This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json) Hash identifier: M/+J+ZFjPDu25PtL1zq2CxF+n6lLB2bq3CcNXbJyTPo= Subject key identifier: A6:81:7A:79:1C:5A:CA:0D:63:6A:F5:B2:0D:86:52:E6:D2:E4:99:0A Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407 Certificate serial: 019B6655868DDD2EFBB4FACB91480236C9F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft Manifest number: 0AB9 Signing time: Sun 28 Dec 2025 19:00:39 +0000 Manifest this update: Sun 28 Dec 2025 19:00:39 +0000 Manifest next update: Mon 29 Dec 2025 19:00:39 +0000 Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=) 2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: 6heqCbrxh7Rc2rYSGn8JPlDvwELko3FUsiH5GvebhJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:86:8d:dd:2e:fb:b4:fa:cb:91:48:02:36:c9:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c070ee8dc8378086960182e3309226717e83e407 Validity Not Before: Dec 28 19:00:39 2025 GMT Not After : Dec 29 19:00:39 2025 GMT Subject: CN=a6817a791c5aca0d636af5b20d8652e6d2e4990a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f1:c5:30:4c:2b:8a:1a:14:85:94:2c:17:ab: 6d:7e:1e:3c:e3:96:50:85:ae:0d:c8:22:2b:43:ce: 9e:a0:b2:56:4a:63:15:4d:7c:07:52:5f:b9:cd:57: 60:41:70:ab:76:ee:e3:d5:32:5f:b9:7b:2f:5d:aa: a5:27:74:1a:95:fa:ab:c3:07:c5:ed:15:08:a2:d5: 0e:b2:10:c1:a9:e5:f1:09:c9:d3:7a:53:5d:1e:b6: be:6d:93:94:3a:59:17:89:6d:52:fd:9c:5c:97:39: 29:3e:f6:fd:23:e9:30:f9:89:18:ab:2e:27:28:bb: ec:de:7b:01:d0:8c:28:50:09:66:c8:b2:f1:0f:b2: ab:8a:6a:bb:d8:ca:49:ef:42:68:67:98:15:a5:7f: e9:d7:74:a0:99:6f:c9:e7:cc:5d:d9:15:6a:98:f4: 42:86:63:48:db:ef:22:77:4f:ef:c2:0c:57:cd:30: b4:28:c3:06:fe:94:3c:d0:71:f7:94:98:51:7f:b6: 1e:ba:11:22:bf:40:72:f6:13:e7:04:ff:c4:7a:5b: 02:49:b0:05:15:d0:c7:a7:e3:5e:50:f8:0a:a2:22: 77:5f:cd:2e:c2:a8:30:19:5d:10:89:71:29:37:ad: c2:8a:34:c9:bc:e7:6d:f8:93:71:e0:97:4f:87:84: a8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:81:7A:79:1C:5A:CA:0D:63:6A:F5:B2:0D:86:52:E6:D2:E4:99:0A X509v3 Authority Key Identifier: keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a4:e6:5f:b8:bf:1f:7e:ed:cf:0b:35:0b:ea:e5:0e:11:33: 03:ae:ad:c7:e0:b1:9d:46:b0:63:ea:40:ec:c7:dc:2c:d8:6d: fe:e1:9e:13:03:72:db:01:36:a1:2d:25:d2:fc:03:74:13:ac: 60:32:f0:a1:92:02:e6:e5:ff:ef:7c:5f:4c:32:65:2e:67:7e: 61:cb:82:27:ad:0a:ee:30:05:53:5a:5a:ef:18:d5:36:0b:75: ad:3b:b2:de:82:8c:d2:f9:7d:f6:53:fa:7f:ae:54:7f:30:99: 58:33:1e:e9:bb:6f:54:2b:f5:e6:5c:c3:4c:b9:87:a4:9a:e5: ea:0a:ce:7c:13:16:13:cb:e8:80:2f:9d:ee:13:86:49:4c:2b: 9c:2a:f5:3f:bc:d3:8d:78:7e:ba:d9:a7:c4:50:a1:cc:f5:2c: af:25:0e:a6:c1:71:64:11:e5:8f:4f:49:f2:4c:67:7d:2c:01: d5:6d:0b:d2:13:0a:19:27:d2:38:18:d4:4c:e0:f9:a6:5b:af: 3c:1d:a8:e7:78:7c:41:d4:9e:ed:99:0e:d9:de:d2:01:a8:85: 8e:87:bc:cb:66:8f:d8:64:0a:a8:b3:68:cf:8a:c1:2b:af:43: 4f:a1:b3:2d:9b:2d:06:77:4f:fa:7b:76:cd:c5:89:d3:dd:c1: da:62:07:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVYaN3S77tPrLkUgCNsnzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4 M2U0MDcwHhcNMjUxMjI4MTkwMDM5WhcNMjUxMjI5MTkwMDM5WjAzMTEwLwYDVQQD EyhhNjgxN2E3OTFjNWFjYTBkNjM2YWY1YjIwZDg2NTJlNmQyZTQ5OTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvHFMEwrihoUhZQsF6ttfh4845ZQ ha4NyCIrQ86eoLJWSmMVTXwHUl+5zVdgQXCrdu7j1TJfuXsvXaqlJ3QalfqrwwfF 7RUIotUOshDBqeXxCcnTelNdHra+bZOUOlkXiW1S/ZxclzkpPvb9I+kw+YkYqy4n KLvs3nsB0IwoUAlmyLLxD7Krimq72MpJ70JoZ5gVpX/p13SgmW/J58xd2RVqmPRC hmNI2+8id0/vwgxXzTC0KMMG/pQ80HH3lJhRf7YeuhEiv0By9hPnBP/EelsCSbAF FdDHp+NeUPgKoiJ3X80uwqgwGV0QiXEpN63CijTJvOdt+JNx4JdPh4So+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaBenkcWsoNY2r1sg2GUubS5JkKMB8GA1UdIwQY MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt NDVhN2I2OTc4NDkzLzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaTmX7i/ H37tzws1C+rlDhEzA66tx+CxnUawY+pA7MfcLNht/uGeEwNy2wE2oS0l0vwDdBOs YDLwoZIC5uX/73xfTDJlLmd+YcuCJ60K7jAFU1pa7xjVNgt1rTuy3oKM0vl99lP6 f65UfzCZWDMe6btvVCv15lzDTLmHpJrl6grOfBMWE8vogC+d7hOGSUwrnCr1P7zT jXh+utmnxFChzPUsryUOpsFxZBHlj09J8kxnfSwB1W0L0hMKGSfSOBjUTOD5pluv PB2o53h8QdSe7ZkO2d7SAaiFjoe8y2aP2GQKqLNoz4rBK69DT6GzLZstBndP+nt2 zcWJ093B2mIHiA== -----END CERTIFICATE-----Generated at Mon Dec 29 01:50:36 2025 by rpki-client