This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json) Hash identifier: /tLNSweUXQHAk97kEigAHWfCUY7oi730EZ5UBhnirZ4= Subject key identifier: 7B:71:2D:0E:87:F0:42:E5:26:21:C1:5E:D0:81:7B:10:92:51:7D:5B Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d Certificate serial: 019B35D79242FB29311427B037F3103711B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft Manifest number: 03FA Signing time: Fri 19 Dec 2025 09:01:18 +0000 Manifest this update: Fri 19 Dec 2025 09:01:18 +0000 Manifest next update: Sat 20 Dec 2025 09:01:18 +0000 Files and hashes: 1: D83JF5HJmZ_nDCEolR80xNvS-M8.roa (hash: 2gVW9uQvzf9z69pIhSOEl0MnJWNxJhApE/Mz251JqN8=) 2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: UjXoPXjMVt78F1WY5z4IXCcf3SX1FMrDRRa9Yq9Ayms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:92:42:fb:29:31:14:27:b0:37:f3:10:37:11:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d Validity Not Before: Dec 19 09:01:18 2025 GMT Not After : Dec 20 09:01:18 2025 GMT Subject: CN=7b712d0e87f042e52621c15ed0817b1092517d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9e:52:2c:49:3a:01:c4:aa:8e:80:d4:76:2e: 24:25:72:4c:e2:92:f8:0b:e9:53:f5:4f:51:aa:2f: 93:4c:50:a4:f5:01:31:60:0f:ac:0c:6b:6e:ef:eb: 19:d3:60:9f:5b:a3:45:02:f2:bc:a8:b4:08:e3:d3: 04:23:d5:1c:1f:1e:24:71:83:dd:3a:04:8d:7b:dd: bb:11:09:ad:dc:ea:e2:82:b3:67:fa:c5:87:23:70: 40:b4:75:89:18:28:ce:dc:69:41:f1:83:de:69:f1: cd:fc:e6:8f:35:85:ba:2f:a3:d5:7e:91:70:97:ca: c2:b3:7d:a3:18:64:fb:c9:e4:4e:7b:8c:b2:32:e4: 75:31:88:3a:fe:72:b5:b7:65:ec:65:81:1e:86:e4: 67:71:e9:2b:b1:21:5e:7a:76:5a:4d:0a:3e:49:60: cb:14:8e:7a:07:c0:8e:9b:e7:6a:9b:1a:9d:ec:1a: 8e:ea:35:d2:ac:ee:83:d3:f8:0f:29:d4:95:1d:d3: cd:4d:15:42:64:67:9e:cd:d2:c6:3e:a7:de:17:0e: 23:c7:e4:28:5a:65:e8:b9:bc:28:86:49:23:3e:5b: ac:71:28:ae:bc:08:ef:1d:93:81:31:cd:0b:10:4f: 7d:cf:74:68:98:ec:38:1a:9b:7b:fd:4c:e2:9a:46: 9d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:71:2D:0E:87:F0:42:E5:26:21:C1:5E:D0:81:7B:10:92:51:7D:5B X509v3 Authority Key Identifier: keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:07:fb:45:1a:37:ff:24:12:45:18:26:7f:75:44:fd:ea:ee: 35:6b:23:c8:e4:73:88:05:ca:60:7f:3b:ee:61:26:21:0c:86: 1e:c8:69:49:0a:2b:64:8c:c2:2b:7c:8e:69:06:70:aa:7d:65: de:12:5f:25:5a:68:e7:fd:5e:31:ad:3b:28:f2:0c:58:74:51: f6:70:ce:29:0a:2c:05:b7:0d:13:88:32:41:9b:ee:22:4d:9f: ac:26:f3:66:9a:91:92:42:e8:d0:a3:f1:c5:d3:d3:51:cb:22: 5e:56:4e:9a:09:0b:14:ad:6f:57:9e:0b:5e:a2:84:36:5a:10: 09:7c:54:20:c0:0f:eb:74:f9:48:4a:3a:11:31:f9:f3:7a:b1: 16:e7:3f:30:a9:66:fb:91:81:5f:bf:36:5d:86:46:37:ed:fb: 8a:e0:c6:11:91:5a:99:02:47:0e:af:fc:af:30:0c:49:ca:be: ad:b0:30:2a:4a:1d:31:e7:7e:21:35:d7:0e:f4:5f:0a:14:39: 0b:9d:66:a0:ef:fa:b7:6f:8a:29:36:de:ee:ae:71:09:90:df: 95:0d:93:d8:6d:89:b7:15:a6:25:86:4c:2f:94:6b:1e:fb:d6: 5a:a9:ce:4d:64:b0:c2:09:ba:9e:bf:87:b2:c3:ee:db:b3:5d: 07:8f:1e:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs115JC+ykxFCewN/MQNxGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz YjE3NmQwHhcNMjUxMjE5MDkwMTE4WhcNMjUxMjIwMDkwMTE4WjAzMTEwLwYDVQQD Eyg3YjcxMmQwZTg3ZjA0MmU1MjYyMWMxNWVkMDgxN2IxMDkyNTE3ZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp5SLEk6AcSqjoDUdi4kJXJM4pL4 C+lT9U9Rqi+TTFCk9QExYA+sDGtu7+sZ02CfW6NFAvK8qLQI49MEI9UcHx4kcYPd OgSNe927EQmt3OrigrNn+sWHI3BAtHWJGCjO3GlB8YPeafHN/OaPNYW6L6PVfpFw l8rCs32jGGT7yeROe4yyMuR1MYg6/nK1t2XsZYEehuRncekrsSFeenZaTQo+SWDL FI56B8COm+dqmxqd7BqO6jXSrO6D0/gPKdSVHdPNTRVCZGeezdLGPqfeFw4jx+Qo WmXoubwohkkjPluscSiuvAjvHZOBMc0LEE99z3RomOw4Gpt7/UzimkadDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtxLQ6H8ELlJiHBXtCBexCSUX1bMB8GA1UdIwQY MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt NDRkMGQwODkxOTg5LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5 LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgf7RRo3 /yQSRRgmf3VE/eruNWsjyORziAXKYH877mEmIQyGHshpSQorZIzCK3yOaQZwqn1l 3hJfJVpo5/1eMa07KPIMWHRR9nDOKQosBbcNE4gyQZvuIk2frCbzZpqRkkLo0KPx xdPTUcsiXlZOmgkLFK1vV54LXqKENloQCXxUIMAP63T5SEo6ETH583qxFuc/MKlm +5GBX782XYZGN+37iuDGEZFamQJHDq/8rzAMScq+rbAwKkodMed+ITXXDvRfChQ5 C51moO/6t2+KKTbe7q5xCZDflQ2T2G2JtxWmJYZML5RrHvvWWqnOTWSwwgm6nr+H ssPu27NdB48eUw== -----END CERTIFICATE-----Generated at Fri Dec 19 10:26:10 2025 by rpki-client