This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft File: wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json) Hash identifier: s/JPz4S1mXgW52rsQvkNcSyntp9ljSXs4ioHAvPwUOw= Subject key identifier: 8F:51:7A:14:0C:AE:F2:CB:67:5B:FE:C8:63:2E:E6:33:83:D3:9E:D9 Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71 Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571 Certificate serial: 019B4882450E1D0F343C048C34FBF6815EDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 00:00:55 +0000 Manifest this update: Tue 23 Dec 2025 00:00:55 +0000 Manifest next update: Wed 24 Dec 2025 00:00:55 +0000 Files and hashes: 1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=) 2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: MBDVoGEeuXGwL1mFMm025kJbJIqV9Pw8ZAJIPWb7mTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:45:0e:1d:0f:34:3c:04:8c:34:fb:f6:81:5e:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571 Validity Not Before: Dec 23 00:00:55 2025 GMT Not After : Dec 24 00:00:55 2025 GMT Subject: CN=8f517a140caef2cb675bfec8632ee63383d39ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:34:69:de:4b:e0:9d:0d:b8:95:90:61:50:0e: b7:83:24:7d:f4:51:f7:e8:bb:06:b5:61:1b:29:9b: d5:3c:bf:a8:42:3e:4a:4e:d6:35:0e:99:46:b5:88: c8:39:e3:8b:34:39:2a:90:af:70:d1:c6:00:75:f4: ec:a8:e3:ae:61:09:b2:ec:09:e1:80:3a:13:22:7c: ac:8f:b8:48:85:da:5d:ce:c9:aa:4a:b4:5f:b2:41: 23:c2:87:26:62:b0:ac:ca:5f:0d:3f:d3:71:92:18: 5e:3e:ba:e5:4d:40:b8:4e:95:60:8e:54:68:ac:c9: a5:98:41:6c:e5:51:4b:a8:45:0e:76:c9:71:25:b1: de:20:38:74:d2:96:cc:a2:ff:6c:f6:9f:ea:30:10: 52:fc:44:5a:33:dd:96:47:a7:fc:32:d9:42:b3:93: 41:55:30:05:84:45:47:e4:a8:5c:3e:79:4d:e2:7d: 58:83:1d:a3:16:bf:d9:9a:0e:2b:e3:37:af:b2:3c: de:3e:8e:68:b7:68:de:20:39:75:27:75:e9:86:d8: b3:e8:7e:6f:2f:95:ac:13:40:18:bd:63:21:24:3c: 00:06:f7:fc:45:dd:1a:5b:7d:da:62:d1:44:8e:db: 6c:92:e3:cf:12:3f:5d:5b:a5:ac:9e:34:38:84:85: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:51:7A:14:0C:AE:F2:CB:67:5B:FE:C8:63:2E:E6:33:83:D3:9E:D9 X509v3 Authority Key Identifier: keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:9b:cc:08:9f:45:ff:8b:aa:cc:24:b0:0a:0e:22:0c:94:d2: 19:3c:2d:d2:d8:80:dd:6b:48:f0:9b:8f:aa:38:71:b6:59:56: 38:98:1c:a8:e3:f5:26:50:9d:02:bd:7e:43:2d:81:f4:56:6d: 43:6a:ff:88:e1:1b:2b:b9:78:6f:bd:83:4c:e1:13:b9:6b:0b: 2a:7a:8d:47:0f:9a:6b:d5:62:40:c7:40:84:98:b4:ca:7a:f7: f8:c9:f4:31:51:c7:17:2a:b8:a4:78:c1:2c:96:ce:b3:4e:3a: 91:f9:d3:2a:0d:fb:eb:da:4d:17:fd:60:2a:90:74:0a:6f:b1: d3:98:6b:41:2a:33:3f:73:df:24:15:aa:c7:aa:09:d9:71:0c: bf:44:e0:cc:fc:47:ad:67:d4:44:3d:58:ba:d5:64:3d:aa:5f: 8b:f5:b7:e1:eb:cc:96:6d:2b:e0:a5:a2:77:48:94:99:2d:78: 61:91:26:5f:b0:60:7f:db:46:67:a8:82:d2:d0:a7:dc:cf:6f: 8e:83:35:aa:1d:ef:1d:27:0f:9b:2a:2a:87:4f:ab:00:4c:82: b7:3e:eb:c6:8c:7e:c9:c2:25:95:39:6a:64:45:22:7e:37:7e: 71:57:b9:77:95:88:91:ad:c8:f8:7a:cf:a4:71:f4:60:d7:56: 12:ae:16:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgkUOHQ80PASMNPv2gV7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTdhNGE4MjE3MmIyMDZhZmVlMWMxM2QyOTZlZTI2MDM4 NWI1NzEwHhcNMjUxMjIzMDAwMDU1WhcNMjUxMjI0MDAwMDU1WjAzMTEwLwYDVQQD Eyg4ZjUxN2ExNDBjYWVmMmNiNjc1YmZlYzg2MzJlZTYzMzgzZDM5ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDRp3kvgnQ24lZBhUA63gyR99FH3 6LsGtWEbKZvVPL+oQj5KTtY1DplGtYjIOeOLNDkqkK9w0cYAdfTsqOOuYQmy7Anh gDoTInysj7hIhdpdzsmqSrRfskEjwocmYrCsyl8NP9NxkhhePrrlTUC4TpVgjlRo rMmlmEFs5VFLqEUOdslxJbHeIDh00pbMov9s9p/qMBBS/ERaM92WR6f8MtlCs5NB VTAFhEVH5KhcPnlN4n1Ygx2jFr/Zmg4r4zevsjzePo5ot2jeIDl1J3Xphtiz6H5v L5WsE0AYvWMhJDwABvf8Rd0aW33aYtFEjttskuPPEj9dW6WsnjQ4hIV7aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9RehQMrvLLZ1v+yGMu5jOD057ZMB8GA1UdIwQY MBaAFMAXpKghcrIGr+4cE9KW7iYDhbVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMt OTBhZGVjODVkZDg1LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMtOTBhZGVjODVkZDg1 LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZvMCJ9F /4uqzCSwCg4iDJTSGTwt0tiA3WtI8JuPqjhxtllWOJgcqOP1JlCdAr1+Qy2B9FZt Q2r/iOEbK7l4b72DTOETuWsLKnqNRw+aa9ViQMdAhJi0ynr3+Mn0MVHHFyq4pHjB LJbOs046kfnTKg3769pNF/1gKpB0Cm+x05hrQSozP3PfJBWqx6oJ2XEMv0TgzPxH rWfURD1YutVkPapfi/W34evMlm0r4KWid0iUmS14YZEmX7Bgf9tGZ6iC0tCn3M9v joM1qh3vHScPmyoqh0+rAEyCtz7rxox+ycIllTlqZEUifjd+cVe5d5WIka3I+HrP pHH0YNdWEq4W3Q== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:56 2025 by rpki-client