This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft File: w3URP9S_vTixBDhDwwkmoRDMD1E.mft (raw, json) Hash identifier: gu1fo/sVgm6z/67e9yDuZeFXJKsGT8FyxWtkTTbUNGE= Subject key identifier: 2C:A3:3B:6B:AA:7D:92:02:65:80:29:4B:D4:73:F7:C9:08:BA:67:FE Authority key identifier: C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 Certificate issuer: /CN=c375113fd4bfbd38b1043843c30926a110cc0f51 Certificate serial: 019B3FB652C04198B1F50A92F092E6F922EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 07:01:11 +0000 Manifest this update: Sun 21 Dec 2025 07:01:11 +0000 Manifest next update: Mon 22 Dec 2025 07:01:11 +0000 Files and hashes: 1: C4-OG5ts507hMSQ7Yy_vTSGiUPo.roa (hash: EtEUn9b6/+4ihLNubDgNzTtlMJUEM86BPuWkPV/rMLk=) 2: Vln4G0kSZsOSsOlIsbqRmK3MTZ4.roa (hash: Wjj9H0efN4WJAlEyhQeDplG2tBK7bX/rSEkdPLCO0nE=) 3: w3URP9S_vTixBDhDwwkmoRDMD1E.crl (hash: +Bd8TXc8ZvpQ35BK5EUaGplHDDp7/lxJ5JxIhGSJBMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:52:c0:41:98:b1:f5:0a:92:f0:92:e6:f9:22:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c375113fd4bfbd38b1043843c30926a110cc0f51 Validity Not Before: Dec 21 07:01:11 2025 GMT Not After : Dec 22 07:01:11 2025 GMT Subject: CN=2ca33b6baa7d92026580294bd473f7c908ba67fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:48:f2:64:06:cf:af:5d:12:ce:8b:51:30:82: 9c:45:5a:b9:8a:09:17:f5:7c:65:7a:ea:32:8e:3f: 12:94:55:70:52:4d:42:f2:02:fa:fc:d1:80:63:b1: 26:ca:6b:2d:74:c7:f4:72:9e:e6:fa:47:5a:15:37: e5:af:59:3d:f0:79:e5:87:ef:20:96:fd:a9:58:7b: 96:59:fa:f6:0b:20:92:49:4e:f7:ec:cb:87:67:ab: 90:ac:3d:09:8a:f3:6e:33:8d:c8:b3:eb:3e:6a:45: 83:df:a1:2a:75:35:df:9d:3d:f3:5b:2b:5a:77:1a: 39:7c:06:89:29:b2:4d:18:65:68:4f:72:ab:35:fc: b0:be:9c:00:c6:85:1f:0f:09:fb:a5:2c:2c:f6:b2: d8:4e:35:36:6a:a9:52:33:ff:a7:cc:c5:40:9e:34: c8:ca:42:63:8b:76:5d:86:ef:c6:51:7c:ac:a2:29: 22:c4:99:83:e0:66:c1:8b:26:03:32:85:3e:fa:b7: 3a:8b:ea:06:aa:09:08:97:dd:94:d0:ff:e6:90:d9: 23:ee:69:08:16:c6:fc:99:25:6f:c3:71:66:6f:b3: d5:01:19:45:b3:d5:8f:08:d7:59:36:8f:dc:4b:81: 68:3d:92:59:4b:d2:c9:e6:41:12:f6:1d:75:ab:89: c6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A3:3B:6B:AA:7D:92:02:65:80:29:4B:D4:73:F7:C9:08:BA:67:FE X509v3 Authority Key Identifier: keyid:C3:75:11:3F:D4:BF:BD:38:B1:04:38:43:C3:09:26:A1:10:CC:0F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3URP9S_vTixBDhDwwkmoRDMD1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af9c78-6ede-40df-89c1-79725fa2e133/1/w3URP9S_vTixBDhDwwkmoRDMD1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:01:88:83:54:b8:43:b7:a9:08:b6:fb:8e:f4:25:e5:53: 