This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft File: WpObDO0411zGPtUNblznK7tbSxA.mft (raw, json) Hash identifier: jaJiRjAJUH+SxOIBxpFL7FGdANKYSEiP4D21O1grCWA= Subject key identifier: 4E:D6:B4:65:F2:A6:B5:06:9D:49:8A:94:89:B8:CC:90:1F:F7:2A:70 Authority key identifier: 5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 Certificate issuer: /CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Certificate serial: 019B0859CDEF5D82BCB0C5B65582155D01DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft Manifest number: 1374 Signing time: Wed 10 Dec 2025 13:01:01 +0000 Manifest this update: Wed 10 Dec 2025 13:01:01 +0000 Manifest next update: Thu 11 Dec 2025 13:01:01 +0000 Files and hashes: 1: 11dCD_28knpPV-7hcS46kYjhhGo.roa (hash: G83WGRUtYY3zSefbF+E2SJyXjgx9VV9MLKF3KXuZ9b4=) 2: 9T-QhsbRhmrkvdsVLB1PkHcPQAU.roa (hash: +YZGQdKu0ilXXmu/2SQfsBtiwU0k+RevzvRnNOLKKVY=) 3: DegXTRl1hmKKB0Mh1bSk2jaGSSY.roa (hash: P0/pEuI8dZa73JAoWDu/sHcj9OENoxArpcgZt4vBGhI=) 4: JI9t4kgrMBA_tBUhI-9kJ9oaDjM.roa (hash: pXV1riHvzMfds44OsVlFwePE1iGGGsCCdHxPBZ6lGtc=) 5: L32db9IlGhNXOn7fmZbtThVRHKE.roa (hash: PLqdtHddsoMMcCLUD2Z7mL+OEyNt5x4sg5HQMNFgRIs=) 6: MT5zpHSMsU2F8b4CLHjl5wS-87Q.roa (hash: FPWkj13impOzSVuHerSdGs7kulcr2Jq4RDFnLt5lHdU=) 7: WARsgwxQht-4HvtCsqyvHUfR8mY.roa (hash: F6k/WM2s3wjSg8ngOVRdVBzF+PtOt/5xthj0b8Uh3dg=) 8: WpObDO0411zGPtUNblznK7tbSxA.crl (hash: NqX43boz3ble+x03G1MQVUP92vHuLXCYYDe5wM4Df+U=) 9: a3TYqNp6p83qAEF2bxpqvnCgoH8.roa (hash: y+uJpEm0cV8FP1xyfeDgAjsvGjvtnGx8w2peLpjD6EU=) 10: bMytERGSk3ewRXjdRwQ8PVzQZds.roa (hash: WmkPP4JnnJ8rEGqM+pvvK2bc+N+mTYoH1ooAlYHNyas=) 11: jGH0zuu46Tv1DGmxFrsiA-wH_ns.roa (hash: pzD5LkcY95jYgOd3J/To7SsZ3cs9FQTHeKJ7xcy8lLM=) 12: kbIKXfyrQieSTZCjNAsPSb_dgGY.roa (hash: gYFYIUtXaZJHM1/r08VSADCf+TGZjjkYv1FzaOId8qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:59:cd:ef:5d:82:bc:b0:c5:b6:55:82:15:5d:01:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a939b0ced38d75cc63ed50d6e5ce72bbb5b4b10 Validity Not Before: Dec 10 13:01:01 2025 GMT Not After : Dec 11 13:01:01 2025 GMT Subject: CN=4ed6b465f2a6b5069d498a9489b8cc901ff72a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:21:e2:4f:7e:60:95:19:22:81:b2:ce:a7:51: 17:fd:77:1a:d2:c6:0a:6f:21:b4:0b:20:f1:4f:88: ac:89:ea:5b:53:35:c7:a6:0d:53:06:67:8f:a9:57: b6:b3:7c:c8:5e:d7:f8:3f:5f:07:eb:eb:82:6e:eb: 42:a9:6e:d5:4b:d2:ff:23:81:ae:ac:c9:5c:db:11: 2b:52:a5:c9:49:1a:6a:77:00:a9:6c:74:59:21:d9: de:60:f3:32:de:e6:89:f0:09:49:6f:52:09:bc:d6: fa:78:97:37:52:91:52:6e:4c:84:83:94:76:ad:34: 52:44:34:47:6a:85:8d:f7:bb:45:92:f2:3c:66:01: 8e:b8:e9:b9:13:b7:4f:7f:5e:a4:d2:39:d3:bb:fc: 42:43:2a:64:68:56:50:5c:bf:82:5b:ef:5b:23:94: df:27:42:99:a9:4f:d3:ed:bd:66:c6:d6:76:e6:46: 09:4b:ef:8a:9d:b1:c2:e4:0e:04:cf:67:b7:8c:8c: 25:ca:b2:cf:fb:57:30:10:46:43:58:f6:37:0a:59: 28:56:5b:41:50:d3:56:98:7f:42:79:d2:c8:41:ac: 