This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft File: wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft (raw, json) Hash identifier: ohFp4rpZjBhi6e/KWTIK2vsMKanX2q3OjvhFbV30p+A= Subject key identifier: D7:0F:37:0D:74:FB:48:7B:21:FB:58:FA:E4:E7:6F:2C:34:33:04:70 Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1 Certificate issuer: /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1 Certificate serial: 019B3CEBF6E9A1E5EA5E9A7C2BC2E775CE28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 18:00:55 +0000 Manifest this update: Sat 20 Dec 2025 18:00:55 +0000 Manifest next update: Sun 21 Dec 2025 18:00:55 +0000 Files and hashes: 1: BQLlzRf92AV-wOpCiU3Uf7zFDTE.roa (hash: ojPLMpm1/7UXMtqHbqCurY3+N3TkMNGJ/j/f6zcsUls=) 2: E00rNsoiT3py_3yapmHFtC_Nhrg.roa (hash: NbpIiEieVkToVn1q+xbEvBZtrUTnRwlkypf+PLwHZU0=) 3: Vk7acJCttlxBVWzc1q7a4nWM7rQ.roa (hash: jqcFx2BzSJp7wY2CXpCRm4It9qRY3jR3QXLHSWI1gbo=) 4: W7hm1v1BZSRkI-g-Q988i-QfQmg.roa (hash: tTl/U0i8KKl6mpPXvqkEhYGwVtb5LDrDTJXxu7tcm3E=) 5: wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl (hash: BgZaO/46c4EshR41iMwAK5zUKnvVG7I1ZgPgN6/V3ZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:f6:e9:a1:e5:ea:5e:9a:7c:2b:c2:e7:75:ce:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1 Validity Not Before: Dec 20 18:00:55 2025 GMT Not After : Dec 21 18:00:55 2025 GMT Subject: CN=d70f370d74fb487b21fb58fae4e76f2c34330470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:e2:8f:d2:6a:b7:a7:ff:b7:6f:0e:15:68: e9:a9:96:08:47:9b:2f:cb:ab:7b:41:e5:5e:2e:ac: 44:e8:7d:c3:b6:d5:bf:94:05:29:7f:c1:85:b6:13: 3d:38:eb:9d:3d:04:1c:de:26:27:71:6b:b6:9c:12: e0:a1:ec:b5:e2:12:f8:7a:51:e8:5d:09:a7:c7:5e: 08:84:85:46:ba:d2:15:c4:5c:5a:3c:5e:7c:7b:87: b9:64:ba:87:be:73:29:56:a6:b0:b1:f0:3b:0d:9d: 0e:62:5c:ae:24:6d:ab:de:a4:4b:71:8c:2a:86:38: a5:3e:b1:d9:d3:8c:90:54:ee:2d:b8:ac:b7:56:80: 96:f3:23:5c:d6:1e:31:ea:51:c5:9f:92:56:3d:ab: 81:56:f8:1f:c5:ef:40:af:08:01:91:28:fb:25:72: e1:76:3d:20:7e:82:e4:88:fb:4f:5f:ca:51:9c:86: 46:33:6d:a0:cf:4e:56:6e:d4:8e:18:98:b3:7c:3d: 1a:2b:62:50:d0:3e:10:3b:c5:b4:11:1b:47:f8:3f: 03:07:23:a2:90:e0:7a:db:8b:e4:37:34:67:d6:41: 3c:78:37:27:fa:5c:67:07:cd:59:ea:88:5d:2a:a0: b3:ec:a3:d5:bf:a7:b0:51:75:fb:c8:44:ea:eb:c8: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0F:37:0D:74:FB:48:7B:21:FB:58:FA:E4:E7:6F:2C:34:33:04:70 X509v3 Authority