This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft File: wuP6h-sxaafS3XRFMoMCGicDx2k.mft (raw, json) Hash identifier: 2dBpYX6VbUeqFgfF9zneqDDWzlruW3CoYIuKHNBeN6Q= Subject key identifier: FB:49:FA:1B:66:52:73:F3:C4:3F:D4:72:40:AD:DE:16:71:20:D4:B7 Authority key identifier: C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69 Certificate issuer: /CN=c2e3fa87eb3169a7d2dd74453283021a2703c769 Certificate serial: 019B41DB9B3B919AB708468B24495580C579 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 17:01:09 +0000 Manifest this update: Sun 21 Dec 2025 17:01:09 +0000 Manifest next update: Mon 22 Dec 2025 17:01:09 +0000 Files and hashes: 1: UQeJyG9BAYXx7MdsdkPbT5nATwI.roa (hash: hKLTaUlMIPTXFfDFectFLlcV0ReJ/iVzU3RYDLItnvI=) 2: wuP6h-sxaafS3XRFMoMCGicDx2k.crl (hash: VRGyjGqWZ/l9021Fv6/x2IXHZsLGauUeqJE0M4pkrkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:9b:3b:91:9a:b7:08:46:8b:24:49:55:80:c5:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e3fa87eb3169a7d2dd74453283021a2703c769 Validity Not Before: Dec 21 17:01:09 2025 GMT Not After : Dec 22 17:01:09 2025 GMT Subject: CN=fb49fa1b665273f3c43fd47240adde167120d4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f9:a3:7b:84:0d:0d:ce:ba:0b:19:71:52:71: cb:7b:48:2a:cf:5d:3d:2c:46:24:87:09:e6:8c:51: a5:56:6d:c8:87:cc:b8:5f:03:6f:9e:dc:fb:ca:df: 6e:91:8a:ae:fb:c2:66:6d:73:96:13:bc:44:f2:87: e5:b9:06:a8:a7:90:a6:f2:0b:27:4f:b0:b5:a0:55: a1:4d:bf:6a:f5:0d:74:95:75:28:8a:a1:11:e6:5a: 43:4c:17:0a:4b:47:45:d4:0d:a0:f6:4f:bf:1a:e0: c2:73:f0:f4:11:bc:36:10:9f:f1:f9:1f:5f:2c:fa: f4:74:5b:c2:1c:26:6d:34:c6:ec:15:21:83:28:7d: aa:9f:78:84:ae:c0:f7:a6:e2:1b:b2:50:cd:2c:4d: 42:dd:99:2e:2d:f3:32:07:b2:6a:f3:82:13:d2:75: 66:ec:2a:ce:11:97:91:1f:a3:f9:79:fa:d9:60:87: 57:06:4b:27:94:83:4c:0f:47:02:c5:be:20:b8:fc: df:28:c4:7d:6c:1c:e0:01:c8:0b:bd:08:1c:49:93: 81:5f:b9:6c:61:30:25:95:5a:03:a1:49:9e:f4:38: 4a:ca:2d:4e:dc:75:4e:9e:62:4b:fb:35:54:31:91: c6:dd:9a:7d:40:90:c8:f2:1a:5a:1c:29:da:47:66: 95:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:49:FA:1B:66:52:73:F3:C4:3F:D4:72:40:AD:DE:16:71:20:D4:B7 X509v3 Authority Key Identifier: keyid:C2:E3:FA:87:EB:31:69:A7:D2:DD:74:45:32:83:02:1A:27:03:C7:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuP6h-sxaafS3XRFMoMCGicDx2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/99ba20-9bb7-4171-af56-dfe566411016/1/wuP6h-sxaafS3XRFMoMCGicDx2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:6b:cd:02:32:7d:a0:2b:58:16:76:a4:62:d4:8c:b3:6f:dc: 