This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft File: wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json) Hash identifier: fnD/WCgqgoOLx3z70+I2OekayaKgvYdMEi/KZT5aQJg= Subject key identifier: 8A:C1:BA:04:9C:6F:A6:2E:29:31:11:3D:19:8C:2C:3D:76:E5:72:16 Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9 Certificate serial: 019B38339A9454DF410877C740BD97F24E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft Manifest number: 178E Signing time: Fri 19 Dec 2025 20:01:04 +0000 Manifest this update: Fri 19 Dec 2025 20:01:04 +0000 Manifest next update: Sat 20 Dec 2025 20:01:04 +0000 Files and hashes: 1: G0mfJKH5XthYEp56dZd7amNIFIg.roa (hash: ZdlmpS8KB0XJ2RMI8I0V6gnsbS1MxMfFNBLIs6WQ0tQ=) 2: J3tQAc-R4PT9iUkojothol4LOyU.roa (hash: 3yeSEY7/c0NLf9TAv7WKIHKi3Ggm4vF4/G3CEy8wx+U=) 3: SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa (hash: hyMLCE9dKw6nHLTE5zUsN701ouIzmTXWz2+LUwVBqEU=) 4: mgF34y33vscxiS4stuO3BYu8JlE.roa (hash: G0qOZyPDZdpreKkYGFQ+RFa5w/ELVkiOatwZcMI9hrQ=) 5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: NwvUBZfgrjUTLb9R8IpqxFtNhREBEJdlidPfQb4wDtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:9a:94:54:df:41:08:77:c7:40:bd:97:f2:4e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9 Validity Not Before: Dec 19 20:01:04 2025 GMT Not After : Dec 20 20:01:04 2025 GMT Subject: CN=8ac1ba049c6fa62e2931113d198c2c3d76e57216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d8:09:36:21:6f:02:d0:fb:ef:e9:a4:60:20: 9a:f6:54:52:50:1d:ac:55:fd:99:5e:8f:89:05:f6: ed:23:48:72:ff:29:af:e2:f9:fb:3e:57:af:09:64: fc:35:b7:9e:8f:f0:d9:bb:4c:b4:cd:c0:ee:4a:e4: d2:12:fa:63:61:7a:c1:4b:98:e2:ab:c4:60:4b:d6: 7e:c6:85:f3:29:33:c7:4e:8d:22:bb:69:c7:bf:a6: 3f:de:69:2e:67:c4:41:c1:8d:90:c5:b3:d3:78:ff: 15:71:22:16:41:82:06:43:4d:46:85:b4:c3:7e:18: 2d:c4:b9:1f:9e:6f:2e:cc:19:d8:93:8c:f2:cc:b4: bc:ee:1e:ff:8d:63:2d:aa:54:e7:e5:c4:95:a1:63: 3a:fe:bb:e4:cd:b3:93:18:3c:c1:24:6d:ce:28:7b: 31:de:16:63:93:af:43:90:a2:3a:7a:bc:69:09:ab: a8:44:61:ee:67:8c:10:1a:49:c9:68:f9:98:31:c9: bc:62:e7:e7:dd:1f:17:ad:c5:32:bc:ed:3a:d1:b8: 0e:a8:15:e0:ba:e1:77:6a:b1:cf:a0:36:3d:6d:6e: cd:28:c3:00:df:a9:bf:f4:8f:57:b1:0d:4a:90:ad: 2d:1c:04:00:73:8d:5d:1d:92:b2:d1:26:41:8e:38: 80:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C1:BA:04:9C:6F:A6:2E:29:31:11:3D:19:8C:2C:3D:76:E5:72:16 X509v3 Authority Key Identifier: keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:70:71:d7:12:c8:a9:2d:e9:01:53:b5:71:09:3f:02:8d:44: 4d:b0:dc:31:78:19:2b:af:9b:8d:c1:66:c6:0c:53:46:f6:28: 1e:9f:c5:d7:a7:f8:55:73:c4:db:20:22:2f:5a:e9:2b:a2:b0: a4:a5:d3:b9:d7:2d:72:8e:34:de:f2:07:4a:2c:44:68:fa:5a: 93:66:5e:86:0f:31:d1:6f:4b:99:83:13:8d:54:f4:ab:2a:58: 2b:77:7d:59:73:05:79:9d:a2:2c:4d:ed:24:a1:52:2f:45:51: 60:82:e5:88:39:aa:c6:b7:57:96:e9:a3:ff:0e:94:fd:30:f2: b8:89:41:6b:58:e1:08:e1:96:a8:67:2c:bb:76:c7:10:f9:8a: 3b:61:fd:c6:b5:15:64:12:77:1e:5b:29:7f:eb:dc:15:d1:35: 05:3c:bb:36:a3:28:d5:20:23:d1:a2:3e:9a:2f:ff:08:45:aa: 1b:dc:35:b8:96:31:7c:0f:4a:b6:9a:49:5c:55:23:26:21:39: 81:61:d3:13:61:95:eb:b5:0e:84:a5:53:75:67:75:96:5e:17: e5:e9:e3:d1:c2:c3:75:56:9c:5d:fe:7c:df:f5:dd:13:6a:a9: 54:1e:c2:e4:a5:2b:77:ad:74:20:7c:e0:11:d6:ec:2f:59:2d: 47:d7:23:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5qUVN9BCHfHQL2X8k6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz MWUzZjkwHhcNMjUxMjE5MjAwMTA0WhcNMjUxMjIwMjAwMTA0WjAzMTEwLwYDVQQD Eyg4YWMxYmEwNDljNmZhNjJlMjkzMTExM2QxOThjMmMzZDc2ZTU3MjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNgJNiFvAtD77+mkYCCa9lRSUB2s Vf2ZXo+JBfbtI0hy/ymv4vn7PlevCWT8Nbeej/DZu0y0zcDuSuTSEvpjYXrBS5ji q8RgS9Z+xoXzKTPHTo0iu2nHv6Y/3mkuZ8RBwY2QxbPTeP8VcSIWQYIGQ01GhbTD fhgtxLkfnm8uzBnYk4zyzLS87h7/jWMtqlTn5cSVoWM6/rvkzbOTGDzBJG3OKHsx 3hZjk69DkKI6erxpCauoRGHuZ4wQGknJaPmYMcm8Yufn3R8XrcUyvO060bgOqBXg uuF3arHPoDY9bW7NKMMA36m/9I9XsQ1KkK0tHAQAc41dHZKy0SZBjjiAxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrBugScb6YuKTERPRmMLD125XIWMB8GA1UdIwQY MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt MWM3YjJiOTFkMzA4LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4 LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAnBx1xLI qS3pAVO1cQk/Ao1ETbDcMXgZK6+bjcFmxgxTRvYoHp/F16f4VXPE2yAiL1rpK6Kw pKXTudctco403vIHSixEaPpak2Zehg8x0W9LmYMTjVT0qypYK3d9WXMFeZ2iLE3t JKFSL0VRYILliDmqxrdXlumj/w6U/TDyuIlBa1jhCOGWqGcsu3bHEPmKO2H9xrUV ZBJ3Hlspf+vcFdE1BTy7NqMo1SAj0aI+mi//CEWqG9w1uJYxfA9KtppJXFUjJiE5 gWHTE2GV67UOhKVTdWd1ll4X5enj0cLDdVacXf583/XdE2qpVB7C5KUrd610IHzg EdbsL1ktR9cjFQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:26:25 2025 by rpki-client