This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json) Hash identifier: Nnd3aPiJlLslxwGSvEh33t594dbdbdsqpUNRvrH0A2A= Subject key identifier: 93:69:78:F8:7C:F8:C9:76:16:56:FF:FB:4E:F8:93:B1:5A:71:F0:DD Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019B383395A001FD58BFD5A0697088D5CA9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft Manifest number: 0964 Signing time: Fri 19 Dec 2025 20:01:03 +0000 Manifest this update: Fri 19 Dec 2025 20:01:03 +0000 Manifest next update: Sat 20 Dec 2025 20:01:03 +0000 Files and hashes: 1: CZOyLCDq6Iq_ffaqvjI3PSVVOvU.roa (hash: nxYpf3d1kInNnFvQ38+l8rg/HLKSq+o3Lo1uxdJMCqg=) 2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: lQSL6+iKdzOgq1JP5zm55xr/JqM0Oy3VBXowSIJFiv4=) 3: k47IkFzsvbAU-luJwFSjcXBgPII.roa (hash: LRzevFO33ciORneOuJWjPwolGOd6frxZBqlkG2Q4ros=) 4: lEEyuAddblYNTeWx211i0OkHLwc.roa (hash: xrs17fe1+/VBDSqf3ILWe0WvYIKh2Ut8uQHgq7w6B3M=) 5: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 20:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:95:a0:01:fd:58:bf:d5:a0:69:70:88:d5:ca:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Dec 19 20:01:03 2025 GMT Not After : Dec 20 20:01:03 2025 GMT Subject: CN=936978f87cf8c9761656fffb4ef893b15a71f0dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:c5:80:b6:64:13:f2:00:26:e8:d8:82:80: 01:d9:00:89:c1:8b:25:bf:e4:0b:aa:bc:58:c9:ed: d0:a1:77:e2:4d:e2:c7:71:22:9b:14:e3:a4:e6:cd: 0e:60:d3:7f:2e:47:f0:40:7e:ee:8d:ef:11:a6:b6: d8:06:f5:08:6c:7f:39:31:fe:11:d0:35:e2:bf:bc: 52:d5:76:e8:48:89:60:cd:bf:89:8d:8c:33:25:bd: 00:df:69:2a:a1:e7:23:79:14:15:f5:98:bf:8d:b3: 4b:01:75:7f:57:e1:84:a0:fc:33:9f:31:da:a2:b6: 53:9c:36:85:01:8d:18:4f:f7:54:7b:53:0a:af:11: 56:9f:e3:d0:27:de:5c:fd:5e:86:40:c7:37:1f:10: 15:65:89:e2:37:83:0a:e7:e8:7f:33:c0:26:39:73: 6c:f6:92:fd:e8:da:ac:a2:25:87:fc:03:3e:a6:2f: 04:80:b1:e0:8f:20:83:bc:67:c4:6c:81:90:37:3b: 03:92:7d:a2:00:85:8b:73:00:8c:2e:0e:a2:a9:4c: 91:95:82:87:b5:f3:cd:84:d3:70:4d:f3:ec:fc:33: 43:a0:45:ec:9e:bf:95:70:e7:19:bc:cd:be:87:8d: 49:3f:93:04:92:cb:88:3b:1f:ea:ae:4e:6b:81:15: 64:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:69:78:F8:7C:F8:C9:76:16:56:FF:FB:4E:F8:93:B1:5A:71:F0:DD X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:0f:85:42:4c:15:94:3f:97:bb:ad:5c:c6:63:19:77:4a:74: 7d:7f:c2:d5:cb:f9:4a:45:5e:43:1b:a3:5d:f5:23:53:5c:c9: 37:90:b1:49:91:0c:b5:a0:44:41:31:9c:7d:6c:4b:91:88:83: 2e:b9:4e:4c:de:62:5b:36:49:b9:47:f9:40:25:31:5e:82:fe: 60:b3:8c:e5:f3:9a:ba:eb:52:f1:01:a5:a6:25:d9:99:04:4c: 3b:ea:1f:09:43:af:54:1a:8e:76:cc:b9:46:be:15:6a:73:99: 85:c0:ef:3e:41:75:46:10:0a:a2:80:ab:fe:23:81:ea:da:b9: bc:68:1b:0f:e7:f7:9f:ad:16:20:b7:d7:6d:88:04:7a:66:f3: ce:43:21:6f:b6:8c:00:b8:96:10:b9:fb:63:ba:66:5d:34:a7: 62:ec:13:50:94:9c:45:39:cc:45:26:33:cb:ac:50:b5:9a:ed: ca:0f:4b:82:2f:44:5b:d2:d8:ce:a1:3f:c1:ac:b9:fc:27:2c: c2:b8:c0:d8:4b:1e:1b:8a:7b:da:1b:2f:bf:16:9c:f5:a5:69: 9c:92:43:90:f4:6b:20:b6:22:cd:63:92:de:3a:fc:48:2e:4a: 33:ce:d1:e3:de:08:0a:26:3c:66:ab:2f:d8:e0:14:cc:e8:9b: c6:ff:34:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5WgAf1Yv9WgaXCI1cqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjUxMjE5MjAwMTAzWhcNMjUxMjIwMjAwMTAzWjAzMTEwLwYDVQQD Eyg5MzY5NzhmODdjZjhjOTc2MTY1NmZmZmI0ZWY4OTNiMTVhNzFmMGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva7FgLZkE/IAJujYgoAB2QCJwYsl v+QLqrxYye3QoXfiTeLHcSKbFOOk5s0OYNN/LkfwQH7uje8RprbYBvUIbH85Mf4R 0DXiv7xS1XboSIlgzb+JjYwzJb0A32kqoecjeRQV9Zi/jbNLAXV/V+GEoPwznzHa orZTnDaFAY0YT/dUe1MKrxFWn+PQJ95c/V6GQMc3HxAVZYniN4MK5+h/M8AmOXNs 9pL96NqsoiWH/AM+pi8EgLHgjyCDvGfEbIGQNzsDkn2iAIWLcwCMLg6iqUyRlYKH tfPNhNNwTfPs/DNDoEXsnr+VcOcZvM2+h41JP5MEksuIOx/qrk5rgRVkQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNpePh8+Ml2Flb/+074k7FacfDdMB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQ+FQkwV lD+Xu61cxmMZd0p0fX/C1cv5SkVeQxujXfUjU1zJN5CxSZEMtaBEQTGcfWxLkYiD LrlOTN5iWzZJuUf5QCUxXoL+YLOM5fOauutS8QGlpiXZmQRMO+ofCUOvVBqOdsy5 Rr4VanOZhcDvPkF1RhAKooCr/iOB6tq5vGgbD+f3n60WILfXbYgEembzzkMhb7aM ALiWELn7Y7pmXTSnYuwTUJScRTnMRSYzy6xQtZrtyg9Lgi9EW9LYzqE/way5/Ccs wrjA2EseG4p72hsvvxac9aVpnJJDkPRrILYizWOS3jr8SC5KM87R494ICiY8Zqsv 2OAUzOibxv80xg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:28:41 2025 by rpki-client