This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft File: wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft (raw, json) Hash identifier: bKqEVTkkQar4RggVXNLBmCS7v/HSPeb34TDDGYeff7s= Subject key identifier: 4F:09:96:C1:9D:F0:DB:C4:F9:56:35:78:12:01:86:08:84:94:3C:01 Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56 Certificate serial: 019B38D81DC0C12F4BD316D1D5A79F30E722 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft Manifest number: 0DCB Signing time: Fri 19 Dec 2025 23:00:46 +0000 Manifest this update: Fri 19 Dec 2025 23:00:46 +0000 Manifest next update: Sat 20 Dec 2025 23:00:46 +0000 Files and hashes: 1: 42TScFyDsL36h4YpEfhHoHfnzjk.roa (hash: PlV9CG6o3L7E63lVcJyc5UxCQesBmENg5els1UMNldc=) 2: GzDEyQPlP7XqkDOXMJVrm-t5quA.roa (hash: yHlRVvenZ9bcsv8W/dTmVIqnz02wrgwCRtxhDUrDoKo=) 3: wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl (hash: Up7DatPjm21XyKqyJgfRGtqAQSnIrHZE5+LamtTMAt4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:1d:c0:c1:2f:4b:d3:16:d1:d5:a7:9f:30:e7:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56 Validity Not Before: Dec 19 23:00:46 2025 GMT Not After : Dec 20 23:00:46 2025 GMT Subject: CN=4f0996c19df0dbc4f95635781201860884943c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:34:cd:30:6f:56:80:82:8f:96:07:b0:9f: 98:f8:89:3a:de:cc:e7:d3:ca:69:9e:69:58:32:ec: 39:36:b6:fe:f2:6d:15:97:d4:93:e9:69:ec:33:72: 6f:b2:7d:48:21:f3:fd:30:2d:f8:ea:4f:86:c8:78: c6:7f:4f:39:c7:ae:83:04:65:c0:97:f6:e8:95:23: 21:39:00:4d:ae:40:ca:c4:4c:8f:8a:d6:b2:10:35: 91:4d:dc:e2:7c:99:65:62:fe:c2:2d:37:0b:65:4f: 3c:32:8e:41:ff:0a:f4:26:b6:25:21:c0:ad:08:be: b7:57:bf:f0:92:e6:14:7b:98:32:22:7b:6c:0f:b3: fc:6a:1e:d9:3c:e9:0a:13:be:7b:30:90:ad:04:d6: 10:e3:73:eb:88:c5:fa:58:66:d0:85:92:8c:e4:a0: 01:8c:6b:c8:b6:02:ac:58:cb:aa:3b:c2:81:9c:61: b1:f6:4a:5b:76:f5:bc:52:dc:5e:b4:34:57:0c:94: 03:03:d8:43:51:c6:ee:de:be:37:43:9a:25:4e:8c: 1a:5d:d9:83:1a:b7:03:82:44:e3:44:2a:44:39:d5: e7:bf:94:84:20:84:61:77:a3:e0:c1:d4:85:a0:aa: fd:c7:38:60:5d:f9:fb:31:fc:c8:ff:f7:38:23:ec: 8f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:09:96:C1:9D:F0:DB:C4:F9:56:35:78:12:01:86:08:84:94:3C:01 X509v3 Authority Key Identifier: keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:70:03:1c:bf:a1:0f:e1:33:6a:8a:03:c0:ec:5c:aa:e4:14: 97:ca:b1:b7:d7:8d:f4:96:e8:27:f3:24:fd:0c:51:50:ce:57: b5:a3:ee:57:47:ca:52:0a:fe:8d:cf:04:de:f4:7c:86:10:d0: 5c:14:40:38:75:a9:73:86:28:b2:89:4f:3a:86:19:50:af:4b: 21:4f:85:b0:0e:fc:c2:79:bd:6b:43:bc:6d:3c:7c:ac:03:f3: de:94:12:38:b3:5c:82:f7:3c:7c:43:f3:74:e6:3a:af:de:d2: 31:6c:dd:81:8e:23:4a:46:c4:30:16:93:b7:74:83:c7:55:a7: f4:51:65:26:2f:3d:be:0c:d1:bf:20:11:7a:16:d0:2b:bc:9a: f1:f9:d2:25:4a:02:7b:9e:ec:53:97:17:e4:3f:fc:60:03:64: 16:05:53:d6:91:35:71:ea:4c:fa:2f:ca:61:eb:27:f2:aa:46: 12:83:fb:f8:97:a5:e6:b5:cc:83:17:97:e9:57:14:a6:ad:05: c4:6c:0d:37:30:32:fa:a4:5c:ac:f5:f5:cd:36:cf:26:a8:15: 49:a8:53:8d:fd:e3:8a:00:3b:fe:6c:e5:bc:2d:d3:2a:ff:2f: 71:26:e8:f7:13:e0:77:6b:38:39:b2:a4:6c:00:c8:ac:6e:c7: 32:b5:37:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42B3AwS9L0xbR1aefMOciMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQw NThiNTYwHhcNMjUxMjE5MjMwMDQ2WhcNMjUxMjIwMjMwMDQ2WjAzMTEwLwYDVQQD Eyg0ZjA5OTZjMTlkZjBkYmM0Zjk1NjM1NzgxMjAxODYwODg0OTQzYzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjc0zTBvVoCCj5YHsJ+Y+Ik63szn 08ppnmlYMuw5Nrb+8m0Vl9ST6WnsM3Jvsn1IIfP9MC346k+GyHjGf085x66DBGXA l/bolSMhOQBNrkDKxEyPitayEDWRTdzifJllYv7CLTcLZU88Mo5B/wr0JrYlIcCt CL63V7/wkuYUe5gyIntsD7P8ah7ZPOkKE757MJCtBNYQ43PriMX6WGbQhZKM5KAB jGvItgKsWMuqO8KBnGGx9kpbdvW8UtxetDRXDJQDA9hDUcbu3r43Q5olTowaXdmD GrcDgkTjRCpEOdXnv5SEIIRhd6PgwdSFoKr9xzhgXfn7MfzI//c4I+yPowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE8JlsGd8NvE+VY1eBIBhgiElDwBMB8GA1UdIwQY MBaAFMD5JXEQiVh4a2X/okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQt OWIyYjllYTk1NTM1LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1 LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3ADHL+h D+EzaooDwOxcquQUl8qxt9eN9JboJ/Mk/QxRUM5XtaPuV0fKUgr+jc8E3vR8hhDQ XBRAOHWpc4YosolPOoYZUK9LIU+FsA78wnm9a0O8bTx8rAPz3pQSOLNcgvc8fEPz dOY6r97SMWzdgY4jSkbEMBaTt3SDx1Wn9FFlJi89vgzRvyARehbQK7ya8fnSJUoC e57sU5cX5D/8YANkFgVT1pE1cepM+i/KYesn8qpGEoP7+Jel5rXMgxeX6VcUpq0F xGwNNzAy+qRcrPX1zTbPJqgVSahTjf3jigA7/mzlvC3TKv8vcSbo9xPgd2s4ObKk bADIrG7HMrU3DA== -----END CERTIFICATE-----Generated at Sat Dec 20 01:16:59 2025 by rpki-client