This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft File: wE7eHnv2cZnnq29e0ASelggxc2I.mft (raw, json) Hash identifier: g4KK+boOGzxI/0exuSOKQHT2vovofwaAD6koBhKZ1bc= Subject key identifier: 3E:8D:66:12:E7:F4:AB:33:DD:34:67:AA:26:56:2E:27:CB:4E:AF:BF Authority key identifier: C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 Certificate issuer: /CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Certificate serial: 019B571971542FF26F0B1E1B96C1484D8D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft Manifest number: 1718 Signing time: Thu 25 Dec 2025 20:00:43 +0000 Manifest this update: Thu 25 Dec 2025 20:00:43 +0000 Manifest next update: Fri 26 Dec 2025 20:00:43 +0000 Files and hashes: 1: PNGVC-CrfH1p9OIprudcP9OFefc.roa (hash: nc5dlgvbSht3Pu2b1emN1gFyKryX3zAIW0Vn1s/MtZQ=) 2: ZH517UMHt57T2FttefkfbwPx0bw.roa (hash: Tv8TZN2c/ZcUSn9bX3gVpx2AiLfp54IyB2SfPNHaM/A=) 3: wE7eHnv2cZnnq29e0ASelggxc2I.crl (hash: TW+h5VFIJVO1NAZ3q6BBFRlkoWEgLs+eY72ST+5seSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:19:71:54:2f:f2:6f:0b:1e:1b:96:c1:48:4d:8d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c04ede1e7bf67199e7ab6f5ed0049e9608317362 Validity Not Before: Dec 25 20:00:43 2025 GMT Not After : Dec 26 20:00:43 2025 GMT Subject: CN=3e8d6612e7f4ab33dd3467aa26562e27cb4eafbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:c8:83:8c:ff:15:f7:83:77:81:cc:09:64: b8:22:75:7a:a3:30:bd:52:11:61:c9:77:34:01:de: 15:3b:a9:ab:24:bd:75:84:0a:4a:5d:cf:6a:5b:ce: d8:4a:85:68:16:68:d4:4b:c4:dc:9f:d9:2e:0e:ab: 12:74:f8:2a:6a:45:86:57:46:8d:ce:8e:90:5c:fb: 2b:a7:81:a1:93:d0:7f:df:83:10:f4:f3:7e:9f:ec: 92:46:b9:f5:a9:b9:16:82:98:ad:9d:6e:98:f7:c3: 63:9e:e0:a9:ec:a8:3a:3f:d8:f5:9e:67:aa:38:1b: 4b:4e:4b:07:ac:ee:91:bd:0a:f0:98:c0:1e:83:b2: 3b:2d:67:ec:cb:44:10:0c:07:aa:bb:e5:a2:46:e2: b3:5e:84:09:44:cc:bd:55:06:10:34:d4:cd:d9:6d: c9:3e:be:74:bd:16:13:76:f0:a9:1f:7c:2d:fe:d7: 1d:52:55:29:1d:29:15:45:e0:08:92:eb:34:8d:38: 1f:58:99:2d:9d:69:e8:c7:7b:77:69:f3:c4:2f:de: 59:8a:48:b6:09:a0:76:ea:bd:d6:97:fc:4d:25:bc: 9d:f6:37:79:ee:c4:5a:02:72:00:82:4d:01:f5:bc: c7:07:99:64:23:16:a5:4f:9e:91:b5:51:90:14:ce: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:66:12:E7:F4:AB:33:DD:34:67:AA:26:56:2E:27:CB:4E:AF:BF X509v3 Authority Key Identifier: keyid:C0:4E:DE:1E:7B:F6:71:99:E7:AB:6F:5E:D0:04:9E:96:08:31:73:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE7eHnv2cZnnq29e0ASelggxc2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/49d050-dace-45ec-8139-9e71f6a84801/1/wE7eHnv2cZnnq29e0ASelggxc2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:08:fd:2e:04:05:77:e6:f6:4a:08:06:6d:16:26:ce:94:e7: 28:9a:f5:11:d8:d2:44:0c:60:27:4e:95:20:1c:41:b7:9a:02: 97:c4:fa:2a:55:e5:09:19:c2:62:97:06:a1:ca:73:d4:07:8e: 37:c8:ef:eb:33:7c:99:36:59:fe:65:83:c7:80:0a:c7:95:28: 78:38:96:bf:be:4d:36:cb:c8:25:6c:ea:72:6e:63:9f:d9:a5: 03:74:e1:5c:c1:90:be:32:98:0a:0c:6c:d7:94:a4:69:02:17: 0f:82:62:c6:65:22:85:38:8a:b1:78:80:19:14:62:96:e9:6f: 55:25:46:fa:d6:a4:ed:bf:98:aa:74:9b:de:a1:ff:e4:4a:5a: 68:be:da:2b:0e:45:f9:48:9d:97:82:4d:53:ed:97:c7:c0:97: 5a:7c:cc:d5:34:8d:64:c4:2c:13:79:59:c8:2b:3c:e2:e6:62: 0a:11:03:02:bc:84:fd:9e:0b:04:95:9d:21:70:20:3e:c7:59: c2:31:6e:cf:86:f4:4a:c7:6e:f2:3f:d5:44:93:25:99:e8:89: 73:89:2e:0c:6c:b7:60:f0:d9:f3:c2:f9:19:b2:81:91:f3:c8: 89:20:2e:a3:07:94:f1:fa:af:ae:2c:97:81:39:bc:2b:5b:e1: a9:ce:7d:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXGXFUL/JvCx4blsFITY1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNGVkZTFlN2JmNjcxOTllN2FiNmY1ZWQwMDQ5ZTk2MDgz MTczNjIwHhcNMjUxMjI1MjAwMDQzWhcNMjUxMjI2MjAwMDQzWjAzMTEwLwYDVQQD EygzZThkNjYxMmU3ZjRhYjMzZGQzNDY3YWEyNjU2MmUyN2NiNGVhZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg3Ig4z/FfeDd4HMCWS4InV6ozC9 UhFhyXc0Ad4VO6mrJL11hApKXc9qW87YSoVoFmjUS8Tcn9kuDqsSdPgqakWGV0aN zo6QXPsrp4Ghk9B/34MQ9PN+n+ySRrn1qbkWgpitnW6Y98NjnuCp7Kg6P9j1nmeq OBtLTksHrO6RvQrwmMAeg7I7LWfsy0QQDAequ+WiRuKzXoQJRMy9VQYQNNTN2W3J Pr50vRYTdvCpH3wt/tcdUlUpHSkVReAIkus0jTgfWJktnWnox3t3afPEL95Ziki2 CaB26r3Wl/xNJbyd9jd57sRaAnIAgk0B9bzHB5lkIxalT56RtVGQFM4gvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6NZhLn9Ksz3TRnqiZWLifLTq+/MB8GA1UdIwQY MBaAFMBO3h579nGZ56tvXtAEnpYIMXNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzkt OWU3MWY2YTg0ODAxLzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi80OWQwNTAtZGFjZS00NWVjLTgxMzktOWU3MWY2YTg0ODAx LzEvd0U3ZUhudjJjWm5ucTI5ZTBBU2VsZ2d4YzJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAj9LgQF d+b2SggGbRYmzpTnKJr1EdjSRAxgJ06VIBxBt5oCl8T6KlXlCRnCYpcGocpz1AeO N8jv6zN8mTZZ/mWDx4AKx5UoeDiWv75NNsvIJWzqcm5jn9mlA3ThXMGQvjKYCgxs 15SkaQIXD4JixmUihTiKsXiAGRRilulvVSVG+tak7b+YqnSb3qH/5EpaaL7aKw5F +Uidl4JNU+2Xx8CXWnzM1TSNZMQsE3lZyCs84uZiChEDAryE/Z4LBJWdIXAgPsdZ wjFuz4b0Ssdu8j/VRJMlmeiJc4kuDGy3YPDZ88L5GbKBkfPIiSAuoweU8fqvriyX gTm8K1vhqc59Nw== -----END CERTIFICATE-----Generated at Fri Dec 26 04:49:39 2025 by rpki-client