This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft File: wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft (raw, json) Hash identifier: HOyzb93VwpnlMIlEsTLcbEvka9+wBROhV9ny4CFLTwA= Subject key identifier: 80:3C:4B:D4:F6:5F:AD:6D:BD:1F:33:1F:9E:0A:02:70:A5:8C:81:7D Authority key identifier: C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC Certificate issuer: /CN=c0b8bb485eba392b80c3166929b7fcb958f449bc Certificate serial: 019B4A710352C1080B3B99E69CB138978E2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 09:01:18 +0000 Manifest this update: Tue 23 Dec 2025 09:01:18 +0000 Manifest next update: Wed 24 Dec 2025 09:01:18 +0000 Files and hashes: 1: BN13x-ZjA4mHaBlOmgwvor1JO1c.roa (hash: Uuj6BFZWiA+duiDnobx+mZ0HHXgVtqFptRYnRQ3IF9I=) 2: wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl (hash: saaaqad43MOA+gahNoe9M4f84lNfgbq29MI5qD4otgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:03:52:c1:08:0b:3b:99:e6:9c:b1:38:97:8e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0b8bb485eba392b80c3166929b7fcb958f449bc Validity Not Before: Dec 23 09:01:18 2025 GMT Not After : Dec 24 09:01:18 2025 GMT Subject: CN=803c4bd4f65fad6dbd1f331f9e0a0270a58c817d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:5f:9e:d1:3c:da:ba:67:48:fa:69:fc:d1: a2:60:90:a4:43:8b:46:e0:70:5f:c1:01:5c:f7:4a: 9a:ab:54:67:5c:d5:58:29:22:3b:99:7e:5c:ef:c3: 9c:19:9a:5e:c2:ee:60:46:c6:ae:9b:73:a8:fd:45: 59:8f:bf:13:7a:91:1d:0a:84:36:39:f5:a6:a2:b7: 9c:ea:a9:bb:a4:82:66:eb:d5:46:12:60:cd:b2:ef: 9c:9a:bb:4d:4e:e6:ec:83:60:a5:6b:30:2f:a4:44: 94:9f:c8:66:25:b6:a6:6f:22:46:85:b8:ad:26:4e: 9d:82:1e:22:67:00:c5:d0:7b:5e:61:a8:63:c1:b5: 52:59:c9:51:a6:12:d2:28:a3:ee:53:e0:1a:d0:bd: dd:40:4b:f9:99:4b:04:05:d0:93:c3:3e:5c:1b:01: 3d:a7:98:14:1e:47:87:d9:3f:b1:88:d7:b9:da:50: 5b:bc:47:84:c2:8f:8c:1e:82:59:9e:ff:dc:53:3d: de:e6:f3:6c:86:18:51:4b:06:dc:9b:d6:6a:bd:e4: 25:ac:3f:15:06:3c:df:e0:d6:36:86:15:fa:d7:7c: 5c:4e:2e:df:34:a2:ed:76:db:e4:83:cd:22:73:9a: 0a:0f:e0:56:69:65:de:c3:7d:50:b7:76:9a:dc:d4: 76:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3C:4B:D4:F6:5F:AD:6D:BD:1F:33:1F:9E:0A:02:70:A5:8C:81:7D X509v3 Authority Key Identifier: keyid:C0:B8:BB:48:5E:BA:39:2B:80:C3:16:69:29:B7:FC:B9:58:F4:49:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi7SF66OSuAwxZpKbf8uVj0Sbw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/84942f-721f-4234-88c1-dbf3969ca75f/1/wLi7SF66OSuAwxZpKbf8uVj0Sbw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:22:6e:10:07:45:ec:8a:f7:02:bb:73:07:af:c8:e9:af:c9: 