This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft File: WdWQ4swUythErvFa1fLUZ96KN_4.mft (raw, json) Hash identifier: +0yT/2fTz6cyoSvO3S0mmCMT5udbeaCLeJBFpwwRNz8= Subject key identifier: 99:FC:97:08:34:C9:CB:DC:D4:72:5C:17:06:91:F7:0E:51:51:B6:33 Authority key identifier: 59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE Certificate issuer: /CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe Certificate serial: 019B435BEF259D229353065C012511CA9454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 00:00:57 +0000 Manifest this update: Mon 22 Dec 2025 00:00:57 +0000 Manifest next update: Tue 23 Dec 2025 00:00:57 +0000 Files and hashes: 1: JH4Pw6k9bW-EXpipE2GyaPmXdT0.roa (hash: nYPTNfn16VpyVNgK62YL/AjqeUMOonTZwALbyhAMma0=) 2: WdWQ4swUythErvFa1fLUZ96KN_4.crl (hash: 9ECNvY6QrRfq9azmMsbidftRNfbp+Gaac1CUwrPW2sY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:ef:25:9d:22:93:53:06:5c:01:25:11:ca:94:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d590e2cc14cad844aef15ad5f2d467de8a37fe Validity Not Before: Dec 22 00:00:57 2025 GMT Not After : Dec 23 00:00:57 2025 GMT Subject: CN=99fc970834c9cbdcd4725c170691f70e5151b633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:f8:ca:fe:57:0a:3e:80:ae:16:3d:42:51: 7e:53:c2:b7:a3:aa:53:89:4b:61:a0:02:60:b0:9b: 63:4f:39:4a:79:25:cc:4c:10:9f:92:b3:33:70:d0: 1c:26:1d:eb:92:5c:4d:ee:ef:5d:5c:d0:a3:79:54: 39:4e:5d:e9:34:5f:f0:9e:ae:17:fb:c9:7e:7a:0b: 13:3e:a2:5b:55:b3:9b:f2:df:4a:1a:19:b6:ab:3f: 5a:dd:b2:e6:50:66:7a:c1:9d:b1:fa:b7:17:b6:5b: 47:94:6b:dc:37:cb:72:5b:ce:e6:a3:14:29:0b:fd: dd:56:70:89:8c:15:d0:24:14:5d:43:69:cb:df:23: 69:46:10:27:e4:95:45:2f:84:68:5b:87:3d:3c:c8: 1b:12:85:37:c5:55:13:64:b5:88:be:63:c8:99:0a: cd:3f:42:74:f7:34:56:c4:ad:ac:27:1a:76:cb:69: fe:e1:f0:82:5e:c4:e5:b7:a4:12:8e:59:5c:48:e6: a5:8e:18:6b:38:53:fb:88:d2:ed:f6:72:ca:51:df: aa:5c:a6:7b:31:e6:fe:1f:dc:fa:9e:03:35:bd:a7: 81:a2:6b:9b:be:45:38:d4:85:bd:28:3a:1b:a8:eb: 20:f4:a6:39:5d:2e:81:fb:7b:6f:d4:1e:16:6d:cc: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FC:97:08:34:C9:CB:DC:D4:72:5C:17:06:91:F7:0E:51:51:B6:33 X509v3 Authority Key Identifier: keyid:59:D5:90:E2:CC:14:CA:D8:44:AE:F1:5A:D5:F2:D4:67:DE:8A:37:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdWQ4swUythErvFa1fLUZ96KN_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2fa707-dad6-4f95-b5de-fc99d33d3344/1/WdWQ4swUythErvFa1fLUZ96KN_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e8:0c:cc:09:df:29:d1:0f:cb:84:97:48:e3:c9:39:34:15: