This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json) Hash identifier: JYwYaPWXt/cPVWye4cXipbZRTedo7CnGS3gIpnIfYJI= Subject key identifier: 24:49:EA:87:58:42:33:EB:E6:90:C0:29:4E:0E:D0:06:2C:E5:76:64 Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019B45B80F9E624F4D6F2BF3840EED7860A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft Manifest number: 096B Signing time: Mon 22 Dec 2025 11:00:49 +0000 Manifest this update: Mon 22 Dec 2025 11:00:49 +0000 Manifest next update: Tue 23 Dec 2025 11:00:49 +0000 Files and hashes: 1: CZOyLCDq6Iq_ffaqvjI3PSVVOvU.roa (hash: nxYpf3d1kInNnFvQ38+l8rg/HLKSq+o3Lo1uxdJMCqg=) 2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: 1fwg5AvZ8tmagFrKqEInjXpVGS2azYJrTKyN4aP9EyU=) 3: k47IkFzsvbAU-luJwFSjcXBgPII.roa (hash: LRzevFO33ciORneOuJWjPwolGOd6frxZBqlkG2Q4ros=) 4: lEEyuAddblYNTeWx211i0OkHLwc.roa (hash: xrs17fe1+/VBDSqf3ILWe0WvYIKh2Ut8uQHgq7w6B3M=) 5: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:0f:9e:62:4f:4d:6f:2b:f3:84:0e:ed:78:60:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Dec 22 11:00:49 2025 GMT Not After : Dec 23 11:00:49 2025 GMT Subject: CN=2449ea87584233ebe690c0294e0ed0062ce57664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:9e:de:a0:f4:f2:b9:cc:14:32:68:79:67: 62:93:af:47:31:27:cb:d6:e5:29:cb:2d:f7:77:81: d4:78:a6:0b:fa:55:06:6e:32:fd:34:76:61:75:ad: 0e:1f:8f:9e:4c:2b:65:56:41:e0:d3:ea:7a:2b:8c: 28:b3:6e:37:d6:6f:f9:10:47:42:b8:2e:62:ab:ba: 33:69:4f:5c:c3:1d:23:37:95:3f:15:db:36:f0:0f: e1:61:8b:8e:8c:79:eb:7a:c1:49:d9:2b:a8:eb:62: ff:12:9f:1b:6d:49:5f:9d:fb:12:1f:d0:73:27:4c: 1c:72:d6:4a:51:c6:5c:22:69:fe:32:12:84:07:78: 9a:63:be:ef:fc:b5:73:2e:db:6c:80:bf:52:05:28: a7:28:43:8b:a9:b6:93:1e:dd:c2:2d:77:0b:92:4e: ae:4f:d6:ee:c4:3c:e3:cf:b3:8c:ee:8a:69:f6:eb: 9d:b1:e4:4f:44:cf:d0:de:f9:73:47:c5:ee:7c:64: 22:79:e7:b4:2d:9e:d3:53:32:16:8e:64:46:b4:c5: bb:c2:7f:45:8a:53:9b:fa:4a:87:cd:2e:96:cb:3a: 50:d6:66:16:22:3d:2a:0b:c2:a5:a8:68:8a:11:0f: 62:16:49:5f:91:54:f8:77:52:f7:a9:c1:a3:f0:0f: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:49:EA:87:58:42:33:EB:E6:90:C0:29:4E:0E:D0:06:2C:E5:76:64 X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:28:15:8c:dd:06:f4:20:11:28:fe:d2:3b:48:b0:2d:60:0f: df:10:fa:66:5f:be:80:73:f0:ee:1d:72:fb:8e:8f:ed:b5:ea: bf:f0:a1:6c:25:94:51:07:e2:cd:7e:69:0d:f2:6c:69:91:b4: 88:17:34:7d:90:14:ce:dc:f0:be:56:75:7f:10:c5:6d:7a:d7: 60:51:f6:f0:23:ae:ec:b6:67:9e:de:40:f4:72:f5:be:1f:da: 76:5f:93:e0:ff:66:a7:f2:ec:c5:f2:da:85:07:32:f5:dd:dd: f2:1b:09:53:a4:38:35:88:3e:78:06:87:6c:78:e2:ef:95:c0: f2:89:f3:8e:f9:d9:76:88:47:7a:5d:d2:b8:3c:6e:64:cc:c8: 81:28:6b:b7:fd:f6:61:4d:55:1e:68:20:31:55:a6:f3:08:65: f4:84:3c:cb:91:76:f9:32:26:a6:56:03:ae:e8:d9:c4:64:b2: c9:f1:96:ab:1e:f3:d7:4f:98:a5:df:72:c4:30:c3:71:ed:d5: 8b:26:bd:ce:33:05:c2:37:5e:be:71:68:ee:d3:f3:ed:63:bb: 2c:a9:a4:7e:f4:49:8b:e8:19:9c:f1:8c:69:93:91:cd:64:b3: 3a:69:d1:e3:e6:09:8e:60:d8:79:2c:03:02:5b:db:e6:77:b8: 37:8b:88:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuA+eYk9NbyvzhA7teGCnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjUxMjIyMTEwMDQ5WhcNMjUxMjIzMTEwMDQ5WjAzMTEwLwYDVQQD EygyNDQ5ZWE4NzU4NDIzM2ViZTY5MGMwMjk0ZTBlZDAwNjJjZTU3NjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmCe3qD08rnMFDJoeWdik69HMSfL 1uUpyy33d4HUeKYL+lUGbjL9NHZhda0OH4+eTCtlVkHg0+p6K4wos2431m/5EEdC uC5iq7ozaU9cwx0jN5U/Fds28A/hYYuOjHnresFJ2Suo62L/Ep8bbUlfnfsSH9Bz J0wcctZKUcZcImn+MhKEB3iaY77v/LVzLttsgL9SBSinKEOLqbaTHt3CLXcLkk6u T9buxDzjz7OM7opp9uudseRPRM/Q3vlzR8XufGQieee0LZ7TUzIWjmRGtMW7wn9F ilOb+kqHzS6WyzpQ1mYWIj0qC8KlqGiKEQ9iFklfkVT4d1L3qcGj8A/0zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRJ6odYQjPr5pDAKU4O0AYs5XZkMB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCgVjN0G 9CARKP7SO0iwLWAP3xD6Zl++gHPw7h1y+46P7bXqv/ChbCWUUQfizX5pDfJsaZG0 iBc0fZAUztzwvlZ1fxDFbXrXYFH28COu7LZnnt5A9HL1vh/adl+T4P9mp/LsxfLa hQcy9d3d8hsJU6Q4NYg+eAaHbHji75XA8onzjvnZdohHel3SuDxuZMzIgShrt/32 YU1VHmggMVWm8whl9IQ8y5F2+TImplYDrujZxGSyyfGWqx7z10+Ypd9yxDDDce3V iya9zjMFwjdevnFo7tPz7WO7LKmkfvRJi+gZnPGMaZORzWSzOmnR4+YJjmDYeSwD Alvb5ne4N4uIBg== -----END CERTIFICATE-----Generated at Mon Dec 22 17:54:00 2025 by rpki-client