This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft File: WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft (raw, json) Hash identifier: oZIuz/ZjCLH/FD4FrVf+t3FrF2ROoZTqzegcDKL/CHA= Subject key identifier: 43:4B:AB:A2:28:FC:3E:8E:67:7B:2A:99:90:A6:9D:A0:18:6B:F4:6E Authority key identifier: 5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE Certificate issuer: /CN=5ad0c41fde99651b132906ff0602b47b5607a5be Certificate serial: 019B27AE095CA20E2F64C2B68A43D3280533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft Manifest number: 0F9D Signing time: Tue 16 Dec 2025 15:01:15 +0000 Manifest this update: Tue 16 Dec 2025 15:01:15 +0000 Manifest next update: Wed 17 Dec 2025 15:01:15 +0000 Files and hashes: 1: CyjhjoDiSo7WFimizlr7VkadJR8.roa (hash: cM6TG/2qfvLGo5XP6sM8MTNGlbdx/5vkQ91bz6yRUQw=) 2: WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl (hash: Ac5nhntwj+bhayLt5Y/S8n+29TBLGpu0UntTxvkxynM=) 3: hWPfJRigBwQrXXI_iYiIoMMdvMI.roa (hash: wsY9wU/Uh/qwSah/fwLqo3Fci0fOUVaJuSLnsVDw8zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:09:5c:a2:0e:2f:64:c2:b6:8a:43:d3:28:05:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad0c41fde99651b132906ff0602b47b5607a5be Validity Not Before: Dec 16 15:01:15 2025 GMT Not After : Dec 17 15:01:15 2025 GMT Subject: CN=434baba228fc3e8e677b2a9990a69da0186bf46e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:cf:3a:86:41:a2:17:82:74:41:67:6d:af: 7b:42:ef:2a:c0:39:f8:aa:d4:29:ff:ac:63:7e:79: 15:21:44:6c:ae:02:88:7e:53:22:83:9f:71:e1:24: 64:a2:12:ae:e9:b2:6f:c4:34:c5:e5:25:bb:bd:86: 9a:38:7d:b6:f9:b2:2d:e2:7e:cf:b6:e9:bc:83:d2: 84:16:52:a0:45:9a:e7:01:59:25:8b:30:46:8b:51: 03:62:86:c9:e2:a6:41:95:07:4c:f8:71:09:9c:57: ed:a3:14:30:13:aa:6a:ee:ee:90:69:94:a4:84:ba: 93:70:0c:73:9d:ed:c6:2c:f2:2b:24:3b:d9:9d:18: 1b:62:15:2f:f1:59:2c:38:e6:16:29:70:57:5a:3b: 53:2a:75:35:e2:41:df:32:1b:89:55:2a:2f:03:5b: fa:c8:8f:26:ab:9f:12:bf:49:a3:7a:ca:c4:f3:a3: 18:20:a9:c3:7f:08:0a:7e:50:3f:1a:45:92:97:bb: 13:3c:05:d4:78:e4:57:92:ec:55:a9:7d:08:78:b3: ee:04:8f:c0:61:50:5e:b2:ff:4c:26:a0:29:2d:d7: 57:1e:f8:8d:e1:c8:20:e9:04:80:ff:85:69:16:f3: 4e:d6:14:36:31:6f:00:ce:6e:15:08:84:4f:55:7c: 06:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:4B:AB:A2:28:FC:3E:8E:67:7B:2A:99:90:A6:9D:A0:18:6B:F4:6E X509v3 Authority Key Identifier: