This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft File: wesHbRZwLH2-qXLily71dqHyyHM.mft (raw, json) Hash identifier: ayfjhgIqO9GIuTz+QByXDJE2SfUKncPUCzTp4xr4bA0= Subject key identifier: 5E:B3:CB:4F:AE:68:EF:D1:1F:04:F4:DA:6F:03:03:46:E9:CD:33:FE Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 Certificate issuer: /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Certificate serial: 019B2098B16340EC3DFED56FCA9C40F89322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 06:00:36 +0000 Manifest this update: Mon 15 Dec 2025 06:00:36 +0000 Manifest next update: Tue 16 Dec 2025 06:00:36 +0000 Files and hashes: 1: 2UZkcfvHBD0nlLVShbBCdFbgaEM.roa (hash: HqtlmZWEJIZpNtC58lOjwfZX2SNzuDVgWAhhp7ppdfQ=) 2: R9E_qtj1VUjv3jJ8H84LoeWhd-Y.roa (hash: e3y1w4/pEQBqLE2b/SIgYWYr4YtTdvlqNQkpHYOPhyQ=) 3: frLrA0keoZHqLNQ6H6mr7HttS6s.roa (hash: Mfy5d8aC18pzCzwCyFVqYxGvs9LiQ6tdwOia7qFz85A=) 4: twmga9_E_KzkAm9sOwBfykbdGZk.roa (hash: BS47sv4rbsHbtLhVm7asDcUh2pqMrmQZsTAWkFmOWjE=) 5: wesHbRZwLH2-qXLily71dqHyyHM.crl (hash: DmjkCZJbCwdfusBNdF2jxnIASlpixOea8tMYj0ohOMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:b1:63:40:ec:3d:fe:d5:6f:ca:9c:40:f8:93:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873 Validity Not Before: Dec 15 06:00:36 2025 GMT Not After : Dec 16 06:00:36 2025 GMT Subject: CN=5eb3cb4fae68efd11f04f4da6f030346e9cd33fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:f4:ee:d0:88:65:b2:37:5e:9e:ed:8e:35: 9d:b8:1e:0a:35:0d:03:4d:f2:56:bc:af:dd:f1:13: 47:e4:c0:a2:42:7b:bf:86:e1:ea:4c:ae:a1:f4:4c: 08:9c:54:45:37:4e:89:b4:42:13:6a:24:f6:6e:ba: 57:15:44:6d:48:37:bb:19:64:5e:13:a5:f3:dd:dd: 33:e2:97:dd:a4:6d:1e:d6:08:55:d8:e9:9d:c3:6d: 8f:a8:e0:8f:67:54:8a:e2:6a:3b:79:8a:66:b4:35: ba:2c:f9:de:54:72:9c:29:a8:29:1b:f6:71:d6:c0: 4c:cd:ec:30:d0:5f:79:fe:9f:3d:5f:d6:d6:37:b0: bb:51:ae:db:a5:cd:f2:31:50:b2:c0:7f:31:3b:ee: d0:a5:70:c5:89:18:f4:1e:35:ab:ef:a4:30:84:74: 14:68:8f:a0:b2:45:da:cf:23:19:96:a9:59:6a:44: 74:e6:f8:09:6a:26:0c:8f:d7:df:a1:8f:b8:fc:5f: 2c:e4:5b:c9:b8:8f:1c:cd:59:01:b6:c0:f7:56:b1: c2:f3:df:71:89:3a:91:13:a7:25:f7:3d:23:72:d3: 83:f2:bb:86:27:9a:cd:b3:b3:c8:d6:33:2d:51:74: af:74:64:3f:fd:8f:a6:b9:0f:0c:ae:4c:14:dd:d6: 64:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:CB:4F:AE:68:EF:D1:1F:04:F4:DA:6F:03:03:46:E9:CD:33:FE X509v3 