This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft File: wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json) Hash identifier: gqUF1aRtqXMRCN60yaHLVyPK/T49+g2QlobhYDV+lGo= Subject key identifier: B4:0B:8A:5E:98:76:DB:CE:6D:D2:01:08:13:57:F3:0E:AF:F2:2A:F7 Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B Certificate issuer: /CN=c29c1007746981fcc408839965b1671c037d121b Certificate serial: 019B37FCA06B0BC50FD0C89835970EE378CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft Manifest number: 0BF0 Signing time: Fri 19 Dec 2025 19:01:01 +0000 Manifest this update: Fri 19 Dec 2025 19:01:01 +0000 Manifest next update: Sat 20 Dec 2025 19:01:01 +0000 Files and hashes: 1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=) 2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: 4gsNxPkZPU9czdRh8ErA8A9LSxlgcj2qna3+kcwHH7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:a0:6b:0b:c5:0f:d0:c8:98:35:97:0e:e3:78:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c29c1007746981fcc408839965b1671c037d121b Validity Not Before: Dec 19 19:01:01 2025 GMT Not After : Dec 20 19:01:01 2025 GMT Subject: CN=b40b8a5e9876dbce6dd201081357f30eaff22af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:51:c9:a3:91:19:67:42:f3:02:0e:e2:ba: 1b:5b:95:44:9f:f5:32:1f:52:f8:34:ac:b2:10:d4: 6f:e1:60:d5:70:fb:2d:80:6c:33:61:7f:f9:69:6b: c7:46:33:5f:27:85:a6:3f:21:9d:73:2e:4b:f7:58: b6:84:8a:d2:93:84:da:03:89:10:31:80:ea:96:f5: a4:65:79:24:a7:29:62:fb:77:c1:21:0e:2e:46:ec: 34:43:df:72:77:1a:17:ce:0f:a7:7f:c5:a4:d2:53: a0:95:1b:93:a9:03:61:ad:0e:10:e9:4d:a6:79:4d: 58:47:58:8b:5f:a2:db:4f:68:f2:ba:45:d2:85:09: 29:94:06:7b:e7:35:c5:1d:6b:95:37:01:6d:0d:25: 37:26:44:a2:33:e2:71:80:04:55:05:22:6d:39:1d: 1d:42:6b:8a:58:1f:9e:d0:11:fb:59:f0:f3:51:be: d7:68:12:5b:10:72:aa:4a:5f:be:dc:e8:6c:80:d3: c4:ef:7e:a4:a1:94:3e:c2:08:98:ed:cf:e2:05:86: 4e:b0:c9:0a:9c:fc:28:b8:fa:48:e1:ba:07:cd:2a: 67:81:32:96:ea:79:7c:4c:c1:32:57:d2:2b:dc:83: 38:cf:6f:25:5e:51:0e:05:1c:69:8b:9b:da:4c:6c: 5e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0B:8A:5E:98:76:DB:CE:6D:D2:01:08:13:57:F3:0E:AF:F2:2A:F7 X509v3 Authority Key Identifier: keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ac:db:69:0e:50:07:fe:51:a4:97:24:36:09:85:ea:e6:2c: 7a:06:1b:aa:00:9f:bd:ae:bf:ff:20:69:53:33:67:8d:9e:f4: 19:dd:06:5e:5e:ef:46:7b:be:c8:38:d2:64:cf:08:38:e9:c1: a0:45:94:24:a2:51:cb:61:02:46:57:f3:42:d8:22:e6:78:40: 64:0f:01:1e:29:48:85:16:b1:ee:d1:35:82:8b:68:ee:87:8b: 0d:02:e4:1d:c3:3a:e1:d3:51:18:fc:83:80:56:28:ff:70:18: 27:31:56:23:fd:12:dc:98:0a:c5:27:74:66:60:df:4d:3b:8b: c7:f8:61:e0:52:c6:b0:23:7d:5c:a0:d9:68:f6:ee:2e:9b:56: 68:db:83:a9:ee:e6:16:4f:e4:b9:13:3d:f7:5a:28:54:fe:e3: 7a:ae:25:04:c3:c3:47:a1:1b:05:15:54:18:46:a6:05:ca:aa: c7:0d:01:7c:aa:f3:5b:9c:1e:1b:c3:eb:df:48:3b:b3:43:d9: 09:10:59:23:fe:77:3b:19:a4:36:0a:94:c0:30:b2:95:3e:72: 27:a6:94:d4:45:d8:a3:21:a4:07:ca:a9:60:99:d9:82:a9:7e: 2a:0f:b8:e7:3e:05:e2:16:eb:94:af:dc:3e:fb:46:72:00:02: 06:7b:36:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/KBrC8UP0MiYNZcO43jOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOWMxMDA3NzQ2OTgxZmNjNDA4ODM5OTY1YjE2NzFjMDM3 ZDEyMWIwHhcNMjUxMjE5MTkwMTAxWhcNMjUxMjIwMTkwMTAxWjAzMTEwLwYDVQQD EyhiNDBiOGE1ZTk4NzZkYmNlNmRkMjAxMDgxMzU3ZjMwZWFmZjIyYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3xRyaORGWdC8wIO4robW5VEn/Uy H1L4NKyyENRv4WDVcPstgGwzYX/5aWvHRjNfJ4WmPyGdcy5L91i2hIrSk4TaA4kQ MYDqlvWkZXkkpyli+3fBIQ4uRuw0Q99ydxoXzg+nf8Wk0lOglRuTqQNhrQ4Q6U2m eU1YR1iLX6LbT2jyukXShQkplAZ75zXFHWuVNwFtDSU3JkSiM+JxgARVBSJtOR0d QmuKWB+e0BH7WfDzUb7XaBJbEHKqSl++3OhsgNPE736koZQ+wgiY7c/iBYZOsMkK nPwouPpI4boHzSpngTKW6nl8TMEyV9Ir3IM4z28lXlEOBRxpi5vaTGxeRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQLil6YdtvObdIBCBNX8w6v8ir3MB8GA1UdIwQY MBaAFMKcEAd0aYH8xAiDmWWxZxwDfRIbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDkt OGZjOTMwZDg3MDJhLzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84YWIyNmMtYmExNy00Mjg4LTg3NDktOGZjOTMwZDg3MDJh LzEvd3B3UUIzUnBnZnpFQ0lPWlpiRm5IQU45RWhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6zbaQ5Q B/5RpJckNgmF6uYsegYbqgCfva6//yBpUzNnjZ70Gd0GXl7vRnu+yDjSZM8IOOnB oEWUJKJRy2ECRlfzQtgi5nhAZA8BHilIhRax7tE1goto7oeLDQLkHcM64dNRGPyD gFYo/3AYJzFWI/0S3JgKxSd0ZmDfTTuLx/hh4FLGsCN9XKDZaPbuLptWaNuDqe7m Fk/kuRM991ooVP7jeq4lBMPDR6EbBRVUGEamBcqqxw0BfKrzW5weG8Pr30g7s0PZ CRBZI/53OxmkNgqUwDCylT5yJ6aU1EXYoyGkB8qpYJnZgql+Kg+45z4F4hbrlK/c PvtGcgACBns2Ag== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:10 2025 by rpki-client