This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft File: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json) Hash identifier: DPGxeHWReyib19DdKqbTtsao6Lmz3WmAAEDOx5CF/b8= Subject key identifier: CB:F9:8B:FB:E2:3D:42:55:E1:4D:37:9E:80:56:A3:0C:9A:BC:1C:A4 Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 Certificate issuer: /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Certificate serial: 019B47A68F5606C552BEC84E76E786893CA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft Manifest number: 0753 Signing time: Mon 22 Dec 2025 20:00:56 +0000 Manifest this update: Mon 22 Dec 2025 20:00:56 +0000 Manifest next update: Tue 23 Dec 2025 20:00:56 +0000 Files and hashes: 1: iXKePU1MhfMj_Ffi0i3iTBdPQkI.roa (hash: bDo44FzoFFr9RyRvLSrFxMRFhrYySuyVvMJPoVIhUAM=) 2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: FI6OT34Q4Fz0mkZvl8JSNYt1AweQU0pWptIhkRYTYGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:8f:56:06:c5:52:be:c8:4e:76:e7:86:89:3c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4 Validity Not Before: Dec 22 20:00:56 2025 GMT Not After : Dec 23 20:00:56 2025 GMT Subject: CN=cbf98bfbe23d4255e14d379e8056a30c9abc1ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:ff:3b:ee:e3:29:ef:11:39:12:d2:1c:96:6d: 1a:83:d7:0f:ac:5f:47:6b:ea:ba:bf:fa:84:bf:27: 64:72:85:34:ab:a8:c0:45:5f:4c:cf:5e:90:46:9b: 7a:ab:78:55:b1:7c:3c:1d:84:91:fa:29:84:90:9e: fc:db:c5:8b:44:0c:0a:63:90:59:ba:77:a2:3e:20: 5d:d2:a3:48:da:a1:dc:45:c9:f4:66:0b:64:e2:69: 0d:f4:28:55:0e:d3:9a:68:c7:60:bf:62:50:40:08: c9:ff:7b:40:18:63:ca:67:77:41:af:0e:11:de:35: 99:cb:9a:91:25:95:c1:18:5e:38:33:8f:2f:41:e7: 38:97:9d:d5:e0:f0:25:68:0f:8d:ae:42:86:89:e7: c9:de:26:de:98:91:40:3a:9a:1c:7e:e5:c5:ae:57: 0c:05:f9:bd:48:47:3b:98:92:50:f4:fa:91:e3:4a: f5:53:18:88:1f:23:d5:54:eb:6c:36:bb:1c:95:5f: d1:17:41:59:9c:8a:6b:38:bb:ca:3d:bd:6a:35:07: 24:fd:55:ba:00:35:e2:d9:44:1d:d6:87:20:0d:31: 9b:a1:2d:62:d8:21:5a:7b:d4:9f:70:17:0c:a6:bb: 85:c6:6d:ae:98:5a:8d:73:85:0f:63:74:32:3d:a2: 41:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F9:8B:FB:E2:3D:42:55:E1:4D:37:9E:80:56:A3:0C:9A:BC:1C:A4 X509v3 Authority Key Identifier: keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e3:d5:60:44:e9:4d:a8:69:45:65:26:54:25:f0:ef:d8:1c: 83:1c:5b:a1:54:3d:39:5a:07:e2:e3:9a:cd:b5:b7:b4:24:a6: 3b:2e:59:c5:bc:dc:80:66:7c:fe:4d:4b:51:6d:6b:ac:17:0a: 07:48:e5:a1:44:09:12:9e:33:85:1b:82:27:82:60:a2:d5:36: a8:bb:3c:85:4b:0a:3f:72:32:b9:0d:de:ce:78:1f:75:e2:14: 00:a5:2f:06:2d:24:9a:e1:d2:19:e5:9c:ea:24:80:06:6c:f3: 57:c2:02:e9:58:4e:14:6d:ea:fe:d4:b6:2a:32:18:5a:50:fd: 59:0b:20:6d:cc:d5:ed:c3:ee:1c:92:e1:e9:0c:51:98:ba:13: 55:a5:a5:e8:a3:00:55:6c:ec:d2:de:94:a1:a4:17:c7:9a:cb: 79:6e:01:78:75:c1:22:e1:cf:3d:e1:8c:a5:05:41:3e:46:4f: 25:a0:2d:eb:a4:66:6b:7e:a9:fd:49:3e:77:26:39:aa:f5:25: d6:c5:bf:ff:cf:f3:df:9c:5a:f4:35:5f:6e:b5:68:02:31:17: 6e:bb:3f:07:5e:38:67:ce:53:e2:6c:54:81:46:50:a7:a5:a6: b2:17:9e:ef:e4:9d:b3:c8:39:e0:23:d7:7f:12:c9:8c:09:a9: 78:ab:23:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpo9WBsVSvshOdueGiTymMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYmE1MGZjYTMzYjE4MGQ2ODQzNmU3ZWYwY2JmNjkwNGJh ZjQ1ZDQwHhcNMjUxMjIyMjAwMDU2WhcNMjUxMjIzMjAwMDU2WjAzMTEwLwYDVQQD EyhjYmY5OGJmYmUyM2Q0MjU1ZTE0ZDM3OWU4MDU2YTMwYzlhYmMxY2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/877uMp7xE5EtIclm0ag9cPrF9H a+q6v/qEvydkcoU0q6jARV9Mz16QRpt6q3hVsXw8HYSR+imEkJ7828WLRAwKY5BZ uneiPiBd0qNI2qHcRcn0Zgtk4mkN9ChVDtOaaMdgv2JQQAjJ/3tAGGPKZ3dBrw4R 3jWZy5qRJZXBGF44M48vQec4l53V4PAlaA+NrkKGiefJ3ibemJFAOpocfuXFrlcM Bfm9SEc7mJJQ9PqR40r1UxiIHyPVVOtsNrsclV/RF0FZnIprOLvKPb1qNQck/VW6 ADXi2UQd1ocgDTGboS1i2CFae9SfcBcMpruFxm2umFqNc4UPY3QyPaJBgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMv5i/viPUJV4U03noBWowyavBykMB8GA1UdIwQY MBaAFMC6UPyjOxgNaENufvDL9pBLr0XUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgt ZDFmYmU1YTkxZDcwLzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgtZDFmYmU1YTkxZDcw LzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+PVYETp TahpRWUmVCXw79gcgxxboVQ9OVoH4uOazbW3tCSmOy5ZxbzcgGZ8/k1LUW1rrBcK B0jloUQJEp4zhRuCJ4JgotU2qLs8hUsKP3IyuQ3ezngfdeIUAKUvBi0kmuHSGeWc 6iSABmzzV8IC6VhOFG3q/tS2KjIYWlD9WQsgbczV7cPuHJLh6QxRmLoTVaWl6KMA VWzs0t6UoaQXx5rLeW4BeHXBIuHPPeGMpQVBPkZPJaAt66Rma36p/Uk+dyY5qvUl 1sW//8/z35xa9DVfbrVoAjEXbrs/B144Z85T4mxUgUZQp6Wmshee7+Sds8g54CPX fxLJjAmpeKsjZw== -----END CERTIFICATE-----Generated at Tue Dec 23 03:31:33 2025 by rpki-client