This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft File: wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft (raw, json) Hash identifier: fswJifQck7Ps4lZhPZ7SW5hEqdSC0ekthe2GyOx20+4= Subject key identifier: 1C:8B:0A:86:6F:88:1B:D8:23:4D:61:87:C1:49:BD:5F:EF:B9:41:AE Authority key identifier: C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 Certificate issuer: /CN=c0a233590de586e0c55821c6f6d5732afc841229 Certificate serial: 019B21E32613F568EB62D2EEF3F05989A6E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft Manifest number: 177F Signing time: Mon 15 Dec 2025 12:01:33 +0000 Manifest this update: Mon 15 Dec 2025 12:01:33 +0000 Manifest next update: Tue 16 Dec 2025 12:01:33 +0000 Files and hashes: 1: 2ckuuQNGelqhfIDU0HMZ3G_jIN4.roa (hash: Ly3hlzB/x5T87M29FpEs5LMZzWEyS3uYaMyLbALjnTU=) 2: wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl (hash: 53POPufHEHNekdGKA3mHe5eOWmWodarpYuR2w8Et7r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e3:26:13:f5:68:eb:62:d2:ee:f3:f0:59:89:a6:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a233590de586e0c55821c6f6d5732afc841229 Validity Not Before: Dec 15 12:01:33 2025 GMT Not After : Dec 16 12:01:33 2025 GMT Subject: CN=1c8b0a866f881bd8234d6187c149bd5fefb941ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ad:fd:72:51:e0:ae:80:98:3d:42:db:29:d3: e0:c3:8a:b7:d8:04:2c:7b:a1:78:f8:1e:9b:c1:c4: c0:30:69:90:fe:68:20:75:67:5c:38:07:73:c5:d5: 90:08:b0:e6:0b:f2:69:fc:f3:8a:ea:1e:d6:a8:d1: 8e:40:fc:98:b2:03:34:d3:32:31:1e:90:25:42:77: 57:32:27:5c:6a:b2:59:4f:37:a0:39:58:ae:6f:82: 8a:77:2a:9e:87:95:c3:ce:61:ce:c4:47:95:d5:b9: d2:52:5c:ca:73:03:55:ee:03:e6:e0:30:0c:1d:83: 78:cd:51:25:16:55:12:c7:a8:46:82:36:72:1f:74: 31:62:42:a1:08:63:72:ef:cd:22:3a:db:a8:e5:94: 31:4b:65:fe:2e:40:0c:ef:83:2d:43:b3:b0:59:82: 2e:10:b1:30:ad:52:ed:38:5e:10:3c:4b:bf:68:af: 9b:64:3d:c6:67:eb:79:d5:43:29:1a:f7:69:d0:92: 45:8f:29:37:55:f7:12:a9:71:ca:66:85:13:77:56: 8d:d9:2c:c4:ff:83:d7:5e:7e:ac:b5:4a:c8:69:92: 0d:73:e9:ab:a3:17:55:e6:74:9c:16:46:32:41:f0: 8c:1f:1f:5f:ed:56:53:15:a6:69:11:da:54:74:39: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8B:0A:86:6F:88:1B:D8:23:4D:61:87:C1:49:BD:5F:EF:B9:41:AE X509v3 Authority Key Identifier: keyid:C0:A2:33:59:0D:E5:86:E0:C5:58:21:C6:F6:D5:73:2A:FC:84:12:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKIzWQ3lhuDFWCHG9tVzKvyEEik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/97b0b7-013d-433e-b538-a84eb411ef8a/1/wKIzWQ3lhuDFWCHG9tVzKvyEEik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:94:3f:ab:1a:c1:c4:57:7e:f0:e7:47:05:2f:f0:b8:e2:63: 