This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft File: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft (raw, json) Hash identifier: u4XMkmePivzV0Rkdp1Q0ZNuylcbtO7WFX6lRxTakLJg= Subject key identifier: 49:E1:1D:DD:A8:7E:FC:4B:4F:95:9E:E0:36:67:62:68:99:6F:B8:15 Authority key identifier: 59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8 Certificate issuer: /CN=59dd05746f9a288756c30afa8c45995b775055f8 Certificate serial: 019B5A1A5317B59B9DE54CA67322874FCA6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft Manifest number: 01F9 Signing time: Fri 26 Dec 2025 10:00:33 +0000 Manifest this update: Fri 26 Dec 2025 10:00:33 +0000 Manifest next update: Sat 27 Dec 2025 10:00:33 +0000 Files and hashes: 1: Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl (hash: HYkfkstJMH6hFyd0kXTVFFTTVkOziErx4GWMSFwi6sE=) 2: od-eaeRv-_TtiWVxF1AsQmL-p6M.roa (hash: xxM+CC0rClETGMS9YhA+QBIZ3skgkCaIksfRH7MZZ+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:53:17:b5:9b:9d:e5:4c:a6:73:22:87:4f:ca:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd05746f9a288756c30afa8c45995b775055f8 Validity Not Before: Dec 26 10:00:33 2025 GMT Not After : Dec 27 10:00:33 2025 GMT Subject: CN=49e11ddda87efc4b4f959ee036676268996fb815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:a0:cb:ca:a2:71:35:38:08:74:00:ab:96: c4:6a:a3:08:b2:3f:d1:a2:98:17:5c:f9:d2:3c:cd: 2c:22:f7:6f:dd:4e:6a:84:3c:6f:71:0c:f5:ce:f4: 14:4c:61:b3:30:ff:91:ef:96:df:6a:2b:95:8e:3e: 30:fa:4d:15:03:22:72:f4:01:2e:30:92:d3:df:bc: e7:13:4e:c5:ad:1c:38:21:97:b9:8f:12:7f:92:e3: a0:1b:53:9b:d0:e7:b7:76:b7:38:5f:4d:b4:e5:8c: 4c:8d:8a:ce:dd:ef:b9:18:10:2e:c7:bf:25:af:4d: df:a9:ad:a7:60:b7:ed:a7:4f:ed:ee:e9:9b:76:7d: 54:91:e9:6f:86:c9:24:d0:f6:33:8a:50:04:7f:9a: 9e:49:14:25:48:b0:f8:4c:b8:f1:a3:bf:44:7b:23: d5:53:f7:7e:2c:ca:be:df:2e:c7:18:8b:6e:bf:4d: 4e:e5:56:5f:cb:86:7f:b7:0c:48:85:97:02:8a:58: 87:d3:a1:fa:0f:d2:84:f1:43:dc:a8:f2:6c:fd:76: 88:df:18:be:7c:04:45:e3:6e:7a:10:d2:4a:78:2c: 56:03:50:ee:a5:14:2e:a4:f4:45:d3:94:24:fc:e9: 98:68:ec:16:d6:38:87:1b:fc:c3:a3:4c:80:0e:2f: 93:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E1:1D:DD:A8:7E:FC:4B:4F:95:9E:E0:36:67:62:68:99:6F:B8:15 X509v3 Authority Key Identifier: keyid:59:DD:05:74:6F:9A:28:87:56:C3:0A:FA:8C:45:99:5B:77:50:55:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/cc9b6f-3e1f-434c-9323-c2ce178df1c4/1/Wd0FdG-aKIdWwwr6jEWZW3dQVfg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:cd:18:af:53:35:cb:c7:c8:38:17:3b:42:6c:74:da:23:13: 