This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft File: wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json) Hash identifier: yd9xBj9qcUGBC0N97I6Bliqdds4uRdui8qyJj7c6rkU= Subject key identifier: 1F:80:D0:5B:66:73:D2:4E:D1:CA:B3:51:8A:A2:B7:47:29:66:17:16 Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61 Certificate issuer: /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461 Certificate serial: 019B3D59AA9E93A92B9BB4BC2E7D1ED080F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 20:00:44 +0000 Manifest this update: Sat 20 Dec 2025 20:00:44 +0000 Manifest next update: Sun 21 Dec 2025 20:00:44 +0000 Files and hashes: 1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=) 2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: z/o71jXncrt1AQnRN6RQIwTwD33nwW6EBu8ZjmMXM7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:aa:9e:93:a9:2b:9b:b4:bc:2e:7d:1e:d0:80:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461 Validity Not Before: Dec 20 20:00:44 2025 GMT Not After : Dec 21 20:00:44 2025 GMT Subject: CN=1f80d05b6673d24ed1cab3518aa2b74729661716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e7:2d:e0:fe:6f:9a:d1:e2:68:34:63:5d:04: eb:a6:a9:09:7a:ee:83:4b:09:82:7e:a4:c9:7d:08: ba:35:93:1f:9b:67:3d:d4:ee:65:8a:a7:e2:e5:75: 1b:77:ee:f2:f9:50:b3:45:a3:f6:ff:14:88:32:18: aa:8a:41:2b:36:de:bb:41:41:4b:9c:14:70:49:f3: 39:7a:19:6e:cf:ef:8b:90:34:ec:a9:4e:8e:0c:f7: 3d:4b:74:de:65:ff:f8:06:de:a1:33:f2:c1:fc:ab: 87:b5:b1:ed:5c:ff:e7:89:b4:37:36:38:dc:2d:01: 0d:d0:a1:6a:2d:98:7f:2b:f1:26:b3:ab:43:45:92: 53:16:7a:52:e5:9f:94:79:7b:64:3e:0c:14:25:5c: 53:ad:7a:69:1d:ce:d8:24:32:bb:d4:b4:ac:ca:b0: af:12:fd:0a:51:6f:2f:b6:3f:6b:53:5b:14:de:16: 70:95:af:9e:56:72:04:4a:64:c2:6a:4f:4d:b9:07: 16:8b:e1:18:9f:b4:33:ff:6a:4b:6a:fc:c4:3e:21: 5e:4a:86:a5:d5:c3:8c:b5:97:bc:94:d0:2b:2d:b2: 8d:b2:44:ac:2c:03:7b:f5:b4:dd:e0:8d:e9:d0:f8: cb:13:88:e2:41:a9:cf:ce:73:43:20:5f:8d:50:01: b2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:80:D0:5B:66:73:D2:4E:D1:CA:B3:51:8A:A2:B7:47:29:66:17:16 X509v3 Authority Key Identifier: keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6c:56:fa:10:59:86:70:f9:08:f0:cf:d4:e7:52:f0:45:40: 9f:44:13:35:83:ae:ef:b4:a1:91:da:04:cc:45:16:25:1c:a0: 64:60:26:4a:3b:f4:0e:54:fe:a4:e9:78:f5:4f:d8:64:cf:32: 34:06:f0:5a:67:50:98:7e:8a:21:f9:33:1f:b6:d4:5b:d1:40: 44:01:80:f6:7d:80:3a:13:59:b0:4a:2f:e9:4c:bc:e9:3c:d4: d5:9f:6a:8c:08:07:3e:ac:2a:9d:db:ae:bb:74:c2:0c:97:3b: d2:6b:57:05:f7:5e:06:4c:92:f9:38:f0:8e:3a:f1:17:da:5d: 61:a7:8a:f2:eb:fb:19:00:60:a9:8e:47:06:54:be:5a:bd:5b: 4b:0a:e5:e5:15:a4:df:ab:47:2f:8e:ff:62:52:db:4d:c6:35: 28:c7:d6:73:13:e2:ea:ca:e3:ad:ff:6b:49:0e:6f:da:ee:38: 3b:82:a6:8b:fb:30:30:80:0c:a9:a6:06:a6:28:05:7d:02:fc: e7:f5:07:e7:42:af:6c:c8:c4:61:09:5c:25:e4:14:8b:33:38: ba:e4:1e:66:27:6d:9d:dd:15:b1:0c:5f:4f:9f:e0:b8:7f:2a: a5:29:fb:fd:0b:2b:da:62:33:d8:66:e6:4b:a3:c8:60:31:50: 39:61:a5:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Waqek6krm7S8Ln0e0ID0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWM1ODMzN2NkNGQ3NGNkOTIxOWQ4Nzc4ZGVlNWIyOWYw OGE0NjEwHhcNMjUxMjIwMjAwMDQ0WhcNMjUxMjIxMjAwMDQ0WjAzMTEwLwYDVQQD EygxZjgwZDA1YjY2NzNkMjRlZDFjYWIzNTE4YWEyYjc0NzI5NjYxNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+ct4P5vmtHiaDRjXQTrpqkJeu6D SwmCfqTJfQi6NZMfm2c91O5liqfi5XUbd+7y+VCzRaP2/xSIMhiqikErNt67QUFL nBRwSfM5ehluz++LkDTsqU6ODPc9S3TeZf/4Bt6hM/LB/KuHtbHtXP/nibQ3Njjc LQEN0KFqLZh/K/Ems6tDRZJTFnpS5Z+UeXtkPgwUJVxTrXppHc7YJDK71LSsyrCv Ev0KUW8vtj9rU1sU3hZwla+eVnIESmTCak9NuQcWi+EYn7Qz/2pLavzEPiFeSoal 1cOMtZe8lNArLbKNskSsLAN79bTd4I3p0PjLE4jiQanPznNDIF+NUAGywwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+A0Ftmc9JO0cqzUYqit0cpZhcWMB8GA1UdIwQY MBaAFMEcWDN81NdM2SGdh3je5bKfCKRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTIt YzM5NDU0MWY3NzBlLzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTItYzM5NDU0MWY3NzBl LzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2xW+hBZ hnD5CPDP1OdS8EVAn0QTNYOu77ShkdoEzEUWJRygZGAmSjv0DlT+pOl49U/YZM8y NAbwWmdQmH6KIfkzH7bUW9FARAGA9n2AOhNZsEov6Uy86TzU1Z9qjAgHPqwqnduu u3TCDJc70mtXBfdeBkyS+TjwjjrxF9pdYaeK8uv7GQBgqY5HBlS+Wr1bSwrl5RWk 36tHL47/YlLbTcY1KMfWcxPi6srjrf9rSQ5v2u44O4Kmi/swMIAMqaYGpigFfQL8 5/UH50KvbMjEYQlcJeQUizM4uuQeZidtnd0VsQxfT5/guH8qpSn7/Qsr2mIz2Gbm S6PIYDFQOWGlqQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:57:35 2025 by rpki-client