This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json) Hash identifier: qBB/1tnqSQfO5Iyke9xhrUAK7mTz8C2w/Ys///L7w6s= Subject key identifier: 53:B0:81:77:F6:56:1D:F2:2F:1C:AA:C7:66:16:34:10:92:CD:62:CF Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad Certificate serial: 019B24AC67E4B436E0B4862582BDC018F97D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 01:00:37 +0000 Manifest this update: Tue 16 Dec 2025 01:00:37 +0000 Manifest next update: Wed 17 Dec 2025 01:00:37 +0000 Files and hashes: 1: GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa (hash: y9FyRvs17LSTei1C0cR4cXi2RJhRkUIb5SAPSm2CSi4=) 2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: nXuYPkUkqfai3HzbE21cPkJigdFemNMSS5JODZHGCOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:67:e4:b4:36:e0:b4:86:25:82:bd:c0:18:f9:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad Validity Not Before: Dec 16 01:00:37 2025 GMT Not After : Dec 17 01:00:37 2025 GMT Subject: CN=53b08177f6561df22f1caac76616341092cd62cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:8d:c7:d2:7a:24:fb:a2:ec:4a:2c:c1:24: 60:21:fc:c6:76:a7:be:d4:23:26:e1:ce:53:01:09: 76:d1:ac:27:71:bc:cf:48:3b:c4:79:54:3a:e0:cd: 47:83:87:85:eb:a2:35:4a:0f:c7:ae:35:90:31:e8: 00:18:f2:6d:78:dc:da:d4:49:6b:48:cf:7d:8c:d4: 5d:24:71:4a:f4:a1:ce:f7:3b:59:97:5a:82:bc:32: 03:19:63:00:86:40:1a:f9:95:0b:8d:c4:4c:7a:1a: d5:53:f8:f7:55:b1:da:4a:c3:93:37:be:ce:9b:ab: 2f:7f:bf:30:05:ff:13:95:cb:b7:18:20:dc:92:40: cf:42:00:26:2c:e3:1a:93:49:0c:88:e3:f9:20:26: 7b:4e:25:ba:70:4c:96:60:31:6b:7b:47:b5:61:15: 53:0a:dd:af:7c:3d:d6:28:7f:62:b5:34:c5:7a:29: 20:1c:ae:71:2e:f0:78:34:4b:cb:e5:b9:28:19:da: 40:0d:44:75:d7:40:3d:7d:55:cf:31:d8:a3:56:7a: cd:5a:eb:30:df:fd:ce:72:9d:7c:a2:1c:d1:ed:a7: bd:fc:a8:fc:4a:83:cf:ee:1e:36:71:6d:3e:b3:65: 0e:b2:d9:89:7f:79:8b:7e:af:58:30:44:df:55:36: 84:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B0:81:77:F6:56:1D:F2:2F:1C:AA:C7:66:16:34:10:92:CD:62:CF X509v3 Authority Key Identifier: keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:41:d8:18:24:2f:b4:b3:cd:1e:83:06:26:92:79:4e:cc:3c: 00:58:b5:c2:df:c1:03:2a:0d:8c:19:67:f5:97:48:55:41:1e: 06:70:f9:46:fd:2c:2c:fb:00:f2:a0:8f:33:9f:2d:30:40:cf: 84:d9:32:6d:f7:b9:28:d0:9a:3a:b3:59:ed:3f:c3:d6:59:9b: 57:cb:bd:64:cf:61:7f:d1:29:94:29:62:7f:fe:dd:5c:19:81: 73:a2:26:be:81:f9:a3:54:90:24:c2:47:4a:cc:3e:20:2d:e3: f8:c9:e9:e2:b6:1f:3c:70:6f:d8:42:52:df:b0:6c:c3:2a:94: 8a:8b:90:e1:cb:f5:09:2b:34:9b:e5:d4:96:0d:4d:b1:32:c5: 3d:35:37:06:09:04:01:98:e0:4d:a6:d4:51:ab:15:9b:b2:c6: d6:11:cb:9c:be:56:1e:18:e2:49:31:94:67:2e:bb:1f:41:00: a3:68:24:7f:83:eb:2d:6b:7a:66:14:a5:a3:eb:07:3d:bf:a1: 20:51:43:2b:d3:cc:6e:dc:4f:05:ec:0c:84:30:1d:41:ab:f3: a1:d2:9c:ae:ba:69:b3:c0:25:42:cf:2a:15:23:35:4d:3b:d0: ac:39:c8:6f:97:1a:0e:96:d9:05:ef:8e:2e:bb:e6:35:93:68: 17:39:74:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrGfktDbgtIYlgr3AGPl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi MDA1YWQwHhcNMjUxMjE2MDEwMDM3WhcNMjUxMjE3MDEwMDM3WjAzMTEwLwYDVQQD Eyg1M2IwODE3N2Y2NTYxZGYyMmYxY2FhYzc2NjE2MzQxMDkyY2Q2MmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB+Nx9J6JPui7EoswSRgIfzGdqe+ 1CMm4c5TAQl20awncbzPSDvEeVQ64M1Hg4eF66I1Sg/HrjWQMegAGPJteNza1Elr SM99jNRdJHFK9KHO9ztZl1qCvDIDGWMAhkAa+ZULjcRMehrVU/j3VbHaSsOTN77O m6svf78wBf8Tlcu3GCDckkDPQgAmLOMak0kMiOP5ICZ7TiW6cEyWYDFre0e1YRVT Ct2vfD3WKH9itTTFeikgHK5xLvB4NEvL5bkoGdpADUR110A9fVXPMdijVnrNWusw 3/3Ocp18ohzR7ae9/Kj8SoPP7h42cW0+s2UOstmJf3mLfq9YMETfVTaEwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOwgXf2Vh3yLxyqx2YWNBCSzWLPMB8GA1UdIwQY MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt ZGJiYjM1YzllMzc4LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4 LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEHYGCQv tLPNHoMGJpJ5Tsw8AFi1wt/BAyoNjBln9ZdIVUEeBnD5Rv0sLPsA8qCPM58tMEDP hNkybfe5KNCaOrNZ7T/D1lmbV8u9ZM9hf9EplClif/7dXBmBc6ImvoH5o1SQJMJH Ssw+IC3j+Mnp4rYfPHBv2EJS37BswyqUiouQ4cv1CSs0m+XUlg1NsTLFPTU3BgkE AZjgTabUUasVm7LG1hHLnL5WHhjiSTGUZy67H0EAo2gkf4PrLWt6ZhSlo+sHPb+h IFFDK9PMbtxPBewMhDAdQavzodKcrrpps8AlQs8qFSM1TTvQrDnIb5caDpbZBe+O LrvmNZNoFzl0fg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:07:59 2025 by rpki-client