This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft File: WduoTN3qQ_y-QemGsfx4E33P79c.mft (raw, json) Hash identifier: mUi/JqXqAl6iuUFpNnUtiE6D/JSi9jCS7ihgNaFG1Ys= Subject key identifier: 06:74:22:29:EE:E1:53:23:4E:79:44:3E:C8:4A:24:C4:D2:F6:F3:F2 Authority key identifier: 59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 Certificate issuer: /CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Certificate serial: 019B0FA543BC88D110F9E6F6085B249C3BE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft Manifest number: 0554 Signing time: Thu 11 Dec 2025 23:00:47 +0000 Manifest this update: Thu 11 Dec 2025 23:00:47 +0000 Manifest next update: Fri 12 Dec 2025 23:00:47 +0000 Files and hashes: 1: RhPTeugmZDfkfUBJoLhRret8XmI.roa (hash: H4OyvWIew7LAcqrSk19ToeJf4eN45LOuyTBAz8MK5+Q=) 2: WduoTN3qQ_y-QemGsfx4E33P79c.crl (hash: voGaMmcR6n+jLxAU1YZGCQv54HEFk5FFFwY7yCSoC64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:43:bc:88:d1:10:f9:e6:f6:08:5b:24:9c:3b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dba84cddea43fcbe41e986b1fc78137dcfefd7 Validity Not Before: Dec 11 23:00:47 2025 GMT Not After : Dec 12 23:00:47 2025 GMT Subject: CN=06742229eee153234e79443ec84a24c4d2f6f3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:37:be:40:0e:77:96:fc:39:c4:0b:59:ac: ff:34:ad:50:cd:d8:08:48:b5:eb:28:03:5b:3f:83: 2d:66:74:5e:71:18:2e:b5:5f:62:1f:82:99:c3:9b: 74:86:b6:17:02:51:22:b8:46:ec:25:bd:c9:4f:4f: b4:b9:28:b4:98:82:44:50:22:1a:c8:3d:43:19:f1: ad:63:24:04:d0:ec:7c:b9:44:0f:f7:ef:1b:64:f1: ff:50:1f:a3:00:0e:7c:af:5f:39:3b:b4:c7:68:e7: a5:ba:2a:06:1b:65:49:b5:33:9b:28:4e:be:9e:f8: ba:c5:0f:cc:53:16:b8:00:99:7c:41:7b:3a:8f:c5: 46:4c:6d:39:4c:b9:65:18:0d:47:b3:7d:98:c8:9e: 8e:5a:27:bd:fa:60:e9:46:0c:a4:8e:0d:7e:6f:04: 6b:0b:06:20:62:86:1e:fa:b6:98:84:d2:3d:7d:60: aa:26:46:86:b0:0c:26:4e:2f:1e:7b:69:7f:9a:83: 73:53:bb:97:49:c1:e8:0a:8c:2d:7c:d8:c7:a6:cc: 83:79:74:51:84:88:43:22:52:67:10:e6:63:94:af: de:fc:8d:8c:ab:8a:30:ac:8d:86:00:47:bb:a5:cd: 23:9f:8f:1a:dc:4a:15:b8:27:09:fe:4d:5d:9e:27: c3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:74:22:29:EE:E1:53:23:4E:79:44:3E:C8:4A:24:C4:D2:F6:F3:F2 X509v3 Authority Key Identifier: keyid:59:DB:A8:4C:DD:EA:43:FC:BE:41:E9:86:B1:FC:78:13:7D:CF:EF:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WduoTN3qQ_y-QemGsfx4E33P79c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/203cd1-594c-4e64-9331-05d08cea02a9/1/WduoTN3qQ_y-QemGsfx4E33P79c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:2d:4a:7d:6c:85:c2:4d:b7:d9:b1:73:31:d8:6d:0a:e9:bf: 