This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft File: wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json) Hash identifier: r2Q57Uv9QimSGR2b/XLta+m4bAUp1SaTdGY3rJu/JyM= Subject key identifier: BA:4D:42:40:8E:1F:3C:7D:FF:B8:F5:A2:E0:12:D7:D2:76:EA:BC:A7 Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B Certificate issuer: /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b Certificate serial: 019B2F9E5EE767A07047B8DBD34E6CECA367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft Manifest number: 177E Signing time: Thu 18 Dec 2025 04:01:06 +0000 Manifest this update: Thu 18 Dec 2025 04:01:06 +0000 Manifest next update: Fri 19 Dec 2025 04:01:06 +0000 Files and hashes: 1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: JKPHh8tf32pB7+Wf8OrTW7QdrJ/NMSCUzVUOKaCmpY8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:5e:e7:67:a0:70:47:b8:db:d3:4e:6c:ec:a3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b Validity Not Before: Dec 18 04:01:06 2025 GMT Not After : Dec 19 04:01:06 2025 GMT Subject: CN=ba4d42408e1f3c7dffb8f5a2e012d7d276eabca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:4b:1e:99:48:05:44:82:5d:f6:cb:04:a8: c3:2a:ed:a5:58:69:a8:ec:b7:d1:bc:ae:20:4e:f4: b4:99:08:7f:a1:d8:33:83:42:4f:7f:ed:db:23:ac: 60:de:a7:a5:4c:90:69:12:d3:ef:01:bf:50:00:82: eb:a9:73:9f:5e:f3:0b:c8:8d:b7:06:c6:fd:c8:0d: da:36:d7:4e:c5:ff:e5:07:64:8a:6c:65:d9:e8:43: 6d:25:ad:1f:e3:e5:34:98:99:ff:98:e8:32:73:58: b2:95:53:87:e4:7d:08:0a:78:d7:4c:74:76:a4:29: 16:b7:77:6b:bc:fb:e6:e3:8a:fb:8d:69:f9:cc:d8: 4a:71:6a:d8:7c:2c:2d:b5:c4:ca:15:ec:99:1c:0e: 65:1a:2d:c2:a5:90:65:94:fb:28:00:42:41:d8:7c: a3:9b:97:82:5c:0f:20:42:3e:b9:d0:25:b4:05:02: 12:3e:5b:4e:0d:4d:32:a9:fd:fe:42:2b:2f:e7:18: f9:da:5c:3f:a9:02:b6:32:9d:71:d2:77:46:7a:4a: 3b:5c:df:6c:93:3a:d0:c6:a7:6c:8a:0c:52:20:05: 03:80:ed:09:13:b1:be:d4:72:39:db:72:36:fa:34: 47:55:97:3a:56:7e:d6:a9:bb:b2:0c:31:62:3e:40: 34:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4D:42:40:8E:1F:3C:7D:FF:B8:F5:A2:E0:12:D7:D2:76:EA:BC:A7 X509v3 Authority Key Identifier: keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:db:2c:01:ad:08:a7:6b:30:07:34:e3:9f:15:e8:e3:56:61: 9c:fe:8c:fd:f6:4c:a2:dd:92:77:11:c3:79:ef:d2:f1:ce:e0: 2e:c8:27:e3:10:4f:68:00:a4:c6:6a:7e:ea:f2:9b:91:a4:12: ff:14:90:2d:3a:07:bf:8f:35:25:91:36:21:81:c8:41:91:1d: 6d:bf:2b:45:bb:d1:e3:7a:3f:41:9d:89:b7:56:72:8a:99:bc: be:73:0c:e8:ec:3b:f0:21:a2:e1:1b:3d:b8:b2:b2:a6:b4:6e: d4:b3:3d:21:df:20:4b:cc:39:0f:94:3b:68:fb:cc:d7:50:0a: ca:8c:30:fa:d6:d5:9c:91:3d:1d:fe:6e:3e:d9:bd:69:d7:75: 62:25:cd:83:b9:4d:78:93:0a:47:6d:66:a6:89:ce:98:7c:e9: 2a:54:fd:92:1a:f4:b1:84:eb:44:2c:60:19:44:69:52:1c:55: 68:1b:58:d8:b4:16:dd:40:f9:52:1a:a8:5b:03:41:14:6d:2f: 2c:66:36:3f:b2:6a:07:a6:b9:2b:28:cc:aa:49:b3:f9:0b:d8: e1:ad:39:8a:79:08:d9:d1:25:ef:7e:11:7f:3d:df:31:cd:7d: 6b:17:16:b5:96:e5:c8:d2:91:fb:01:4b:5b:fc:14:61:92:21: 23:c2:a8:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnl7nZ6BwR7jb005s7KNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNmZlMTAwOWZiZTY0OTFmN2IxNWNkZWYxOGVmOTZjMGVi ZDQ1OWIwHhcNMjUxMjE4MDQwMTA2WhcNMjUxMjE5MDQwMTA2WjAzMTEwLwYDVQQD EyhiYTRkNDI0MDhlMWYzYzdkZmZiOGY1YTJlMDEyZDdkMjc2ZWFiY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0RLHplIBUSCXfbLBKjDKu2lWGmo 7LfRvK4gTvS0mQh/odgzg0JPf+3bI6xg3qelTJBpEtPvAb9QAILrqXOfXvMLyI23 Bsb9yA3aNtdOxf/lB2SKbGXZ6ENtJa0f4+U0mJn/mOgyc1iylVOH5H0ICnjXTHR2 pCkWt3drvPvm44r7jWn5zNhKcWrYfCwttcTKFeyZHA5lGi3CpZBllPsoAEJB2Hyj m5eCXA8gQj650CW0BQISPltODU0yqf3+Qisv5xj52lw/qQK2Mp1x0ndGeko7XN9s kzrQxqdsigxSIAUDgO0JE7G+1HI523I2+jRHVZc6Vn7WqbuyDDFiPkA0LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpNQkCOHzx9/7j1ouAS19J26rynMB8GA1UdIwQY MBaAFMFv4QCfvmSR97Fc3vGO+WwOvUWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYt Njc2ZDM3ZjNhMjlhLzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYtNjc2ZDM3ZjNhMjlh LzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqdssAa0I p2swBzTjnxXo41ZhnP6M/fZMot2SdxHDee/S8c7gLsgn4xBPaACkxmp+6vKbkaQS /xSQLToHv481JZE2IYHIQZEdbb8rRbvR43o/QZ2Jt1Zyipm8vnMM6Ow78CGi4Rs9 uLKyprRu1LM9Id8gS8w5D5Q7aPvM11AKyoww+tbVnJE9Hf5uPtm9add1YiXNg7lN eJMKR21mponOmHzpKlT9khr0sYTrRCxgGURpUhxVaBtY2LQW3UD5UhqoWwNBFG0v LGY2P7JqB6a5KyjMqkmz+QvY4a05inkI2dEl734Rfz3fMc19axcWtZblyNKR+wFL W/wUYZIhI8Ko2Q== -----END CERTIFICATE-----Generated at Thu Dec 18 10:26:58 2025 by rpki-client