89:d6:df:dc:52:60:05:46:73:82:f6:6b:8b:a5:3b:46:7c:23: 01:70:40:59:40:be:d6:af:b7:cd:7a:30:27:28:40:52:5b:9c: 92:18:ec:48:dc:51:35:83:55:99:aa:08:52:cb:2b:85:9d:5e: 96:58:88:8e:fe:e6:ac:60:e5:5b:a1:69:ef:9a:6c:4d:e3:02: c2:4c:dc:41:8a:a0:81:29:93:a9:f7:b0:4e:fd:f4:31:45:e2: 8a:0e:ce:3a:66:d8:d5:a8:e4:d8:15:c3:38:a6:8c:28:d1:49: e0:bf:69:b2:a4:56:e1:7b:95:25:cf:35:b7:46:84:7e:88:bd: 17:20:e7:fd:bd:a0:eb:f6:f2:ba:11:e9:6b:47:c8:d6:98:0b: 20:c6:6b:81:7a:e7:03:41:08:9b:b7:e7:d8:c4:97:7c:64:15: e7:06:b2:4e:e8:12:7d:50:14:51:4e:13:01:60:13:80:7e:59: 3b:9f:ef:d4:1c:24:7d:ee:2f:e6:c8:4a:be:60:bb:85:25:6d: 0c:fa:89:84:a0:42:6c:b8:54:f3:c1:17:f1:e8:0c:7b:c5:9e: b2:5a:24:4e:c5:f5:a0:28:60:f0:2b:04:d3:39:a9:d5:a0:91: 0e:13:36:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4yYT9WjrYtLu8/BZiabmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTIzMzU5MGRlNTg2ZTBjNTU4MjFjNmY2ZDU3MzJhZmM4 NDEyMjkwHhcNMjUxMjE1MTIwMTMzWhcNMjUxMjE2MTIwMTMzWjAzMTEwLwYDVQQD EygxYzhiMGE4NjZmODgxYmQ4MjM0ZDYxODdjMTQ5YmQ1ZmVmYjk0MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvq39clHgroCYPULbKdPgw4q32AQs e6F4+B6bwcTAMGmQ/mggdWdcOAdzxdWQCLDmC/Jp/POK6h7WqNGOQPyYsgM00zIx HpAlQndXMidcarJZTzegOViub4KKdyqeh5XDzmHOxEeV1bnSUlzKcwNV7gPm4DAM HYN4zVElFlUSx6hGgjZyH3QxYkKhCGNy780iOtuo5ZQxS2X+LkAM74MtQ7OwWYIu ELEwrVLtOF4QPEu/aK+bZD3GZ+t51UMpGvdp0JJFjyk3VfcSqXHKZoUTd1aN2SzE /4PXXn6stUrIaZINc+mroxdV5nScFkYyQfCMHx9f7VZTFaZpEdpUdDkq9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByLCoZviBvYI01hh8FJvV/vuUGuMB8GA1UdIwQY MBaAFMCiM1kN5YbgxVghxvbVcyr8hBIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1Mzgt YTg0ZWI0MTFlZjhhLzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85N2IwYjctMDEzZC00MzNlLWI1MzgtYTg0ZWI0MTFlZjhh LzEvd0tJeldRM2xodURGV0NIRzl0VnpLdnlFRWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqpQ/qxrB xFd+8OdHBS/wuOJjidbf3FJgBUZzgvZri6U7RnwjAXBAWUC+1q+3zXowJyhAUluc khjsSNxRNYNVmaoIUssrhZ1elliIjv7mrGDlW6Fp75psTeMCwkzcQYqggSmTqfew Tv30MUXiig7OOmbY1ajk2BXDOKaMKNFJ4L9psqRW4XuVJc81t0aEfoi9FyDn/b2g 6/byuhHpa0fI1pgLIMZrgXrnA0EIm7fn2MSXfGQV5wayTugSfVAUUU4TAWATgH5Z O5/v1Bwkfe4v5shKvmC7hSVtDPqJhKBCbLhU88EX8egMe8WeslokTsX1oChg8CsE 0zmp1aCRDhM2ow== -----END CERTIFICATE-----Generated at Mon Dec 15 20:02:05 2025 by rpki-client