06:c5:72:23:c4:1e:dd:e1:0f:d6:09:ec:31:52:79:5b:5a:08: 8c:40:d9:d6:8e:6c:5b:c4:1b:d5:de:c0:36:9e:9b:ba:44:be: 95:2b:1f:c3:02:8e:d3:19:29:86:86:c3:a7:ef:76:f7:f7:ad: 21:02:3b:7b:40:b9:21:bf:bb:51:7e:d5:ec:5a:5a:df:9c:c7: 7a:aa:d9:e0:cf:d7:c2:1a:7f:b3:a9:d1:75:d1:d5:a8:e5:7c: 8f:0e:2f:29:9c:83:78:f4:d5:ec:b1:17:4f:3a:24:51:cb:8d: 6f:11:dc:8d:c9:97:78:8c:37:5e:3d:b9:63:4b:e7:a1:2d:be: cd:8d:a2:23:8f:67:b1:f6:98:6c:5d:2f:26:be:45:76:58:a1: 86:e4:2f:ac:5f:14:b2:bc:79:6a:e1:6e:f3:dd:0f:a8:a1:c9: ed:06:99:1f:b4:0f:98:8e:33:36:00:5a:7c:5a:f8:b0:a4:07: 2a:43:91:de:29:38:a7:f6:8a:49:34:9a:a5:9f:a2:93:d0:b9: 9d:ab:6a:5c:6b:06:1b:c1:59:0b:33:11:7a:c3:0b:a9:c0:be: 69:de:63:ef:39:b8:d4:e8:34:12:08:25:fe:da:f0:a1:65:a7: f4:35:b1:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpUO8iNEQ+eb2CFsknDvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGJhODRjZGRlYTQzZmNiZTQxZTk4NmIxZmM3ODEzN2Rj ZmVmZDcwHhcNMjUxMjExMjMwMDQ3WhcNMjUxMjEyMjMwMDQ3WjAzMTEwLwYDVQQD EygwNjc0MjIyOWVlZTE1MzIzNGU3OTQ0M2VjODRhMjRjNGQyZjZmM2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr603vkAOd5b8OcQLWaz/NK1QzdgI SLXrKANbP4MtZnRecRgutV9iH4KZw5t0hrYXAlEiuEbsJb3JT0+0uSi0mIJEUCIa yD1DGfGtYyQE0Ox8uUQP9+8bZPH/UB+jAA58r185O7THaOeluioGG2VJtTObKE6+ nvi6xQ/MUxa4AJl8QXs6j8VGTG05TLllGA1Hs32YyJ6OWie9+mDpRgykjg1+bwRr CwYgYoYe+raYhNI9fWCqJkaGsAwmTi8ee2l/moNzU7uXScHoCowtfNjHpsyDeXRR hIhDIlJnEOZjlK/e/I2Mq4owrI2GAEe7pc0jn48a3EoVuCcJ/k1dnifDIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZ0Iinu4VMjTnlEPshKJMTS9vPyMB8GA1UdIwQY MBaAFFnbqEzd6kP8vkHphrH8eBN9z+/XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEt MDVkMDhjZWEwMmE5LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8yMDNjZDEtNTk0Yy00ZTY0LTkzMzEtMDVkMDhjZWEwMmE5 LzEvV2R1b1ROM3FRX3ktUWVtR3NmeDRFMzNQNzljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmS1KfWyF wk232bFzMdhtCum/BsVyI8Qe3eEP1gnsMVJ5W1oIjEDZ1o5sW8Qb1d7ANp6bukS+ lSsfwwKO0xkphobDp+929/etIQI7e0C5Ib+7UX7V7Fpa35zHeqrZ4M/Xwhp/s6nR ddHVqOV8jw4vKZyDePTV7LEXTzokUcuNbxHcjcmXeIw3Xj25Y0vnoS2+zY2iI49n sfaYbF0vJr5FdlihhuQvrF8Usrx5auFu890PqKHJ7QaZH7QPmI4zNgBafFr4sKQH KkOR3ik4p/aKSTSapZ+ik9C5natqXGsGG8FZCzMResMLqcC+ad5j7zm41Og0Eggl /trwoWWn9DWxBw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:51 2025 by rpki-client