4:bc:bf:a3:26: 3e:29:39:30:d6:da:07:cc:2b:75:d9:66:83:92:b0:42:d7:ed: da:d1:2d:75:43:ad:a1:b7:d6:72:aa:f9:74:ff:7f:10:7b:18: 1d:f5:75:ec:05:1c:c3:3a:3e:8e:fc:99:da:e9:45:9a:de:fd: 30:85:ee:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D96857BKilC7AnhLkp07MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYmE1MGZjYTMzYjE4MGQ2ODQzNmU3ZWYwY2JmNjkwNGJh ZjQ1ZDQwHhcNMjUxMjIwMTQwMDMxWhcNMjUxMjIxMTQwMDMxWjAzMTEwLwYDVQQD Eyg0MTgxNmY2YjM1NTkwMTY5ZWYzODllNDdjMjEwMDgwMGI5MTlmMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw4QXnJSNutzpVAHCw9SJNLRYNCT 90o1lamuyl5+U7+PMG7oMuK+vTAJFps0BQZEObJxy/RbLVyEqEHDZHjCJnDlP35D NRwJ95uAaYgv+/pUN8XTlhz1tiJrNPllwaNF5iNg/qhzENGgJjG20FPVVwV4ouaQ KUUUBNOJjl0e4SXALnOoHEv6nUu7yNyhgVMdv0RDy2TTCI4Ja3vVaGrsJWtKgOik B3+Hz466hVR/p4hvJWpNmhjZ3E6LJsd4qyq1/pdkHX5/84OLtxTXgUY/+y81t03I BlpgPIRgRz3D47rLosVapYjTR0nTMl71e0ikGuXOCb1MZ0FqLJkDsZSsEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGBb2s1WQFp7zieR8IQCAC5GfDTMB8GA1UdIwQY MBaAFMC6UPyjOxgNaENufvDL9pBLr0XUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgt ZDFmYmU1YTkxZDcwLzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgtZDFmYmU1YTkxZDcw LzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAtXlEXT ih8u1ysXcVF1mb+PDtiQdkBxGK+SdmNhp7Tjpz+OJN9ryk9tdZur81YU+YdYtBnx VhVAw2KkjgsT+Ba1gA8EBZQof48yylyrWcZ53fbe1xbgssvAdYw6XGxTTWMWuruB RHgCO6w7ZqSBxWX5blb6spp2jdBxaGITLfCN1EarSpey190SLbqdIZKomICZHZwA IDRsUE5Ty53xDAjKulfJW/kdfm1ZOmx9Kpx01XHUUVIY9G9msdnB8Pg64sS8v6Mm Pik5MNbaB8wrddlmg5KwQtft2tEtdUOtobfWcqr5dP9/EHsYHfV17AUcwzo+jvyZ 2ulFmt79MIXu6A== -----END CERTIFICATE-----Generated at Sun Dec 21 00:15:53 2025 by rpki-client