This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft File: wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json) Hash identifier: 6RyyHpOEm+XRyMvCqmVjfbcS0z08fKITer9JGlyEXaU= Subject key identifier: 48:29:B4:FE:E7:F9:24:A0:ED:CC:FD:D0:CF:EB:68:30:9A:86:C1:B5 Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F Certificate issuer: /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f Certificate serial: 019B40C930EA6A83D599CFA7B63C7B018FBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft Manifest number: 0144 Signing time: Sun 21 Dec 2025 12:01:25 +0000 Manifest this update: Sun 21 Dec 2025 12:01:25 +0000 Manifest next update: Mon 22 Dec 2025 12:01:25 +0000 Files and hashes: 1: Lhy8SYG2GhG0L5kTN-q8cr7WG-c.roa (hash: h3RdkKZeJn3Jmuk2vF/0N6uD1EiWryKCe7zVgNp/r4E=) 2: TW_sf0he3KOYpTEZ1qjv6u3LEsw.asa (hash: 0oaD4PdwAmEo3RbsRNvR+nl5nJQJfY/a36i4g02yqEg=) 3: cIXDfR-Jle5Jda3lToN6L1RqtVs.asa (hash: 0Czg9gaAGKAEq6Rfn/gJ1HPiXTpLu7e+YQAdkMW2/O4=) 4: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: S65tst9rGaimAESu7yBBFrdoHc5c5DAgMPrYjW+56a8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:30:ea:6a:83:d5:99:cf:a7:b6:3c:7b:01:8f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f Validity Not Before: Dec 21 12:01:25 2025 GMT Not After : Dec 22 12:01:25 2025 GMT Subject: CN=4829b4fee7f924a0edccfdd0cfeb68309a86c1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ea:63:a7:81:bb:95:1e:66:59:ac:90:38:83: 7f:59:c1:c5:03:a6:8e:35:7f:cf:54:d2:24:d3:47: e8:7c:f2:73:a4:34:60:67:ab:34:58:58:e0:6b:dc: e8:66:6e:ac:63:3b:81:8e:a7:61:ae:9b:68:e1:51: 16:c7:9c:5d:b7:53:43:92:10:6a:30:73:f8:0e:46: ac:8a:56:79:76:3d:3d:a4:db:08:fe:67:30:9e:21: 74:c6:47:0c:cb:72:a0:65:02:a2:98:da:35:a3:c7: 01:66:f1:ef:5b:0d:6e:88:4e:c4:cc:d4:98:a2:c4: 99:b3:db:d1:b5:8d:df:c6:f9:7c:5d:9c:5b:06:89: 44:b4:d0:c9:4a:94:eb:7c:f4:ca:5f:db:3b:65:2e: ad:c5:69:9f:7e:49:2c:96:86:77:7a:74:35:a2:1e: b4:cb:1e:11:70:ad:73:7d:da:03:52:15:8f:a1:83: a4:8c:4b:bf:a2:a6:5f:28:0f:79:90:9a:9e:1d:fe: 96:67:a2:76:bc:16:97:8e:ad:ee:26:5c:08:fb:3b: 88:44:c2:18:b6:22:6d:b6:05:49:0e:8b:70:6a:37: 4e:57:4f:8a:1c:ef:cd:f2:80:f6:32:92:aa:d9:87: 80:3c:12:5b:3d:fa:55:da:cc:8c:c6:5a:f5:b0:27: 6c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:29:B4:FE:E7:F9:24:A0:ED:CC:FD:D0:CF:EB:68:30:9A:86:C1:B5 X509v3 Authority Key Identifier: keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:19:06:7f:76:ef:9d:8f:38:7c:ca:c1:71:b8:9f:31:d6:a0: 68:9e:92:4c:6d:f5:86:b7:a8:ed:23:c3:ab:e5:3e:00:98:ce: 6b:bd:4a:df:4f:65:4a:38:7f:73:2f:5f:40:14:a8:2d:79:15: fa:97:6e:bd:76:c4:ac:3e:24:59:c5:54:90:bf:d9:e6:a5:81: 23:08:05:45:fb:96:8b:0b:68:07:cc:a9:dc:df:e6:7b:62:00: bd:6a:25:80:dd:c0:5d:14:97:29:53:ef:70:9a:9f:6c:64:7d: ee:b0:33:d0:db:b7:7b:77:ed:20:88:64:0e:76:55:ed:00:b8: 38:51:6d:e3:1b:92:50:b7:9e:79:92:7a:27:49:88:65:2c:6f: 8a:71:99:62:50:97:42:b2:84:7e:c4:7b:b3:1d:75:ff:e5:80: a6:e0:ab:dd:35:98:30:0b:18:02:95:af:4d:d3:fa:97:d4:ae: 99:7b:b7:9d:5f:19:e4:8b:c9:01:75:8a:51:19:3d:54:4e:b0: 3d:07:a4:dd:80:d4:d4:28:23:b0:2f:94:12:f7:4b:9e:0b:48: cd:b4:0d:87:ab:f7:cd:42:8c:03:88:6f:e2:36:fc:be:53:18: 2c:51:8b:33:35:40:d4:dd:ae:9f:3f:27:b4:8f:a7:d0:bd:24: 40:08:55:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyTDqaoPVmc+ntjx7AY+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWYwNjA4Mjk3ZTlmOTQzNzFhNzJkOTNhZDdiMTFmNzlj MWY4M2YwHhcNMjUxMjIxMTIwMTI1WhcNMjUxMjIyMTIwMTI1WjAzMTEwLwYDVQQD Eyg0ODI5YjRmZWU3ZjkyNGEwZWRjY2ZkZDBjZmViNjgzMDlhODZjMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+pjp4G7lR5mWayQOIN/WcHFA6aO NX/PVNIk00fofPJzpDRgZ6s0WFjga9zoZm6sYzuBjqdhrpto4VEWx5xdt1NDkhBq MHP4DkasilZ5dj09pNsI/mcwniF0xkcMy3KgZQKimNo1o8cBZvHvWw1uiE7EzNSY osSZs9vRtY3fxvl8XZxbBolEtNDJSpTrfPTKX9s7ZS6txWmffkksloZ3enQ1oh60 yx4RcK1zfdoDUhWPoYOkjEu/oqZfKA95kJqeHf6WZ6J2vBaXjq3uJlwI+zuIRMIY tiJttgVJDotwajdOV0+KHO/N8oD2MpKq2YeAPBJbPfpV2syMxlr1sCdsVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgptP7n+SSg7cz90M/raDCahsG1MB8GA1UdIwQY MBaAFMFfBggpfp+UNxpy2TrXsR95wfg/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81OTBlNmEtYzRmYi00ZTRkLTlmZjQt NzE3Y2Y3ZDczNTg3LzEvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC81OTBlNmEtYzRmYi00ZTRkLTlmZjQtNzE3Y2Y3ZDczNTg3 LzEvd1Y4R0NDbC1uNVEzR25MWk90ZXhIM25CLUQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRkGf3bv nY84fMrBcbifMdagaJ6STG31hreo7SPDq+U+AJjOa71K309lSjh/cy9fQBSoLXkV +pduvXbErD4kWcVUkL/Z5qWBIwgFRfuWiwtoB8yp3N/me2IAvWolgN3AXRSXKVPv cJqfbGR97rAz0Nu3e3ftIIhkDnZV7QC4OFFt4xuSULeeeZJ6J0mIZSxvinGZYlCX QrKEfsR7sx11/+WApuCr3TWYMAsYApWvTdP6l9SumXu3nV8Z5IvJAXWKURk9VE6w PQek3YDU1CgjsC+UEvdLngtIzbQNh6v3zUKMA4hv4jb8vlMYLFGLMzVA1N2unz8n tI+n0L0kQAhVig== -----END CERTIFICATE-----Generated at Sun Dec 21 20:33:09 2025 by rpki-client