This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft File: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft (raw, json) Hash identifier: 3tfloBJ7Dl+kI5bd+CfmWy0HfePOtVFbON4gUkIZrtA= Subject key identifier: 3D:D5:67:7D:BC:07:7B:60:87:FF:CB:1A:9B:3F:AC:27:D2:F9:4F:9A Authority key identifier: C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40 Certificate issuer: /CN=c037958083b641b773123ceada7bef27558e5940 Certificate serial: 019B42EE452730F5AFA09A6DD35EB3710A39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:10 +0000 Manifest this update: Sun 21 Dec 2025 22:01:10 +0000 Manifest next update: Mon 22 Dec 2025 22:01:10 +0000 Files and hashes: 1: G04lQHkrBdpuXzaWHZ8TU8JabhU.roa (hash: Pf3n2aY4cgJyph0KOBPCn/jMgorMxrNstlYjIBjVB/Q=) 2: wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl (hash: TPd1xJqvuBfkoBAzdNL3KKIHeFcepwJFX9aqRef6BVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:45:27:30:f5:af:a0:9a:6d:d3:5e:b3:71:0a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c037958083b641b773123ceada7bef27558e5940 Validity Not Before: Dec 21 22:01:10 2025 GMT Not After : Dec 22 22:01:10 2025 GMT Subject: CN=3dd5677dbc077b6087ffcb1a9b3fac27d2f94f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:ce:58:fb:45:78:e0:03:de:dc:6b:19:7c: ed:0d:d7:c2:dc:cc:c2:ad:fb:5c:59:85:58:4c:09: dd:7a:45:a4:a4:4a:07:3a:ec:65:6a:c6:20:1f:c6: 07:63:85:72:d9:a7:1e:da:e0:73:6d:d2:92:25:46: 46:d7:88:f7:82:bb:4f:5e:a6:17:e8:cb:98:81:03: 08:39:36:fa:82:f3:77:77:9b:1c:a5:95:52:e3:fc: f4:b8:a0:99:af:6e:15:a2:14:9f:ba:de:39:0d:06: 93:8c:66:3f:bf:38:f1:23:97:75:49:99:83:e6:1f: 9b:2a:bc:7c:2f:23:91:62:fb:ef:ac:3b:70:9c:0f: 2f:ba:d5:2b:87:39:66:a8:11:f5:67:75:18:96:a4: 8b:ab:48:15:38:f7:55:17:11:b1:1b:b7:f0:1b:48: 09:d9:00:74:90:3c:78:21:c9:e6:33:3d:e3:08:71: f5:12:c9:94:59:c9:e9:52:9e:93:47:56:f7:1c:e0: 06:5a:97:43:c0:99:3a:e3:f2:0f:99:1e:8a:e3:52: 2d:7f:53:db:6f:cf:f3:6b:15:1b:b0:63:05:ef:30: 6f:cd:16:1a:ef:aa:eb:43:31:b2:d3:58:49:67:97: e9:ab:08:ce:4a:c2:92:59:99:83:9c:23:d4:d5:35: 44:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D5:67:7D:BC:07:7B:60:87:FF:CB:1A:9B:3F:AC:27:D2:F9:4F:9A X509v3 Authority Key Identifier: keyid:C0:37:95:80:83:B6:41:B7:73:12:3C:EA:DA:7B:EF:27:55:8E:59:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/07cdaa-99ff-441e-8050-b2d2a2f0c782/1/wDeVgIO2QbdzEjzq2nvvJ1WOWUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:88:c4:52:00:f5:4d:78:cc:ab:f8:ed:6f:6a:cf:f7:bb:08: 