This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json) Hash identifier: xap0xes4V0GqXgov6EG6SdtK9+kA1kvAAlbtmOQCbFE= Subject key identifier: B5:B1:50:36:B9:36:8A:7C:A1:4B:52:C0:45:24:9F:F4:18:F4:C6:8A Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229 Certificate serial: 019B390FE2CB4452044665148CFFD00B39D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 00:01:40 +0000 Manifest this update: Sat 20 Dec 2025 00:01:40 +0000 Manifest next update: Sun 21 Dec 2025 00:01:40 +0000 Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=) 2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: SxGdYvFpaBvQyTLQS91qBstBv9FUi+mvyEh/iKt9cU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:e2:cb:44:52:04:46:65:14:8c:ff:d0:0b:39:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229 Validity Not Before: Dec 20 00:01:40 2025 GMT Not After : Dec 21 00:01:40 2025 GMT Subject: CN=b5b15036b9368a7ca14b52c045249ff418f4c68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:79:40:cb:8d:62:6b:64:b5:8e:b9:6f:82:ed: e6:0d:78:c6:4f:27:a9:5a:01:52:bf:f2:2d:27:a9: 8b:8d:ec:25:42:43:b4:71:e6:b1:94:00:eb:4b:e9: d7:8f:83:1d:55:47:c9:08:bd:68:28:15:e9:f0:90: b4:46:7d:a3:ed:9b:cf:57:5d:a4:4e:b6:9b:8e:ee: 6a:63:d5:35:8d:ae:be:c3:d0:ea:f1:08:33:4c:d7: 4f:84:45:6e:65:f0:c8:e2:29:9f:4d:b2:cc:b8:db: a1:0e:ba:ab:25:ad:d5:17:95:f5:29:6a:9e:5a:3e: ad:80:ff:0b:48:d1:a1:d6:0c:24:41:55:7f:c9:38: 75:1f:84:b8:e5:b5:12:09:30:ee:ef:e3:9d:c7:b1: 23:f4:9d:bc:24:20:73:ac:9f:fe:74:21:8d:18:52: e6:89:6d:25:e3:5d:61:56:02:15:d5:b5:32:b1:5a: 72:f1:22:a1:df:58:5c:1c:8e:47:5f:d0:27:fb:60: b5:92:5c:9c:8e:3d:86:4b:bf:29:42:fe:90:0b:7c: d7:b2:34:07:a3:cf:dd:d8:7a:b0:5d:9d:6b:12:24: 42:36:ed:4c:e2:47:f8:7e:1d:f1:20:8e:35:aa:2a: 96:51:b4:50:ec:ce:7a:a4:69:79:68:88:19:2a:41: f3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:50:36:B9:36:8A:7C:A1:4B:52:C0:45:24:9F:F4:18:F4:C6:8A X509v3 Authority Key Identifier: keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a5:6e:01:0d:ad:72:5d:19:f1:29:fe:85:22:7e:cd:4c:3a: 12:94:4f:da:97:01:0d:13:0b:5b:be:04:0e:85:c6:87:c3:5e: bf:ee:f3:58:14:74:e1:96:c4:8e:f4:ce:11:e1:7b:2b:21:5d: 72:dd:f7:50:92:cd:68:1f:2e:8d:14:de:03:5f:b3:26:aa:53: c6:9e:53:0a:cc:e0:16:b4:fc:3b:32:44:e7:37:d3:68:ec:26: 45:79:f5:ba:48:1f:ca:56:9b:85:7b:37:32:e6:a9:14:56:dc: d1:47:9c:17:4f:5f:02:f8:81:ef:36:f4:ad:94:12:89:d5:bd: 37:0a:8f:03:05:15:8c:4c:78:ae:a6:ae:08:1e:eb:94:97:73: e5:35:a0:6b:60:36:cb:ba:f5:af:55:94:9a:d2:8a:e3:bc:6b: 82:43:c5:a6:04:e3:2e:21:c6:db:7a:2d:88:1b:ed:4b:ff:99: bd:2c:84:1e:6b:4b:af:92:c9:ef:77:37:ae:fd:45:75:2c:7b: 2c:9f:61:78:38:55:27:9c:f2:6d:87:cb:df:cb:2b:4b:c0:9b: d0:73:4c:13:54:a7:c6:8d:77:65:45:87:4b:37:99:25:4b:2c: 2f:3e:8c:9e:b1:ac:a9:8a:ab:bd:07:ee:73:a5:4d:5b:fb:f3: a3:ff:bc:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D+LLRFIERmUUjP/QCznQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4 NDEyMjkwHhcNMjUxMjIwMDAwMTQwWhcNMjUxMjIxMDAwMTQwWjAzMTEwLwYDVQQD EyhiNWIxNTAzNmI5MzY4YTdjYTE0YjUyYzA0NTI0OWZmNDE4ZjRjNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3lAy41ia2S1jrlvgu3mDXjGTyep WgFSv/ItJ6mLjewlQkO0ceaxlADrS+nXj4MdVUfJCL1oKBXp8JC0Rn2j7ZvPV12k Trabju5qY9U1ja6+w9Dq8QgzTNdPhEVuZfDI4imfTbLMuNuhDrqrJa3VF5X1KWqe Wj6tgP8LSNGh1gwkQVV/yTh1H4S45bUSCTDu7+Odx7Ej9J28JCBzrJ/+dCGNGFLm iW0l411hVgIV1bUysVpy8SKh31hcHI5HX9An+2C1klycjj2GS78pQv6QC3zXsjQH o8/d2HqwXZ1rEiRCNu1M4kf4fh3xII41qiqWUbRQ7M56pGl5aIgZKkHzFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWxUDa5Nop8oUtSwEUkn/QY9MaKMB8GA1UdIwQY MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgaVuAQ2t cl0Z8Sn+hSJ+zUw6EpRP2pcBDRMLW74EDoXGh8Nev+7zWBR04ZbEjvTOEeF7KyFd ct33UJLNaB8ujRTeA1+zJqpTxp5TCszgFrT8OzJE5zfTaOwmRXn1ukgfylabhXs3 MuapFFbc0UecF09fAviB7zb0rZQSidW9NwqPAwUVjEx4rqauCB7rlJdz5TWga2A2 y7r1r1WUmtKK47xrgkPFpgTjLiHG23otiBvtS/+ZvSyEHmtLr5LJ73c3rv1FdSx7 LJ9heDhVJ5zybYfL38srS8Cb0HNME1Snxo13ZUWHSzeZJUssLz6MnrGsqYqrvQfu c6VNW/vzo/+8Aw== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:57 2025 by rpki-client