This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft File: wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json) Hash identifier: p2F0890djWhPh0kFIVId3xsFJlwtRfPteRndVa0bOH8= Subject key identifier: FF:E0:DF:20:89:7F:0B:6D:C2:6F:AA:3A:6F:2C:48:EE:D2:07:FC:B5 Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C Certificate issuer: /CN=c0395ec8821d8f8189413392bd876d7bd795c16c Certificate serial: 019B3F7F075F6C036D3614A63548F1071A4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 06:00:48 +0000 Manifest this update: Sun 21 Dec 2025 06:00:48 +0000 Manifest next update: Mon 22 Dec 2025 06:00:48 +0000 Files and hashes: 1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=) 2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: +Z2wv2wxPGe+9f+x9vqaIgPUGZHvjEGtaQW1caYQ1Uc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:07:5f:6c:03:6d:36:14:a6:35:48:f1:07:1a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c Validity Not Before: Dec 21 06:00:48 2025 GMT Not After : Dec 22 06:00:48 2025 GMT Subject: CN=ffe0df20897f0b6dc26faa3a6f2c48eed207fcb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e9:06:dd:4c:20:7d:72:f2:8d:5c:05:90:af: c2:3a:fc:f9:70:13:53:3c:74:0d:06:e8:49:80:c0: b3:c0:f8:d5:3d:4e:10:64:c5:de:49:1f:a8:4e:bc: 71:d6:f5:9a:c4:b6:49:6a:d9:d0:c2:8f:d6:b6:8f: 76:90:81:4e:d5:c2:6f:f6:e1:fe:2d:db:35:f6:5c: c9:8d:01:da:c3:a3:6f:c5:ca:aa:6b:dc:c2:82:c0: 86:b8:af:26:30:41:7f:97:4b:c2:03:09:9b:00:52: d0:8c:73:fd:80:a9:de:66:0b:66:2e:13:ec:49:8a: 9c:91:06:74:2e:77:2d:86:38:fe:73:b6:19:0f:f8: 72:3b:74:86:15:1d:3d:25:53:d1:d0:fe:e7:ea:a7: 2d:61:3b:a9:6f:05:1d:20:1c:03:d2:cb:9e:26:43: 63:c6:00:0b:c8:69:68:30:93:b9:57:d6:64:12:7a: cd:fe:01:b2:e4:49:74:8c:db:a6:aa:6a:bf:73:f6: 0b:25:35:04:a6:d6:33:78:8e:f6:95:00:8f:c8:a7: 4f:83:ca:10:3d:4b:15:3c:26:ad:93:f1:9a:52:ee: 33:9b:4c:04:71:d4:41:1f:0d:c5:61:8c:39:9d:c9: 93:80:f4:af:b7:3d:88:a9:57:d6:bf:93:d1:ea:d6: e4:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E0:DF:20:89:7F:0B:6D:C2:6F:AA:3A:6F:2C:48:EE:D2:07:FC:B5 X509v3 Authority Key Identifier: keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e2:8a:ae:67:e4:6f:94:88:f3:41:c8:d2:75:1e:28:0f:b6: 05:27:d1:23:39:66:08:e6:f9:0c:80:8c:69:95:21:63:e9:3e: 28:6b:8b:03:71:c8:82:1b:89:d8:cf:c8:6d:84:18:50:3f:66: da:fd:b6:df:b5:27:b0:b9:67:c1:a9:6b:ef:6d:a6:47:26:e8: d0:9a:b0:f2:ef:96:66:1a:e7:b9:81:49:0f:0d:70:da:d5:4c: 49:99:89:13:1e:99:ea:c3:b5:01:c2:27:a0:7c:a0:86:dd:a2: f2:52:ea:93:05:d9:6f:7d:29:d8:d4:03:2c:c9:09:34:f8:0a: ee:13:39:50:b0:15:88:98:96:31:f1:7e:37:ea:45:08:31:27: a6:c0:39:d9:81:fa:b0:93:65:4a:28:d2:6c:d0:f3:ec:2f:34: ad:1f:8d:54:05:d3:8c:c0:fa:2b:03:c1:c4:c6:d9:98:b1:07: bf:b4:a9:2d:4c:fe:51:d4:97:df:da:9b:d2:8b:59:39:14:7b: b4:bf:c7:4a:00:da:fe:2f:0a:b3:11:3a:7b:47:9b:17:8d:2b: fc:ca:8b:32:0b:07:5d:dd:f5:d0:5a:6e:e9:cc:f1:0f:2d:2a: 30:82:cc:d1:54:4a:70:5a:e5:3b:79:5f:a9:78:9e:a3:25:d6: 62:e0:50:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fwdfbANtNhSmNUjxBxpPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMzk1ZWM4ODIxZDhmODE4OTQxMzM5MmJkODc2ZDdiZDc5 NWMxNmMwHhcNMjUxMjIxMDYwMDQ4WhcNMjUxMjIyMDYwMDQ4WjAzMTEwLwYDVQQD EyhmZmUwZGYyMDg5N2YwYjZkYzI2ZmFhM2E2ZjJjNDhlZWQyMDdmY2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxukG3UwgfXLyjVwFkK/COvz5cBNT PHQNBuhJgMCzwPjVPU4QZMXeSR+oTrxx1vWaxLZJatnQwo/Wto92kIFO1cJv9uH+ Lds19lzJjQHaw6Nvxcqqa9zCgsCGuK8mMEF/l0vCAwmbAFLQjHP9gKneZgtmLhPs SYqckQZ0Lncthjj+c7YZD/hyO3SGFR09JVPR0P7n6qctYTupbwUdIBwD0sueJkNj xgALyGloMJO5V9ZkEnrN/gGy5El0jNumqmq/c/YLJTUEptYzeI72lQCPyKdPg8oQ PUsVPCatk/GaUu4zm0wEcdRBHw3FYYw5ncmTgPSvtz2IqVfWv5PR6tbk6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/g3yCJfwttwm+qOm8sSO7SB/y1MB8GA1UdIwQY MBaAFMA5XsiCHY+BiUEzkr2HbXvXlcFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQt ZjdlNzNkZGVmNGUyLzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQtZjdlNzNkZGVmNGUy LzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAreKKrmfk b5SI80HI0nUeKA+2BSfRIzlmCOb5DICMaZUhY+k+KGuLA3HIghuJ2M/IbYQYUD9m 2v2237UnsLlnwalr722mRybo0Jqw8u+WZhrnuYFJDw1w2tVMSZmJEx6Z6sO1AcIn oHyght2i8lLqkwXZb30p2NQDLMkJNPgK7hM5ULAViJiWMfF+N+pFCDEnpsA52YH6 sJNlSijSbNDz7C80rR+NVAXTjMD6KwPBxMbZmLEHv7SpLUz+UdSX39qb0otZORR7 tL/HSgDa/i8KsxE6e0ebF40r/MqLMgsHXd310Fpu6czxDy0qMILM0VRKcFrlO3lf qXieoyXWYuBQ4A== -----END CERTIFICATE-----Generated at Sun Dec 21 09:30:41 2025 by rpki-client