66:cb:8e:56:d4:da:9a:7c:b2:42:10:05:49:8c:0a:b2:6f:85: cc:96:56:b6:65:00:05:8e:40:2b:de:6c:e3:cc:cb:83:9a:a5: 59:5c:63:c2:f5:b2:75:12:b6:1f:99:eb:f0:c8:18:d9:5e:2c: bf:88:aa:06:c9:d6:d4:12:02:77:f5:50:26:20:60:3c:eb:a3: d3:d3:8c:a0:3f:98:77:f5:a0:8f:68:22:0c:fe:59:3d:b4:4b: 7c:01:e3:4f:7b:8a:a8:2e:76:68:a6:77:d7:61:76:65:c3:63: f9:f7:39:f1:1c:63:94:06:6c:62:8c:7a:5e:5c:e8:f4:57:92: 76:1b:fa:65:0a:21:66:79:e4:39:fb:09:b9:d7:8a:70:b9:a4: 3a:23:0c:44:22:9b:ad:f5:4a:86:ae:3b:6c:30:32:b9:28:41: 7d:1e:e7:d6:3a:d5:a7:c2:1e:da:b8:4b:d9:fb:ad:a8:20:a0: 86:86:65:8f:7b:9a:c5:ec:a7:b2:e0:6a:95:55:ae:68:84:d8: cb:c1:37:9c:d0:c8:4b:0c:8a:46:98:bb:22:cd:17:13:b4:d7: 11:08:99:92:b8:ec:fa:2e:5c:55:12:f5:f0:25:c5:a1:09:2d: 3c:38:64:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7kUnMPWvoJpt016zcQo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMzc5NTgwODNiNjQxYjc3MzEyM2NlYWRhN2JlZjI3NTU4 ZTU5NDAwHhcNMjUxMjIxMjIwMTEwWhcNMjUxMjIyMjIwMTEwWjAzMTEwLwYDVQQD EygzZGQ1Njc3ZGJjMDc3YjYwODdmZmNiMWE5YjNmYWMyN2QyZjk0ZjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzbOWPtFeOAD3txrGXztDdfC3MzC rftcWYVYTAndekWkpEoHOuxlasYgH8YHY4Vy2ace2uBzbdKSJUZG14j3grtPXqYX 6MuYgQMIOTb6gvN3d5scpZVS4/z0uKCZr24VohSfut45DQaTjGY/vzjxI5d1SZmD 5h+bKrx8LyORYvvvrDtwnA8vutUrhzlmqBH1Z3UYlqSLq0gVOPdVFxGxG7fwG0gJ 2QB0kDx4IcnmMz3jCHH1EsmUWcnpUp6TR1b3HOAGWpdDwJk64/IPmR6K41Itf1Pb b8/zaxUbsGMF7zBvzRYa76rrQzGy01hJZ5fpqwjOSsKSWZmDnCPU1TVEwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3VZ328B3tgh//LGps/rCfS+U+aMB8GA1UdIwQY MBaAFMA3lYCDtkG3cxI86tp77ydVjllAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0RlVmdJTzJRYmR6RWp6cTJudnZKMVdPV1VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wN2NkYWEtOTlmZi00NDFlLTgwNTAt YjJkMmEyZjBjNzgyLzEvd0RlVmdJTzJRYmR6RWp6cTJudnZKMVdPV1VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wN2NkYWEtOTlmZi00NDFlLTgwNTAtYjJkMmEyZjBjNzgy LzEvd0RlVmdJTzJRYmR6RWp6cTJudnZKMVdPV1VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIjEUgD1 TXjMq/jtb2rP97sIZsuOVtTamnyyQhAFSYwKsm+FzJZWtmUABY5AK95s48zLg5ql WVxjwvWydRK2H5nr8MgY2V4sv4iqBsnW1BICd/VQJiBgPOuj09OMoD+Yd/Wgj2gi DP5ZPbRLfAHjT3uKqC52aKZ312F2ZcNj+fc58RxjlAZsYox6Xlzo9FeSdhv6ZQoh ZnnkOfsJudeKcLmkOiMMRCKbrfVKhq47bDAyuShBfR7n1jrVp8Ie2rhL2futqCCg hoZlj3uaxeynsuBqlVWuaITYy8E3nNDISwyKRpi7Is0XE7TXEQiZkrjs+i5cVRL1 8CXFoQktPDhk1Q== -----END CERTIFICATE-----Generated at Mon Dec 22 01:35:34 2025 by rpki-client