23:d8:9c:9e:3f:6e:82:71:36:94:60:da:67:ff:ef:e3:5e:ab: 21:67:c6:90:9e:88:1a:96:a1:59:bb:68:56:be:63:fa:f2:45: 46:5a:51:b5:5b:70:50:48:ab:06:01:23:cf:8b:38:0b:4f:72: c1:82:3f:66:93:06:dc:23:b1:10:33:f6:f8:01:10:ca:01:ef: 0e:47:ff:f0:2a:c8:2a:6d:d0:44:f2:5e:f3:6f:62:6e:c1:7e: fc:41:08:45:19:7b:eb:97:f1:ce:0f:78:b0:22:fa:72:10:7a: 15:ae:d2:58:4a:f0:b9:bd:92:bb:29:0f:52:59:9c:be:58:8d: 9f:f7:50:70:85:11:65:2a:0a:90:96:5e:cf:3d:99:3e:f8:96: 0a:08:f9:c1:d3:83:f0:68:ca:de:06:1d:c6:c3:5b:73:e4:f2: ae:d3:0a:06:2e:2d:c1:48:18:28:5b:4b:3b:5f:92:64:8c:74: 0b:b8:d6:0c:63:ed:6f:2f:7d:7a:e2:0c:0e:8b:dc:83:cc:8e: c2:5f:4e:29:96:b0:bf:f9:a0:c5:99:4d:c5:de:54:ad:af:e7: 99:12:2b:3e:fb:9c:92:7e:85:50:d2:2b:48:66:34:ad:c0:de: 27:f5:6e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGlMXtZud5UymcyKHT8ptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQwNTc0NmY5YTI4ODc1NmMzMGFmYThjNDU5OTViNzc1 MDU1ZjgwHhcNMjUxMjI2MTAwMDMzWhcNMjUxMjI3MTAwMDMzWjAzMTEwLwYDVQQD Eyg0OWUxMWRkZGE4N2VmYzRiNGY5NTllZTAzNjY3NjI2ODk5NmZiODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Ggy8qicTU4CHQAq5bEaqMIsj/R opgXXPnSPM0sIvdv3U5qhDxvcQz1zvQUTGGzMP+R75bfaiuVjj4w+k0VAyJy9AEu MJLT37znE07FrRw4IZe5jxJ/kuOgG1Ob0Oe3drc4X0205YxMjYrO3e+5GBAux78l r03fqa2nYLftp0/t7umbdn1Ukelvhskk0PYzilAEf5qeSRQlSLD4TLjxo79EeyPV U/d+LMq+3y7HGItuv01O5VZfy4Z/twxIhZcCiliH06H6D9KE8UPcqPJs/XaI3xi+ fARF4256ENJKeCxWA1DupRQupPRF05Qk/OmYaOwW1jiHG/zDo0yADi+TTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnhHd2ofvxLT5We4DZnYmiZb7gVMB8GA1UdIwQY MBaAFFndBXRvmiiHVsMK+oxFmVt3UFX4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jYzliNmYtM2UxZi00MzRjLTkzMjMt YzJjZTE3OGRmMWM0LzEvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9jYzliNmYtM2UxZi00MzRjLTkzMjMtYzJjZTE3OGRmMWM0 LzEvV2QwRmRHLWFLSWRXd3dyNmpFV1pXM2RRVmZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALM0Yr1M1 y8fIOBc7Qmx02iMTI9icnj9ugnE2lGDaZ//v416rIWfGkJ6IGpahWbtoVr5j+vJF RlpRtVtwUEirBgEjz4s4C09ywYI/ZpMG3COxEDP2+AEQygHvDkf/8CrIKm3QRPJe 829ibsF+/EEIRRl765fxzg94sCL6chB6Fa7SWErwub2SuykPUlmcvliNn/dQcIUR ZSoKkJZezz2ZPviWCgj5wdOD8GjK3gYdxsNbc+TyrtMKBi4twUgYKFtLO1+SZIx0 C7jWDGPtby99euIMDovcg8yOwl9OKZawv/mgxZlNxd5Ura/nmRIrPvuckn6FUNIr SGY0rcDeJ/VuXw== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:38 2025 by rpki-client