This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft File: wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json) Hash identifier: II3qfqv0uzhPpu5Ufq1X+SR6BzcahTG552RPriNHb1I= Subject key identifier: EE:2C:FD:5F:94:DC:57:24:29:3C:E3:FF:45:60:E6:FB:6D:D7:2B:F4 Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4 Certificate issuer: /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4 Certificate serial: 019B22BEB7C904F3376C601EC0E37C4FE268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 16:01:22 +0000 Manifest this update: Mon 15 Dec 2025 16:01:22 +0000 Manifest next update: Tue 16 Dec 2025 16:01:22 +0000 Files and hashes: 1: XEsqeKOf3nUKp6N27Tk-w17zShA.roa (hash: k+ZjcSbWsbCQX+BZ6yWaMdK9CN57/SVKpUlCaIxWc4g=) 2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: lgHSTxBPhcUdL/M6SO9c+9MKDr4pJ+p4o8P97gxE5EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:b7:c9:04:f3:37:6c:60:1e:c0:e3:7c:4f:e2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4 Validity Not Before: Dec 15 16:01:22 2025 GMT Not After : Dec 16 16:01:22 2025 GMT Subject: CN=ee2cfd5f94dc5724293ce3ff4560e6fb6dd72bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:ba:62:01:28:91:f7:de:5f:62:9c:c4:84: dd:69:4f:7c:97:97:7e:a7:49:8a:8d:f5:d5:34:21: 7c:ef:4a:67:19:38:8d:d8:f1:cd:21:9e:fd:9a:47: 4d:42:ef:7c:37:3b:84:21:87:66:67:aa:ab:45:c3: c1:93:ac:fe:34:4a:c8:b9:db:5f:e5:cf:a6:08:5b: 55:c3:83:33:c1:13:ab:c9:ea:e2:4c:03:1b:46:6b: cf:87:43:dc:ea:45:56:d1:35:d6:d4:ac:6d:08:9b: 80:ef:94:80:9c:7f:de:80:fb:0c:6c:49:de:a1:b0: 92:40:41:12:6a:4c:36:5d:d3:5a:31:47:e4:de:77: 0e:84:5b:47:75:4b:f3:b9:80:1a:4b:2c:82:a9:9b: e9:59:4f:87:8a:1b:d4:b0:aa:42:ad:c3:bc:98:90: 46:6d:1c:99:93:9e:cb:a3:65:a9:3d:a2:06:48:25: f5:d1:7f:ac:7a:42:4c:b2:90:9a:69:36:07:28:2a: e4:71:4e:a3:90:3e:94:c7:ff:7e:54:80:54:2e:11: 60:5d:9b:22:73:ca:7a:32:8b:20:a0:aa:72:fe:e0: 07:4a:51:ab:50:30:99:84:d9:5d:b3:cb:1d:f3:0e: 7c:73:b2:6d:51:7b:8b:b6:23:3a:d6:f8:ea:1c:f5: c9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2C:FD:5F:94:DC:57:24:29:3C:E3:FF:45:60:E6:FB:6D:D7:2B:F4 X509v3 Authority Key Identifier: keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:df:32:1b:a4:2d:94:d9:b3:e6:68:f6:ee:c6:f4:90:43:51: 0c:28:27:c3:5e:31:e5:7e:7e:d3:fe:0b:21:ef:f7:ed:e5:35: 0b:31:4b:24:3d:0f:6e:bd:96:01:1c:a1:ff:55:63:15:2f:d5: 77:d1:af:33:c8:36:4f:3b:3d:9b:cf:23:20:c1:0e:b2:8d:bc: a6:bf:62:84:e3:f2:5f:a5:8c:42:52:f4:be:ae:95:13:9f:df: e6:e6:91:11:5c:3b:6c:8f:db:9b:04:61:04:8d:b0:47:86:15: 6e:7f:98:e6:40:bf:51:d8:44:43:1f:4b:a8:cc:b1:4e:f7:d8: 7b:77:e1:fc:3e:53:8c:ab:80:ea:15:1a:e8:c4:73:dc:32:b9: 25:1b:1a:4c:ff:b8:aa:0d:cf:b2:56:66:d7:a6:4d:85:28:11: 37:6a:a1:75:38:ef:e8:54:b0:1b:c8:47:ac:e7:fe:9d:c7:23: d1:ec:53:65:0a:9f:15:f9:2e:14:ca:97:93:a2:55:b6:f8:3a: 67:1a:64:ad:58:2e:e1:84:b0:15:42:90:6b:b1:eb:41:4a:d8: b4:d3:86:cc:0a:fc:7f:87:83:80:22:72:da:28:b8:6d:07:2c: e7:fd:f1:dd:2e:a1:c8:76:e7:7c:60:de:ad:e1:43:e7:02:5b: 51:58:e0:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivrfJBPM3bGAewON8T+JoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMGEyMTIzZjU0OTI2NGU3Y2JiOWZhMjFkMmM1MTM3NzIx NDg2ZTQwHhcNMjUxMjE1MTYwMTIyWhcNMjUxMjE2MTYwMTIyWjAzMTEwLwYDVQQD EyhlZTJjZmQ1Zjk0ZGM1NzI0MjkzY2UzZmY0NTYwZTZmYjZkZDcyYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud26YgEokffeX2KcxITdaU98l5d+ p0mKjfXVNCF870pnGTiN2PHNIZ79mkdNQu98NzuEIYdmZ6qrRcPBk6z+NErIudtf 5c+mCFtVw4MzwROryeriTAMbRmvPh0Pc6kVW0TXW1KxtCJuA75SAnH/egPsMbEne obCSQEESakw2XdNaMUfk3ncOhFtHdUvzuYAaSyyCqZvpWU+HihvUsKpCrcO8mJBG bRyZk57Lo2WpPaIGSCX10X+sekJMspCaaTYHKCrkcU6jkD6Ux/9+VIBULhFgXZsi c8p6MosgoKpy/uAHSlGrUDCZhNlds8sd8w58c7JtUXuLtiM61vjqHPXJgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4s/V+U3FckKTzj/0Vg5vtt1yv0MB8GA1UdIwQY MBaAFMEKISP1SSZOfLufoh0sUTdyFIbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUt YWRiMzAwZjcyMjVhLzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUtYWRiMzAwZjcyMjVh LzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtd8yG6Qt lNmz5mj27sb0kENRDCgnw14x5X5+0/4LIe/37eU1CzFLJD0Pbr2WARyh/1VjFS/V d9GvM8g2Tzs9m88jIMEOso28pr9ihOPyX6WMQlL0vq6VE5/f5uaREVw7bI/bmwRh BI2wR4YVbn+Y5kC/UdhEQx9LqMyxTvfYe3fh/D5TjKuA6hUa6MRz3DK5JRsaTP+4 qg3PslZm16ZNhSgRN2qhdTjv6FSwG8hHrOf+nccj0exTZQqfFfkuFMqXk6JVtvg6 ZxpkrVgu4YSwFUKQa7HrQUrYtNOGzAr8f4eDgCJy2ii4bQcs5/3x3S6hyHbnfGDe reFD5wJbUVjgzg== -----END CERTIFICATE-----Generated at Mon Dec 15 21:57:36 2025 by rpki-client