dc:dc:04:ec:b1:37:0b:58:25:80:90:85:64:b5:6b:97:fc:83: d3:7c:4d:3b:72:a4:dc:11:a4:bb:e2:6d:af:d4:0f:53:e5:74: 72:eb:8d:38:ec:51:ef:28:25:de:33:2f:3f:b9:03:98:79:20: 1b:8c:6c:b5:8f:23:cf:86:f9:81:ca:1e:4a:b5:9c:6b:c0:71: 63:19:6f:4d:fa:95:5b:e7:3b:d2:2d:95:6d:23:aa:c3:43:0c: ba:e6:17:2a:34:37:ce:13:b0:d9:de:b7:96:cc:45:f1:34:f4: 3e:88:05:d8:e5:6a:0c:82:17:a5:86:d0:28:07:5b:71:ff:fc: 12:39:08:a9:96:b1:97:3d:1d:cf:bb:ee:a0:fa:09:9d:b1:d1: bd:aa:6f:52:e4:a5:50:0e:5c:bb:e0:0e:31:15:df:2f:9f:d3: f3:76:46:04:5a:18:de:a4:02:43:13:14:96:ae:bb:12:91:73: ea:b3:78:3f:5e:49:e4:a7:33:8e:82:47:38:a3:f1:e2:e2:a8: 50:8a:40:ad:fd:68:12:39:db:be:9b:15:88:7e:a4:99:5c:78: d0:6e:c8:29:f8:e4:cb:51:df:1f:6f:87:98:20:95:e7:53:83: d5:81:35:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW+8lnSKTUwZcASURypRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDU5MGUyY2MxNGNhZDg0NGFlZjE1YWQ1ZjJkNDY3ZGU4 YTM3ZmUwHhcNMjUxMjIyMDAwMDU3WhcNMjUxMjIzMDAwMDU3WjAzMTEwLwYDVQQD Eyg5OWZjOTcwODM0YzljYmRjZDQ3MjVjMTcwNjkxZjcwZTUxNTFiNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/34yv5XCj6ArhY9QlF+U8K3o6pT iUthoAJgsJtjTzlKeSXMTBCfkrMzcNAcJh3rklxN7u9dXNCjeVQ5Tl3pNF/wnq4X +8l+egsTPqJbVbOb8t9KGhm2qz9a3bLmUGZ6wZ2x+rcXtltHlGvcN8tyW87moxQp C/3dVnCJjBXQJBRdQ2nL3yNpRhAn5JVFL4RoW4c9PMgbEoU3xVUTZLWIvmPImQrN P0J09zRWxK2sJxp2y2n+4fCCXsTlt6QSjllcSOaljhhrOFP7iNLt9nLKUd+qXKZ7 Meb+H9z6ngM1vaeBomubvkU41IW9KDobqOsg9KY5XS6B+3tv1B4WbcxjrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJn8lwg0ycvc1HJcFwaR9w5RUbYzMB8GA1UdIwQY MBaAFFnVkOLMFMrYRK7xWtXy1Gfeijf+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUt ZmM5OWQzM2QzMzQ0LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yZmE3MDctZGFkNi00Zjk1LWI1ZGUtZmM5OWQzM2QzMzQ0 LzEvV2RXUTRzd1V5dGhFcnZGYTFmTFVaOTZLTl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANugMzAnf KdEPy4SXSOPJOTQV3NwE7LE3C1glgJCFZLVrl/yD03xNO3Kk3BGku+Jtr9QPU+V0 cuuNOOxR7ygl3jMvP7kDmHkgG4xstY8jz4b5gcoeSrWca8BxYxlvTfqVW+c70i2V bSOqw0MMuuYXKjQ3zhOw2d63lsxF8TT0PogF2OVqDIIXpYbQKAdbcf/8EjkIqZax lz0dz7vuoPoJnbHRvapvUuSlUA5cu+AOMRXfL5/T83ZGBFoY3qQCQxMUlq67EpFz 6rN4P15J5KczjoJHOKPx4uKoUIpArf1oEjnbvpsViH6kmVx40G7IKfjky1HfH2+H mCCV51OD1YE1sQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:49:05 2025 by rpki-client