This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft File: wBxQlI83N__gw7drJBzpBWKIhdU.mft (raw, json) Hash identifier: fk4oDZFqU4E27LUCcW9DCELYvavbIShAsa88I9xr92M= Subject key identifier: 48:0C:4F:49:0B:E6:C7:D4:6D:18:BB:28:6C:6A:FA:55:F6:A3:98:01 Authority key identifier: C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5 Certificate issuer: /CN=c01c50948f3737ffe0c3b76b241ce905628885d5 Certificate serial: 019B42EEBA88D700516F2E74A7915274B099 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 22:01:40 +0000 Manifest this update: Sun 21 Dec 2025 22:01:40 +0000 Manifest next update: Mon 22 Dec 2025 22:01:40 +0000 Files and hashes: 1: XGDEPbtc7WSL9UqjAgvMfvuw4zE.roa (hash: kp+3RGyWysprTwe33mB6LBHrd9lT7FkQfMmhfRn83iM=) 2: wBxQlI83N__gw7drJBzpBWKIhdU.crl (hash: /Hx4J5fNjC0q85KPUTWdVglE1qRUdEJJ5v1Y6sEH5YU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:ba:88:d7:00:51:6f:2e:74:a7:91:52:74:b0:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01c50948f3737ffe0c3b76b241ce905628885d5 Validity Not Before: Dec 21 22:01:40 2025 GMT Not After : Dec 22 22:01:40 2025 GMT Subject: CN=480c4f490be6c7d46d18bb286c6afa55f6a39801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:44:5a:d5:01:7e:a6:01:88:23:1f:c3:82:ef: 3d:e1:0c:c2:02:73:41:11:d0:ce:97:a7:82:d4:4d: b8:f5:8d:18:f3:68:8f:99:76:42:3e:7c:8d:b3:e1: 2c:80:6c:27:9a:af:3b:2c:26:1c:e2:0f:3d:d5:ea: bb:69:c3:67:2b:ef:0d:a6:2e:8d:2c:d3:da:09:8e: b8:d3:9c:36:c4:3f:39:0a:9c:d4:11:ae:46:a4:ed: 49:61:64:81:1b:9f:0e:b7:0f:4f:ef:a5:85:13:49: f2:4e:30:18:2a:c2:61:1d:ec:f9:bb:a8:22:00:6d: e7:63:f9:df:90:46:8e:27:e8:02:da:c7:30:9c:56: 42:a6:27:4e:b9:e6:35:15:ae:d8:c1:cc:a4:0f:5d: ca:04:02:8f:40:87:d9:77:4e:2e:b6:f5:36:99:20: 35:3d:08:38:d7:dc:b7:ca:44:32:f4:fb:64:49:d6: e1:33:36:27:b1:23:d6:f7:30:9b:1d:ca:0d:d7:9d: d2:00:db:54:96:7f:d6:0d:19:65:38:70:d4:43:47: 74:ee:82:58:9e:56:a0:2e:9b:ce:a6:b5:04:7f:8c: 73:c6:59:94:2b:8a:43:9f:2b:d1:54:22:46:e9:b0: 22:06:17:01:a0:9c:b3:cb:09:a5:5c:dd:de:9f:e8: 96:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:0C:4F:49:0B:E6:C7:D4:6D:18:BB:28:6C:6A:FA:55:F6:A3:98:01 X509v3 Authority Key Identifier: keyid:C0:1C:50:94:8F:37:37:FF:E0:C3:B7:6B:24:1C:E9:05:62:88:85:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBxQlI83N__gw7drJBzpBWKIhdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/0a7831-7e30-4ed5-a7c6-cd1496de845e/1/wBxQlI83N__gw7drJBzpBWKIhdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:25:63:76:4b:d6:e5:37:fa:3f:3e:4c:ff:01:49:d2:d1:72: 