This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json) Hash identifier: p6gCsKqyoOHJQr7IWXNpgYyiqiy6X8awGpQZGoA+MV0= Subject key identifier: E8:94:34:50:13:6D:0A:BD:73:6C:76:48:2E:28:2B:DD:CF:51:FA:4D Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Certificate serial: 019B58D0F7375900B0FE141E51F14DD31018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft Manifest number: 17B1 Signing time: Fri 26 Dec 2025 04:00:48 +0000 Manifest this update: Fri 26 Dec 2025 04:00:48 +0000 Manifest next update: Sat 27 Dec 2025 04:00:48 +0000 Files and hashes: 1: HtbMYs01D4cmAdAlFXNYzXOhs04.roa (hash: n0Ze93hrHGGHOW22ZuB1Xc2tkSwX1VXykYJ+iILqIsE=) 2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: gyqypMsHeNNGMHjyElCR6j3KKEv7b9bMZpKFWxnX0Js=) 3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:58:d0:f7:37:59:00:b0:fe:14:1e:51:f1:4d:d3:10:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Validity Not Before: Dec 26 04:00:48 2025 GMT Not After : Dec 27 04:00:48 2025 GMT Subject: CN=e8943450136d0abd736c76482e282bddcf51fa4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:81:da:0c:15:24:f0:19:70:9d:05:67:87: 57:ad:07:fd:95:e4:a4:91:f8:ed:c9:6b:6f:ef:09: 3d:e2:f5:56:e6:28:45:ab:c3:29:e2:58:57:af:93: f6:fd:12:58:81:66:c2:68:e0:7f:9a:05:60:2c:68: 8d:af:80:86:a1:9c:e1:cc:ae:eb:4b:38:da:7e:7c: 75:67:9a:50:f2:b4:1d:e3:a3:3e:a3:63:42:16:38: c3:e6:3d:3c:c7:59:e1:6b:ff:8e:f3:f2:4b:76:97: ec:22:c1:b8:27:27:46:d2:c3:ed:00:88:a8:e4:a2: 65:8a:62:52:d0:2d:1a:85:b3:b8:37:89:eb:1f:df: ad:71:75:55:9d:c4:7d:65:57:e7:2e:95:7a:7d:3f: 50:91:70:59:15:70:36:2c:7c:d6:ab:24:71:8c:44: 37:26:e0:aa:4e:3a:8a:eb:12:4b:a8:59:f3:b6:1e: 9e:67:b3:97:ae:7b:59:c0:47:57:24:d3:6d:cb:2c: ca:c1:16:88:dd:0b:1f:85:07:f5:a1:f0:25:91:39: 5d:36:46:bf:aa:3b:16:90:07:68:ec:3c:59:ab:5c: a2:f8:32:c5:58:a5:32:1d:f2:ab:71:4f:af:94:9c: 03:20:01:f5:98:48:b5:0e:a6:79:86:7f:bf:d4:64: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:94:34:50:13:6D:0A:BD:73:6C:76:48:2E:28:2B:DD:CF:51:FA:4D X509v3 Authority Key Identifier: keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:8e:71:51:70:01:f8:e1:c6:7a:13:95:1a:64:8a:c9:2e:65: aa:f3:86:8c:08:59:e1:59:98:4b:b1:ef:fc:f8:45:e6:2f:76: 24:11:67:f6:69:20:30:f7:b0:44:4b:5e:7b:68:26:c0:05:75: 42:a2:d1:98:be:bc:f1:8c:e6:14:f2:f8:96:4b:8f:83:65:72: ec:4a:f5:89:3b:56:2e:7d:d6:9d:ec:be:46:14:ae:61:0f:a3: 8a:75:37:7e:c7:7c:b3:90:77:53:0c:45:97:46:40:c3:74:49: fd:32:3f:67:55:6c:b0:f4:b5:d7:79:82:4d:ac:db:7c:23:c9: b8:bd:3d:d4:43:90:cf:3f:8d:fd:e3:08:2e:bb:7b:28:98:91: 7f:96:54:d2:34:7d:ca:a4:5b:b5:6e:c1:da:4b:10:a9:bf:4f: a8:93:33:f0:9a:be:7a:1b:72:8b:cc:1c:68:24:7d:6d:93:0a: 36:6d:09:f1:8a:3d:5d:e2:63:89:49:00:79:e6:01:e1:c5:55: 49:3d:7d:e3:d7:f0:4b:aa:5a:96:e0:f8:ef:29:7b:59:5a:f2: 0a:8d:c4:e6:69:b6:67:a8:a0:b8:f8:51:92:14:09:30:cb:3b: d9:a9:07:97:68:76:f4:35:0f:2a:dd:72:7c:ec:2a:08:c3:55: 9a:8c:09:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtY0Pc3WQCw/hQeUfFN0xAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx YzRmZTIwHhcNMjUxMjI2MDQwMDQ4WhcNMjUxMjI3MDQwMDQ4WjAzMTEwLwYDVQQD EyhlODk0MzQ1MDEzNmQwYWJkNzM2Yzc2NDgyZTI4MmJkZGNmNTFmYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rCB2gwVJPAZcJ0FZ4dXrQf9leSk kfjtyWtv7wk94vVW5ihFq8Mp4lhXr5P2/RJYgWbCaOB/mgVgLGiNr4CGoZzhzK7r Szjafnx1Z5pQ8rQd46M+o2NCFjjD5j08x1nha/+O8/JLdpfsIsG4JydG0sPtAIio 5KJlimJS0C0ahbO4N4nrH9+tcXVVncR9ZVfnLpV6fT9QkXBZFXA2LHzWqyRxjEQ3 JuCqTjqK6xJLqFnzth6eZ7OXrntZwEdXJNNtyyzKwRaI3QsfhQf1ofAlkTldNka/ qjsWkAdo7DxZq1yi+DLFWKUyHfKrcU+vlJwDIAH1mEi1DqZ5hn+/1GRjcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiUNFATbQq9c2x2SC4oK93PUfpNMB8GA1UdIwQY MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApI5xUXAB +OHGehOVGmSKyS5lqvOGjAhZ4VmYS7Hv/PhF5i92JBFn9mkgMPewREtee2gmwAV1 QqLRmL688YzmFPL4lkuPg2Vy7Er1iTtWLn3Wney+RhSuYQ+jinU3fsd8s5B3UwxF l0ZAw3RJ/TI/Z1VssPS113mCTazbfCPJuL091EOQzz+N/eMILrt7KJiRf5ZU0jR9 yqRbtW7B2ksQqb9PqJMz8Jq+ehtyi8wcaCR9bZMKNm0J8Yo9XeJjiUkAeeYB4cVV ST1949fwS6paluD47yl7WVryCo3E5mm2Z6iguPhRkhQJMMs72akHl2h29DUPKt1y fOwqCMNVmowJ4w== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:08 2025 by rpki-client