This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft File: wXLFrvM8BsSu8trI8FA_y92acoc.mft (raw, json) Hash identifier: mcmfLKp1VfmectAkU9geF50MUt/lML82kT9nc3epNj8= Subject key identifier: 0D:5B:54:31:64:90:2E:FA:C1:44:85:F3:6E:8D:E2:3D:AF:79:C5:11 Authority key identifier: C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87 Certificate issuer: /CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287 Certificate serial: 019B59E3BD1CC1D5B68AB51C3CAC0C8ABAB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft Manifest number: 179D Signing time: Fri 26 Dec 2025 09:00:55 +0000 Manifest this update: Fri 26 Dec 2025 09:00:55 +0000 Manifest next update: Sat 27 Dec 2025 09:00:55 +0000 Files and hashes: 1: Xcqq0m0T1yRbHOKg5cEHJjsB7MI.roa (hash: oC9S1bEkPnnQvPMvmcVeOLv10F6tSd5dc+2qe4J3PwQ=) 2: bCoGHAtTSxDtX1oYqNKnhpGYY0Q.roa (hash: eFHrLDgLSqCz0ldYK/DeOjHpdOvOetjhzRdvuzqcBXw=) 3: wXLFrvM8BsSu8trI8FA_y92acoc.crl (hash: 2uCrG3m2NLOip9jG2D1JpW6uSEMJ3YKEHL+Eo+HZyXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:bd:1c:c1:d5:b6:8a:b5:1c:3c:ac:0c:8a:ba:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c172c5aef33c06c4aef2dac8f0503fcbdd9a7287 Validity Not Before: Dec 26 09:00:55 2025 GMT Not After : Dec 27 09:00:55 2025 GMT Subject: CN=0d5b543164902efac14485f36e8de23daf79c511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:56:80:14:c6:fc:07:98:26:87:02:da:3d:e5: d2:ed:34:e7:ac:7c:fc:3b:1a:79:05:76:e2:2b:89: 55:a4:76:1d:ca:08:bf:d0:ff:d6:94:80:13:f6:af: 9f:bb:75:9b:56:f1:ba:67:d5:ad:28:c4:be:3b:2b: 06:76:f3:17:89:07:9b:ae:57:f2:e5:22:b6:ab:95: 2a:9d:82:9e:07:a6:59:0a:8b:b0:63:b5:5b:8e:6c: b3:fb:ed:57:3b:58:86:c3:55:aa:5d:f8:43:ac:7e: c8:2c:19:01:37:9d:f3:91:0b:3f:d0:2a:71:6c:29: 95:92:e7:5f:f8:ad:9b:76:b5:7f:86:4e:c8:e4:0a: 98:5d:64:4c:22:0e:0f:c0:a7:8d:5a:32:b7:35:a3: 04:f5:8e:6d:81:c4:02:2e:cc:a3:a0:26:df:59:9b: a3:3a:3b:a9:aa:ae:a6:8d:45:66:b0:fa:b9:e7:31: ec:bd:15:44:73:e7:8a:37:17:2c:e1:6b:81:36:e2: 1a:00:77:13:5a:2a:73:cc:75:63:46:83:d4:c6:9e: d8:25:d8:d5:a0:d9:91:29:af:7d:a3:e1:8c:63:d2: 7b:a5:42:3f:2d:2e:e4:8b:c6:8d:42:f3:ff:07:ad: a7:60:83:75:68:b0:5f:47:3f:6c:fa:da:33:17:3b: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5B:54:31:64:90:2E:FA:C1:44:85:F3:6E:8D:E2:3D:AF:79:C5:11 X509v3 Authority Key Identifier: