This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json) Hash identifier: pz2l7xXtGM+R6Rj/QbyW4LshwUxFqjpI0bK0VcHrlfg= Subject key identifier: CF:A1:F7:D2:F0:44:9D:7A:4D:06:9F:D2:43:43:63:D3:64:7A:45:F3 Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56 Certificate serial: 019B51F3127B83D5AC943951529E0E7AFD58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft Manifest number: 0DD8 Signing time: Wed 24 Dec 2025 20:00:42 +0000 Manifest this update: Wed 24 Dec 2025 20:00:42 +0000 Manifest next update: Thu 25 Dec 2025 20:00:42 +0000 Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=) 2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=) 3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: JPGYAC0gzSieKyShK/V2X/e0p/JvKzNjmTxEPLFjq+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:f3:12:7b:83:d5:ac:94:39:51:52:9e:0e:7a:fd:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56 Validity Not Before: Dec 24 20:00:42 2025 GMT Not After : Dec 25 20:00:42 2025 GMT Subject: CN=cfa1f7d2f0449d7a4d069fd2434363d3647a45f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:cd:24:f6:ae:3e:5c:98:a2:63:fc:b0:52: c9:dc:16:2a:58:9f:2f:c2:5a:c5:5e:19:e8:86:f2: 54:40:bc:a1:9f:d4:41:ef:d5:f5:89:d5:80:19:65: 49:2b:d7:c8:48:bd:5c:65:0a:76:22:7b:36:62:54: a2:27:27:1e:0d:ac:fb:8a:a1:49:e0:61:45:d8:18: 53:00:dd:05:19:2c:34:50:0f:19:75:72:32:dc:84: fc:d1:00:c8:f6:e0:99:56:0e:f9:39:cc:87:65:6f: 43:4e:d1:63:2f:b6:5b:81:ed:b6:20:8f:19:18:90: 7e:50:8a:a3:ba:ec:b8:9c:8f:55:52:8a:1d:30:f1: 0d:d7:d2:3c:45:56:04:86:c3:f8:d8:b1:9c:94:e5: e3:72:cf:01:95:c2:59:a4:82:04:65:74:17:1c:67: 26:6c:d9:c9:d2:b8:c9:83:dd:41:4b:ad:cd:73:3e: 2c:9a:6d:4e:12:90:e3:db:20:fd:91:fb:30:2f:3c: 10:54:24:4a:d8:1c:fb:7d:de:65:ac:57:9c:97:03: 84:c8:d3:29:54:b8:28:f7:c2:b9:43:52:c2:81:2c: 05:ca:06:1a:fd:69:40:dc:c9:ae:bd:57:78:a5:cf: 3b:60:af:2c:34:18:e6:3d:08:eb:2c:3e:95:6e:d7: 6b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A1:F7:D2:F0:44:9D:7A:4D:06:9F:D2:43:43:63:D3:64:7A:45:F3 X509v3 Authority Key Identifier: keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:df:b3:73:a0:1b:7f:93:f5:39:d4:b1:70:80:17:e2:c7:82: 3a:48:e7:74:2c:bd:61:33:d9:88:2d:61:68:f6:d1:5e:9d:70: b8:2a:47:8e:ac:75:7b:76:66:9c:66:2b:bb:79:c6:57:b1:37: 78:f0:d2:50:c5:83:ab:0b:fc:b5:da:bf:4d:32:33:9d:f3:15: fc:8b:3a:78:14:09:d6:5a:7b:fd:c8:f6:68:ad:20:66:8c:df: ef:b9:24:a4:0a:87:44:99:8b:e4:28:0d:14:9f:54:33:17:19: 5f:4c:e1:92:7c:50:3f:8c:bf:06:9e:ab:8c:b4:9d:45:da:ae: d0:e6:f2:d9:bc:ed:de:81:20:83:2d:6f:91:20:8c:bc:9d:20: 89:99:34:0d:57:ed:95:79:3e:84:46:f6:59:92:27:9c:f8:7d: e8:b1:3a:83:1c:60:95:cc:4d:91:de:0a:d6:12:17:ba:93:c3: 78:dd:f8:a8:32:bb:4f:9d:19:7c:a2:50:f3:eb:83:08:bc:df: 85:b8:eb:35:97:7d:32:54:28:f3:31:39:f7:22:c2:4f:72:ce: 07:c2:1d:9c:bd:c4:30:ff:9a:f5:6f:fc:65:44:fc:8f:82:eb: 78:b9:1f:d1:56:af:b4:eb:28:b9:ef:15:ec:91:1c:d2:8c:d4: e0:2d:15:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtR8xJ7g9WslDlRUp4Oev1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQw NThiNTYwHhcNMjUxMjI0MjAwMDQyWhcNMjUxMjI1MjAwMDQyWjAzMTEwLwYDVQQD EyhjZmExZjdkMmYwNDQ5ZDdhNGQwNjlmZDI0MzQzNjNkMzY0N2E0NWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EfNJPauPlyYomP8sFLJ3BYqWJ8v wlrFXhnohvJUQLyhn9RB79X1idWAGWVJK9fISL1cZQp2Ins2YlSiJyceDaz7iqFJ 4GFF2BhTAN0FGSw0UA8ZdXIy3IT80QDI9uCZVg75OcyHZW9DTtFjL7Zbge22II8Z GJB+UIqjuuy4nI9VUoodMPEN19I8RVYEhsP42LGclOXjcs8BlcJZpIIEZXQXHGcm bNnJ0rjJg91BS63Ncz4smm1OEpDj2yD9kfswLzwQVCRK2Bz7fd5lrFeclwOEyNMp VLgo98K5Q1LCgSwFygYa/WlA3MmuvVd4pc87YK8sNBjmPQjrLD6VbtdrswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+h99LwRJ16TQaf0kNDY9NkekXzMB8GA1UdIwQY MBaAFMD5JXEQiVh4a2X/okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQt OWIyYjllYTk1NTM1LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1 LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABt+zc6Ab f5P1OdSxcIAX4seCOkjndCy9YTPZiC1haPbRXp1wuCpHjqx1e3ZmnGYru3nGV7E3 ePDSUMWDqwv8tdq/TTIznfMV/Is6eBQJ1lp7/cj2aK0gZozf77kkpAqHRJmL5CgN FJ9UMxcZX0zhknxQP4y/Bp6rjLSdRdqu0Oby2bzt3oEggy1vkSCMvJ0giZk0DVft lXk+hEb2WZInnPh96LE6gxxglcxNkd4K1hIXupPDeN34qDK7T50ZfKJQ8+uDCLzf hbjrNZd9MlQo8zE59yLCT3LOB8IdnL3EMP+a9W/8ZUT8j4LreLkf0VavtOsoue8V 7JEc0ozU4C0VQw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:21:10 2025 by rpki-client