74:7c:e6:cd:96:0c:b6:53:12:28:e5:c6:18:07:f6: 42:07:05:53:1d:eb:d6:da:d9:66:c0:65:d9:e9:0b: ad:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D6:B4:65:F2:A6:B5:06:9D:49:8A:94:89:B8:CC:90:1F:F7:2A:70 X509v3 Authority Key Identifier: keyid:5A:93:9B:0C:ED:38:D7:5C:C6:3E:D5:0D:6E:5C:E7:2B:BB:5B:4B:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpObDO0411zGPtUNblznK7tbSxA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/bea14a-0d32-4aa7-b898-d60b3b6cca6e/1/WpObDO0411zGPtUNblznK7tbSxA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a5:b3:a2:5d:01:18:55:8e:9f:6f:f0:78:22:34:f0:82:40: a3:c9:71:90:9c:92:b2:89:59:18:44:91:15:b4:84:62:19:54: 9b:a1:f3:a0:49:10:b2:86:19:b9:7d:8b:97:97:1d:4f:0b:cf: 3b:1d:03:cf:16:b8:7b:72:fd:b4:c0:06:0d:41:58:2e:68:55: 19:13:81:73:ec:88:0a:9e:c9:e7:a9:2d:5c:10:ab:1b:5d:43: 5c:82:f0:93:7c:0c:d2:82:0c:42:9b:35:33:bb:ea:9d:56:f5: f0:d4:c8:5f:b5:fd:f0:2c:d3:87:bc:a5:26:74:bd:0e:52:eb: 33:0e:28:38:68:09:1a:c3:d9:1f:64:ec:44:fd:5a:10:79:14: 2d:5f:45:a1:ef:45:9c:db:54:0e:a0:38:55:40:51:8c:82:96: b8:20:70:c6:09:22:2e:0e:0f:1f:e2:77:35:3a:04:b1:82:95: 80:f5:5e:bb:57:f9:eb:8b:73:75:f9:02:4f:6c:c9:ce:74:86: bc:6f:31:c6:fb:7a:2f:9e:05:3f:21:4f:af:73:e3:b9:16:2e: fa:dc:42:4a:1e:33:b4:5b:5c:da:95:4d:96:2c:80:89:6d:67: c2:95:a6:fc:e8:30:9c:da:d3:92:2d:d9:9a:50:8b:a2:36:c4: 47:6b:7d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWc3vXYK8sMW2VYIVXQHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOTM5YjBjZWQzOGQ3NWNjNjNlZDUwZDZlNWNlNzJiYmI1 YjRiMTAwHhcNMjUxMjEwMTMwMTAxWhcNMjUxMjExMTMwMTAxWjAzMTEwLwYDVQQD Eyg0ZWQ2YjQ2NWYyYTZiNTA2OWQ0OThhOTQ4OWI4Y2M5MDFmZjcyYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyHiT35glRkigbLOp1EX/Xca0sYK byG0CyDxT4isiepbUzXHpg1TBmePqVe2s3zIXtf4P18H6+uCbutCqW7VS9L/I4Gu rMlc2xErUqXJSRpqdwCpbHRZIdneYPMy3uaJ8AlJb1IJvNb6eJc3UpFSbkyEg5R2 rTRSRDRHaoWN97tFkvI8ZgGOuOm5E7dPf16k0jnTu/xCQypkaFZQXL+CW+9bI5Tf J0KZqU/T7b1mxtZ25kYJS++KnbHC5A4Ez2e3jIwlyrLP+1cwEEZDWPY3ClkoVltB UNNWmH9CedLIQax0fObNlgy2UxIo5cYYB/ZCBwVTHevW2tlmwGXZ6Qut2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7WtGXyprUGnUmKlIm4zJAf9ypwMB8GA1UdIwQY MBaAFFqTmwztONdcxj7VDW5c5yu7W0sQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgt ZDYwYjNiNmNjYTZlLzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9iZWExNGEtMGQzMi00YWE3LWI4OTgtZDYwYjNiNmNjYTZl LzEvV3BPYkRPMDQxMXpHUHRVTmJsem5LN3RiU3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKWzol0B GFWOn2/weCI08IJAo8lxkJySsolZGESRFbSEYhlUm6HzoEkQsoYZuX2Ll5cdTwvP Ox0Dzxa4e3L9tMAGDUFYLmhVGROBc+yICp7J56ktXBCrG11DXILwk3wM0oIMQps1 M7vqnVb18NTIX7X98CzTh7ylJnS9DlLrMw4oOGgJGsPZH2TsRP1aEHkULV9Foe9F nNtUDqA4VUBRjIKWuCBwxgkiLg4PH+J3NToEsYKVgPVeu1f564tzdfkCT2zJznSG vG8xxvt6L54FPyFPr3PjuRYu+txCSh4ztFtc2pVNliyAiW1nwpWm/OgwnNrTki3Z mlCLojbER2t92Q== -----END CERTIFICATE-----Generated at Wed Dec 10 18:13:56 2025 by rpki-client