This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft File: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft (raw, json) Hash identifier: bwy099RTjpBI5OZ6r6HHCULrGCn2whcsB2w4rJkG2AI= Subject key identifier: 82:F4:65:B7:9B:07:4B:D1:6D:C2:79:95:90:9C:64:E9:18:E4:6E:E8 Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6 Certificate serial: 019B405A8A83DFC69DD9497FC0295FAF7034 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 10:00:34 +0000 Manifest this update: Sun 21 Dec 2025 10:00:34 +0000 Manifest next update: Mon 22 Dec 2025 10:00:34 +0000 Files and hashes: 1: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (hash: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=) 2: wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl (hash: 1AD10RG5xoUiStew5uTmIaMPMMU53fnDNRMTUMMdwIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:8a:83:df:c6:9d:d9:49:7f:c0:29:5f:af:70:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6 Validity Not Before: Dec 21 10:00:34 2025 GMT Not After : Dec 22 10:00:34 2025 GMT Subject: CN=82f465b79b074bd16dc27995909c64e918e46ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:ed:92:f5:4b:a9:c7:7a:f7:19:9c:36:9b: fe:b3:7a:05:31:70:14:12:c4:8e:e7:99:2a:92:b1: f3:9b:2a:7d:97:e0:82:47:e8:62:df:75:97:b2:d2: d1:25:2b:27:83:14:ce:1f:42:eb:77:df:5e:2e:65: 23:ab:00:77:12:d1:f9:8f:1f:61:6e:a7:d2:be:4b: 22:e7:db:37:b9:bf:c1:de:bf:db:64:cd:55:2f:fd: 7f:ee:75:22:76:2b:3a:28:9f:6b:1e:b9:98:ff:9d: 77:bb:8f:0c:4b:dd:94:a3:40:d3:95:6e:31:11:d8: f0:99:d8:66:ea:91:e4:bb:c3:aa:75:c3:c9:c0:ef: 82:fd:3c:de:5a:cf:c6:3f:84:21:c8:fa:b3:ce:7e: 06:25:70:9e:c7:bf:90:22:00:d3:ed:88:38:20:3d: 54:50:ee:1e:3b:bc:08:ee:11:c3:93:fd:20:18:12: ae:bd:f9:40:b4:46:84:09:ef:1b:1a:54:ee:1b:c2: 59:05:2c:6d:58:50:c7:19:83:cb:e3:1f:e3:0d:9a: 49:fc:d9:ab:6c:fe:ca:ea:3d:a2:e1:01:50:fc:b1: 07:dc:32:ff:01:5a:f0:55:fc:95:31:c4:36:e4:05: 7e:90:15:b0:86:0b:33:ab:27:17:be:9a:3e:48:77: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F4:65:B7:9B:07:4B:D1:6D:C2:79:95:90:9C:64:E9:18:E4:6E:E8 X509v3 Authority Key Identifier: keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:bd:1a:1e:68:33:b3:0d:eb:fc:8d:57:2b:26:f5:6e:b5:f3: 53:39:e1:8e:23:fc:0b:91:bf:65:5f:33:80:f4:3f:94:58:c2: ca:34:c5:a4:bd:f3:f2:4e:51:d1:5c:dc:dd:88:7d:0e:91:76: 5b:56:3b:5d:e2:d2:2d:51:78:9b:45:2a:e1:8d:0a:25:b4:ba: 14:26:1c:e7:d2:51:95:bf:ff:72:9a:36:ca:67:64:f2:bc:c9: d3:b1:a1:17:26:7e:b1:ce:e1:21:7d:a1:2e:c1:70:3b:6d:5f: 55:ce:04:fa:4d:35:1a:f2:2f:32:9d:90:c8:dd:02:d2:63:bb: c9:08:63:39:b1:13:5b:85:38:d5:f5:ee:b9:04:e5:06:9f:35: 9c:e0:f6:ff:2f:b3:15:f8:b9:56:5c:43:98:5e:01:06:1f:9c: b9:7e:29:55:88:ab:fd:f1:48:42:a0:9e:f2:73:e4:3b:f9:29: 85:ec:34:25:d8:be:39:ab:2e:e5:f7:ed:56:c5:df:bd:bd:c4: f7:0b:5f:06:ed:cd:dc:32:f6:99:55:46:43:77:61:06:de:29: d0:04:fb:97:91:36:8d:2c:2d:67:41:9b:7c:8a:2f:0f:c1:4b: e2:f4:bf:f6:74:e6:54:b3:59:a9:99:cf:f5:42:67:2a:87:03: fe:95:0a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWoqD38ad2Ul/wClfr3A0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2YxNzU0MTczMmY1N2FiZmYxMjk0YzcxYjUzM2ViNTY3 NDZmZDYwHhcNMjUxMjIxMTAwMDM0WhcNMjUxMjIyMTAwMDM0WjAzMTEwLwYDVQQD Eyg4MmY0NjViNzliMDc0YmQxNmRjMjc5OTU5MDljNjRlOTE4ZTQ2ZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm3tkvVLqcd69xmcNpv+s3oFMXAU EsSO55kqkrHzmyp9l+CCR+hi33WXstLRJSsngxTOH0Lrd99eLmUjqwB3EtH5jx9h bqfSvksi59s3ub/B3r/bZM1VL/1/7nUidis6KJ9rHrmY/513u48MS92Uo0DTlW4x Edjwmdhm6pHku8OqdcPJwO+C/TzeWs/GP4QhyPqzzn4GJXCex7+QIgDT7Yg4ID1U UO4eO7wI7hHDk/0gGBKuvflAtEaECe8bGlTuG8JZBSxtWFDHGYPL4x/jDZpJ/Nmr bP7K6j2i4QFQ/LEH3DL/AVrwVfyVMcQ25AV+kBWwhgszqycXvpo+SHcDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL0ZbebB0vRbcJ5lZCcZOkY5G7oMB8GA1UdIwQY MBaAFME/F1QXMvV6v/EpTHG1M+tWdG/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0Nzgt ZDhhMWMzMjk1ZTg5LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0NzgtZDhhMWMzMjk1ZTg5 LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlr0aHmgz sw3r/I1XKyb1brXzUznhjiP8C5G/ZV8zgPQ/lFjCyjTFpL3z8k5R0Vzc3Yh9DpF2 W1Y7XeLSLVF4m0Uq4Y0KJbS6FCYc59JRlb//cpo2ymdk8rzJ07GhFyZ+sc7hIX2h LsFwO21fVc4E+k01GvIvMp2QyN0C0mO7yQhjObETW4U41fXuuQTlBp81nOD2/y+z Ffi5VlxDmF4BBh+cuX4pVYir/fFIQqCe8nPkO/kphew0Jdi+Oasu5fftVsXfvb3E 9wtfBu3N3DL2mVVGQ3dhBt4p0AT7l5E2jSwtZ0GbfIovD8FL4vS/9nTmVLNZqZnP 9UJnKocD/pUK6Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:59 2025 by rpki-client