This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json) Hash identifier: nR4Mw0DfuTswlLJdAb5Vjlj2M5RsPhhYsvYUNZXAmn8= Subject key identifier: C2:F7:00:45:63:7B:E6:A5:30:47:11:80:00:A0:5A:D9:BB:E8:FB:DA Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42 Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42 Certificate serial: 019B42EE66CAB99219A9F709BDA5C1D340EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:18 +0000 Manifest this update: Sun 21 Dec 2025 22:01:18 +0000 Manifest next update: Mon 22 Dec 2025 22:01:18 +0000 Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: IdPWo111Ne2ffZ4kfsLrA8hrevVjNvftp5J6Olze/5M=) 2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:66:ca:b9:92:19:a9:f7:09:bd:a5:c1:d3:40:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42 Validity Not Before: Dec 21 22:01:18 2025 GMT Not After : Dec 22 22:01:18 2025 GMT Subject: CN=c2f70045637be6a53047118000a05ad9bbe8fbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:54:e3:c0:87:c3:99:12:f9:b4:fc:32:bc:7d: da:84:69:38:5e:f2:45:c0:d9:14:5e:f4:2d:9d:a8: df:f5:ba:66:7b:b6:94:b3:98:a0:97:f6:61:02:f2: 05:4e:6b:31:e3:d9:1e:a0:00:9a:f6:0a:03:78:10: 8b:a2:87:b7:78:2b:d5:b5:40:53:de:50:4b:de:aa: df:11:2c:78:38:10:1f:86:68:52:84:b8:60:e7:e4: 62:2d:a2:bc:35:de:b8:c6:4c:f6:86:89:85:91:22: 5b:0d:6c:d9:83:6d:96:43:9b:3d:41:89:72:43:cd: a8:54:da:c2:71:34:59:11:d3:05:f9:1b:ae:23:2b: 98:31:b6:bc:bf:e9:96:02:b7:90:48:8a:43:6e:a3: 8a:89:50:10:44:42:cd:7c:eb:61:3f:1b:c0:d6:bd: 19:a7:3f:6c:1e:5e:79:5e:f3:62:2c:50:88:44:dd: 7d:18:cb:56:9e:1b:5d:1e:d0:5a:64:ae:7b:c7:c3: 05:7c:dd:95:49:b3:68:1b:36:ce:e9:4c:ee:d1:63: 33:d6:91:14:a2:d0:69:54:5a:32:4f:fc:55:ed:0b: 13:85:12:6e:a9:eb:9e:03:cb:06:05:69:e4:bd:31: c7:12:3a:73:49:87:73:fb:b3:a9:ef:26:07:cd:8a: ee:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F7:00:45:63:7B:E6:A5:30:47:11:80:00:A0:5A:D9:BB:E8:FB:DA X509v3 Authority Key Identifier: keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:35:f4:ec:a8:27:12:55:f2:df:5d:c9:37:51:ee:9c:0c:f7: ba:c7:48:01:49:9f:0f:74:14:61:08:85:42:95:07:fc:79:ba: 2e:b1:10:15:ca:87:5d:1f:5b:00:a5:54:d0:b1:58:81:b3:37: 32:45:58:32:57:f3:8d:e1:98:f9:92:cf:b3:7a:20:80:e0:a9: aa:17:72:19:80:02:41:0f:47:07:49:ed:16:49:3d:65:1a:92: 42:b2:c9:04:e5:09:cc:8d:f3:e4:14:49:4e:37:48:70:75:ab: 6a:ff:ea:e6:b9:18:c1:d9:e6:19:46:28:8d:b7:f6:c1:4a:ed: 51:dd:04:17:69:07:e4:0f:63:4d:f3:78:f4:5e:04:d9:36:8a: 66:de:fc:95:23:c3:f3:e6:c5:de:ea:13:f4:f5:02:10:f2:02: 4a:1e:d3:81:d7:f3:31:af:6d:2f:a5:0b:24:0f:54:62:48:e1: d7:03:a2:2f:35:d6:64:8e:e0:72:97:76:9c:db:88:27:e4:3d: 87:ed:a9:7b:61:ed:f8:ca:9e:81:65:0d:5e:e1:ec:7a:df:96: 2d:9d:ed:45:ab:c6:da:6a:95:25:b3:4e:d6:43:46:47:20:66: ec:4f:d3:0c:52:99:e1:ff:58:e2:5b:13:ec:f3:5c:d1:df:cd: 93:df:8d:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7mbKuZIZqfcJvaXB00DsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDRhYmViMGVkNGZmODY2YzA2NWZlMzZjMmM2Mjg0ZTI1 MjBiNDIwHhcNMjUxMjIxMjIwMTE4WhcNMjUxMjIyMjIwMTE4WjAzMTEwLwYDVQQD EyhjMmY3MDA0NTYzN2JlNmE1MzA0NzExODAwMGEwNWFkOWJiZThmYmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVTjwIfDmRL5tPwyvH3ahGk4XvJF wNkUXvQtnajf9bpme7aUs5igl/ZhAvIFTmsx49keoACa9goDeBCLooe3eCvVtUBT 3lBL3qrfESx4OBAfhmhShLhg5+RiLaK8Nd64xkz2homFkSJbDWzZg22WQ5s9QYly Q82oVNrCcTRZEdMF+RuuIyuYMba8v+mWAreQSIpDbqOKiVAQRELNfOthPxvA1r0Z pz9sHl55XvNiLFCIRN19GMtWnhtdHtBaZK57x8MFfN2VSbNoGzbO6Uzu0WMz1pEU otBpVFoyT/xV7QsThRJuqeueA8sGBWnkvTHHEjpzSYdz+7Op7yYHzYruTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML3AEVje+alMEcRgACgWtm76PvaMB8GA1UdIwQY MBaAFFkEq+sO1P+GbAZf42wsYoTiUgtCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYt NzdkNjVlZjMwNWIwLzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYtNzdkNjVlZjMwNWIw LzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTX07Kgn ElXy313JN1HunAz3usdIAUmfD3QUYQiFQpUH/Hm6LrEQFcqHXR9bAKVU0LFYgbM3 MkVYMlfzjeGY+ZLPs3oggOCpqhdyGYACQQ9HB0ntFkk9ZRqSQrLJBOUJzI3z5BRJ TjdIcHWrav/q5rkYwdnmGUYojbf2wUrtUd0EF2kH5A9jTfN49F4E2TaKZt78lSPD 8+bF3uoT9PUCEPICSh7TgdfzMa9tL6ULJA9UYkjh1wOiLzXWZI7gcpd2nNuIJ+Q9 h+2pe2Ht+MqegWUNXuHset+WLZ3tRavG2mqVJbNO1kNGRyBm7E/TDFKZ4f9Y4lsT 7PNc0d/Nk9+Nww== -----END CERTIFICATE-----Generated at Mon Dec 22 06:23:39 2025 by rpki-client