This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: DI46kJ5wEyjwQty33l1uTgO/pfoReGSRdD+C/M8RVEM= Subject key identifier: 8F:A6:C3:4E:8E:69:32:8A:A9:C4:6A:0D:4A:E7:71:56:E9:2B:DC:A9 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019AF46559BF9BAB42A280473392FDFFAEE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1783 Signing time: Sat 06 Dec 2025 16:01:13 +0000 Manifest this update: Sat 06 Dec 2025 16:01:13 +0000 Manifest next update: Sun 07 Dec 2025 16:01:13 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: vNevB1xF-PoTwPfY-Z2XsIwL7H8.roa (hash: vt4+GN3bRBOdbYFvvPoZYOFbNH+Yt+zM3zx61HscKi0=) 16: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: dikfZMtBbhYy+KrmHRoHxkXYLrUxtR792oxTVzZQDss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:59:bf:9b:ab:42:a2:80:47:33:92:fd:ff:ae:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Dec 6 16:01:13 2025 GMT Not After : Dec 7 16:01:13 2025 GMT Subject: CN=8fa6c34e8e69328aa9c46a0d4ae77156e92bdca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6c:ad:20:96:74:9e:03:2d:d0:5e:79:4b:3f: a0:4f:81:81:50:61:6c:9f:e1:f7:2b:43:e3:0c:ee: bf:c1:61:39:68:e9:ac:55:2b:f4:d9:5f:ea:f3:86: d6:21:f6:1e:c3:57:69:5e:30:50:08:f2:27:55:f2: e4:40:8c:a9:09:28:be:4b:51:cb:55:17:24:64:d3: 31:30:94:e4:c9:ad:28:06:0b:12:f1:91:62:dd:0b: 67:44:e2:a4:c7:ab:81:b7:bf:d9:52:99:24:f2:be: da:46:a4:47:47:83:34:8c:af:9a:d8:dc:2f:0b:5c: 95:6b:70:b1:b6:bc:5e:79:ab:e5:a7:94:db:20:80: 3c:e8:a7:24:94:c6:54:f8:7b:42:c4:ce:e2:ac:9c: f1:fa:1b:b9:2e:dc:27:f4:90:82:0d:51:12:9c:54: 7a:46:5b:55:1e:72:38:b8:55:02:1c:36:56:a9:0d: ea:4f:33:e6:aa:35:d8:18:fb:a8:e7:e7:ef:2f:84: 40:a2:2c:40:0d:aa:6c:30:2e:8f:09:68:6b:6b:38: dd:17:c4:07:de:fe:6b:c4:53:f4:3b:82:96:af:c1: 4a:ac:73:7f:1f:9e:e7:c1:37:a1:b5:9d:29:bc:35: 2a:81:bd:3b:eb:86:5f:b4:86:69:c4:bb:aa:02:b7: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A6:C3:4E:8E:69:32:8A:A9:C4:6A:0D:4A:E7:71:56:E9:2B:DC:A9 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:af:62:17:d5:a7:b6:5b:ec:63:08:95:2c:a0:42:cd:cf:70: 2b:49:a2:96:59:cb:77:45:b2:0e:73:47:2a:e6:e1:8f:3e:70: b7:3e:10:92:0b:f1:2e:3d:0a:03:5c:1b:d5:54:ed:22:d8:d7: 32:51:fa:1c:4d:09:ac:9e:e2:1c:57:cb:b4:fb:6b:66:71:c8: 88:8b:85:d2:52:7b:87:39:e8:01:6e:3b:37:91:a1:c4:d2:84: dc:fe:2f:0a:9d:ec:a6:62:37:fd:a2:4b:ef:3a:ee:d8:ea:a3: c1:43:41:ef:71:e0:8d:05:61:d0:44:f7:23:76:9f:14:44:7a: 82:5b:df:fe:bd:5e:67:3d:f0:37:4e:0b:a8:82:11:cc:4c:a3: 1b:55:26:5d:20:c6:1c:92:65:68:4c:de:db:ac:4b:33:66:57: 2b:2e:b0:c9:fc:cd:ec:03:3c:e8:af:67:d4:76:5a:69:af:db: 8a:ed:22:d8:04:12:ef:27:2c:0c:76:9a:56:db:11:c7:e1:35: 6d:b9:23:99:96:1d:00:cf:4e:3c:d6:f6:17:c5:d9:cb:28:c7: 57:cc:e9:d0:db:f1:e7:a3:64:5a:b4:76:77:21:85:f5:52:a1: 8e:ac:73:81:03:f3:dd:0d:b6:53:8d:43:5e:85:64:d6:9a:e6: e6:68:d7:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZVm/m6tCooBHM5L9/67lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUxMjA2MTYwMTEzWhcNMjUxMjA3MTYwMTEzWjAzMTEwLwYDVQQD Eyg4ZmE2YzM0ZThlNjkzMjhhYTljNDZhMGQ0YWU3NzE1NmU5MmJkY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mytIJZ0ngMt0F55Sz+gT4GBUGFs n+H3K0PjDO6/wWE5aOmsVSv02V/q84bWIfYew1dpXjBQCPInVfLkQIypCSi+S1HL VRckZNMxMJTkya0oBgsS8ZFi3QtnROKkx6uBt7/ZUpkk8r7aRqRHR4M0jK+a2Nwv C1yVa3Cxtrxeeavlp5TbIIA86KcklMZU+HtCxM7irJzx+hu5Ltwn9JCCDVESnFR6 RltVHnI4uFUCHDZWqQ3qTzPmqjXYGPuo5+fvL4RAoixADapsMC6PCWhrazjdF8QH 3v5rxFP0O4KWr8FKrHN/H57nwTehtZ0pvDUqgb0764ZftIZpxLuqArdTTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+mw06OaTKKqcRqDUrncVbpK9ypMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUK9iF9Wn tlvsYwiVLKBCzc9wK0millnLd0WyDnNHKubhjz5wtz4QkgvxLj0KA1wb1VTtItjX MlH6HE0JrJ7iHFfLtPtrZnHIiIuF0lJ7hznoAW47N5GhxNKE3P4vCp3spmI3/aJL 7zru2OqjwUNB73HgjQVh0ET3I3afFER6glvf/r1eZz3wN04LqIIRzEyjG1UmXSDG HJJlaEze26xLM2ZXKy6wyfzN7AM86K9n1HZaaa/biu0i2AQS7ycsDHaaVtsRx+E1 bbkjmZYdAM9OPNb2F8XZyyjHV8zp0Nvx56NkWrR2dyGF9VKhjqxzgQPz3Q22U41D XoVk1prm5mjXbA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:34 2025 by rpki-client