This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft File: wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft (raw, json) Hash identifier: 0N0rG7JhWgJucPZgg0bqJ6s0Ynf2ZGUmwBe2Vjd5FwQ= Subject key identifier: 19:21:19:2A:A0:41:04:F4:8D:F4:41:C9:F9:9E:33:21:24:0E:D6:43 Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63 Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63 Certificate serial: 019B1FBD2F0DBA811D682E42D1DADBA20526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 02:00:50 +0000 Manifest this update: Mon 15 Dec 2025 02:00:50 +0000 Manifest next update: Tue 16 Dec 2025 02:00:50 +0000 Files and hashes: 1: I0H7qSqQ0AzLSSpiXqiH1EQi7-Q.roa (hash: Jow46MXmNk+mUHCbkELVJdKY8Y06A4U2s/PAO/haQb0=) 2: wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl (hash: 5waYFbNgxwAE70OBbOeJr1z5FwILkGEo9nJqBeZs0aM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 02:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:2f:0d:ba:81:1d:68:2e:42:d1:da:db:a2:05:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63 Validity Not Before: Dec 15 02:00:50 2025 GMT Not After : Dec 16 02:00:50 2025 GMT Subject: CN=1921192aa04104f48df441c9f99e3321240ed643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1f:1b:c3:7d:f8:fc:96:a1:e4:8f:6e:e2:cc: 41:52:15:a6:ee:ea:99:a3:3e:1c:2c:75:e3:73:2c: 1a:06:19:d7:5e:65:d0:97:36:d2:60:ca:40:1d:42: 31:f1:f7:f2:69:15:8c:5d:a0:76:e8:ce:57:53:ff: 9c:f5:e9:f8:7b:e2:e7:47:28:55:86:03:bd:38:36: c8:5d:4d:d9:44:0f:10:09:14:52:80:1f:42:4e:0f: 49:5f:45:a8:e3:85:fd:bc:14:67:c2:f1:5c:18:a6: 92:f7:b3:31:91:79:b5:f1:7d:1d:d8:5d:9b:3a:ed: ec:17:61:1b:d2:ad:5a:cb:5a:ea:c5:e9:62:39:47: 63:72:d0:df:ce:dc:ea:b0:66:f2:4b:d5:7f:45:7e: d4:7e:9a:5c:44:97:95:bf:43:f3:d2:54:8e:4a:6a: 85:d4:b6:91:98:24:a9:32:24:86:03:dc:1b:54:5e: 88:f0:37:5f:19:fc:54:ca:09:c8:5d:46:ee:01:c4: fc:4d:eb:85:6c:94:b6:3b:2a:ba:45:b4:8a:82:51: 85:d3:e6:24:e9:56:e6:79:7e:15:37:6a:84:46:27: 80:ce:6d:9d:fe:85:18:4d:c1:ef:c6:3a:41:b6:52: 6d:94:94:5e:31:77:d4:2e:37:47:d3:3c:45:2f:9c: 93:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:21:19:2A:A0:41:04:F4:8D:F4:41:C9:F9:9E:33:21:24:0E:D6:43 X509v3 Authority Key Identifier: keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:0a:27:7b:ef:9d:03:94:e6:bd:69:52:2f:1e:1f:99:f3:75: d9:24:fa:19:09:d4:8e:92:b6:40:e7:ab:1d:6a:b5:1b:53:e1: 84:81:19:1d:4e:4b:bc:e7:dc:d2:69:06:bd:9f:f1:bb:49:ad: 8c:48:89:34:84:2e:58:e4:e4:2b:bc:11:3a:31:51:b7:8f:91: 44:b3:06:6b:e0:56:83:b7:60:e0:1d:0a:2c:a1:d8:83:89:f7: fe:21:a4:a3:e1:d2:a4:9b:e2:18:a8:96:1f:d4:73:b1:2b:f5: c2:8c:91:7a:04:4e:89:60:90:55:c8:a2:c5:61:e4:7e:14:a8: 5a:08:14:cb:50:13:fe:82:7e:f6:f8:16:51:b5:03:e8:4e:7f: c7:6b:19:0e:be:4b:45:39:58:84:36:6f:e4:e2:65:c7:9f:cc: 16:5f:c6:b5:03:62:f7:0d:98:7a:53:84:24:37:ab:c3:ad:6b: ea:6c:8e:31:bc:85:d1:7d:e3:5e:68:c3:a0:b3:7d:83:38:35: 50:02:27:0a:d4:9c:af:88:99:61:38:c8:92:5a:96:0e:b9:fb: 5d:cf:9d:c1:90:7b:02:bc:29:ec:69:3f:ef:d0:07:b3:2e:43: b4:55:91:b7:96:a1:7f:5e:72:ad:c8:19:74:77:90:90:0b:1b: 54:1d:86:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvS8NuoEdaC5C0drbogUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMmY1OWVjYTY0MjkzZDJjOTE2ZTdhYmIwOWUwNTJlMmNi MWNiNjMwHhcNMjUxMjE1MDIwMDUwWhcNMjUxMjE2MDIwMDUwWjAzMTEwLwYDVQQD EygxOTIxMTkyYWEwNDEwNGY0OGRmNDQxYzlmOTllMzMyMTI0MGVkNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB8bw334/Jah5I9u4sxBUhWm7uqZ oz4cLHXjcywaBhnXXmXQlzbSYMpAHUIx8ffyaRWMXaB26M5XU/+c9en4e+LnRyhV hgO9ODbIXU3ZRA8QCRRSgB9CTg9JX0Wo44X9vBRnwvFcGKaS97MxkXm18X0d2F2b Ou3sF2Eb0q1ay1rqxeliOUdjctDfztzqsGbyS9V/RX7UfppcRJeVv0Pz0lSOSmqF 1LaRmCSpMiSGA9wbVF6I8DdfGfxUygnIXUbuAcT8TeuFbJS2Oyq6RbSKglGF0+Yk 6VbmeX4VN2qERieAzm2d/oUYTcHvxjpBtlJtlJReMXfULjdH0zxFL5yT4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkhGSqgQQT0jfRByfmeMyEkDtZDMB8GA1UdIwQY MBaAFMAvWeymQpPSyRbnq7CeBS4ssctjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUt N2QxM2MwNzJkOTZiLzEvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUtN2QxM2MwNzJkOTZi LzEvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQwone++d A5TmvWlSLx4fmfN12ST6GQnUjpK2QOerHWq1G1PhhIEZHU5LvOfc0mkGvZ/xu0mt jEiJNIQuWOTkK7wROjFRt4+RRLMGa+BWg7dg4B0KLKHYg4n3/iGko+HSpJviGKiW H9RzsSv1woyRegROiWCQVciixWHkfhSoWggUy1AT/oJ+9vgWUbUD6E5/x2sZDr5L RTlYhDZv5OJlx5/MFl/GtQNi9w2YelOEJDerw61r6myOMbyF0X3jXmjDoLN9gzg1 UAInCtScr4iZYTjIklqWDrn7Xc+dwZB7Arwp7Gk/79AHsy5DtFWRt5ahf15yrcgZ dHeQkAsbVB2GWA== -----END CERTIFICATE-----Generated at Mon Dec 15 11:23:22 2025 by rpki-client