This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json) Hash identifier: 5MF2wRCWqWSzDXEmO7fi08TeV4EQGHMR4Uq7wQAb14M= Subject key identifier: 70:20:A1:89:A1:5E:02:C2:12:76:A1:60:AB:BF:DA:78:46:24:4E:48 Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Certificate serial: 019B40C925D1E474E625B36EADB400BABCAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 12:01:22 +0000 Manifest this update: Sun 21 Dec 2025 12:01:22 +0000 Manifest next update: Mon 22 Dec 2025 12:01:22 +0000 Files and hashes: 1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=) 2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: LI5dgdB4eIfcXwmwyc3NRBWx6wFdmkuX7VOqWBVnp9E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:25:d1:e4:74:e6:25:b3:6e:ad:b4:00:ba:bc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Validity Not Before: Dec 21 12:01:22 2025 GMT Not After : Dec 22 12:01:22 2025 GMT Subject: CN=7020a189a15e02c21276a160abbfda7846244e48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8e:64:95:30:10:10:e8:d4:0f:84:86:30:0b: a6:40:75:60:fe:15:21:ef:d9:7f:e4:45:63:28:f9: 49:73:a2:b6:9d:44:72:db:c1:3b:a8:71:ac:39:c6: e0:3b:b0:77:a3:d7:6d:e4:1a:c2:3e:30:46:fa:5c: 26:42:57:e9:4a:5e:33:82:42:3a:f8:8a:19:a9:8a: 6f:28:58:f1:bb:6a:3d:90:4b:27:d1:b2:0f:bd:af: ff:fb:a6:74:04:42:d4:33:4c:3f:56:2f:fd:5f:df: 16:a2:b4:ce:a7:b6:4e:66:8a:42:da:fd:f3:df:63: 17:5d:4d:cc:a4:02:2e:f6:c9:22:ba:1f:7c:3e:04: c0:9f:60:c0:00:7d:6a:e7:d5:a4:c5:29:89:7b:48: fe:92:9c:3b:7c:75:39:87:ab:33:88:3b:48:ce:46: 6d:34:fe:35:e3:f6:11:76:01:d4:98:67:3a:29:86: f6:ea:93:e7:7f:c8:d4:8b:ad:8c:40:35:a5:fd:ee: d7:7a:44:ac:46:f3:c1:c0:1e:5c:99:1b:2c:fa:e9: 1a:32:76:79:b4:93:a3:b3:5c:5c:6e:7f:8b:af:61: 82:2d:21:bd:96:02:6e:dc:88:0d:23:27:8c:74:52: 94:67:82:af:86:96:9c:5e:c2:38:b1:dd:dc:03:cf: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:20:A1:89:A1:5E:02:C2:12:76:A1:60:AB:BF:DA:78:46:24:4E:48 X509v3 Authority Key Identifier: keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:81:e9:65:83:3b:29:65:ee:5d:ec:12:42:b6:88:3f:25:ba: 12:77:d4:d3:5c:a7:d8:56:06:b8:db:46:be:db:af:f0:2e:af: e0:e5:41:95:1a:09:7f:84:ae:85:1c:46:44:2a:af:c4:59:31: 98:a6:8f:05:ec:94:f8:db:53:dc:ba:66:dc:59:64:33:35:bf: fe:21:96:68:a1:1c:e6:3d:16:9b:32:32:49:01:25:c4:d6:4e: a6:36:6b:aa:14:e8:22:5d:12:06:f4:5c:c1:3e:c1:e1:b1:a6: 05:14:1a:b2:0d:63:ee:35:62:ae:ef:1d:9c:0d:59:71:33:cf: 44:dc:ef:f6:64:8c:1d:87:0b:0b:6f:f2:1b:ed:c0:16:58:12: af:0a:97:9a:ec:31:1b:17:c3:80:98:04:b7:eb:7d:cd:20:64: a0:49:92:a2:64:8a:0f:07:d0:18:29:b6:77:5c:c7:8f:bf:66: 2f:43:d3:82:d9:dd:d0:e6:c2:66:d6:4c:a1:42:93:fc:5e:ea: f7:47:3c:02:4e:42:76:f5:c2:a6:5e:1f:8d:ad:7c:80:e0:d6: 89:bf:d5:22:dc:c8:e7:b9:23:c6:b5:7f:b2:b7:f6:43:5e:8f: ba:4c:7c:ba:48:b1:b1:7d:7a:84:63:8b:64:93:08:67:be:96: 01:79:9f:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySXR5HTmJbNurbQAurysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi MGEwYjcwHhcNMjUxMjIxMTIwMTIyWhcNMjUxMjIyMTIwMTIyWjAzMTEwLwYDVQQD Eyg3MDIwYTE4OWExNWUwMmMyMTI3NmExNjBhYmJmZGE3ODQ2MjQ0ZTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo5klTAQEOjUD4SGMAumQHVg/hUh 79l/5EVjKPlJc6K2nURy28E7qHGsOcbgO7B3o9dt5BrCPjBG+lwmQlfpSl4zgkI6 +IoZqYpvKFjxu2o9kEsn0bIPva//+6Z0BELUM0w/Vi/9X98WorTOp7ZOZopC2v3z 32MXXU3MpAIu9skiuh98PgTAn2DAAH1q59WkxSmJe0j+kpw7fHU5h6sziDtIzkZt NP414/YRdgHUmGc6KYb26pPnf8jUi62MQDWl/e7XekSsRvPBwB5cmRss+ukaMnZ5 tJOjs1xcbn+Lr2GCLSG9lgJu3IgNIyeMdFKUZ4KvhpacXsI4sd3cA8+d2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAgoYmhXgLCEnahYKu/2nhGJE5IMB8GA1UdIwQY MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4HpZYM7 KWXuXewSQraIPyW6EnfU01yn2FYGuNtGvtuv8C6v4OVBlRoJf4SuhRxGRCqvxFkx mKaPBeyU+NtT3Lpm3FlkMzW//iGWaKEc5j0WmzIySQElxNZOpjZrqhToIl0SBvRc wT7B4bGmBRQasg1j7jViru8dnA1ZcTPPRNzv9mSMHYcLC2/yG+3AFlgSrwqXmuwx GxfDgJgEt+t9zSBkoEmSomSKDwfQGCm2d1zHj79mL0PTgtnd0ObCZtZMoUKT/F7q 90c8Ak5CdvXCpl4fja18gODWib/VItzI57kjxrV/srf2Q16Pukx8ukixsX16hGOL ZJMIZ76WAXmfTg== -----END CERTIFICATE-----Generated at Sun Dec 21 21:28:57 2025 by rpki-client