3f:52:3a:35:aa:f4:5a:17:fc:09:54:b7:3c:89:0c:0d:f6:de: c6:8a:a6:c7:69:59:f0:12:27:f5:7a:9c:7d:f9:40:0b:fc:9c: 13:6e:16:0b:cd:b3:29:39:fd:e2:83:a6:87:7f:01:0d:89:9d: b9:80:be:e9:51:b2:10:56:43:dc:ca:94:11:b3:94:b1:0b:b0: f5:39:8f:7a:76:2b:86:51:7e:f8:ea:40:1e:d8:b0:70:6f:34: fb:63:e8:45:92:67:be:e8:58:51:ed:39:80:2b:1e:26:51:c0: da:9d:55:79:e8:69:fd:09:cd:0f:06:47:77:c8:c1:74:38:c0: 5a:92:2f:b4:10:37:f9:c1:8d:00:00:76:0c:10:4c:53:b6:82: 12:7d:29:c7:78:37:5e:f5:50:5a:09:d0:17:99:87:74:c0:2c: 90:70:e4:62:ae:08:ec:74:3b:4f:a3:76:2a:fc:14:15:da:63: cc:a0:45:2b:9b:8b:24:33:cd:8a:4d:c0:b3:89:13:ae:13:7d: 90:92:ef:b1:db:90:4a:e2:6b:69:51:0f:9b:e6:9f:29:70:ab: f4:fc:be:b4:dc:d5:a5:5c:42:4d:9d:4a:5c:26:3e:1e:fd:38: ac:35:4c:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tlLAQZix9QqS8JLm+SLqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNzUxMTNmZDRiZmJkMzhiMTA0Mzg0M2MzMDkyNmExMTBj YzBmNTEwHhcNMjUxMjIxMDcwMTExWhcNMjUxMjIyMDcwMTExWjAzMTEwLwYDVQQD EygyY2EzM2I2YmFhN2Q5MjAyNjU4MDI5NGJkNDczZjdjOTA4YmE2N2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0EjyZAbPr10SzotRMIKcRVq5igkX 9Xxleuoyjj8SlFVwUk1C8gL6/NGAY7EmymstdMf0cp7m+kdaFTflr1k98Hnlh+8g lv2pWHuWWfr2CyCSSU737MuHZ6uQrD0JivNuM43Is+s+akWD36EqdTXfnT3zWyta dxo5fAaJKbJNGGVoT3KrNfywvpwAxoUfDwn7pSws9rLYTjU2aqlSM/+nzMVAnjTI ykJji3Zdhu/GUXysoikixJmD4GbBiyYDMoU++rc6i+oGqgkIl92U0P/mkNkj7mkI Fsb8mSVvw3Fmb7PVARlFs9WPCNdZNo/cS4FoPZJZS9LJ5kES9h11q4nGnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyjO2uqfZICZYApS9Rz98kIumf+MB8GA1UdIwQY MBaAFMN1ET/Uv704sQQ4Q8MJJqEQzA9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEt Nzk3MjVmYTJlMTMzLzEvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjljNzgtNmVkZS00MGRmLTg5YzEtNzk3MjVmYTJlMTMz LzEvdzNVUlA5U192VGl4QkRoRHd3a21vUkRNRDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjsBiINU uEO3qQi2+470JeVTP1I6Nar0Whf8CVS3PIkMDfbexoqmx2lZ8BIn9XqcfflAC/yc E24WC82zKTn94oOmh38BDYmduYC+6VGyEFZD3MqUEbOUsQuw9TmPenYrhlF++OpA HtiwcG80+2PoRZJnvuhYUe05gCseJlHA2p1Veehp/QnNDwZHd8jBdDjAWpIvtBA3 +cGNAAB2DBBMU7aCEn0px3g3XvVQWgnQF5mHdMAskHDkYq4I7HQ7T6N2KvwUFdpj zKBFK5uLJDPNik3As4kTrhN9kJLvsduQSuJraVEPm+afKXCr9Py+tNzVpVxCTZ1K XCY+Hv04rDVM6A== -----END CERTIFICATE-----Generated at Sun Dec 21 13:53:18 2025 by rpki-client