This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json) Hash identifier: NfOGGCZpHU+t8FrO5F7bU//gnB1Nm1yASo1sPFUVXrU= Subject key identifier: A4:1E:2C:F8:08:EA:31:42:57:80:87:7F:5A:9A:1E:0E:17:95:49:E2 Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa Certificate serial: 019B1D99587FAB720BD13774441C33EBAEBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft Manifest number: 15A9 Signing time: Sun 14 Dec 2025 16:02:27 +0000 Manifest this update: Sun 14 Dec 2025 16:02:27 +0000 Manifest next update: Mon 15 Dec 2025 16:02:27 +0000 Files and hashes: 1: 60T6Ej2ZJn4yFg_MS6n2i1jF0Qw.roa (hash: ixHsF6czewFe6nz5GWBS6cLi+9EpZcSZ2ufhT1ecw/Y=) 2: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: eii9SaGL2iYCgDrKvVSyq/KYmbggEFYu26L4Fx9oIBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:99:58:7f:ab:72:0b:d1:37:74:44:1c:33:eb:ae:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa Validity Not Before: Dec 14 16:02:27 2025 GMT Not After : Dec 15 16:02:27 2025 GMT Subject: CN=a41e2cf808ea31425780877f5a9a1e0e179549e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b0:c3:7a:ec:a9:92:28:ad:67:8d:94:e7:95: 48:86:e4:96:5d:86:68:bb:76:de:23:bc:10:0c:37: b5:19:cb:a2:3a:51:d7:62:74:83:bc:cf:af:62:61: 86:6a:7a:d7:af:38:de:87:4a:a7:78:47:3e:6e:a4: 17:83:36:8c:be:1b:76:ee:cf:8c:30:1c:08:3e:7a: 87:83:9e:3c:9f:a2:81:c2:f4:17:89:c4:4a:ef:df: 70:27:6f:0d:fc:7c:e7:56:ef:8f:2f:f1:95:9c:80: 7b:9f:14:85:d4:e6:0e:f8:f6:b2:06:30:18:0c:c6: c6:cd:e0:77:14:ca:db:64:64:12:6a:ba:31:6e:66: 3b:4a:3b:d8:df:a1:88:d9:bc:5d:e4:bc:6b:a9:d8: bb:2f:f6:f0:4b:51:75:22:aa:31:b1:1c:c7:da:19: fd:4e:25:88:b1:f3:1b:73:35:f4:e7:b4:2b:e8:d6: 5a:d2:04:ed:ec:8e:da:d4:92:a1:b7:d4:c8:ff:f0: 45:8a:92:79:b7:34:4a:5f:3b:9c:9e:2e:41:f7:38: 5d:9c:97:97:69:42:15:18:95:d9:47:ac:ba:a3:a0: 05:8b:32:bf:e1:6f:b6:1d:5c:28:57:5c:87:e9:59: c6:37:d0:93:b9:67:10:65:ca:59:90:41:06:a6:cd: 73:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1E:2C:F8:08:EA:31:42:57:80:87:7F:5A:9A:1E:0E:17:95:49:E2 X509v3 Authority Key Identifier: keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:2e:18:ce:3c:2a:69:eb:b2:bc:63:81:8c:c5:3a:f2:1f:d6: d9:aa:06:8a:75:1e:7a:c6:2b:42:8d:cf:5e:85:9a:37:13:d7: 9d:32:e0:27:1c:c3:01:c4:b8:b7:0f:3f:70:ea:0d:79:4a:11: d5:3a:b5:77:dc:a2:e7:8c:c3:07:50:19:aa:36:8a:98:c6:57: b4:e6:a2:15:72:22:3e:3d:22:45:6c:30:25:d3:f8:95:b8:11: d1:24:f4:4d:5e:67:3f:8a:fc:c3:5b:cb:64:a3:be:df:93:64: 8d:5c:81:2a:7d:6f:f3:1e:c9:8b:cd:5e:f2:d0:36:93:a1:51: 7b:4b:ed:b7:c1:f1:86:85:68:9a:3c:4e:88:36:f8:0d:8d:ed: 66:c1:ec:79:1d:1b:27:7d:7e:f6:7c:30:74:a0:9d:6f:47:55: 56:58:1a:10:a2:da:45:cd:69:8b:99:fa:b8:50:72:62:9c:2e: bc:70:65:cb:67:68:6a:23:13:ae:17:1e:82:82:7a:1c:3d:2e: 52:d0:5c:e8:f3:aa:05:aa:16:a4:ed:bd:bf:13:83:b7:07:59: 30:98:6a:22:e5:ae:98:01:f7:db:d5:ab:49:13:ad:07:bf:29: 3b:e4:e6:2f:ab:e1:0e:42:79:41:25:0b:c9:6e:e6:2b:e6:16: 35:17:20:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmVh/q3IL0Td0RBwz666/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl NGJhYWEwHhcNMjUxMjE0MTYwMjI3WhcNMjUxMjE1MTYwMjI3WjAzMTEwLwYDVQQD EyhhNDFlMmNmODA4ZWEzMTQyNTc4MDg3N2Y1YTlhMWUwZTE3OTU0OWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybDDeuypkiitZ42U55VIhuSWXYZo u3beI7wQDDe1GcuiOlHXYnSDvM+vYmGGanrXrzjeh0qneEc+bqQXgzaMvht27s+M MBwIPnqHg548n6KBwvQXicRK799wJ28N/HznVu+PL/GVnIB7nxSF1OYO+PayBjAY DMbGzeB3FMrbZGQSaroxbmY7SjvY36GI2bxd5Lxrqdi7L/bwS1F1IqoxsRzH2hn9 TiWIsfMbczX057Qr6NZa0gTt7I7a1JKht9TI//BFipJ5tzRKXzucni5B9zhdnJeX aUIVGJXZR6y6o6AFizK/4W+2HVwoV1yH6VnGN9CTuWcQZcpZkEEGps1zaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQeLPgI6jFCV4CHf1qaHg4XlUniMB8GA1UdIwQY MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOC4Yzjwq aeuyvGOBjMU68h/W2aoGinUeesYrQo3PXoWaNxPXnTLgJxzDAcS4tw8/cOoNeUoR 1Tq1d9yi54zDB1AZqjaKmMZXtOaiFXIiPj0iRWwwJdP4lbgR0ST0TV5nP4r8w1vL ZKO+35NkjVyBKn1v8x7Ji81e8tA2k6FRe0vtt8HxhoVomjxOiDb4DY3tZsHseR0b J31+9nwwdKCdb0dVVlgaEKLaRc1pi5n6uFByYpwuvHBly2doaiMTrhcegoJ6HD0u UtBc6POqBaoWpO29vxODtwdZMJhqIuWumAH329WrSROtB78pO+TmL6vhDkJ5QSUL yW7mK+YWNRcgpA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:36:33 2025 by rpki-client