This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json) Hash identifier: Aj3mCutwkoqIxJYxaoAmfUdR4jkP4qch9R+GWm00sxg= Subject key identifier: 22:1E:BB:4D:78:42:8A:83:92:CC:26:E8:10:70:AE:75:24:98:7E:18 Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Certificate serial: 019B638B6AFE7A7BE7ED6BF8B1FBF6E779D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft Manifest number: 179D Signing time: Sun 28 Dec 2025 06:00:39 +0000 Manifest this update: Sun 28 Dec 2025 06:00:39 +0000 Manifest next update: Mon 29 Dec 2025 06:00:39 +0000 Files and hashes: 1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=) 2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: yZe9MbqCFfnlI0NzCtqGJHX9htpP2zgKOG/21aT+QRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:8b:6a:fe:7a:7b:e7:ed:6b:f8:b1:fb:f6:e7:79:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Validity Not Before: Dec 28 06:00:39 2025 GMT Not After : Dec 29 06:00:39 2025 GMT Subject: CN=221ebb4d78428a8392cc26e81070ae7524987e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:99:ef:97:e5:11:be:ef:be:2e:63:a3:be: 7f:e7:63:65:06:1e:15:5b:4b:38:df:2b:70:7f:74: dd:a2:ae:cb:22:71:70:8b:8d:ad:9f:a7:f0:61:4f: 51:bb:c1:13:57:a0:f9:80:0f:b7:25:19:7c:ae:25: 35:a9:16:a8:ea:a8:51:7c:76:31:50:d2:a9:64:af: 09:9c:b6:8f:ab:b6:09:dc:6d:b3:1e:0a:e1:b7:e4: ac:ab:dd:e0:bb:e1:50:c6:2c:59:b3:53:6d:c0:20: 84:ca:12:d7:89:71:6b:93:45:85:39:2e:6b:1d:9e: 95:fd:eb:d9:f0:33:5c:c1:ab:36:f7:ef:f3:86:b0: db:12:12:38:92:b6:a7:11:1e:54:44:84:27:c9:13: c5:7d:43:84:f2:75:48:d5:52:39:6f:00:68:22:fc: a9:6c:9c:73:4c:23:c6:68:9b:64:72:20:19:06:4f: fd:51:35:41:f8:52:4a:e3:8c:2e:6d:a8:58:0b:f8: 72:a2:9a:ab:3b:cc:39:f4:dc:48:63:ba:e1:c5:d2: 25:41:9c:a0:fb:90:ee:92:29:74:69:26:39:5e:96: 83:7b:44:66:db:fc:9a:17:c2:63:f1:43:c2:d8:13: 59:d4:9c:c7:0c:f0:3e:9d:03:08:74:5f:1a:ba:a9: e6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:1E:BB:4D:78:42:8A:83:92:CC:26:E8:10:70:AE:75:24:98:7E:18 X509v3 Authority Key Identifier: keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0c:b3:cc:eb:b8:cb:3b:2a:cd:90:cc:d5:b4:f2:e4:15:48: fd:2b:9e:2c:19:4e:11:96:5f:f9:fd:0d:36:60:de:9a:82:46: ca:47:26:48:35:ad:78:ee:76:4b:cd:0e:7e:6c:11:f8:b7:74: bc:df:db:a4:a6:58:e7:fc:2b:69:cf:ea:a1:48:af:78:e3:7b: e1:a2:7c:b4:c6:79:6a:17:48:65:9e:e9:6f:99:79:dd:b2:1e: 50:48:49:35:5f:28:63:8d:30:bc:cb:ad:8b:74:ba:6f:44:71: 98:6d:ea:63:3f:0e:1d:4c:ce:de:bf:4d:c0:0e:23:bf:3d:0f: 80:c2:bc:2a:ed:46:db:42:eb:a3:20:46:f4:5e:9a:9f:6c:df: 70:c1:5f:29:85:d5:05:4b:27:43:0d:59:22:8b:67:bf:05:0e: d4:4d:20:54:d8:91:ba:f2:f8:83:49:d9:1a:e1:1d:89:fc:d5: 0b:c7:42:4b:d9:8a:a7:4b:3c:d8:c0:24:66:02:c1:9f:15:2c: 9c:52:14:9d:94:d3:36:42:3d:80:c0:a3:71:54:27:1d:5b:8f: e0:cb:9c:76:19:f9:24:7b:a2:fa:00:8b:e7:dd:40:17:b9:f0: fd:51:5e:91:43:1e:53:15:3d:f9:4f:a3:3a:2a:0c:7c:72:a8: 92:d0:fe:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtji2r+envn7Wv4sfv253nYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi MGEwYjcwHhcNMjUxMjI4MDYwMDM5WhcNMjUxMjI5MDYwMDM5WjAzMTEwLwYDVQQD EygyMjFlYmI0ZDc4NDI4YTgzOTJjYzI2ZTgxMDcwYWU3NTI0OTg3ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk+Z75flEb7vvi5jo75/52NlBh4V W0s43ytwf3Tdoq7LInFwi42tn6fwYU9Ru8ETV6D5gA+3JRl8riU1qRao6qhRfHYx UNKpZK8JnLaPq7YJ3G2zHgrht+Ssq93gu+FQxixZs1NtwCCEyhLXiXFrk0WFOS5r HZ6V/evZ8DNcwas29+/zhrDbEhI4kranER5URIQnyRPFfUOE8nVI1VI5bwBoIvyp bJxzTCPGaJtkciAZBk/9UTVB+FJK44wubahYC/hyopqrO8w59NxIY7rhxdIlQZyg +5Dukil0aSY5XpaDe0Rm2/yaF8Jj8UPC2BNZ1JzHDPA+nQMIdF8auqnmfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIeu014QoqDkswm6BBwrnUkmH4YMB8GA1UdIwQY MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGgyzzOu4 yzsqzZDM1bTy5BVI/SueLBlOEZZf+f0NNmDemoJGykcmSDWteO52S80OfmwR+Ld0 vN/bpKZY5/wrac/qoUiveON74aJ8tMZ5ahdIZZ7pb5l53bIeUEhJNV8oY40wvMut i3S6b0RxmG3qYz8OHUzO3r9NwA4jvz0PgMK8Ku1G20LroyBG9F6an2zfcMFfKYXV BUsnQw1ZIotnvwUO1E0gVNiRuvL4g0nZGuEdifzVC8dCS9mKp0s82MAkZgLBnxUs nFIUnZTTNkI9gMCjcVQnHVuP4Mucdhn5JHui+gCL591AF7nw/VFekUMeUxU9+U+j OioMfHKoktD+fg== -----END CERTIFICATE-----Generated at Sun Dec 28 09:06:27 2025 by rpki-client