This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft (raw, json) Hash identifier: IgR9kaKfpXBfaaBzj7HN7uWQ1Z1GjiTBJnHdavvSF60= Subject key identifier: C9:D1:86:B7:0E:FF:C7:55:AC:9E:F9:B3:13:7A:9D:C7:65:E4:BC:43 Authority key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 Certificate issuer: /CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Certificate serial: 019B446E2ECD53ACCC3A93CE379F682BC4F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 05:00:30 +0000 Manifest this update: Mon 22 Dec 2025 05:00:30 +0000 Manifest next update: Tue 23 Dec 2025 05:00:30 +0000 Files and hashes: 1: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl (hash: HPNcJe2I+GN5w9XOUyk8PagUcaTiGymQBsYfkeGmHJI=) 2: s9vftAOB-g2w5mpIAbtd2ux_YeM.roa (hash: vWHWtXPoZqDrxtoN/353NMnYSKtaPj8wKrdcVBwN80A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:2e:cd:53:ac:cc:3a:93:ce:37:9f:68:2b:c4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70b07459e2f116fb5a97f11bae75c0db491c196 Validity Not Before: Dec 22 05:00:30 2025 GMT Not After : Dec 23 05:00:30 2025 GMT Subject: CN=c9d186b70effc755ac9ef9b3137a9dc765e4bc43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c7:82:0f:87:35:a7:84:13:c7:a7:e4:08:5c: 8b:b4:a8:c4:60:9c:d0:c6:8b:f1:d5:bc:58:a5:e0: 7b:fa:78:03:e2:86:0c:66:65:8a:e8:a2:b1:6c:72: 49:b0:32:f1:a1:79:17:c2:47:a9:b9:67:2d:44:d2: 19:dc:6b:10:2f:b6:0f:f3:68:77:8a:66:8f:f7:ba: db:95:2b:fa:5e:32:dc:0f:51:e8:15:03:a3:c7:36: b5:bf:8f:e4:d4:fd:a7:5e:df:f7:e1:74:91:90:e5: 5f:5b:1b:29:e2:5f:a9:fc:6d:0d:04:80:89:9b:b6: 1d:1f:63:eb:7a:96:4d:9f:1f:b8:34:85:4d:13:35: 5c:a4:82:a7:19:8d:b9:55:e6:48:04:ff:7d:0d:d0: c6:ce:93:83:48:fb:06:25:da:8d:fa:6b:b7:6f:5a: ee:ed:94:ea:d9:f0:e9:45:3b:83:ee:29:56:9d:cb: 5e:7d:8c:0d:94:d2:2d:29:fe:2a:74:b0:48:52:83: 36:08:d3:ec:1c:aa:56:e9:7e:1d:d2:ed:0d:11:c5: 6f:5e:62:f6:3c:ef:4d:61:fa:fc:ce:2a:d0:c2:f1: 7b:18:65:00:52:db:37:67:93:5a:9b:a8:5d:95:fd: 7b:83:39:88:35:00:ed:ed:33:eb:80:b0:9f:8b:b5: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D1:86:B7:0E:FF:C7:55:AC:9E:F9:B3:13:7A:9D:C7:65:E4:BC:43 X509v3 Authority Key Identifier: keyid:D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b1:b5:75:9f:89:ce:d9:02:61:a5:10:23:25:78:a8:66:a2: 80:f0:2b:07:11:38:3a:aa:7d:62:f9:cf:5f:8d:d3:b3:10:e1: 9e:48:97:92:11:90:d4:67:65:2f:0e:aa:1b:ad:71:d7:03:6a: 57:91:ee:17:5d:a0:8a:c3:61:27:ca:96:9d:4f:03:ee:41:af: 35:af:d0:2f:23:ce:f5:d3:76:0c:a1:54:6c:bf:74:16:7e:77: 79:10:2b:ea:b7:32:c0:ec:de:cc:f7:e2:22:0d:d7:9e:f1:e1: 5a:18:3f:54:57:63:2f:65:51:60:22:e5:b6:6b:b3:6d:13:66: b3:cf:e8:aa:1b:12:cb:ed:3f:1f:8a:40:9a:bc:da:22:cf:bd: 1f:48:79:69:92:0e:07:c0:47:da:35:c2:25:d9:50:3a:67:80: 22:1f:e2:24:6f:91:a4:c0:63:51:31:a4:7f:28:9a:f3:e8:ce: 64:90:17:4c:29:a5:3e:1f:b0:38:ee:cf:ff:cd:f3:13:4e:0b: bb:89:e0:8e:de:85:a2:f5:a8:e9:1f:6a:d8:33:31:ea:53:4e: 01:e8:ed:83:a5:3a:62:6e:ca:a8:b3:d3:d3:19:57:e4:1c:b8: 24:a5:77:b9:98:b4:e0:5c:e3:61:5e:70:bc:cd:08:06:9e:f0: fd:33:34:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbi7NU6zMOpPON59oK8T2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGIwNzQ1OWUyZjExNmZiNWE5N2YxMWJhZTc1YzBkYjQ5 MWMxOTYwHhcNMjUxMjIyMDUwMDMwWhcNMjUxMjIzMDUwMDMwWjAzMTEwLwYDVQQD EyhjOWQxODZiNzBlZmZjNzU1YWM5ZWY5YjMxMzdhOWRjNzY1ZTRiYzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArseCD4c1p4QTx6fkCFyLtKjEYJzQ xovx1bxYpeB7+ngD4oYMZmWK6KKxbHJJsDLxoXkXwkepuWctRNIZ3GsQL7YP82h3 imaP97rblSv6XjLcD1HoFQOjxza1v4/k1P2nXt/34XSRkOVfWxsp4l+p/G0NBICJ m7YdH2PrepZNnx+4NIVNEzVcpIKnGY25VeZIBP99DdDGzpODSPsGJdqN+mu3b1ru 7ZTq2fDpRTuD7ilWnctefYwNlNItKf4qdLBIUoM2CNPsHKpW6X4d0u0NEcVvXmL2 PO9NYfr8zirQwvF7GGUAUts3Z5Nam6hdlf17gzmINQDt7TPrgLCfi7WAQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnRhrcO/8dVrJ75sxN6ncdl5LxDMB8GA1UdIwQY MBaAFNcLB0WeLxFvtal/EbrnXA20kcGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEt YWFjZTcwYWJjNmEwLzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9kMDZmNWYtYWQ2OS00ODg1LThjNzEtYWFjZTcwYWJjNmEw LzEvMXdzSFJaNHZFVy0xcVg4UnV1ZGNEYlNSd1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7G1dZ+J ztkCYaUQIyV4qGaigPArBxE4Oqp9YvnPX43TsxDhnkiXkhGQ1GdlLw6qG61x1wNq V5HuF12gisNhJ8qWnU8D7kGvNa/QLyPO9dN2DKFUbL90Fn53eRAr6rcywOzezPfi Ig3XnvHhWhg/VFdjL2VRYCLltmuzbRNms8/oqhsSy+0/H4pAmrzaIs+9H0h5aZIO B8BH2jXCJdlQOmeAIh/iJG+RpMBjUTGkfyia8+jOZJAXTCmlPh+wOO7P/83zE04L u4ngjt6FovWo6R9q2DMx6lNOAejtg6U6Ym7KqLPT0xlX5By4JKV3uZi04FzjYV5w vM0IBp7w/TM0uA== -----END CERTIFICATE-----Generated at Mon Dec 22 09:41:51 2025 by rpki-client