This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft File: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json) Hash identifier: q4SxFjsc34/x3of4eivSWXXTLQb7LwMz4HvwUNbJAL4= Subject key identifier: 2E:4F:1B:FD:B8:5D:BB:AD:97:FC:95:B6:A1:DC:13:61:BE:6D:3D:73 Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67 Certificate issuer: /CN=586329f307b98285b71d22c7197ec19b701ded67 Certificate serial: 019B3BD977A1E85AC9CC2788008EA7043EFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 13:01:06 +0000 Manifest this update: Sat 20 Dec 2025 13:01:06 +0000 Manifest next update: Sun 21 Dec 2025 13:01:06 +0000 Files and hashes: 1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=) 2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: s6q4/eeRM/wGG4ReBqbRRhkZeytiubSPVPH4M0O7Xrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:77:a1:e8:5a:c9:cc:27:88:00:8e:a7:04:3e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67 Validity Not Before: Dec 20 13:01:06 2025 GMT Not After : Dec 21 13:01:06 2025 GMT Subject: CN=2e4f1bfdb85dbbad97fc95b6a1dc1361be6d3d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:0e:99:dc:d7:ad:b3:8e:5b:77:7f:7f:ae: 9b:10:23:a1:9b:fb:6c:f6:70:aa:eb:17:40:a6:8a: cb:8c:89:6e:ea:da:f5:f7:69:da:54:22:8c:ee:da: 83:16:4b:e2:45:1d:65:02:41:10:2c:5a:ab:64:a8: 6b:84:b2:a2:96:b6:ef:13:cb:67:8a:80:a9:b8:c7: 63:df:7e:ef:ec:8f:92:fe:ec:ed:89:88:73:78:d8: b7:0e:61:48:ff:cb:71:6f:49:63:e7:05:a9:c2:76: 4f:b6:b1:03:0c:fb:ff:81:25:ee:3a:51:d0:cf:8e: 8d:48:c5:ed:5c:d1:dc:01:37:45:06:8a:f8:d9:ff: 59:d9:8b:06:44:ce:10:b5:77:b1:81:54:5f:a3:69: a1:0f:ad:c0:ba:a6:5a:c4:1c:6b:be:33:04:08:5a: e9:70:af:de:16:89:9d:0c:92:df:2a:71:65:ee:89: 99:f9:e9:9f:e6:88:ed:35:e6:20:3d:d8:ba:87:2c: fd:c3:6d:26:71:68:9b:eb:6c:01:8e:7e:0c:2e:a5: 37:9a:16:85:ca:da:9b:d2:86:ce:20:d9:d7:5e:bd: 15:1b:4f:5e:ab:58:40:1c:e2:4c:0e:33:62:9e:8c: 07:83:27:ed:05:1c:f4:e8:84:4f:f9:d7:e9:2f:22: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4F:1B:FD:B8:5D:BB:AD:97:FC:95:B6:A1:DC:13:61:BE:6D:3D:73 X509v3 Authority Key Identifier: keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:04:41:8d:97:9f:3b:5f:09:e3:6d:88:86:82:78:29:f5:d8: ec:85:8f:05:23:39:a2:bd:50:f3:2e:4f:21:cf:6c:64:dd:ed: d2:39:7a:96:80:35:89:ff:e5:52:4d:1c:53:c5:ba:58:54:1d: 0e:a8:3c:c7:a5:e7:2c:a5:30:19:5a:cd:c3:78:e8:12:f0:fc: 8e:7f:db:e7:5c:ef:1d:1b:d2:49:6e:62:a6:d4:22:c8:30:c1: ce:d0:e5:40:9f:4e:cf:6c:ef:08:33:45:9f:fc:8e:a8:df:42: 13:50:78:29:1c:94:46:90:e8:7e:8c:e6:28:13:a1:fb:e6:93: 4a:fe:ff:75:50:c8:38:08:41:69:ae:ae:98:36:3b:85:38:f4: 9d:45:1c:d4:51:74:16:f1:07:06:53:30:a9:90:5f:ae:9d:22: 3c:11:e4:4c:ad:cf:c0:b6:42:fd:fe:f8:4d:7f:1b:85:b3:aa: c0:5c:43:9a:8c:33:dc:ad:17:e1:8d:ac:24:34:50:6a:fd:9c: 87:d4:52:4a:44:a8:23:6d:74:16:b6:21:fa:a2:17:7d:af:3e: 3b:47:81:9b:ba:de:c3:e8:c2:3d:b5:c2:18:d4:1c:79:ce:58: 00:22:74:9b:c9:5e:1f:b1:fc:16:71:ab:5d:45:aa:33:4a:5d: c4:c4:2c:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Xeh6FrJzCeIAI6nBD79MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjMyOWYzMDdiOTgyODViNzFkMjJjNzE5N2VjMTliNzAx ZGVkNjcwHhcNMjUxMjIwMTMwMTA2WhcNMjUxMjIxMTMwMTA2WjAzMTEwLwYDVQQD EygyZTRmMWJmZGI4NWRiYmFkOTdmYzk1YjZhMWRjMTM2MWJlNmQzZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZwOmdzXrbOOW3d/f66bECOhm/ts 9nCq6xdAporLjIlu6tr192naVCKM7tqDFkviRR1lAkEQLFqrZKhrhLKilrbvE8tn ioCpuMdj337v7I+S/uztiYhzeNi3DmFI/8txb0lj5wWpwnZPtrEDDPv/gSXuOlHQ z46NSMXtXNHcATdFBor42f9Z2YsGRM4QtXexgVRfo2mhD63AuqZaxBxrvjMECFrp cK/eFomdDJLfKnFl7omZ+emf5ojtNeYgPdi6hyz9w20mcWib62wBjn4MLqU3mhaF ytqb0obOINnXXr0VG09eq1hAHOJMDjNinowHgyftBRz06IRP+dfpLyK9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5PG/24Xbutl/yVtqHcE2G+bT1zMB8GA1UdIwQY MBaAFFhjKfMHuYKFtx0ixxl+wZtwHe1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAt ZTBlNGJlNjY5NmY5LzEvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAtZTBlNGJlNjY5NmY5 LzEvV0dNcDh3ZTVnb1czSFNMSEdYN0JtM0FkN1djLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgRBjZef O18J422IhoJ4KfXY7IWPBSM5or1Q8y5PIc9sZN3t0jl6loA1if/lUk0cU8W6WFQd Dqg8x6XnLKUwGVrNw3joEvD8jn/b51zvHRvSSW5iptQiyDDBztDlQJ9Oz2zvCDNF n/yOqN9CE1B4KRyURpDofozmKBOh++aTSv7/dVDIOAhBaa6umDY7hTj0nUUc1FF0 FvEHBlMwqZBfrp0iPBHkTK3PwLZC/f74TX8bhbOqwFxDmowz3K0X4Y2sJDRQav2c h9RSSkSoI210FrYh+qIXfa8+O0eBm7rew+jCPbXCGNQcec5YACJ0m8leH7H8FnGr XUWqM0pdxMQs6Q== -----END CERTIFICATE-----Generated at Sat Dec 20 22:03:42 2025 by rpki-client