This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json) Hash identifier: MnQu62slWAfVojwGn1cmzqCT47zQ8d4LInWBlJLvvVk= Subject key identifier: 22:15:87:B8:BC:8B:3B:4B:B1:0F:52:7F:00:6B:1A:FA:35:C3:71:84 Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407 Certificate serial: 019B3FB632C8AD4B47B8F388A2F337CE98BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft Manifest number: 0AA5 Signing time: Sun 21 Dec 2025 07:01:03 +0000 Manifest this update: Sun 21 Dec 2025 07:01:03 +0000 Manifest next update: Mon 22 Dec 2025 07:01:03 +0000 Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=) 2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: oHElvwKmDx8sBx/Qzex3a52C5fHejcpQCGEo1aGUXBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:32:c8:ad:4b:47:b8:f3:88:a2:f3:37:ce:98:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c070ee8dc8378086960182e3309226717e83e407 Validity Not Before: Dec 21 07:01:03 2025 GMT Not After : Dec 22 07:01:03 2025 GMT Subject: CN=221587b8bc8b3b4bb10f527f006b1afa35c37184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6a:35:24:4f:d2:30:ec:52:98:6c:df:c9:73: d3:99:b3:0c:2a:79:c2:d6:f9:f7:08:0d:40:db:c5: a4:9e:58:c2:b9:69:a7:e6:51:98:d0:f8:67:b7:86: 53:6a:b3:3a:1d:64:a6:0b:2f:c3:97:4e:35:df:0c: e0:96:a4:06:1d:19:95:7f:90:2a:b6:7d:7f:cb:92: 72:9c:37:23:34:73:89:2e:91:2b:91:9d:be:9f:2c: 96:d4:92:a4:0d:96:69:05:bf:e6:f0:93:7e:22:ad: ae:c0:c3:4b:55:85:5d:d7:ff:13:6b:c8:f6:23:70: 99:7e:a4:f3:96:c1:c3:c1:e7:37:12:3b:ff:e2:85: 03:c6:08:ae:d8:7a:1d:45:fc:96:e3:9f:0c:61:0a: 0f:b1:2d:01:05:24:70:33:94:67:1e:51:7c:35:c8: 23:0f:de:70:d2:2d:fc:d4:00:5f:ed:c1:25:61:35: 51:46:8a:f7:b0:c6:49:85:ed:cb:b4:4b:39:48:ce: 57:f0:2d:5d:51:e2:38:64:b5:b6:b3:fd:3d:cd:2d: 7c:dc:3b:48:2f:f0:ed:41:76:f3:0f:50:f2:21:14: c1:33:8d:d4:26:6e:25:59:04:77:bd:b5:42:87:ea: 24:f7:07:50:55:26:e2:f8:d3:55:8d:15:93:09:eb: a8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:15:87:B8:BC:8B:3B:4B:B1:0F:52:7F:00:6B:1A:FA:35:C3:71:84 X509v3 Authority Key Identifier: keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:70:f1:86:38:57:6f:b2:39:ae:ab:84:89:d2:05:15:11:a0: 5f:e9:20:7a:b2:ee:6c:29:b7:cc:6b:7c:0d:31:6b:30:c7:76: 05:25:9f:cd:5f:19:5f:23:22:ef:d9:9c:16:b2:c1:bf:99:41: 55:f2:7a:8f:47:25:6a:01:99:e3:71:35:bd:17:85:6d:87:eb: 25:13:cc:b5:63:38:76:3d:e1:28:63:78:94:dc:be:ed:92:9f: 2d:ac:1c:8d:41:6c:b8:2a:8d:f8:51:e4:50:c7:e6:6f:88:42: 18:75:f9:52:fc:be:88:fd:be:a9:a9:31:9c:76:b4:d7:92:4c: a7:5f:73:c7:f0:25:34:7f:9c:ff:be:3e:39:a3:0d:08:6d:89: cd:f5:0a:6c:6c:1c:cd:49:35:ed:97:b8:6b:8f:0e:13:4f:ef: bd:35:5d:d4:98:5e:08:86:11:48:1e:69:3b:67:dd:9e:66:af: 80:8d:ac:fe:c4:87:67:24:15:20:de:ec:b7:30:b6:29:24:d8: 72:2a:cd:16:67:97:d7:9f:25:d1:13:e0:6e:fc:32:7b:f5:49: 3d:15:f6:35:78:55:31:c4:ea:c3:93:43:e9:fd:d2:17:13:b0: 99:0d:d5:d8:f3:18:b0:1a:8f:c9:e9:96:80:a5:ed:74:ab:42: 7a:96:a6:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tjLIrUtHuPOIovM3zpi8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4 M2U0MDcwHhcNMjUxMjIxMDcwMTAzWhcNMjUxMjIyMDcwMTAzWjAzMTEwLwYDVQQD EygyMjE1ODdiOGJjOGIzYjRiYjEwZjUyN2YwMDZiMWFmYTM1YzM3MTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mo1JE/SMOxSmGzfyXPTmbMMKnnC 1vn3CA1A28WknljCuWmn5lGY0Phnt4ZTarM6HWSmCy/Dl0413wzglqQGHRmVf5Aq tn1/y5JynDcjNHOJLpErkZ2+nyyW1JKkDZZpBb/m8JN+Iq2uwMNLVYVd1/8Ta8j2 I3CZfqTzlsHDwec3Ejv/4oUDxgiu2HodRfyW458MYQoPsS0BBSRwM5RnHlF8Ncgj D95w0i381ABf7cElYTVRRor3sMZJhe3LtEs5SM5X8C1dUeI4ZLW2s/09zS183DtI L/DtQXbzD1DyIRTBM43UJm4lWQR3vbVCh+ok9wdQVSbi+NNVjRWTCeuo2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIVh7i8iztLsQ9SfwBrGvo1w3GEMB8GA1UdIwQY MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt NDVhN2I2OTc4NDkzLzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXDxhjhX b7I5rquEidIFFRGgX+kgerLubCm3zGt8DTFrMMd2BSWfzV8ZXyMi79mcFrLBv5lB VfJ6j0clagGZ43E1vReFbYfrJRPMtWM4dj3hKGN4lNy+7ZKfLawcjUFsuCqN+FHk UMfmb4hCGHX5Uvy+iP2+qakxnHa015JMp19zx/AlNH+c/74+OaMNCG2JzfUKbGwc zUk17Ze4a48OE0/vvTVd1JheCIYRSB5pO2fdnmavgI2s/sSHZyQVIN7stzC2KSTY cirNFmeX158l0RPgbvwye/VJPRX2NXhVMcTqw5ND6f3SFxOwmQ3V2PMYsBqPyemW gKXtdKtCepamqg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:14:27 2025 by rpki-client