This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft File: wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json) Hash identifier: 8Mwr12/HTjkzTJZ7NRJY3flA1Ij8WM3lcjdZWj+eKlw= Subject key identifier: EE:0F:D4:EB:3F:94:C3:10:B7:3A:7A:9E:73:2B:EC:64:C5:F0:14:01 Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C Certificate issuer: /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c Certificate serial: 019B6DA17820C4F8C5112016E88F2C04F9E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 05:00:57 +0000 Manifest this update: Tue 30 Dec 2025 05:00:57 +0000 Manifest next update: Wed 31 Dec 2025 05:00:57 +0000 Files and hashes: 1: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: YNl90RYU7AhP9LL0McP0yjYtoXAa66hyTltqBFxOCWI=) 2: xBCmHDQdfHeyTzhklHfbHAtEjac.roa (hash: v4hxG9/eDV05pt8qFpOVheOZJs0ehEmajsKsd5Fgmbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:a1:78:20:c4:f8:c5:11:20:16:e8:8f:2c:04:f9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c Validity Not Before: Dec 30 05:00:57 2025 GMT Not After : Dec 31 05:00:57 2025 GMT Subject: CN=ee0fd4eb3f94c310b73a7a9e732bec64c5f01401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1a:7a:42:67:52:dd:39:75:2a:eb:40:36:e1: f3:e4:89:5d:58:5e:63:79:4f:ed:bb:30:8d:57:7e: 3f:73:84:4e:30:ce:c6:23:52:91:a7:27:aa:a9:62: f5:79:d0:ef:1d:80:45:f9:92:21:ae:89:08:20:c1: ae:4a:40:bd:a1:46:53:f5:ad:6f:13:cc:64:d2:d9: 65:e3:3a:72:ce:3b:6a:87:0c:e9:98:a2:4a:3f:94: f2:fe:f7:b4:38:1c:4f:32:ed:46:2c:67:77:61:09: 60:11:73:4f:5c:53:de:4e:32:d6:96:70:73:bc:d6: b5:e4:9e:a0:6b:b2:d1:fa:81:8b:69:52:2d:75:db: ff:eb:51:e1:a5:26:a8:de:08:1a:86:23:0e:99:2b: a3:a7:76:f1:e7:f2:96:41:17:55:0a:b9:e2:88:14: b2:57:2b:2c:5c:08:c5:cc:3e:c0:bc:0e:c4:83:86: b0:be:79:15:f0:29:9c:2c:8a:1d:12:61:d2:8b:09: e6:59:5f:52:35:b6:04:57:0a:81:8a:28:f3:d9:2d: 79:c7:71:21:3e:37:ad:9a:eb:71:02:1f:ba:db:f2: 36:f5:de:cc:60:60:d9:a5:6f:67:f0:70:60:b3:cb: 68:ba:fe:b0:4f:33:7d:0f:7f:9d:8f:e1:91:1f:46: 44:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0F:D4:EB:3F:94:C3:10:B7:3A:7A:9E:73:2B:EC:64:C5:F0:14:01 X509v3 Authority Key Identifier: keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:c4:e3:6d:42:d9:1b:05:a8:e8:41:01:d9:9f:d7:f8:59:bf: 82:55:97:cd:db:20:8f:11:b5:91:7a:80:b2:ae:cb:3a:d3:22: fa:d5:f4:e7:4e:ab:f6:86:8f:75:06:0d:c9:4a:fd:ba:02:30: 82:2b:24:39:a7:5b:e8:32:b8:fa:62:e4:8b:aa:f6:06:b2:6a: 33:74:29:55:e4:ec:39:ff:6b:f1:4b:e6:96:9b:a6:df:1d:1c: 66:9f:b2:c0:22:4e:7b:02:a6:f2:f5:d4:f8:61:f9:44:fe:f5: f6:b7:78:cf:33:93:66:cd:7d:f1:18:c0:b1:a4:02:f9:95:03: 8a:97:63:3a:fc:7b:46:23:8c:8a:56:5d:2d:53:99:97:fc:45: bf:52:64:b3:55:98:1b:f6:41:d7:eb:6a:16:67:90:be:56:bf: b5:e2:4d:cd:d7:c1:03:73:bd:50:06:8f:44:a3:9f:49:f3:8a: 0f:a9:c0:af:98:38:b6:88:55:fd:1d:46:bc:e4:21:e6:0d:15: 54:7a:0f:32:d4:70:2c:45:68:91:d9:c7:58:05:5e:80:ec:a3: 2a:68:93:9d:31:81:75:5e:c1:0e:84:ad:3d:db:83:f6:f4:73: 10:73:08:6b:4b:d4:9c:00:9c:5b:45:30:d4:f3:c3:bd:af:05: 4d:aa:b5:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttoXggxPjFESAW6I8sBPnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwY2IzYWI0MzkyZWFhMGIzOGYxOTY1ZDU0ZmNiZWViNTA2 N2FkMWMwHhcNMjUxMjMwMDUwMDU3WhcNMjUxMjMxMDUwMDU3WjAzMTEwLwYDVQQD EyhlZTBmZDRlYjNmOTRjMzEwYjczYTdhOWU3MzJiZWM2NGM1ZjAxNDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxp6QmdS3Tl1KutANuHz5IldWF5j eU/tuzCNV34/c4ROMM7GI1KRpyeqqWL1edDvHYBF+ZIhrokIIMGuSkC9oUZT9a1v E8xk0tll4zpyzjtqhwzpmKJKP5Ty/ve0OBxPMu1GLGd3YQlgEXNPXFPeTjLWlnBz vNa15J6ga7LR+oGLaVItddv/61HhpSao3ggahiMOmSujp3bx5/KWQRdVCrniiBSy VyssXAjFzD7AvA7Eg4awvnkV8CmcLIodEmHSiwnmWV9SNbYEVwqBiijz2S15x3Eh PjetmutxAh+62/I29d7MYGDZpW9n8HBgs8touv6wTzN9D3+dj+GRH0ZEeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4P1Os/lMMQtzp6nnMr7GTF8BQBMB8GA1UdIwQY MBaAFMDLOrQ5LqoLOPGWXVT8vutQZ60cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01zNnREa3VxZ3M0OFpaZFZQeS02MUJuclJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jZTQ4MjItYzk5MS00MGYwLWIxNTQt YjhiYmNhODYzNmNjLzEvd01zNnREa3VxZ3M0OFpaZFZQeS02MUJuclJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9jZTQ4MjItYzk5MS00MGYwLWIxNTQtYjhiYmNhODYzNmNj LzEvd01zNnREa3VxZ3M0OFpaZFZQeS02MUJuclJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcTjbULZ GwWo6EEB2Z/X+Fm/glWXzdsgjxG1kXqAsq7LOtMi+tX0506r9oaPdQYNyUr9ugIw giskOadb6DK4+mLki6r2BrJqM3QpVeTsOf9r8Uvmlpum3x0cZp+ywCJOewKm8vXU +GH5RP719rd4zzOTZs198RjAsaQC+ZUDipdjOvx7RiOMilZdLVOZl/xFv1Jks1WY G/ZB1+tqFmeQvla/teJNzdfBA3O9UAaPRKOfSfOKD6nAr5g4tohV/R1GvOQh5g0V VHoPMtRwLEVokdnHWAVegOyjKmiTnTGBdV7BDoStPduD9vRzEHMIa0vUnACcW0Uw 1PPDva8FTaq1XQ== -----END CERTIFICATE-----Generated at Tue Dec 30 14:57:59 2025 by rpki-client