This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft File: wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json) Hash identifier: vk4wA66xXUcgHTsAOC9WtZQXwjgqVev6z1bhlzc1QJE= Subject key identifier: FF:A3:7B:8B:D1:6B:44:25:94:A9:5B:F4:0C:AA:AC:51:C1:24:FD:73 Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f Certificate serial: 019B3F116B60563868C84B955F8C22D84CD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft Manifest number: 0816 Signing time: Sun 21 Dec 2025 04:01:04 +0000 Manifest this update: Sun 21 Dec 2025 04:01:04 +0000 Manifest next update: Mon 22 Dec 2025 04:01:04 +0000 Files and hashes: 1: HKldyiYx0sP4BotQ-G1ccS2afug.roa (hash: S4NVBzYTXH0ZvYQ/TjKg8cdi2I+vo34ebyJooJvff+M=) 2: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: u1iCearCtswVRWChzqYWhyZTPwYGlCeNyuFtdKEyHqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:6b:60:56:38:68:c8:4b:95:5f:8c:22:d8:4c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f Validity Not Before: Dec 21 04:01:04 2025 GMT Not After : Dec 22 04:01:04 2025 GMT Subject: CN=ffa37b8bd16b442594a95bf40caaac51c124fd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:36:c6:6b:e4:f7:16:90:50:6e:d2:6d:2e: 02:ab:f4:42:6b:b7:30:1f:46:68:fb:b0:38:bd:40: 48:15:2d:8b:89:d5:ee:8b:be:1e:69:47:b9:98:51: 3a:3d:92:19:4c:30:62:a2:d8:8f:80:ad:4b:21:00: 0f:25:fd:13:9b:57:bf:11:11:6a:98:0e:06:a8:be: ba:57:2f:b3:14:e1:a1:0f:8d:42:b8:47:c2:cc:e6: ca:e0:e2:a5:46:1f:9f:c4:e9:1d:90:93:43:fa:e9: 97:a9:23:17:50:e7:21:6d:87:f6:a2:26:da:da:14: 04:59:3f:2d:b5:3a:44:c4:04:a6:34:4c:a7:68:0c: 81:5d:5a:92:0a:49:3e:57:76:62:26:f1:86:4f:b4: 92:eb:c4:7c:16:96:89:5c:0c:04:bf:ec:2b:3d:ec: 2f:03:93:ba:f2:97:a6:bc:aa:68:96:fc:c1:9c:1c: f4:97:e4:fd:cf:07:a3:29:4a:b7:97:18:49:4a:5c: 10:cd:8d:a8:0f:48:2f:64:40:70:48:35:2e:4b:aa: d0:33:49:f3:c3:64:6d:30:8f:71:10:da:44:ee:bb: 6b:95:63:09:7a:df:ee:eb:82:bf:20:a1:14:03:db: 76:1d:89:1f:1e:1c:08:1a:61:ae:a9:18:e2:d0:96: ca:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A3:7B:8B:D1:6B:44:25:94:A9:5B:F4:0C:AA:AC:51:C1:24:FD:73 X509v3 Authority Key Identifier: keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fd:53:9c:27:90:d0:21:29:9c:a6:5f:b3:39:69:40:12:4c: 32:e1:ec:39:ed:e6:f5:69:fd:11:4f:e6:62:96:10:38:21:be: be:e4:e0:b5:39:e3:2b:9c:b2:f7:13:3d:6d:00:af:2f:97:39: ac:1e:7a:2b:8d:e5:46:75:61:78:79:f6:62:99:2c:f8:57:4e: fd:4f:b3:77:c7:c4:62:b9:9d:72:a9:d6:fa:1f:59:6d:42:3a: a8:db:86:76:18:48:0c:84:9c:5f:95:5a:e5:c3:1c:60:89:89: 0c:eb:14:df:fe:3f:9f:b0:d1:ca:01:9f:da:88:9a:d0:e7:7e: 0f:a4:53:2f:40:79:0c:e4:f2:e0:f3:df:dc:b4:42:53:33:ae: f9:b9:4d:70:7f:31:18:e7:a5:56:03:f7:7e:64:59:13:aa:46: 2b:be:9c:b3:9d:73:36:59:34:26:09:57:5d:39:6b:73:6c:a5: ef:ef:ba:d6:e1:98:99:ae:9d:8b:c8:53:28:a4:99:30:aa:f5: 2c:76:9f:84:57:55:26:be:e9:7e:89:22:b5:62:44:80:2a:ec: c2:fe:a8:38:71:66:6c:76:bb:bd:98:74:c9:36:9d:f8:5f:44: 48:42:39:f2:5c:50:6b:41:80:e6:78:9b:d3:3e:7b:45:b6:d5: eb:f4:98:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EWtgVjhoyEuVX4wi2EzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5 YmY3N2YwHhcNMjUxMjIxMDQwMTA0WhcNMjUxMjIyMDQwMTA0WjAzMTEwLwYDVQQD EyhmZmEzN2I4YmQxNmI0NDI1OTRhOTViZjQwY2FhYWM1MWMxMjRmZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+U2xmvk9xaQUG7SbS4Cq/RCa7cw H0Zo+7A4vUBIFS2LidXui74eaUe5mFE6PZIZTDBiotiPgK1LIQAPJf0Tm1e/ERFq mA4GqL66Vy+zFOGhD41CuEfCzObK4OKlRh+fxOkdkJND+umXqSMXUOchbYf2oiba 2hQEWT8ttTpExASmNEynaAyBXVqSCkk+V3ZiJvGGT7SS68R8FpaJXAwEv+wrPewv A5O68pemvKpolvzBnBz0l+T9zwejKUq3lxhJSlwQzY2oD0gvZEBwSDUuS6rQM0nz w2RtMI9xENpE7rtrlWMJet/u64K/IKEUA9t2HYkfHhwIGmGuqRji0JbKcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+je4vRa0QllKlb9AyqrFHBJP1zMB8GA1UdIwQY MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt MzQ3YTBmN2M1YjA4LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4 LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlv1TnCeQ 0CEpnKZfszlpQBJMMuHsOe3m9Wn9EU/mYpYQOCG+vuTgtTnjK5yy9xM9bQCvL5c5 rB56K43lRnVheHn2Ypks+FdO/U+zd8fEYrmdcqnW+h9ZbUI6qNuGdhhIDIScX5Va 5cMcYImJDOsU3/4/n7DRygGf2oia0Od+D6RTL0B5DOTy4PPf3LRCUzOu+blNcH8x GOelVgP3fmRZE6pGK76cs51zNlk0JglXXTlrc2yl7++61uGYma6di8hTKKSZMKr1 LHafhFdVJr7pfokitWJEgCrswv6oOHFmbHa7vZh0yTad+F9ESEI58lxQa0GA5nib 0z57RbbV6/SYJg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:41:57 2025 by rpki-client