This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json) Hash identifier: NMIu7KxEqOwyd22rt5mKXklKWD+ayYg/cEey9keHkQE= Subject key identifier: BC:FC:75:DD:2A:47:F2:A7:53:02:27:1F:65:2C:DD:90:84:D5:D6:33 Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87 Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287 Certificate serial: 019B3AFDB8194A393EF8F4539B8A37AB240A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 09:01:04 +0000 Manifest this update: Sat 20 Dec 2025 09:01:04 +0000 Manifest next update: Sun 21 Dec 2025 09:01:04 +0000 Files and hashes: 1: Xcqq0m0T1yRbHOKg5cEHJjsB7MI.roa (hash: oC9S1bEkPnnQvPMvmcVeOLv10F6tSd5dc+2qe4J3PwQ=) 2: bCoGHAtTSxDtX1oYqNKnhpGYY0Q.roa (hash: eFHrLDgLSqCz0ldYK/DeOjHpdOvOetjhzRdvuzqcBXw=) 3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: 2lY2kZteiTOu79hrNYfrqS5x+YIWINBU2EGIURTguhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:b8:19:4a:39:3e:f8:f4:53:9b:8a:37:ab:24:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287 Validity Not Before: Dec 20 09:01:04 2025 GMT Not After : Dec 21 09:01:04 2025 GMT Subject: CN=bcfc75dd2a47f2a75302271f652cdd9084d5d633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b1:c4:e3:f4:ba:04:a5:1e:42:67:a5:ef:0b: 51:f6:df:79:96:be:39:96:57:bd:3f:8c:ff:80:0c: 34:fd:ae:85:50:d9:c4:9e:ae:ce:cf:29:ec:60:2d: bb:a2:14:78:7a:11:c2:10:f8:72:17:b2:17:21:23: 27:a4:88:90:8b:00:e5:f3:10:f7:50:4f:6c:04:69: cd:28:97:8c:8a:1f:d6:df:dd:bb:d8:09:33:a8:4e: e0:8c:40:24:39:5f:cb:34:01:84:a2:fa:9e:33:73: 7e:10:68:81:6c:ef:60:ec:85:43:03:4d:78:27:cc: bf:10:31:36:c5:f7:a3:1f:03:08:05:b3:50:0a:ce: 86:68:fd:31:9d:93:0b:ff:91:e6:73:5d:29:65:e7: b5:f5:26:22:a8:a0:7b:fa:26:5c:68:ac:79:82:4e: ce:d0:f4:23:44:56:bc:00:c5:f6:13:77:5c:82:46: ec:a2:23:7c:e5:e7:3d:b7:70:da:ef:96:5a:04:21: 75:b7:f8:ea:0e:79:c1:9c:36:4a:39:ad:39:7e:15: eb:c7:34:f8:e6:04:10:c5:24:4f:04:68:fc:a7:dd: d8:f4:30:48:7c:d1:df:32:ea:27:99:c9:f3:98:90: fe:32:01:c6:4d:7a:cd:c5:fa:e2:15:5b:f6:3d:e1: 02:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:75:DD:2A:47:F2:A7:53:02:27:1F:65:2C:DD:90:84:D5:D6:33 X509v3 Authority Key Identifier: keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:78:f7:9f:78:b7:fe:05:bf:e1:e6:2d:dc:e5:c9:3d:27:38: ab:18:22:84:69:53:05:e8:b0:ef:ca:c3:90:45:e1:a5:a7:f9: d6:64:d8:cf:f5:63:60:22:7a:ad:74:ba:d8:ad:6e:61:14:e1: 00:e0:52:c8:02:a4:ab:0e:4d:4a:d5:43:14:fc:c9:99:87:cb: 4c:95:6d:e0:09:c0:43:b4:d5:06:f6:24:98:62:24:e2:c2:31: 7b:dd:b2:23:e2:cb:40:a3:a4:97:5f:99:e2:9e:1e:ad:22:26: f9:16:63:a8:64:86:be:2d:ea:ba:99:3e:7b:54:f0:4e:40:7e: 12:16:6e:f0:a3:b0:cd:1c:24:14:75:43:8e:73:5f:92:6a:bb: 9d:fe:be:95:c1:ad:fd:2a:16:c7:19:b3:2b:87:fe:2a:0b:e5: d5:71:f3:1f:9b:9f:43:a7:01:3d:31:04:2f:39:71:25:62:46: 65:5d:77:8d:1b:42:ed:ff:04:0a:ba:9c:08:5d:93:94:e9:49: bd:d8:89:ca:7f:05:df:d1:80:b8:2e:25:0c:4a:1b:87:22:4d: 97:71:e2:7d:53:20:ef:0b:33:0c:bd:91:99:66:b1:d1:32:c2: fc:5a:bb:95:a1:d8:0a:f4:90:69:e4:f7:c5:d7:62:bf:d8:a8: be:d2:64:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/bgZSjk++PRTm4o3qyQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5 YTcyODcwHhcNMjUxMjIwMDkwMTA0WhcNMjUxMjIxMDkwMTA0WjAzMTEwLwYDVQQD EyhiY2ZjNzVkZDJhNDdmMmE3NTMwMjI3MWY2NTJjZGQ5MDg0ZDVkNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27HE4/S6BKUeQmel7wtR9t95lr45 lle9P4z/gAw0/a6FUNnEnq7OzynsYC27ohR4ehHCEPhyF7IXISMnpIiQiwDl8xD3 UE9sBGnNKJeMih/W39272AkzqE7gjEAkOV/LNAGEovqeM3N+EGiBbO9g7IVDA014 J8y/EDE2xfejHwMIBbNQCs6GaP0xnZML/5Hmc10pZee19SYiqKB7+iZcaKx5gk7O 0PQjRFa8AMX2E3dcgkbsoiN85ec9t3Da75ZaBCF1t/jqDnnBnDZKOa05fhXrxzT4 5gQQxSRPBGj8p93Y9DBIfNHfMuonmcnzmJD+MgHGTXrNxfriFVv2PeECMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz8dd0qR/KnUwInH2Us3ZCE1dYzMB8GA1UdIwQY MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2 LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXj3n3i3 /gW/4eYt3OXJPSc4qxgihGlTBeiw78rDkEXhpaf51mTYz/VjYCJ6rXS62K1uYRTh AOBSyAKkqw5NStVDFPzJmYfLTJVt4AnAQ7TVBvYkmGIk4sIxe92yI+LLQKOkl1+Z 4p4erSIm+RZjqGSGvi3qupk+e1TwTkB+EhZu8KOwzRwkFHVDjnNfkmq7nf6+lcGt /SoWxxmzK4f+Kgvl1XHzH5ufQ6cBPTEELzlxJWJGZV13jRtC7f8ECrqcCF2TlOlJ vdiJyn8F39GAuC4lDEobhyJNl3HifVMg7wszDL2RmWax0TLC/Fq7laHYCvSQaeT3 xddiv9iovtJkow== -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:09 2025 by rpki-client