This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft File: wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json) Hash identifier: Pe9Uam4LLKn5rT490Qj5JsJLNhuEcynOvETs7nGwZGo= Subject key identifier: 14:DF:42:CF:EB:A5:9C:46:4A:64:2D:33:37:CA:27:AD:15:D4:AF:6F Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 Certificate issuer: /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Certificate serial: 019B42B7588095E96CD1FEF2261E62214DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft Manifest number: 11DA Signing time: Sun 21 Dec 2025 21:01:10 +0000 Manifest this update: Sun 21 Dec 2025 21:01:10 +0000 Manifest next update: Mon 22 Dec 2025 21:01:10 +0000 Files and hashes: 1: 1-f9PBVCsqBgm5V29oKXRRYWkevY.roa (hash: 7Ql3JH1RgsBJ7ZK4VNDw9mOs8UhnRqnrPre6nqQT+h0=) 2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: cMGw6vvKo49gE9UIU7FtPyK/ZAcfdluGm5JjjkWBVK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:58:80:95:e9:6c:d1:fe:f2:26:1e:62:21:4d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661 Validity Not Before: Dec 21 21:01:10 2025 GMT Not After : Dec 22 21:01:10 2025 GMT Subject: CN=14df42cfeba59c464a642d3337ca27ad15d4af6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d7:90:ab:f7:83:d4:66:5a:e7:f0:34:4c:7c: 3a:f3:07:ab:36:98:28:f6:e9:bc:f0:fb:91:34:9b: ab:0d:12:65:b3:fb:41:76:a1:35:c1:86:25:cc:b8: 6d:f1:da:1d:8a:a3:b8:b0:69:87:54:e5:ca:cc:7f: 37:4e:7f:8d:23:a4:ab:37:26:8e:38:3f:dd:75:77: 28:03:50:51:91:42:0b:d5:f8:d7:80:06:5f:a3:29: 34:dc:73:e4:67:e1:b3:84:ea:66:47:43:81:a8:e7: 56:c2:ea:eb:08:93:11:63:2a:0a:76:b8:58:a6:a6: 13:72:b9:16:0d:7d:16:90:f9:a5:e6:02:24:f5:4a: 9e:13:c8:df:2f:5e:88:fc:f5:0c:38:b9:75:46:81: 49:a2:2e:08:1b:66:b6:35:b5:5b:cc:1b:4e:6f:c0: 53:3c:d5:4d:f1:58:68:91:d3:3b:ac:d6:ec:f4:2f: 38:32:1b:4c:1e:f8:0a:b4:21:ed:fb:ac:60:e0:70: 70:1f:91:cd:1a:6d:e8:df:48:08:ae:85:92:f9:7d: 80:bc:ea:4e:30:f9:1f:4b:e3:24:1b:62:9f:a0:78: eb:d6:be:5b:c9:2d:a2:a8:65:82:53:4f:e0:21:e3: 0d:89:46:3c:52:ad:60:dd:51:f4:06:ea:41:e1:53: 9f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DF:42:CF:EB:A5:9C:46:4A:64:2D:33:37:CA:27:AD:15:D4:AF:6F X509v3 Authority Key Identifier: keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:35:7f:f1:a6:19:73:bf:9d:35:f9:f2:7a:87:bc:49:49:04: 07:e3:6f:68:81:58:26:3e:20:e1:c0:34:16:da:bf:19:25:3f: ba:fc:52:32:e1:6c:cb:43:bc:c9:9a:ff:9b:a2:fb:d0:b3:86: 6d:21:95:e0:92:b4:c2:61:93:41:c4:4a:f9:1e:51:e4:0c:c3: a0:34:a1:c1:3c:ab:af:0a:41:1a:33:7f:f8:a8:5f:14:47:23: 4e:20:5e:71:b0:a7:0b:f2:85:9b:7f:d4:20:99:60:cc:61:a3: c5:f9:51:04:4d:95:a1:c2:5a:26:7c:c2:e0:cb:f7:21:7f:18: 85:ff:33:cd:d6:31:51:24:ac:62:38:03:54:60:5a:5b:04:52: 2b:af:ea:4d:a7:c3:e9:cf:93:ff:bf:b4:11:db:ac:db:e3:96: 17:33:c8:94:cb:3e:be:30:1e:61:16:06:19:8d:38:04:c2:33: 8e:dc:24:6c:84:f0:c4:03:06:17:f8:18:7d:74:88:94:34:9e: 9f:2b:85:7b:1f:5e:97:a5:10:2d:55:fb:9e:e0:c2:47:7c:75: f7:da:aa:1f:4b:2e:fb:0f:83:7a:5f:33:ce:37:4a:8c:a2:c4: 7b:d6:12:7e:2d:75:13:89:ee:e2:6a:b5:1f:92:4e:f7:c6:8f: 9d:63:25:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt1iAlels0f7yJh5iIU2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjY5ZDJmNDc0NDc0ZGJiNTdmNmJlYzhjMmQ2NWQ1ZTBj Mjk2NjEwHhcNMjUxMjIxMjEwMTEwWhcNMjUxMjIyMjEwMTEwWjAzMTEwLwYDVQQD EygxNGRmNDJjZmViYTU5YzQ2NGE2NDJkMzMzN2NhMjdhZDE1ZDRhZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9eQq/eD1GZa5/A0THw68werNpgo 9um88PuRNJurDRJls/tBdqE1wYYlzLht8dodiqO4sGmHVOXKzH83Tn+NI6SrNyaO OD/ddXcoA1BRkUIL1fjXgAZfoyk03HPkZ+GzhOpmR0OBqOdWwurrCJMRYyoKdrhY pqYTcrkWDX0WkPml5gIk9UqeE8jfL16I/PUMOLl1RoFJoi4IG2a2NbVbzBtOb8BT PNVN8VhokdM7rNbs9C84MhtMHvgKtCHt+6xg4HBwH5HNGm3o30gIroWS+X2AvOpO MPkfS+MkG2KfoHjr1r5byS2iqGWCU0/gIeMNiUY8Uq1g3VH0BupB4VOfEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTfQs/rpZxGSmQtMzfKJ60V1K9vMB8GA1UdIwQY MBaAFMD2nS9HRHTbtX9r7IwtZdXgwpZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUt MjU5MDRiYTlhMzU1LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUtMjU5MDRiYTlhMzU1 LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTV/8aYZ c7+dNfnyeoe8SUkEB+NvaIFYJj4g4cA0Ftq/GSU/uvxSMuFsy0O8yZr/m6L70LOG bSGV4JK0wmGTQcRK+R5R5AzDoDShwTyrrwpBGjN/+KhfFEcjTiBecbCnC/KFm3/U IJlgzGGjxflRBE2VocJaJnzC4Mv3IX8Yhf8zzdYxUSSsYjgDVGBaWwRSK6/qTafD 6c+T/7+0Edus2+OWFzPIlMs+vjAeYRYGGY04BMIzjtwkbITwxAMGF/gYfXSIlDSe nyuFex9el6UQLVX7nuDCR3x199qqH0su+w+Del8zzjdKjKLEe9YSfi11E4nu4mq1 H5JO98aPnWMlxA== -----END CERTIFICATE-----Generated at Mon Dec 22 02:18:42 2025 by rpki-client