keyid:C1:72:C5:AE:F3:3C:06:C4:AE:F2:DA:C8:F0:50:3F:CB:DD:9A:72:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLFrvM8BsSu8trI8FA_y92acoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/306330-11d2-443f-8342-ea5870653076/1/wXLFrvM8BsSu8trI8FA_y92acoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:76:7f:ce:cf:43:10:b8:f5:5e:46:9a:d8:af:cd:85:47:a6: d3:df:79:87:80:a0:18:59:d9:c3:d3:01:4d:44:6e:27:89:f5: 14:1f:02:b3:65:26:19:34:0b:55:42:0e:f1:99:21:04:b5:a7: 95:26:1e:61:76:cc:36:b1:f3:83:52:d1:15:8f:82:8e:cf:f6: b2:ae:e0:88:84:f3:36:63:8f:5d:ad:e4:07:93:e2:d8:25:a0: ab:63:2e:0e:f1:74:e1:75:09:e9:2d:98:90:a3:23:88:e0:c3: fd:0f:d3:82:d4:ff:f3:aa:fc:2d:86:46:28:84:f9:e2:aa:2f: 95:6c:4c:cb:13:8b:de:1d:80:d1:5e:d7:70:e3:ec:94:f9:45: a7:70:8a:aa:b5:59:28:40:a5:e0:13:69:ff:2c:36:b3:29:6b: 89:0e:81:4c:4c:dd:96:2d:26:88:1e:6b:ee:8f:64:be:e9:a1: 08:0b:75:38:d8:bb:bf:a6:d1:f7:6c:b0:a6:1d:93:e9:ec:b9: a6:46:79:e3:47:7d:e3:ce:06:83:0a:0c:c5:bf:d9:4d:88:9d: bb:7f:7d:13:21:98:95:c3:04:7c:14:a2:96:f5:89:75:e9:13: 76:d8:5b:f4:5a:9e:25:55:bf:f2:bd:65:05:a2:06:3b:78:3b: 87:d2:68:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ470cwdW2irUcPKwMirqyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzJjNWFlZjMzYzA2YzRhZWYyZGFjOGYwNTAzZmNiZGQ5 YTcyODcwHhcNMjUxMjI2MDkwMDU1WhcNMjUxMjI3MDkwMDU1WjAzMTEwLwYDVQQD EygwZDViNTQzMTY0OTAyZWZhYzE0NDg1ZjM2ZThkZTIzZGFmNzljNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlaAFMb8B5gmhwLaPeXS7TTnrHz8 Oxp5BXbiK4lVpHYdygi/0P/WlIAT9q+fu3WbVvG6Z9WtKMS+OysGdvMXiQebrlfy 5SK2q5UqnYKeB6ZZCouwY7Vbjmyz++1XO1iGw1WqXfhDrH7ILBkBN53zkQs/0Cpx bCmVkudf+K2bdrV/hk7I5AqYXWRMIg4PwKeNWjK3NaME9Y5tgcQCLsyjoCbfWZuj Ojupqq6mjUVmsPq55zHsvRVEc+eKNxcs4WuBNuIaAHcTWipzzHVjRoPUxp7YJdjV oNmRKa99o+GMY9J7pUI/LS7ki8aNQvP/B62nYIN1aLBfRz9s+tozFzvZdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1bVDFkkC76wUSF826N4j2vecURMB8GA1UdIwQY MBaAFMFyxa7zPAbErvLayPBQP8vdmnKHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDIt ZWE1ODcwNjUzMDc2LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMDYzMzAtMTFkMi00NDNmLTgzNDItZWE1ODcwNjUzMDc2 LzEvd1hMRnJ2TThCc1N1OHRySThGQV95OTJhY29jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnZ/zs9D ELj1Xkaa2K/NhUem0995h4CgGFnZw9MBTURuJ4n1FB8Cs2UmGTQLVUIO8ZkhBLWn lSYeYXbMNrHzg1LRFY+Cjs/2sq7giITzNmOPXa3kB5Pi2CWgq2MuDvF04XUJ6S2Y kKMjiODD/Q/TgtT/86r8LYZGKIT54qovlWxMyxOL3h2A0V7XcOPslPlFp3CKqrVZ KECl4BNp/yw2sylriQ6BTEzdli0miB5r7o9kvumhCAt1ONi7v6bR92ywph2T6ey5 pkZ540d9484GgwoMxb/ZTYidu399EyGYlcMEfBSilvWJdekTdthb9FqeJVW/8r1l BaIGO3g7h9JoeA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:36 2025 by rpki-client