This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier: T5+DVxyfN+bvv4IVkYm8JbHG0dbZxCssslgA4wpf8wI=
Subject key identifier: C4:FA:F6:3D:62:D6:84:A2:A6:E7:99:45:4D:E6:E4:35:E3:A9:86:A2
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer: /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial: 019B24E351ACA44B773BB9955AC85E6FCAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number: 177F
Signing time: Tue 16 Dec 2025 02:00:35 +0000
Manifest this update: Tue 16 Dec 2025 02:00:35 +0000
Manifest next update: Wed 17 Dec 2025 02:00:35 +0000
Files and hashes: 1: 2x0oIHlLniQgJ8wCGF91u-VP36U.roa (hash: hTRJW3J22JabEFrfjLPUALfCkvH53/llK6Ms4YgJ720=)
2: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: j5nJIsojQP9lzd3UjlxG/ztRYTdI74uTyDI5hfd6rtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 16 Dec 2025 22:36:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:24:e3:51:ac:a4:4b:77:3b:b9:95:5a:c8:5e:6f:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Validity
Not Before: Dec 16 02:00:35 2025 GMT
Not After : Dec 17 02:00:35 2025 GMT
Subject: CN=c4faf63d62d684a2a6e799454de6e435e3a986a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8e:29:17:c8:37:f1:db:39:b0:e4:d0:1e:61:
1a:e6:64:f1:f0:21:a0:50:70:87:7c:35:e0:20:ce:
4d:f5:d5:2f:a3:5e:d2:3a:0e:33:c0:d0:5d:38:bf:
04:f9:e8:43:30:a7:1b:de:df:bf:d5:51:ba:c8:f4:
10:6c:34:d1:f9:2a:f0:5b:90:a8:ef:df:f3:98:7c:
72:db:e4:43:11:e4:85:d1:12:be:df:47:27:ff:e7:
67:f2:e9:76:71:ff:04:c4:8a:dc:4b:4f:d6:40:51:
e0:02:67:34:b7:8c:6e:a9:c6:a8:4b:b1:5f:20:42:
d0:50:6d:a0:9d:76:8e:7e:fe:4b:8b:27:b3:9b:34:
19:51:38:72:a7:4d:99:9c:2e:54:fe:c6:c2:0d:2c:
95:d6:b1:e0:6d:6e:50:cd:9e:a0:b7:b8:e1:e9:8e:
12:66:a2:16:6f:39:e4:68:c4:7d:62:a6:4d:9f:19:
9c:0d:41:a6:33:43:2d:96:6d:56:b6:03:11:81:c3:
50:cc:de:57:07:b1:f0:2e:cc:a5:83:e8:e2:c9:26:
26:1a:2e:20:3f:12:47:8e:9d:9e:db:26:e0:d1:e5:
de:a0:d3:be:82:60:ee:aa:3b:74:33:a5:dc:15:55:
aa:d8:3a:ba:d0:30:c3:e0:9e:c1:03:f6:fc:6a:a7:
31:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FA:F6:3D:62:D6:84:A2:A6:E7:99:45:4D:E6:E4:35:E3:A9:86:A2
X509v3 Authority Key Identifier:
keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1d:27:d1:64:5e:41:48:2f:64:c3:e2:ee:8a:0e:d6:8b:62:
ec:36:79:d9:bf:ca:7c:cc:2e:e4:13:89:1b:4c:34:cf:93:43:
bd:95:67:c2:21:7a:19:dc:ac:43:d6:1f:bd:09:0c:ad:91:d0:
ab:0f:a9:d8:cb:bb:e6:e1:da:b1:4a:65:a9:6b:36:a1:6c:dd:
a5:cd:1f:6b:df:e5:5e:d8:5f:23:7d:9e:06:02:40:69:b2:79:
8a:7e:1b:ff:91:da:37:b9:fd:db:4f:74:fa:2e:08:fa:64:fb:
16:72:28:fd:c0:81:e2:ad:c0:0a:e2:71:1d:0c:af:8e:59:3b:
a7:bc:6b:02:99:c5:72:04:42:0c:ea:3b:e9:f6:a1:ec:2b:97:
09:22:84:e1:21:fb:79:3a:6a:ce:9c:f7:6a:2b:4f:4d:f3:e5:
85:9b:be:ec:40:fe:fc:d7:e8:a3:4a:2d:38:16:dd:06:4b:05:
27:18:b6:5e:9d:9a:d5:e8:8e:78:5a:98:d9:5e:79:b4:c3:5e:
b9:3c:7f:79:b1:64:79:64:c4:77:9c:2d:61:0e:97:4b:26:21:
6c:0a:7d:7d:b9:8a:df:ac:e6:c4:51:65:45:c1:ea:c7:f7:68:
4f:4f:6f:72:d7:3b:b5:11:db:82:ec:28:f2:79:1b:ea:6c:54:
01:ee:c6:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsk41GspEt3O7mVWsheb8rvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzhmNjhhYzQxNTA1OWQ1NmQxOTM4YzM3NWE1OTg2YTZm
ZmY0YjEwHhcNMjUxMjE2MDIwMDM1WhcNMjUxMjE3MDIwMDM1WjAzMTEwLwYDVQQD
EyhjNGZhZjYzZDYyZDY4NGEyYTZlNzk5NDU0ZGU2ZTQzNWUzYTk4NmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI4pF8g38ds5sOTQHmEa5mTx8CGg
UHCHfDXgIM5N9dUvo17SOg4zwNBdOL8E+ehDMKcb3t+/1VG6yPQQbDTR+SrwW5Co
79/zmHxy2+RDEeSF0RK+30cn/+dn8ul2cf8ExIrcS0/WQFHgAmc0t4xuqcaoS7Ff
IELQUG2gnXaOfv5LiyezmzQZUThyp02ZnC5U/sbCDSyV1rHgbW5QzZ6gt7jh6Y4S
ZqIWbznkaMR9YqZNnxmcDUGmM0Mtlm1WtgMRgcNQzN5XB7HwLsylg+jiySYmGi4g
PxJHjp2e2ybg0eXeoNO+gmDuqjt0M6XcFVWq2Dq60DDD4J7BA/b8aqcxqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMT69j1i1oSipueZRU3m5DXjqYaiMB8GA1UdIwQY
MBaAFFrI9orEFQWdVtGTjDdaWYam//SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4Njct
MWM4MTMyZDVmNGI0LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC82OWU3ZTQtZTNlYS00NmE1LTk4NjctMWM4MTMyZDVmNGI0
LzEvV3NqMmlzUVZCWjFXMFpPTU4xcFpocWJfOUxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB0n0WRe
QUgvZMPi7ooO1oti7DZ52b/KfMwu5BOJG0w0z5NDvZVnwiF6GdysQ9YfvQkMrZHQ
qw+p2Mu75uHasUplqWs2oWzdpc0fa9/lXthfI32eBgJAabJ5in4b/5HaN7n92090
+i4I+mT7FnIo/cCB4q3ACuJxHQyvjlk7p7xrApnFcgRCDOo76fah7CuXCSKE4SH7
eTpqzpz3aitPTfPlhZu+7ED+/Nfoo0otOBbdBksFJxi2Xp2a1eiOeFqY2V55tMNe
uTx/ebFkeWTEd5wtYQ6XSyYhbAp9fbmK36zmxFFlRcHqx/doT09vctc7tRHbguwo
8nkb6mxUAe7GWQ==
-----END CERTIFICATE-----
Generated at Tue Dec 16 04:38:06 2025 by rpki-client