keyid:5A:D0:C4:1F:DE:99:65:1B:13:29:06:FF:06:02:B4:7B:56:07:A5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtDEH96ZZRsTKQb_BgK0e1YHpb4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/1bc0cb-dfa4-4151-a61b-335a7e4384b1/1/WtDEH96ZZRsTKQb_BgK0e1YHpb4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:76:aa:fd:d0:86:cb:98:ac:56:45:c1:4f:bb:f2:d8:5d:98: 89:04:60:d4:e8:22:a6:6e:a9:33:9f:7e:40:42:58:3c:68:6f: 01:de:02:fd:26:b1:dd:28:9b:48:3b:f0:87:fd:50:e5:b2:cb: 4f:5f:e7:15:f1:61:61:33:39:0f:8b:1e:de:96:69:16:fd:a0: ef:7f:05:78:ac:d2:de:8a:f4:df:92:c7:a9:b3:ca:95:40:db: 37:b3:57:5a:69:65:7f:7f:51:1c:58:2c:9e:7a:b6:2c:f1:bf: f8:f3:31:2e:98:61:e4:da:7e:52:d7:37:7d:fa:72:af:01:8d: 9d:df:77:62:aa:7f:fe:e2:f7:63:00:68:db:b1:75:88:c9:5e: 9c:41:c6:79:c9:42:61:8f:22:33:4e:13:6d:e8:95:54:d1:a7: cb:b7:a6:3f:5b:7d:5d:25:b8:ad:dd:5b:81:40:22:ff:0b:b6: d4:13:fc:52:ed:4d:18:c7:2a:8e:82:6b:32:d6:91:b7:5e:94: 1f:4d:90:19:fa:81:6a:0f:87:de:2e:f1:70:54:57:52:b7:bc: fa:80:a2:45:a0:a7:be:20:12:96:39:6e:17:67:bf:ae:6a:78: 84:67:52:e8:b8:aa:c8:cb:63:f4:eb:6b:e4:d4:fe:13:bb:b2: 76:f5:71:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnrglcog4vZMK2ikPTKAUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDBjNDFmZGU5OTY1MWIxMzI5MDZmZjA2MDJiNDdiNTYw N2E1YmUwHhcNMjUxMjE2MTUwMTE1WhcNMjUxMjE3MTUwMTE1WjAzMTEwLwYDVQQD Eyg0MzRiYWJhMjI4ZmMzZThlNjc3YjJhOTk5MGE2OWRhMDE4NmJmNDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWvPOoZBoheCdEFnba97Qu8qwDn4 qtQp/6xjfnkVIURsrgKIflMig59x4SRkohKu6bJvxDTF5SW7vYaaOH22+bIt4n7P tum8g9KEFlKgRZrnAVklizBGi1EDYobJ4qZBlQdM+HEJnFftoxQwE6pq7u6QaZSk hLqTcAxzne3GLPIrJDvZnRgbYhUv8VksOOYWKXBXWjtTKnU14kHfMhuJVSovA1v6 yI8mq58Sv0mjesrE86MYIKnDfwgKflA/GkWSl7sTPAXUeORXkuxVqX0IeLPuBI/A YVBesv9MJqApLddXHviN4cgg6QSA/4VpFvNO1hQ2MW8Azm4VCIRPVXwGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENLq6Io/D6OZ3sqmZCmnaAYa/RuMB8GA1UdIwQY MBaAFFrQxB/emWUbEykG/wYCtHtWB6W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWIt MzM1YTdlNDM4NGIxLzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8xYmMwY2ItZGZhNC00MTUxLWE2MWItMzM1YTdlNDM4NGIx LzEvV3RERUg5NlpaUnNUS1FiX0JnSzBlMVlIcGI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHaq/dCG y5isVkXBT7vy2F2YiQRg1Ogipm6pM59+QEJYPGhvAd4C/Sax3SibSDvwh/1Q5bLL T1/nFfFhYTM5D4se3pZpFv2g738FeKzS3or035LHqbPKlUDbN7NXWmllf39RHFgs nnq2LPG/+PMxLphh5Np+Utc3ffpyrwGNnd93Yqp//uL3YwBo27F1iMlenEHGeclC YY8iM04TbeiVVNGny7emP1t9XSW4rd1bgUAi/wu21BP8Uu1NGMcqjoJrMtaRt16U H02QGfqBag+H3i7xcFRXUre8+oCiRaCnviASljluF2e/rmp4hGdS6LiqyMtj9Otr 5NT+E7uydvVxWQ== -----END CERTIFICATE-----Generated at Tue Dec 16 21:17:51 2025 by rpki-client