This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft File: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft (raw, json) Hash identifier: 9y+18pLHO85kazxVFYe5lDoTLXzs3sUjz6nqQ8bSq48= Subject key identifier: F9:57:96:6B:5D:01:A3:7D:BB:27:2C:57:BD:80:54:8D:A2:A2:00:B8 Authority key identifier: C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74 Certificate issuer: /CN=c1461dbd7744837b8f9a3eacf60ed79d66980474 Certificate serial: 019B4693A9B7C044C6B09051DC9816D1EC5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft Manifest number: 179C Signing time: Mon 22 Dec 2025 15:00:40 +0000 Manifest this update: Mon 22 Dec 2025 15:00:40 +0000 Manifest next update: Tue 23 Dec 2025 15:00:40 +0000 Files and hashes: 1: Jgr7sI_MQ1aofzWtw-nihD3i2Oo.roa (hash: gaxxG0d8OZJYS5NjwczzEeAHbzOn6c5dbyMUhDM1ej8=) 2: wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl (hash: 4GLF1dpSFvTGS1Ecwek1V7hH1LuoxR8Fl+61e/r+F3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:93:a9:b7:c0:44:c6:b0:90:51:dc:98:16:d1:ec:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1461dbd7744837b8f9a3eacf60ed79d66980474 Validity Not Before: Dec 22 15:00:40 2025 GMT Not After : Dec 23 15:00:40 2025 GMT Subject: CN=f957966b5d01a37dbb272c57bd80548da2a200b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:5f:1b:c3:01:f8:6c:dd:98:2b:30:fe:84:79: 8e:6b:d1:72:27:b2:c8:a3:c5:98:9a:71:b1:7e:4f: 54:b0:e6:a3:4f:ed:35:60:f4:db:6e:11:51:64:b0: e0:23:4a:f2:1c:5d:bd:8a:04:24:07:79:bb:d3:67: e0:f3:c1:3f:54:9f:65:9f:40:dd:e4:44:99:d5:19: 2d:ce:b3:f4:8a:da:17:6f:c5:c6:6a:71:1d:ec:e3: 5b:84:11:9b:4b:31:14:14:e7:18:c6:3e:cb:fb:a5: 3f:ff:27:0e:1f:d9:cd:49:dc:1f:56:18:8a:21:52: 7e:0a:d0:70:41:70:9a:12:0a:67:a1:18:d3:22:66: 7a:31:d7:3a:46:27:df:75:4f:a5:d6:ab:96:ef:9e: 73:c3:89:98:7e:d4:21:f6:52:19:b6:19:78:02:74: 4f:9d:73:99:ad:8b:7e:f6:dc:01:cb:f8:54:ab:89: 03:58:c7:1d:37:72:01:ee:2e:bf:0f:88:2a:bd:9a: 96:43:07:7d:c0:17:c4:2a:a0:c6:3d:c3:b1:d7:b9: 93:01:d1:32:a8:39:c2:83:9d:4e:41:06:b4:87:29: b8:d5:77:58:19:bb:45:ec:c6:dc:1e:76:39:a1:c9: 09:38:13:1e:01:10:1f:60:3a:57:59:0f:57:aa:a3: 88:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:57:96:6B:5D:01:A3:7D:BB:27:2C:57:BD:80:54:8D:A2:A2:00:B8 X509v3 Authority Key Identifier: keyid:C1:46:1D:BD:77:44:83:7B:8F:9A:3E:AC:F6:0E:D7:9D:66:98:04:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/55fdf3-4d6a-4582-b9b8-4f8cfeb210d9/1/wUYdvXdEg3uPmj6s9g7XnWaYBHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:fe:31:16:49:9b:90:92:ca:0b:67:0f:c3:a2:59:f0:d3:f3: