This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft File: dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json) Hash identifier: KKSsq7Rb/B3h5JbOrEfIswQ8ajwfjeoSkJJtzDJ5YMc= Subject key identifier: F0:A2:55:F4:59:5B:6F:E0:3C:BC:13:4B:83:E1:30:09:F0:CE:5D:B0 Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A Certificate issuer: /CN=7701ee4c1a226f9f62429f35756a78980a5b457a Certificate serial: 019B522AE24A771167C4008FF3B3694CC703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft Manifest number: 172C Signing time: Wed 24 Dec 2025 21:01:40 +0000 Manifest this update: Wed 24 Dec 2025 21:01:40 +0000 Manifest next update: Thu 25 Dec 2025 21:01:40 +0000 Files and hashes: 1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: +icX0Q1dRmE/G8LHYAWZLVCcVXJERvQmuZ1d3AQLDPs=) 2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:e2:4a:77:11:67:c4:00:8f:f3:b3:69:4c:c7:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a Validity Not Before: Dec 24 21:01:40 2025 GMT Not After : Dec 25 21:01:40 2025 GMT Subject: CN=f0a255f4595b6fe03cbc134b83e13009f0ce5db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:59:fa:41:06:34:dd:fa:91:80:e0:f9:6f:46: 2a:fc:a1:c6:f9:3a:70:7a:40:80:ed:77:d7:20:77: 93:cf:58:63:b4:ac:39:44:50:42:97:a5:fe:57:a5: f5:fe:a0:bb:c7:37:aa:d8:cc:2a:31:be:16:0e:91: e5:2c:27:79:15:b4:a0:62:e1:83:3e:22:b4:15:5a: 3f:82:45:fa:b0:81:3b:96:03:34:ca:6f:4d:fd:cb: 4d:25:04:a9:43:3f:58:b0:59:85:0f:f1:f9:4d:ec: 73:1b:26:50:d6:37:a3:01:8b:d7:77:2d:bc:91:0d: bd:0f:1b:98:5e:f6:98:8e:7e:bf:8a:67:35:f4:07: 3b:58:bd:82:e5:61:83:c2:2c:ba:9d:43:ff:db:35: 9d:b7:4f:7d:d2:a1:65:8c:1a:d8:c5:43:58:de:18: 11:c2:b5:79:0d:5a:76:e1:59:fd:e1:fd:b5:8b:10: f0:af:e0:f0:d9:1a:99:7b:08:70:69:b2:3b:7f:01: 30:4e:ac:98:1c:b6:d2:c9:26:04:c2:ee:a9:68:7c: fb:09:07:0d:79:8b:de:f1:66:8c:47:f4:10:f8:cc: 06:f4:40:00:99:10:6c:30:61:b6:cd:bf:51:b2:16: ca:a2:d4:a6:b5:91:03:f9:c4:8c:9c:24:23:4e:e8: e2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:A2:55:F4:59:5B:6F:E0:3C:BC:13:4B:83:E1:30:09:F0:CE:5D:B0 X509v3 Authority Key Identifier: keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:97:90:f4:dd:31:03:9b:59:4f:35:e6:bb:7f:41:3f:fa:10: 9d:c7:80:07:2f:41:ce:ca:f1:a8:12:1d:9a:5f:e3:78:d7:32: ad:80:f9:06:6f:7c:50:ed:ff:46:2d:c7:08:fc:10:1e:bc:ba: e6:5c:70:00:59:cb:4e:5b:cb:e0:62:c8:2a:72:ef:3c:4e:2a: e5:40:b8:8b:ed:41:95:9d:9d:9d:87:b3:4b:5c:1f:c1:10:a6: 49:4c:66:ce:1a:d6:52:a3:b9:0b:50:8a:80:4f:d1:c1:53:45: 95:3f:52:99:e0:7b:99:a3:9b:db:b1:b3:de:96:6e:21:b0:08: cc:c6:77:88:7a:25:d2:92:54:2a:27:d3:98:d6:0f:9f:aa:58: 2a:d0:88:74:a7:30:44:5b:84:79:b2:dc:99:0a:7f:b7:c4:89: fe:dd:a1:13:1a:d2:9e:8e:11:7a:a8:b3:ed:e6:f8:38:fc:25: 2c:bc:81:89:2a:6a:fe:5c:d2:9c:cc:be:17:9d:70:97:43:a8: f0:2f:90:a0:01:97:66:ad:d6:d5:bb:07:a9:35:5f:9e:a9:48: 22:60:3c:18:49:7c:28:8c:04:34:7a:c5:35:bf:ba:7f:bf:3f: a4:4b:33:bf:62:f4:26:86:d4:73:d8:7f:49:ca:2c:c3:e1:26: 51:f1:03:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKuJKdxFnxACP87NpTMcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MDFlZTRjMWEyMjZmOWY2MjQyOWYzNTc1NmE3ODk4MGE1 YjQ1N2EwHhcNMjUxMjI0MjEwMTQwWhcNMjUxMjI1MjEwMTQwWjAzMTEwLwYDVQQD EyhmMGEyNTVmNDU5NWI2ZmUwM2NiYzEzNGI4M2UxMzAwOWYwY2U1ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFn6QQY03fqRgOD5b0Yq/KHG+Tpw ekCA7XfXIHeTz1hjtKw5RFBCl6X+V6X1/qC7xzeq2MwqMb4WDpHlLCd5FbSgYuGD PiK0FVo/gkX6sIE7lgM0ym9N/ctNJQSpQz9YsFmFD/H5TexzGyZQ1jejAYvXdy28 kQ29DxuYXvaYjn6/imc19Ac7WL2C5WGDwiy6nUP/2zWdt0990qFljBrYxUNY3hgR wrV5DVp24Vn94f21ixDwr+Dw2RqZewhwabI7fwEwTqyYHLbSySYEwu6paHz7CQcN eYve8WaMR/QQ+MwG9EAAmRBsMGG2zb9RshbKotSmtZED+cSMnCQjTuji+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCiVfRZW2/gPLwTS4PhMAnwzl2wMB8GA1UdIwQY MBaAFHcB7kwaIm+fYkKfNXVqeJgKW0V6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHdIdVRCb2liNTlpUXA4MWRXcDRtQXBiUlhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iNzI5OTktMDk1Mi00NTc2LWIxMTgt MjFlNzM5NTYzNjgzLzEvZHdIdVRCb2liNTlpUXA4MWRXcDRtQXBiUlhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iNzI5OTktMDk1Mi00NTc2LWIxMTgtMjFlNzM5NTYzNjgz LzEvZHdIdVRCb2liNTlpUXA4MWRXcDRtQXBiUlhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5eQ9N0x A5tZTzXmu39BP/oQnceABy9BzsrxqBIdml/jeNcyrYD5Bm98UO3/Ri3HCPwQHry6 5lxwAFnLTlvL4GLIKnLvPE4q5UC4i+1BlZ2dnYezS1wfwRCmSUxmzhrWUqO5C1CK gE/RwVNFlT9SmeB7maOb27Gz3pZuIbAIzMZ3iHol0pJUKifTmNYPn6pYKtCIdKcw RFuEebLcmQp/t8SJ/t2hExrSno4Reqiz7eb4OPwlLLyBiSpq/lzSnMy+F51wl0Oo 8C+QoAGXZq3W1bsHqTVfnqlIImA8GEl8KIwENHrFNb+6f78/pEszv2L0JobUc9h/ Scosw+EmUfEDZQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:02:52 2025 by rpki-client