68:3c:70:01:22:73:01:ca:32:75:68:2c:03:8f:af:01:ad:77: 7f:8b:67:16:83:9d:47:16:61:4b:6c:61:da:3f:6b:32:bf:51: 82:67:0e:b7:e7:b4:f0:43:cf:cf:fb:17:ff:d2:8a:76:38:aa: da:ea:0b:d8:05:45:59:b8:da:af:d6:66:82:bd:b5:f5:9a:a2: 0b:f7:d7:69:ae:9f:c5:db:81:f5:e2:ea:a3:4f:03:3b:bc:51: 7a:65:72:85:9c:3b:9f:48:37:2c:d5:42:58:19:6a:03:c3:f3: 14:c5:f1:8e:df:d1:d7:8c:0a:72:f7:16:f4:7a:6b:02:40:ee: e1:c9:3f:86:33:a2:4a:c6:ab:87:45:fc:aa:a7:e4:8b:5f:b6: 3b:3b:8f:92:9d:f9:6b:dc:2c:de:83:f6:2e:08:aa:88:0f:10: 80:7b:0b:ca:60:b1:43:47:67:4e:e5:e9:1e:89:9b:5a:a2:15: 34:62:8a:88:9f:34:70:75:7d:b9:8a:97:07:01:83:6a:a2:78: 3b:8f:02:e7:ff:ff:97:46:46:38:04:e9:0c:d7:65:27:9c:1c: ff:fe:94:26:6e:da:2e:4d:fb:c1:7c:2b:aa:ac:ff:62:1b:dd: 56:31:d5:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7rqI1wBRby50p5FSdLCZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMWM1MDk0OGYzNzM3ZmZlMGMzYjc2YjI0MWNlOTA1NjI4 ODg1ZDUwHhcNMjUxMjIxMjIwMTQwWhcNMjUxMjIyMjIwMTQwWjAzMTEwLwYDVQQD Eyg0ODBjNGY0OTBiZTZjN2Q0NmQxOGJiMjg2YzZhZmE1NWY2YTM5ODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkRa1QF+pgGIIx/Dgu894QzCAnNB EdDOl6eC1E249Y0Y82iPmXZCPnyNs+EsgGwnmq87LCYc4g891eq7acNnK+8Npi6N LNPaCY6405w2xD85CpzUEa5GpO1JYWSBG58Otw9P76WFE0nyTjAYKsJhHez5u6gi AG3nY/nfkEaOJ+gC2scwnFZCpidOueY1Fa7YwcykD13KBAKPQIfZd04utvU2mSA1 PQg419y3ykQy9PtkSdbhMzYnsSPW9zCbHcoN153SANtUln/WDRllOHDUQ0d07oJY nlagLpvOprUEf4xzxlmUK4pDnyvRVCJG6bAiBhcBoJyzywmlXN3en+iWVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgMT0kL5sfUbRi7KGxq+lX2o5gBMB8GA1UdIwQY MBaAFMAcUJSPNzf/4MO3ayQc6QViiIXVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYt Y2QxNDk2ZGU4NDVlLzEvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wYTc4MzEtN2UzMC00ZWQ1LWE3YzYtY2QxNDk2ZGU4NDVl LzEvd0J4UWxJODNOX19ndzdkckpCenBCV0tJaGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASVjdkvW 5Tf6Pz5M/wFJ0tFyaDxwASJzAcoydWgsA4+vAa13f4tnFoOdRxZhS2xh2j9rMr9R gmcOt+e08EPPz/sX/9KKdjiq2uoL2AVFWbjar9Zmgr219ZqiC/fXaa6fxduB9eLq o08DO7xRemVyhZw7n0g3LNVCWBlqA8PzFMXxjt/R14wKcvcW9HprAkDu4ck/hjOi Ssarh0X8qqfki1+2OzuPkp35a9ws3oP2LgiqiA8QgHsLymCxQ0dnTuXpHombWqIV NGKKiJ80cHV9uYqXBwGDaqJ4O48C5///l0ZGOATpDNdlJ5wc//6UJm7aLk37wXwr qqz/YhvdVjHVNw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:37 2025 by rpki-client