Authority Key Identifier: keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:90:89:a3:f3:48:5f:f0:6b:2d:40:6d:cf:88:63:8d:ad:8b: c5:71:de:fa:e3:77:82:c4:d8:9f:66:4e:b5:bd:e3:0d:47:75: c3:43:11:a3:0c:f7:a3:ce:05:32:aa:e0:9e:a6:e4:33:76:00: 4b:51:73:c9:2b:69:93:90:b2:11:b6:1b:e6:db:c5:6c:e0:05: f4:de:a0:0d:76:e9:1c:b1:37:00:4b:ca:19:0a:d0:b2:63:93: d0:92:32:28:50:8c:83:06:fe:65:82:ef:3c:09:c5:1a:97:a9: 48:a2:e8:23:b3:e3:2f:eb:dc:fa:1f:6d:f0:61:29:90:83:a8: 8f:5d:fd:78:75:9c:93:0a:39:f9:42:da:97:75:52:b5:31:56: 40:c3:d3:1e:c2:84:c0:4c:98:14:1d:b6:51:52:0e:64:5e:89: c7:25:00:60:47:51:40:39:78:88:5b:41:06:af:37:22:c6:21: 85:2a:89:de:9d:3d:2d:c6:55:26:a7:fd:db:17:d9:f5:46:19: 8a:7f:3b:b3:fc:b9:fd:7a:cb:b5:ac:38:2d:0a:e2:5a:5b:bc: 1f:f8:c7:c5:4e:75:c3:02:c9:df:1c:b0:26:b4:91:71:94:51: 43:a5:25:bd:19:d7:0d:61:4b:9c:36:9d:e7:4c:88:db:91:97: 44:b7:00:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmLFjQOw9/tVvypxA+JMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZWIwNzZkMTY3MDJjN2RiZWE5NzJlMjk3MmVmNTc2YTFm MmM4NzMwHhcNMjUxMjE1MDYwMDM2WhcNMjUxMjE2MDYwMDM2WjAzMTEwLwYDVQQD Eyg1ZWIzY2I0ZmFlNjhlZmQxMWYwNGY0ZGE2ZjAzMDM0NmU5Y2QzM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/T07tCIZbI3Xp7tjjWduB4KNQ0D TfJWvK/d8RNH5MCiQnu/huHqTK6h9EwInFRFN06JtEITaiT2brpXFURtSDe7GWRe E6Xz3d0z4pfdpG0e1ghV2Omdw22PqOCPZ1SK4mo7eYpmtDW6LPneVHKcKagpG/Zx 1sBMzeww0F95/p89X9bWN7C7Ua7bpc3yMVCywH8xO+7QpXDFiRj0HjWr76QwhHQU aI+gskXazyMZlqlZakR05vgJaiYMj9ffoY+4/F8s5FvJuI8czVkBtsD3VrHC899x iTqRE6cl9z0jctOD8ruGJ5rNs7PI1jMtUXSvdGQ//Y+muQ8MrkwU3dZk5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6zy0+uaO/RHwT02m8DA0bpzTP+MB8GA1UdIwQY MBaAFMHrB20WcCx9vqly4pcu9Xah8shzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMt NmMzMmE2YWIxZWYyLzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMtNmMzMmE2YWIxZWYy LzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU5CJo/NI X/BrLUBtz4hjja2LxXHe+uN3gsTYn2ZOtb3jDUd1w0MRowz3o84FMqrgnqbkM3YA S1FzyStpk5CyEbYb5tvFbOAF9N6gDXbpHLE3AEvKGQrQsmOT0JIyKFCMgwb+ZYLv PAnFGpepSKLoI7PjL+vc+h9t8GEpkIOoj139eHWckwo5+ULal3VStTFWQMPTHsKE wEyYFB22UVIOZF6JxyUAYEdRQDl4iFtBBq83IsYhhSqJ3p09LcZVJqf92xfZ9UYZ in87s/y5/XrLtaw4LQriWlu8H/jHxU51wwLJ3xywJrSRcZRRQ6UlvRnXDWFLnDad 50yI25GXRLcAFw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:02:42 2025 by rpki-client