This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft File: rwsdp573_B75WWLcigHyuNSzUr8.mft (raw, json) Hash identifier: FOllcYjVoZHZfZCmMN/avH1qZ6sn6Cn8MoFOvL7wHNA= Subject key identifier: F1:48:07:68:D0:13:AD:B8:A2:B7:C9:5B:7D:2F:92:C0:51:83:C8:84 Authority key identifier: AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF Certificate issuer: /CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf Certificate serial: 019B3FB5EC008E81C30ED48A4C5A6F40E111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 07:00:45 +0000 Manifest this update: Sun 21 Dec 2025 07:00:45 +0000 Manifest next update: Mon 22 Dec 2025 07:00:45 +0000 Files and hashes: 1: rwsdp573_B75WWLcigHyuNSzUr8.crl (hash: oCOMDZIbCDOa2agdL0Y5FzlMluesVYKk1XUKO6oEsoU=) 2: vBhOSTDQ49TslR4g5aFAmSJtgZc.roa (hash: aLXO7nptimuP4wg3B24RL4qfzAQVY1HjgqZOXJ6H+xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:ec:00:8e:81:c3:0e:d4:8a:4c:5a:6f:40:e1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf Validity Not Before: Dec 21 07:00:45 2025 GMT Not After : Dec 22 07:00:45 2025 GMT Subject: CN=f1480768d013adb8a2b7c95b7d2f92c05183c884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:2f:e9:de:cf:a5:85:cc:69:da:96:1c:1a: f1:d8:6e:7f:ae:33:f3:28:a1:47:c9:b6:98:f4:91: 31:2f:85:cd:ed:3a:0e:0d:86:39:89:9b:9d:d1:bc: 2e:2f:7d:c3:70:7a:24:8d:f9:48:63:c8:4e:4c:b7: 29:e0:e5:3b:39:cb:80:1d:ac:99:7d:2c:b3:cf:c2: 88:0c:71:15:4c:21:23:f2:7b:8f:9c:aa:0f:09:7d: 44:24:5d:f0:3a:7e:d4:07:15:f1:a3:c2:2d:8d:14: 43:f5:f7:7b:f8:85:b7:20:99:00:66:67:cd:de:77: f7:b4:64:43:50:36:aa:43:41:5a:f3:38:9c:84:78: 7f:0a:93:26:6d:78:bf:7f:1c:8e:85:55:0d:96:65: 8e:89:7f:09:ff:4b:60:f3:e7:40:f4:c0:74:fa:3a: e8:b5:44:c7:86:6b:67:8e:ca:45:1b:22:ee:0e:7c: 6f:88:cc:97:29:ec:75:3f:44:2d:fa:bd:9b:20:ec: d8:55:26:84:09:86:7d:57:f7:a8:f5:ba:be:89:ca: 2e:19:27:21:e9:f5:fc:f4:e9:1f:79:4d:5d:41:e3: 21:47:a0:9a:8b:da:ef:f2:ff:81:cf:73:9a:26:8b: 53:5a:f8:1a:3c:0c:f3:db:73:cb:41:85:7b:cd:c4: 34:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:07:68:D0:13:AD:B8:A2:B7:C9:5B:7D:2F:92:C0:51:83:C8:84 X509v3 Authority Key Identifier: keyid:AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ca:cf:b9:b8:b5:81:52:75:2d:27:df:49:ee:fa:56:6c:34: 3f:9a:58:11:f3:af:17:e1:67:7f:0d:0b:de:2c:0d:cd:87:df: 93:95:4c:9e:9f:43:ca:51:53:e7:85:70:1d:95:cd:a3:6f:18: dc:2a:d7:80:7b:8f:da:06:e4:59:4a:55:f7:dc:8a:df:a5:a5: 39:e9:3f:ff:39:87:d9:b1:5b:8c:c1:d5:23:40:a3:26:c2:7d: 99:13:bb:5f:fc:b1:42:58:15:6a:e5:d0:6b:15:b5:04:0a:b2: 53:9f:0a:1f:6f:22:c1:fc:14:e2:7a:d0:6a:13:3d:f6:c9:7e: 66:21:84:62:f2:a3:a0:e7:f6:81:76:e3:7b:45:16:c2:a9:d8: 25:f1:c1:e7:79:5a:67:30:4c:2a:77:ff:3f:37:b9:1d:10:6e: 69:02:22:e2:6d:7e:2e:48:1a:79:06:43:d6:bd:16:78:56:2e: 09:c7:e3:f3:aa:1d:ba:a2:4f:c5:3b:f4:3e:cf:b6:12:b4:11: 63:05:48:39:ae:48:e1:1b:14:4f:03:55:59:c9:dc:31:e7:a7: 84:7a:a5:cf:36:a2:df:77:46:a2:e2:20:3d:de:d5:3b:12:85: f9:2a:bc:4a:72:d5:4e:02:dc:c9:7a:23:12:f2:21:6c:35:b5: 66:1e:4e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tewAjoHDDtSKTFpvQOERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGIxZGE3OWVmN2ZjMWVmOTU5NjJkYzhhMDFmMmI4ZDRi MzUyYmYwHhcNMjUxMjIxMDcwMDQ1WhcNMjUxMjIyMDcwMDQ1WjAzMTEwLwYDVQQD EyhmMTQ4MDc2OGQwMTNhZGI4YTJiN2M5NWI3ZDJmOTJjMDUxODNjODg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVUv6d7PpYXMadqWHBrx2G5/rjPz KKFHybaY9JExL4XN7ToODYY5iZud0bwuL33DcHokjflIY8hOTLcp4OU7OcuAHayZ fSyzz8KIDHEVTCEj8nuPnKoPCX1EJF3wOn7UBxXxo8ItjRRD9fd7+IW3IJkAZmfN 3nf3tGRDUDaqQ0Fa8zichHh/CpMmbXi/fxyOhVUNlmWOiX8J/0tg8+dA9MB0+jro tUTHhmtnjspFGyLuDnxviMyXKex1P0Qt+r2bIOzYVSaECYZ9V/eo9bq+icouGSch 6fX89OkfeU1dQeMhR6Cai9rv8v+Bz3OaJotTWvgaPAzz23PLQYV7zcQ0AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFIB2jQE624orfJW30vksBRg8iEMB8GA1UdIwQY MBaAFK8LHaee9/we+Vli3IoB8rjUs1K/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8wMDg5OGEtZTdjMC00ODM2LWE5NmIt OTJiMmVhMzE5YmMxLzEvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8wMDg5OGEtZTdjMC00ODM2LWE5NmItOTJiMmVhMzE5YmMx LzEvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsrPubi1 gVJ1LSffSe76Vmw0P5pYEfOvF+Fnfw0L3iwNzYffk5VMnp9DylFT54VwHZXNo28Y 3CrXgHuP2gbkWUpV99yK36WlOek//zmH2bFbjMHVI0CjJsJ9mRO7X/yxQlgVauXQ axW1BAqyU58KH28iwfwU4nrQahM99sl+ZiGEYvKjoOf2gXbje0UWwqnYJfHB53la ZzBMKnf/Pze5HRBuaQIi4m1+LkgaeQZD1r0WeFYuCcfj86oduqJPxTv0Ps+2ErQR YwVIOa5I4RsUTwNVWcncMeenhHqlzzai33dGouIgPd7VOxKF+Sq8SnLVTgLcyXoj EvIhbDW1Zh5Org== -----END CERTIFICATE-----Generated at Sun Dec 21 08:14:19 2025 by rpki-client