This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: ZZ09nk4I10DoK80WSYa466oARoxDaK3LgLchf3PVwB8= Subject key identifier: A7:9E:DD:C9:D5:14:A5:CE:B4:3D:C6:EF:FD:5A:4F:E7:B4:FE:67:F1 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019B3BD94C51F6205C615E55A6A7A61939A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 17A8 Signing time: Sat 20 Dec 2025 13:00:55 +0000 Manifest this update: Sat 20 Dec 2025 13:00:55 +0000 Manifest next update: Sun 21 Dec 2025 13:00:55 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: vNevB1xF-PoTwPfY-Z2XsIwL7H8.roa (hash: vt4+GN3bRBOdbYFvvPoZYOFbNH+Yt+zM3zx61HscKi0=) 16: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: CCGPbfGZzkDm61GFSXstakK30vmFwSnAlWRfhlIE9xQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:4c:51:f6:20:5c:61:5e:55:a6:a7:a6:19:39:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Dec 20 13:00:55 2025 GMT Not After : Dec 21 13:00:55 2025 GMT Subject: CN=a79eddc9d514a5ceb43dc6effd5a4fe7b4fe67f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:a5:89:6e:e1:a6:a2:04:e6:95:87:a6:b7: b1:49:4d:68:22:3d:5b:3a:bd:da:03:5f:60:97:7d: f6:9f:2b:1f:62:32:20:9d:ae:ce:02:ad:2d:38:4f: 10:8e:ae:07:e2:30:60:3d:b3:77:d6:ec:9d:9e:b2: c3:99:4d:79:4d:84:29:c4:28:1c:e4:65:3f:85:88: 5a:a8:ac:20:05:61:65:c3:7e:56:2e:42:63:5f:69: 96:6a:c7:74:d1:cf:ce:1a:70:63:a1:14:a6:b9:87: 02:4b:4d:20:b4:cb:62:51:d1:b1:96:ff:97:36:f8: 0c:70:31:11:dc:4f:89:4f:da:75:3e:0e:5a:77:1b: 03:04:a0:96:6b:5c:e6:af:55:f8:b3:52:70:9f:75: 2e:be:5d:ce:e4:75:ac:6b:22:69:e2:89:d5:47:9c: f6:37:6c:d8:05:1a:67:d1:b9:bc:0d:1d:66:37:d5: bb:e8:a0:a7:2d:e4:d7:18:5c:81:86:f7:41:47:6f: 77:c0:ed:b6:84:52:06:e5:fa:ed:0e:5f:45:ec:7b: 9c:60:53:4f:e4:53:54:00:93:66:8b:b8:2f:42:8d: 7e:68:0f:f2:8c:1c:82:12:a1:3b:82:d2:70:aa:24: 36:32:fe:c9:ae:a5:ca:a3:65:c0:ff:30:75:36:30: 36:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9E:DD:C9:D5:14:A5:CE:B4:3D:C6:EF:FD:5A:4F:E7:B4:FE:67:F1 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f3:0c:2d:5a:ab:5c:51:7f:e5:2e:8d:bb:bb:65:7b:db:1a: 00:36:7c:30:fb:7f:1d:07:70:f1:e9:9f:13:d7:21:5b:53:a0: 35:04:6e:d8:1e:ef:ac:d0:12:a6:4a:2d:5e:4c:76:d1:e5:49: 4a:04:9d:92:6c:ed:e9:a1:34:e4:f7:65:a6:76:49:13:4a:6c: e6:a4:f6:7f:ab:30:e4:2d:19:13:ec:4e:b4:5f:29:b1:32:c7: 08:4f:be:0c:63:6f:86:94:b3:5a:0d:78:f0:77:ed:33:b5:eb: b7:68:6a:34:3c:f7:9f:34:59:d9:64:a6:d0:4e:e7:82:f4:3f: 17:68:07:e5:44:d2:f1:9d:51:01:ff:75:60:66:6a:83:8c:93: 5c:e1:e3:0d:6e:b8:6b:82:9d:f4:6e:57:6a:fe:5e:40:3f:ac: 2c:a7:26:8b:16:c9:68:3d:eb:ea:42:f7:b0:cb:48:f1:7b:8a: 8f:16:ad:86:44:ec:57:90:ce:0f:81:0c:05:71:00:ba:c6:4f: 79:36:e8:3f:e4:fc:7b:35:9a:a5:a6:92:10:90:85:90:80:ad: e8:6a:74:d2:a6:bb:ea:87:b4:d1:92:7a:86:91:3b:c5:51:85: 23:bf:3f:e9:b8:af:06:32:90:46:2b:09:68:d3:ce:f7:47:5f: d7:e9:50:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72UxR9iBcYV5VpqemGTmmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUxMjIwMTMwMDU1WhcNMjUxMjIxMTMwMDU1WjAzMTEwLwYDVQQD EyhhNzllZGRjOWQ1MTRhNWNlYjQzZGM2ZWZmZDVhNGZlN2I0ZmU2N2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3eliW7hpqIE5pWHprexSU1oIj1b Or3aA19gl332nysfYjIgna7OAq0tOE8Qjq4H4jBgPbN31uydnrLDmU15TYQpxCgc 5GU/hYhaqKwgBWFlw35WLkJjX2mWasd00c/OGnBjoRSmuYcCS00gtMtiUdGxlv+X NvgMcDER3E+JT9p1Pg5adxsDBKCWa1zmr1X4s1Jwn3Uuvl3O5HWsayJp4onVR5z2 N2zYBRpn0bm8DR1mN9W76KCnLeTXGFyBhvdBR293wO22hFIG5frtDl9F7HucYFNP 5FNUAJNmi7gvQo1+aA/yjByCEqE7gtJwqiQ2Mv7JrqXKo2XA/zB1NjA2mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKee3cnVFKXOtD3G7/1aT+e0/mfxMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIfMMLVqr XFF/5S6Nu7tle9saADZ8MPt/HQdw8emfE9chW1OgNQRu2B7vrNASpkotXkx20eVJ SgSdkmzt6aE05PdlpnZJE0ps5qT2f6sw5C0ZE+xOtF8psTLHCE++DGNvhpSzWg14 8HftM7Xrt2hqNDz3nzRZ2WSm0E7ngvQ/F2gH5UTS8Z1RAf91YGZqg4yTXOHjDW64 a4Kd9G5Xav5eQD+sLKcmixbJaD3r6kL3sMtI8XuKjxathkTsV5DOD4EMBXEAusZP eTboP+T8ezWapaaSEJCFkICt6Gp00qa76oe00ZJ6hpE7xVGFI78/6bivBjKQRisJ aNPO90df1+lQGw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:38:59 2025 by rpki-client