b0:4b:86:0c:5d:d5:56:33:f5:8e:22:15:db:93:d3:25:58:0c: d3:41:5a:3f:d8:dd:cf:dd:b2:37:57:7c:8d:7c:68:b1:77:29: 14:d8:fd:fb:2c:6a:30:3a:27:9f:b2:7b:21:20:f7:9e:b7:fb: a7:b6:14:9c:48:b3:79:b4:7d:7b:b7:65:b7:de:25:e2:ac:bb: b5:97:c6:9e:f3:c5:e5:4f:bd:b5:b5:f4:b4:5e:f0:62:ca:cc: 39:fd:c7:14:5b:ba:bd:5a:c0:45:10:86:87:95:c6:b3:43:b7: bc:ef:f9:f8:5f:42:74:c8:b4:9b:75:b7:fc:c5:b2:64:21:48: 0e:35:aa:31:51:34:49:3a:96:cf:0b:66:b0:08:73:e9:73:a3: 12:22:11:84:eb:52:3e:a5:e2:35:17:10:08:d8:c5:7a:7c:8a: 04:95:3a:6b:58:aa:8c:bd:15:dc:ea:5a:37:5e:90:30:4b:0a: c2:f2:65:43:25:0f:78:a4:ac:25:66:6f:64:25:63:97:ba:0a: 24:c1:5e:8d:d6:29:aa:2c:50:2c:1e:ad:32:14:30:ef:4e:4a: 03:2e:8f:80:3e:db:9f:38:1b:7c:96:cf:4d:81:9a:da:46:95: cf:30:b1:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGk6m3wETGsJBR3JgW0excMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNDYxZGJkNzc0NDgzN2I4ZjlhM2VhY2Y2MGVkNzlkNjY5 ODA0NzQwHhcNMjUxMjIyMTUwMDQwWhcNMjUxMjIzMTUwMDQwWjAzMTEwLwYDVQQD EyhmOTU3OTY2YjVkMDFhMzdkYmIyNzJjNTdiZDgwNTQ4ZGEyYTIwMGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l8bwwH4bN2YKzD+hHmOa9FyJ7LI o8WYmnGxfk9UsOajT+01YPTbbhFRZLDgI0ryHF29igQkB3m702fg88E/VJ9ln0Dd 5ESZ1RktzrP0itoXb8XGanEd7ONbhBGbSzEUFOcYxj7L+6U//ycOH9nNSdwfVhiK IVJ+CtBwQXCaEgpnoRjTImZ6Mdc6RiffdU+l1quW755zw4mYftQh9lIZthl4AnRP nXOZrYt+9twBy/hUq4kDWMcdN3IB7i6/D4gqvZqWQwd9wBfEKqDGPcOx17mTAdEy qDnCg51OQQa0hym41XdYGbtF7MbcHnY5ockJOBMeARAfYDpXWQ9XqqOI7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlXlmtdAaN9uycsV72AVI2iogC4MB8GA1UdIwQY MBaAFMFGHb13RIN7j5o+rPYO151mmAR0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1VZZHZYZEVnM3VQbWo2czlnN1huV2FZQkhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi81NWZkZjMtNGQ2YS00NTgyLWI5Yjgt NGY4Y2ZlYjIxMGQ5LzEvd1VZZHZYZEVnM3VQbWo2czlnN1huV2FZQkhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi81NWZkZjMtNGQ2YS00NTgyLWI5YjgtNGY4Y2ZlYjIxMGQ5 LzEvd1VZZHZYZEVnM3VQbWo2czlnN1huV2FZQkhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALv4xFkmb kJLKC2cPw6JZ8NPzsEuGDF3VVjP1jiIV25PTJVgM00FaP9jdz92yN1d8jXxosXcp FNj9+yxqMDonn7J7ISD3nrf7p7YUnEizebR9e7dlt94l4qy7tZfGnvPF5U+9tbX0 tF7wYsrMOf3HFFu6vVrARRCGh5XGs0O3vO/5+F9CdMi0m3W3/MWyZCFIDjWqMVE0 STqWzwtmsAhz6XOjEiIRhOtSPqXiNRcQCNjFenyKBJU6a1iqjL0V3OpaN16QMEsK wvJlQyUPeKSsJWZvZCVjl7oKJMFejdYpqixQLB6tMhQw705KAy6PgD7bnzgbfJbP TYGa2kaVzzCxzw== -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:18 2025 by rpki-client