Key Identifier: keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:34:bc:87:1c:8f:42:c4:0e:33:b4:44:23:20:85:96:99:b9: 65:37:c1:72:e8:0f:c2:d8:54:03:8f:93:5a:01:c1:c1:20:00: c8:4d:db:61:3a:bb:13:60:74:d4:35:5a:15:49:d4:87:3b:d1: 89:1a:fc:26:58:cf:ec:cf:8d:fd:e2:fa:fe:d1:51:e3:5e:a0: 7e:77:4d:ed:37:1a:3c:3d:27:4a:d4:51:47:0e:d6:87:d2:2f: 67:44:7f:89:a6:5b:6e:59:f7:35:ca:9b:15:78:cc:fe:f5:1c: 7b:ea:96:58:70:0c:51:42:c0:e2:9b:ae:c7:10:50:33:75:10: 89:1e:65:e5:14:14:37:7a:c8:19:6c:65:06:22:b6:0e:3b:1e: a2:72:6a:7b:01:44:4e:f6:37:37:02:56:1e:1a:88:a6:05:67: 57:73:aa:a6:4f:eb:6d:0f:7e:26:19:95:22:86:af:f5:35:e8: f2:11:60:bf:e4:97:eb:ea:50:b6:2c:00:42:79:89:cb:fd:64: b4:b2:c7:69:14:3b:1d:d6:f7:19:c4:1b:9e:5a:16:68:70:a3: 5b:cb:d8:39:d1:3f:78:80:6a:ba:73:f2:6d:61:8d:75:45:cd: b7:7e:f0:25:b8:82:80:46:0f:0b:be:5c:48:2c:14:96:df:04: b8:4f:bc:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/bpoeXqXpp8K8Lndc4oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxN2NjMzdmMWVkODFhYzM3YjIwZmFmMGY0MmM0MWFiODA4 ZjEzYzEwHhcNMjUxMjIwMTgwMDU1WhcNMjUxMjIxMTgwMDU1WjAzMTEwLwYDVQQD EyhkNzBmMzcwZDc0ZmI0ODdiMjFmYjU4ZmFlNGU3NmYyYzM0MzMwNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnivij9Jqt6f/t28OFWjpqZYIR5sv y6t7QeVeLqxE6H3DttW/lAUpf8GFthM9OOudPQQc3iYncWu2nBLgoey14hL4elHo XQmnx14IhIVGutIVxFxaPF58e4e5ZLqHvnMpVqawsfA7DZ0OYlyuJG2r3qRLcYwq hjilPrHZ04yQVO4tuKy3VoCW8yNc1h4x6lHFn5JWPauBVvgfxe9ArwgBkSj7JXLh dj0gfoLkiPtPX8pRnIZGM22gz05WbtSOGJizfD0aK2JQ0D4QO8W0ERtH+D8DByOi kOB624vkNzRn1kE8eDcn+lxnB81Z6ohdKqCz7KPVv6ewUXX7yETq68gN5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcPNw10+0h7IftY+uTnbyw0MwRwMB8GA1UdIwQY MBaAFMF8w38e2BrDeyD68PQsQauAjxPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQt NmQwN2Q3ZjFhNzAxLzEvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iMTBlMDYtMjU3Yy00OTk1LTg3OWQtNmQwN2Q3ZjFhNzAx LzEvd1h6RGZ4N1lHc043SVBydzlDeEJxNENQRThFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAizS8hxyP QsQOM7REIyCFlpm5ZTfBcugPwthUA4+TWgHBwSAAyE3bYTq7E2B01DVaFUnUhzvR iRr8JljP7M+N/eL6/tFR416gfndN7TcaPD0nStRRRw7Wh9IvZ0R/iaZbbln3Ncqb FXjM/vUce+qWWHAMUULA4puuxxBQM3UQiR5l5RQUN3rIGWxlBiK2DjseonJqewFE TvY3NwJWHhqIpgVnV3Oqpk/rbQ9+JhmVIoav9TXo8hFgv+SX6+pQtiwAQnmJy/1k tLLHaRQ7Hdb3GcQbnloWaHCjW8vYOdE/eIBqunPybWGNdUXNt37wJbiCgEYPC75c SCwUlt8EuE+8uw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:08 2025 by rpki-client