This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft File: wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json) Hash identifier: Q8ZL97H46emvb2WaTIn+FeMvAD+yCo22np1SYCuiwkY= Subject key identifier: 9B:37:E0:AC:8F:BC:BA:5E:5B:22:5E:65:82:39:42:39:56:97:FE:87 Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C Certificate issuer: /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c Certificate serial: 019B32D79F46F1735D6D75807B1D9C6536E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft Manifest number: 117D Signing time: Thu 18 Dec 2025 19:02:30 +0000 Manifest this update: Thu 18 Dec 2025 19:02:30 +0000 Manifest next update: Fri 19 Dec 2025 19:02:30 +0000 Files and hashes: 1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=) 2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: 74ox+cEdTYemwrIKVsziDJzR/gO0rNIWx+sC39KPfCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:9f:46:f1:73:5d:6d:75:80:7b:1d:9c:65:36:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c Validity Not Before: Dec 18 19:02:30 2025 GMT Not After : Dec 19 19:02:30 2025 GMT Subject: CN=9b37e0ac8fbcba5e5b225e65823942395697fe87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:02:fb:d6:05:2d:9c:96:a4:43:c0:45:9b: f4:69:a3:29:bd:fb:69:f8:4d:ca:b5:c9:5c:d0:53: f8:e0:8c:19:7d:ea:6c:a8:b2:78:aa:a6:0f:06:90: 08:c5:72:fa:77:c4:83:78:64:95:fb:5e:c3:c7:65: f9:31:22:79:f0:af:ae:63:72:9e:7a:b5:90:4d:2e: b9:d1:c9:12:ca:10:7d:e0:1d:20:d6:1e:15:b8:3a: 60:a7:5d:ee:5f:47:96:35:9f:38:72:a1:94:cc:d1: 39:c7:ac:8f:c3:da:a8:c7:86:43:9e:00:69:c2:87: c1:4a:83:ea:44:73:9c:96:ab:c1:a6:03:19:85:c2: 05:9b:96:3a:df:fe:b5:59:48:b2:00:15:fb:ce:d3: 11:36:ac:db:e4:30:6e:e7:d9:f5:aa:83:36:0c:91: f8:a6:2a:ef:7e:d7:1b:5b:32:cd:a8:22:eb:48:26: d1:15:c8:01:51:c8:de:f3:f4:9b:86:bf:f6:af:81: 1b:29:dd:ef:0a:0f:e6:43:77:58:8e:b9:86:69:a9: 5d:db:53:dd:38:32:e5:2c:81:9c:86:3a:59:e5:e8: 98:07:3e:f8:e8:b0:e6:11:ca:f2:35:7f:45:8f:0a: 7e:32:5f:b5:89:67:22:a5:cc:c4:42:ac:84:25:d6: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:37:E0:AC:8F:BC:BA:5E:5B:22:5E:65:82:39:42:39:56:97:FE:87 X509v3 Authority Key Identifier: keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9d:ea:8e:07:cb:14:c2:6a:c3:d5:bc:26:19:31:a2:ec:56: 7f:cc:43:8e:2d:0f:b7:91:5d:bc:ec:bc:00:52:0c:50:22:41: 86:9e:9c:39:13:61:2c:c5:89:73:3e:c8:80:fd:a5:87:dd:19: ce:5a:d8:df:f2:54:64:25:46:68:60:77:1d:dd:57:3b:be:aa: 95:73:8d:42:58:11:db:d3:de:47:5a:b0:04:00:0a:29:be:e1: f9:9b:42:83:aa:7d:68:c1:8d:4e:37:5e:e3:0e:e6:bf:3d:79: cc:52:51:74:53:97:c4:b1:0a:b1:82:24:2d:b3:58:31:06:37: ea:f1:f1:43:3c:94:c3:bc:ed:b7:d0:41:47:f1:75:26:0f:bf: 58:20:3c:01:7f:e7:38:40:64:d4:85:a7:11:0c:0a:07:72:e1: 9d:fc:f8:ab:5b:93:0d:8e:c0:04:45:72:17:bd:fb:21:67:a3: ca:56:3e:4c:72:9a:69:31:3f:2e:60:26:1f:8a:32:02:ba:29: aa:67:62:ba:7f:16:46:60:7d:a4:89:6b:c4:cb:77:1f:2d:9e: 15:ec:4f:47:d8:7e:89:ef:ac:cf:22:f4:06:05:92:09:d8:25: 8d:9c:11:7e:5a:c6:a5:24:85:83:29:e2:4a:39:81:f1:7f:7f: 0b:10:4b:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy159G8XNdbXWAex2cZTbiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjgxNjVmOGVlZTE4NWZhYWY5YWEzMzg3NWY0ZWU0MTJi MTBmOGMwHhcNMjUxMjE4MTkwMjMwWhcNMjUxMjE5MTkwMjMwWjAzMTEwLwYDVQQD Eyg5YjM3ZTBhYzhmYmNiYTVlNWIyMjVlNjU4MjM5NDIzOTU2OTdmZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCQC+9YFLZyWpEPARZv0aaMpvftp +E3Ktclc0FP44IwZfepsqLJ4qqYPBpAIxXL6d8SDeGSV+17Dx2X5MSJ58K+uY3Ke erWQTS650ckSyhB94B0g1h4VuDpgp13uX0eWNZ84cqGUzNE5x6yPw9qox4ZDngBp wofBSoPqRHOclqvBpgMZhcIFm5Y63/61WUiyABX7ztMRNqzb5DBu59n1qoM2DJH4 pirvftcbWzLNqCLrSCbRFcgBUcje8/Sbhr/2r4EbKd3vCg/mQ3dYjrmGaald21Pd ODLlLIGchjpZ5eiYBz746LDmEcryNX9Fjwp+Ml+1iWcipczEQqyEJdaIEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs34KyPvLpeWyJeZYI5QjlWl/6HMB8GA1UdIwQY MBaAFMEoFl+O7hhfqvmqM4dfTuQSsQ+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEt MmU1YWY1YjY4NzgxLzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEtMmU1YWY1YjY4Nzgx LzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW53qjgfL FMJqw9W8JhkxouxWf8xDji0Pt5FdvOy8AFIMUCJBhp6cORNhLMWJcz7IgP2lh90Z zlrY3/JUZCVGaGB3Hd1XO76qlXONQlgR29PeR1qwBAAKKb7h+ZtCg6p9aMGNTjde 4w7mvz15zFJRdFOXxLEKsYIkLbNYMQY36vHxQzyUw7ztt9BBR/F1Jg+/WCA8AX/n OEBk1IWnEQwKB3Lhnfz4q1uTDY7ABEVyF737IWejylY+THKaaTE/LmAmH4oyArop qmdiun8WRmB9pIlrxMt3Hy2eFexPR9h+ie+szyL0BgWSCdgljZwRflrGpSSFgyni SjmB8X9/CxBLfA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:45 2025 by rpki-client