This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft File: wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json) Hash identifier: 5+kUgQ75eJjggiPBOF5XSf2xo/LMAzuuz0ffVurWPmQ= Subject key identifier: DE:73:62:75:21:CA:BF:49:36:B2:47:37:38:91:A8:62:2C:B0:6A:6F Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0 Certificate issuer: /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0 Certificate serial: 019B19BAE3D096BB92FF07986C2DE213DC69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft Manifest number: 090F Signing time: Sat 13 Dec 2025 22:00:36 +0000 Manifest this update: Sat 13 Dec 2025 22:00:36 +0000 Manifest next update: Sun 14 Dec 2025 22:00:36 +0000 Files and hashes: 1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=) 2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: 63QwwI5OqlOwtFX/DxRe2HE8HcjE9QAaR6f/d8XZ6+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:e3:d0:96:bb:92:ff:07:98:6c:2d:e2:13:dc:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0 Validity Not Before: Dec 13 22:00:36 2025 GMT Not After : Dec 14 22:00:36 2025 GMT Subject: CN=de73627521cabf4936b247373891a8622cb06a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e9:f8:57:68:91:bc:9d:ab:09:09:04:dc:fc: c6:30:87:2a:a2:a9:18:29:40:ed:cd:4d:ae:e9:9b: 85:f3:0b:82:a5:f0:b5:d7:a6:b1:a9:e8:fa:e3:cc: f3:dc:59:e2:cf:a7:00:34:c5:9d:26:4e:1a:33:c8: a9:f8:0d:61:d9:ed:c2:2a:49:bb:6d:d8:90:12:22: 41:09:50:f4:da:f1:3d:e3:71:b9:a8:18:a0:49:ed: 9d:eb:c9:21:2d:98:52:25:c7:42:ac:2e:ea:eb:f9: 24:74:18:a5:ba:83:6f:33:9e:ab:c4:95:40:02:b3: 9f:5e:c4:47:28:cb:aa:e2:ed:4c:15:fe:aa:23:de: e4:15:b5:40:d4:f0:37:4c:2c:0f:a5:6d:a3:91:45: 83:41:a3:2c:41:7e:4f:b3:e3:45:a1:cc:40:ea:80: 7d:9b:28:b3:fd:ee:39:9e:01:65:61:64:ce:8d:87: 98:9e:1e:55:a1:67:3f:11:f1:85:f9:4b:36:9b:97: 96:1d:cd:04:76:03:4a:68:61:86:ca:0e:f0:a0:28: 49:8e:49:1e:87:09:f3:0f:1a:6e:5f:67:7d:35:3f: e0:28:94:2a:8d:6d:43:dd:93:43:34:90:21:b2:be: 73:89:1b:09:79:b3:88:d0:69:3a:0f:8c:4c:81:dc: 0e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:73:62:75:21:CA:BF:49:36:B2:47:37:38:91:A8:62:2C:B0:6A:6F X509v3 Authority Key Identifier: keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:f4:1b:63:c4:b2:43:b8:16:28:08:f6:5b:e2:24:d5:38:17: 2e:5b:40:63:5e:ff:06:e9:c9:da:b8:68:67:3c:f4:56:84:4c: eb:19:57:bc:46:34:a7:ca:06:0e:f3:9d:df:54:82:92:9d:d8: 16:20:9d:da:71:ee:7f:32:88:c1:af:43:c0:4e:11:60:18:d2: db:61:90:ac:6b:37:e6:cf:9e:33:9d:73:e7:03:8b:32:24:41: 19:4c:e1:db:ad:97:94:11:85:03:ce:3d:a1:17:3a:6a:df:2e: f3:bd:e3:a1:12:a2:2f:9e:6c:66:34:6c:27:e0:3b:14:f4:63: 02:ae:00:a7:37:1d:26:c0:9d:d4:14:9a:ab:0f:23:95:11:d6: a5:2c:fc:f2:52:63:bf:37:a6:ed:03:54:c6:8c:ad:ca:39:b5: d1:cf:31:02:78:d6:3c:43:e9:9a:db:65:53:0f:78:59:aa:55: bf:57:2f:d5:28:a2:fc:05:e7:0d:e9:c5:c3:5e:b5:52:b0:26: 3c:7e:a6:cb:9e:0a:45:68:6c:27:18:30:0f:4f:25:99:5b:2d: a9:9c:9f:42:cd:8f:a5:42:79:db:9c:ef:bb:22:95:e0:db:cb: a1:37:4f:12:a4:31:d3:7c:fc:d7:3d:94:8c:8b:e8:fb:49:2d: 6f:01:1d:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZuuPQlruS/weYbC3iE9xpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw ODE3YTAwHhcNMjUxMjEzMjIwMDM2WhcNMjUxMjE0MjIwMDM2WjAzMTEwLwYDVQQD EyhkZTczNjI3NTIxY2FiZjQ5MzZiMjQ3MzczODkxYTg2MjJjYjA2YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuen4V2iRvJ2rCQkE3PzGMIcqoqkY KUDtzU2u6ZuF8wuCpfC116axqej648zz3Fniz6cANMWdJk4aM8ip+A1h2e3CKkm7 bdiQEiJBCVD02vE943G5qBigSe2d68khLZhSJcdCrC7q6/kkdBiluoNvM56rxJVA ArOfXsRHKMuq4u1MFf6qI97kFbVA1PA3TCwPpW2jkUWDQaMsQX5Ps+NFocxA6oB9 myiz/e45ngFlYWTOjYeYnh5VoWc/EfGF+Us2m5eWHc0EdgNKaGGGyg7woChJjkke hwnzDxpuX2d9NT/gKJQqjW1D3ZNDNJAhsr5ziRsJebOI0Gk6D4xMgdwODwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5zYnUhyr9JNrJHNziRqGIssGpvMB8GA1UdIwQY MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfQbY8Sy Q7gWKAj2W+Ik1TgXLltAY17/BunJ2rhoZzz0VoRM6xlXvEY0p8oGDvOd31SCkp3Y FiCd2nHufzKIwa9DwE4RYBjS22GQrGs35s+eM51z5wOLMiRBGUzh262XlBGFA849 oRc6at8u873joRKiL55sZjRsJ+A7FPRjAq4ApzcdJsCd1BSaqw8jlRHWpSz88lJj vzem7QNUxoytyjm10c8xAnjWPEPpmttlUw94WapVv1cv1Sii/AXnDenFw161UrAm PH6my54KRWhsJxgwD08lmVstqZyfQs2PpUJ525zvuyKV4NvLoTdPEqQx03z81z2U jIvo+0ktbwEdgQ== -----END CERTIFICATE-----Generated at Sun Dec 14 00:02:36 2025 by rpki-client