10:ea:98:3d:f0:3c:f8:31:84:98:6b:04:54:06:32:91:f4:9d: c1:88:88:24:37:38:82:30:e2:20:cc:b5:21:0d:f8:50:a5:8c: a4:5a:62:16:ce:f5:f5:45:58:f9:f8:8a:2d:f4:f8:54:86:a9: 56:ea:02:7c:92:d8:ca:d5:d8:57:2b:ba:5d:03:4b:08:46:51: 9c:f9:07:09:92:8b:b3:25:22:49:80:d1:44:34:bc:4b:33:21: fe:3c:c7:ce:2c:d4:61:83:73:17:1e:dc:b0:55:c5:47:1d:7b: aa:e2:15:12:31:44:f2:d2:7a:d8:b5:c1:7f:51:c6:60:42:29: fc:5d:45:9c:e1:80:23:cb:d0:b7:1f:a3:b7:21:7c:ca:a8:9f: 14:be:f1:85:50:2c:bd:8f:ac:99:eb:6f:17:a8:43:63:50:10: e5:81:ea:08:b0:4e:7e:0e:e2:52:03:65:fc:62:b5:cc:d5:82: 01:12:11:9e:e0:fa:32:b4:ed:0d:a6:8d:a3:7b:4c:67:4f:dc: e3:89:5e:9e:f2:32:05:db:55:be:1a:a2:d3:8f:d1:6c:94:e1: 45:76:9b:e1:2e:4d:d1:43:d9:1a:54:58:d5:e5:4a:d7:6e:0c: ce:82:72:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB25s7kZq3CEaLJElVgMV5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTNmYTg3ZWIzMTY5YTdkMmRkNzQ0NTMyODMwMjFhMjcw M2M3NjkwHhcNMjUxMjIxMTcwMTA5WhcNMjUxMjIyMTcwMTA5WjAzMTEwLwYDVQQD EyhmYjQ5ZmExYjY2NTI3M2YzYzQzZmQ0NzI0MGFkZGUxNjcxMjBkNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfmje4QNDc66CxlxUnHLe0gqz109 LEYkhwnmjFGlVm3Ih8y4XwNvntz7yt9ukYqu+8JmbXOWE7xE8ofluQaop5Cm8gsn T7C1oFWhTb9q9Q10lXUoiqER5lpDTBcKS0dF1A2g9k+/GuDCc/D0Ebw2EJ/x+R9f LPr0dFvCHCZtNMbsFSGDKH2qn3iErsD3puIbslDNLE1C3ZkuLfMyB7Jq84IT0nVm 7CrOEZeRH6P5efrZYIdXBksnlINMD0cCxb4guPzfKMR9bBzgAcgLvQgcSZOBX7ls YTAllVoDoUme9DhKyi1O3HVOnmJL+zVUMZHG3Zp9QJDI8hpaHCnaR2aVcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtJ+htmUnPzxD/UckCt3hZxINS3MB8GA1UdIwQY MBaAFMLj+ofrMWmn0t10RTKDAhonA8dpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYt ZGZlNTY2NDExMDE2LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi85OWJhMjAtOWJiNy00MTcxLWFmNTYtZGZlNTY2NDExMDE2 LzEvd3VQNmgtc3hhYWZTM1hSRk1vTUNHaWNEeDJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmvNAjJ9 oCtYFnakYtSMs2/cEOqYPfA8+DGEmGsEVAYykfSdwYiIJDc4gjDiIMy1IQ34UKWM pFpiFs719UVY+fiKLfT4VIapVuoCfJLYytXYVyu6XQNLCEZRnPkHCZKLsyUiSYDR RDS8SzMh/jzHzizUYYNzFx7csFXFRx17quIVEjFE8tJ62LXBf1HGYEIp/F1FnOGA I8vQtx+jtyF8yqifFL7xhVAsvY+smetvF6hDY1AQ5YHqCLBOfg7iUgNl/GK1zNWC ARIRnuD6MrTtDaaNo3tMZ0/c44lenvIyBdtVvhqi04/RbJThRXab4S5N0UPZGlRY 1eVK124MzoJyLQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:35:13 2025 by rpki-client