This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft File: wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json) Hash identifier: nv+XbhfW3pV76lS3kHWMrQIeXLNu4umAlzMHHeFjuqc= Subject key identifier: 36:3F:D4:EE:01:5B:C9:EB:29:4C:9D:E6:B7:3A:5B:C3:82:D7:5F:74 Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 Certificate issuer: /CN=c070ee8dc8378086960182e3309226717e83e407 Certificate serial: 019B3231B03A2C26BB5D7F1B7A3C5C26D439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft Manifest number: 0A9E Signing time: Thu 18 Dec 2025 16:01:15 +0000 Manifest this update: Thu 18 Dec 2025 16:01:15 +0000 Manifest next update: Fri 19 Dec 2025 16:01:15 +0000 Files and hashes: 1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=) 2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: fvXC6GR/oS4q/BDh+PpVbB4YxtFP/Erreg397xt03yA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:b0:3a:2c:26:bb:5d:7f:1b:7a:3c:5c:26:d4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c070ee8dc8378086960182e3309226717e83e407 Validity Not Before: Dec 18 16:01:15 2025 GMT Not After : Dec 19 16:01:15 2025 GMT Subject: CN=363fd4ee015bc9eb294c9de6b73a5bc382d75f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7b:15:bd:8c:1e:7b:5b:ad:ef:d0:f0:db:cb: c8:20:a3:51:4a:90:74:7f:3c:5c:e8:f8:23:1f:ea: 31:9d:d4:2a:5b:8b:3a:b5:98:95:e7:22:65:89:85: 14:b8:6c:02:63:b6:73:6d:e8:04:b0:3a:b4:31:fd: 13:71:fe:49:a1:1e:f1:c4:30:76:83:bf:b6:4a:80: fd:ac:01:9a:7a:21:9b:bb:da:d9:cb:55:f8:2e:81: 98:e2:35:1f:dd:0a:6b:37:87:19:16:bc:ad:7e:3d: 72:26:0b:1d:05:a1:e3:19:52:b0:e9:29:23:36:43: 9e:b5:e6:91:bd:2c:a9:15:55:af:5b:ef:eb:56:14: 1c:fb:5f:f2:14:19:e2:d5:e9:38:36:75:e8:25:ee: 75:4c:8d:a7:7f:eb:1e:3e:59:2f:71:56:1d:15:19: e5:36:87:7a:b6:ab:e8:96:2c:cf:fc:b0:63:b6:64: 8f:ce:06:08:51:c1:18:77:f7:7d:20:01:35:6f:10: 59:28:33:0d:e6:dd:81:e7:6a:25:47:20:4c:0e:f5: fc:52:47:22:5b:c8:31:85:16:06:d3:ac:13:bf:39: 86:dc:43:9c:de:5f:78:c9:bd:31:09:97:3a:54:b6: f7:83:08:78:33:fb:4c:0a:b9:23:b1:a5:eb:69:b9: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:D4:EE:01:5B:C9:EB:29:4C:9D:E6:B7:3A:5B:C3:82:D7:5F:74 X509v3 Authority Key Identifier: keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ee:14:c5:5b:03:f6:a7:2b:80:cc:86:65:af:32:2d:41:8e: 2d:f0:8c:f9:ea:b2:0a:a8:c7:76:13:76:65:27:fa:4d:85:c3: 06:9b:94:5d:92:1c:e1:65:70:fd:07:dd:6a:7f:ba:e4:4e:4c: f0:79:42:5e:52:e8:0a:7d:e7:aa:38:ff:e6:1c:ce:3b:c8:f1: 1d:fe:8e:06:6d:38:8a:64:1d:ba:b6:ae:c3:4f:87:e0:48:5d: 7c:41:09:bd:98:e4:db:cd:82:15:64:cc:f4:8b:f5:d9:52:dc: 4a:5b:0c:45:15:a9:74:02:9e:33:d8:65:52:4d:b4:72:6c:5a: f9:b4:d0:cd:76:90:af:12:05:1a:10:db:91:d0:24:b2:9e:f8: b5:e3:06:c1:59:50:b3:d9:35:55:6a:e1:1f:dc:34:90:96:db: 1c:41:0e:e5:eb:d8:21:a0:28:c2:59:9b:98:34:6d:ac:cb:47: 7d:7e:9a:6c:ee:b8:4c:70:79:0a:8b:04:e8:ca:5b:e7:48:3f: 97:2c:07:6e:dc:07:68:d6:90:2f:55:f3:f9:2d:53:e3:37:31: 3b:51:26:08:e9:64:38:0b:68:a2:be:a5:5c:3d:ee:cb:77:f8: 02:34:3d:ee:29:fa:8b:32:c2:78:1f:25:d9:27:8d:34:1b:fc: 20:72:0a:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMbA6LCa7XX8bejxcJtQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4 M2U0MDcwHhcNMjUxMjE4MTYwMTE1WhcNMjUxMjE5MTYwMTE1WjAzMTEwLwYDVQQD EygzNjNmZDRlZTAxNWJjOWViMjk0YzlkZTZiNzNhNWJjMzgyZDc1Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynsVvYwee1ut79Dw28vIIKNRSpB0 fzxc6PgjH+oxndQqW4s6tZiV5yJliYUUuGwCY7ZzbegEsDq0Mf0Tcf5JoR7xxDB2 g7+2SoD9rAGaeiGbu9rZy1X4LoGY4jUf3QprN4cZFrytfj1yJgsdBaHjGVKw6Skj NkOeteaRvSypFVWvW+/rVhQc+1/yFBni1ek4NnXoJe51TI2nf+sePlkvcVYdFRnl Nod6tqvolizP/LBjtmSPzgYIUcEYd/d9IAE1bxBZKDMN5t2B52olRyBMDvX8Ukci W8gxhRYG06wTvzmG3EOc3l94yb0xCZc6VLb3gwh4M/tMCrkjsaXrablfAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDY/1O4BW8nrKUyd5rc6W8OC1190MB8GA1UdIwQY MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt NDVhN2I2OTc4NDkzLzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATe4UxVsD 9qcrgMyGZa8yLUGOLfCM+eqyCqjHdhN2ZSf6TYXDBpuUXZIc4WVw/Qfdan+65E5M 8HlCXlLoCn3nqjj/5hzOO8jxHf6OBm04imQdurauw0+H4EhdfEEJvZjk282CFWTM 9Iv12VLcSlsMRRWpdAKeM9hlUk20cmxa+bTQzXaQrxIFGhDbkdAksp74teMGwVlQ s9k1VWrhH9w0kJbbHEEO5evYIaAowlmbmDRtrMtHfX6abO64THB5CosE6Mpb50g/ lywHbtwHaNaQL1Xz+S1T4zcxO1EmCOlkOAtoor6lXD3uy3f4AjQ97in6izLCeB8l 2SeNNBv8IHIKcA== -----END CERTIFICATE-----Generated at Thu Dec 18 19:27:08 2025 by rpki-client