This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json) Hash identifier: M8octKhUvC3NPN6ld68AjPrAFgAFjYlnBTZN4bFM6og= Subject key identifier: F0:F9:8F:3A:C7:23:B4:CE:79:B8:F2:37:4F:9F:48:7F:D7:0B:BD:FF Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Certificate serial: 019B3DC75465130585D1AD8EA458EF568DD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft Manifest number: 17A3 Signing time: Sat 20 Dec 2025 22:00:31 +0000 Manifest this update: Sat 20 Dec 2025 22:00:31 +0000 Manifest next update: Sun 21 Dec 2025 22:00:31 +0000 Files and hashes: 1: HtbMYs01D4cmAdAlFXNYzXOhs04.roa (hash: n0Ze93hrHGGHOW22ZuB1Xc2tkSwX1VXykYJ+iILqIsE=) 2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: ELim4e/xknj7p/xSjUtcYHSSZdoU9SIRrh5yDpGE87U=) 3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:54:65:13:05:85:d1:ad:8e:a4:58:ef:56:8d:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Validity Not Before: Dec 20 22:00:31 2025 GMT Not After : Dec 21 22:00:31 2025 GMT Subject: CN=f0f98f3ac723b4ce79b8f2374f9f487fd70bbdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:66:4c:db:94:84:2a:2a:50:c5:c9:80:92:a1: ee:00:22:24:7d:4c:5d:2b:84:c1:80:2d:a3:c0:e4: 21:7c:97:b6:df:aa:7e:5a:85:71:dc:05:9c:2f:41: 4f:e4:e5:f3:79:c5:ca:9e:51:bc:b0:7c:8a:63:b6: bb:c5:0f:e4:38:94:0a:01:54:32:1b:aa:30:28:92: 12:5b:6a:9f:dc:8c:f0:e5:04:c6:b4:e6:54:60:7a: 5f:9d:6f:ef:51:34:7b:88:38:dc:1c:b0:8d:02:39: f0:b2:f2:a1:1f:ef:dd:9d:6d:92:25:e3:aa:c9:ce: 70:1a:e1:5a:ea:1f:c6:d1:ee:d8:dc:81:47:f7:89: f4:af:47:34:25:66:95:f9:ee:ec:92:b8:f3:af:9f: 67:c6:26:b1:63:a9:8f:0c:f6:bd:2b:a2:27:31:cb: 73:8a:ca:81:3a:1c:02:51:58:8f:11:d7:fc:59:db: 45:1b:e5:ba:a5:d3:27:ca:cb:c1:2a:2e:f3:88:d5: b7:21:ce:b1:4c:14:74:34:c6:97:5b:5f:9b:71:6f: 72:4c:61:ae:8d:8d:7d:af:cf:6b:c6:7d:da:de:b1: e9:da:11:00:6e:db:f1:fb:f4:34:36:04:7f:4e:76: 18:27:a3:d5:e0:55:25:29:a4:f0:ec:14:e4:0d:fc: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F9:8F:3A:C7:23:B4:CE:79:B8:F2:37:4F:9F:48:7F:D7:0B:BD:FF X509v3 Authority Key Identifier: keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:c4:12:62:ca:5d:4c:fe:43:bd:46:13:4a:e3:86:2e:58:ff: 0d:16:57:13:db:53:3d:e8:66:cf:4a:97:ea:9a:e6:2f:c2:58: ab:05:32:10:d3:ab:88:ba:49:85:8a:4b:7c:c4:65:6f:13:f2: 2b:42:02:85:1b:09:b1:9f:8c:82:38:dc:06:e6:16:23:3c:ef: 24:52:b1:76:4b:d7:b1:12:4a:81:f2:61:4d:86:b8:ee:a1:44: c3:16:7f:6c:02:67:6e:e4:89:ef:45:a4:b3:77:e8:68:4c:53: 46:1f:f5:b1:69:52:6e:19:29:e8:69:10:61:d4:fc:2e:1b:79: 2a:71:a0:ac:1b:ca:3a:ca:b5:e4:a7:5e:b4:d1:30:e9:3b:03: 2e:a0:5e:85:7b:54:82:1b:f8:da:2a:1a:96:65:f3:9f:2a:4f: 25:ee:a3:e4:2e:aa:c7:d7:c6:cb:2d:64:8a:5d:35:c4:54:90: 21:eb:b4:cb:45:76:69:73:e3:19:c3:3d:5d:42:24:ac:5d:a7: 9b:2a:4d:20:d6:b4:a8:21:74:5a:55:85:3f:7c:d5:5b:10:fd: c9:c0:49:60:22:44:ca:e0:f5:2c:63:05:4e:02:ea:3a:28:fb: 0f:48:d0:9a:0b:0f:60:67:ce:19:e7:31:7d:b4:ba:05:89:65: 8f:c3:d8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1RlEwWF0a2OpFjvVo3XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx YzRmZTIwHhcNMjUxMjIwMjIwMDMxWhcNMjUxMjIxMjIwMDMxWjAzMTEwLwYDVQQD EyhmMGY5OGYzYWM3MjNiNGNlNzliOGYyMzc0ZjlmNDg3ZmQ3MGJiZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GZM25SEKipQxcmAkqHuACIkfUxd K4TBgC2jwOQhfJe236p+WoVx3AWcL0FP5OXzecXKnlG8sHyKY7a7xQ/kOJQKAVQy G6owKJISW2qf3Izw5QTGtOZUYHpfnW/vUTR7iDjcHLCNAjnwsvKhH+/dnW2SJeOq yc5wGuFa6h/G0e7Y3IFH94n0r0c0JWaV+e7skrjzr59nxiaxY6mPDPa9K6InMctz isqBOhwCUViPEdf8WdtFG+W6pdMnysvBKi7ziNW3Ic6xTBR0NMaXW1+bcW9yTGGu jY19r89rxn3a3rHp2hEAbtvx+/Q0NgR/TnYYJ6PV4FUlKaTw7BTkDfwIZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPD5jzrHI7TOebjyN0+fSH/XC73/MB8GA1UdIwQY MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlcQSYspd TP5DvUYTSuOGLlj/DRZXE9tTPehmz0qX6prmL8JYqwUyENOriLpJhYpLfMRlbxPy K0IChRsJsZ+MgjjcBuYWIzzvJFKxdkvXsRJKgfJhTYa47qFEwxZ/bAJnbuSJ70Wk s3foaExTRh/1sWlSbhkp6GkQYdT8Lht5KnGgrBvKOsq15KdetNEw6TsDLqBehXtU ghv42ioalmXznypPJe6j5C6qx9fGyy1kil01xFSQIeu0y0V2aXPjGcM9XUIkrF2n mypNINa0qCF0WlWFP3zVWxD9ycBJYCJEyuD1LGMFTgLqOij7D0jQmgsPYGfOGecx fbS6BYllj8PYSw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:41:11 2025 by rpki-client