13:8b:13:31:e1:98:b6:9e:1d:6e:b3:92:ba:c3:e7:b5:64:c6: 06:14:76:6b:d5:02:ac:31:23:6f:e4:fc:f0:1e:44:2d:72:72: 7d:1a:f1:3a:01:c7:ed:70:1f:20:b1:23:34:71:99:fb:3f:af: c2:98:8d:df:2a:a6:d8:48:43:2e:86:9f:7c:e7:d4:e5:3d:83: 33:42:e1:6c:ef:75:f4:ab:25:b1:4b:cd:31:7b:06:7f:6e:cd: 0d:36:cc:0d:4c:49:8a:c2:0c:97:d2:98:e5:af:dc:d5:fe:c0: c5:bc:c4:71:5c:a2:04:30:00:2e:92:d8:b3:a4:bb:86:e5:46: 1e:64:ab:b9:1b:61:8c:26:64:59:6e:96:62:0f:2f:41:2c:2e: 86:d6:11:f5:b7:21:50:9b:53:9e:46:3c:14:30:05:b7:30:a8: 8c:a9:f0:27:5a:58:45:96:44:7d:c4:fe:55:cf:00:23:94:67: 7a:8a:2e:96:3a:b5:4f:05:79:23:e8:6d:c2:68:8d:28:cf:47: 8b:f9:73:3e:8e:bf:c4:74:29:4e:52:e1:41:11:9f:35:3f:b4: d5:cf:d9:38:3d:a7:74:e9:db:51:ce:18:fe:d8:a0:6c:35:e3: da:86:e2:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcQNSwQgLO5nmnLE4l44rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYjhiYjQ4NWViYTM5MmI4MGMzMTY2OTI5YjdmY2I5NThm NDQ5YmMwHhcNMjUxMjIzMDkwMTE4WhcNMjUxMjI0MDkwMTE4WjAzMTEwLwYDVQQD Eyg4MDNjNGJkNGY2NWZhZDZkYmQxZjMzMWY5ZTBhMDI3MGE1OGM4MTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVJfntE82rpnSPpp/NGiYJCkQ4tG 4HBfwQFc90qaq1RnXNVYKSI7mX5c78OcGZpewu5gRsaum3Oo/UVZj78TepEdCoQ2 OfWmorec6qm7pIJm69VGEmDNsu+cmrtNTubsg2ClazAvpESUn8hmJbambyJGhbit Jk6dgh4iZwDF0HteYahjwbVSWclRphLSKKPuU+Aa0L3dQEv5mUsEBdCTwz5cGwE9 p5gUHkeH2T+xiNe52lBbvEeEwo+MHoJZnv/cUz3e5vNshhhRSwbcm9ZqveQlrD8V Bjzf4NY2hhX613xcTi7fNKLtdtvkg80ic5oKD+BWaWXew31Qt3aa3NR2jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA8S9T2X61tvR8zH54KAnCljIF9MB8GA1UdIwQY MBaAFMC4u0heujkrgMMWaSm3/LlY9Em8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0xpN1NGNjZPU3VBd3hacEtiZjh1VmowU2J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS84NDk0MmYtNzIxZi00MjM0LTg4YzEt ZGJmMzk2OWNhNzVmLzEvd0xpN1NGNjZPU3VBd3hacEtiZjh1VmowU2J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS84NDk0MmYtNzIxZi00MjM0LTg4YzEtZGJmMzk2OWNhNzVm LzEvd0xpN1NGNjZPU3VBd3hacEtiZjh1VmowU2J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSJuEAdF 7Ir3ArtzB6/I6a/JE4sTMeGYtp4dbrOSusPntWTGBhR2a9UCrDEjb+T88B5ELXJy fRrxOgHH7XAfILEjNHGZ+z+vwpiN3yqm2EhDLoaffOfU5T2DM0LhbO919KslsUvN MXsGf27NDTbMDUxJisIMl9KY5a/c1f7AxbzEcVyiBDAALpLYs6S7huVGHmSruRth jCZkWW6WYg8vQSwuhtYR9bchUJtTnkY8FDAFtzCojKnwJ1pYRZZEfcT+Vc8AI5Rn eoouljq1TwV5I+htwmiNKM9Hi/lzPo6/xHQpTlLhQRGfNT+01c/ZOD2ndOnbUc4Y /tigbDXj2obiHw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:31:10 2025 by rpki-client