This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft File: wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json) Hash identifier: fdOzj7CMRA2cecpt5ENlCDJt4ESiqZulxjLh0lWxNyI= Subject key identifier: E9:51:97:B3:F5:A7:F1:AE:DA:38:CB:9B:FE:8F:48:33:6C:F0:10:D2 Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Certificate serial: 019B48143D1BAAED85351699F7AC4966F17A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 22:00:44 +0000 Manifest this update: Mon 22 Dec 2025 22:00:44 +0000 Manifest next update: Tue 23 Dec 2025 22:00:44 +0000 Files and hashes: 1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=) 2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: M4BoOIjzZxi7+cSiwBF4gGK5FhPJvN691fhaX2ZUU/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:3d:1b:aa:ed:85:35:16:99:f7:ac:49:66:f1:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Validity Not Before: Dec 22 22:00:44 2025 GMT Not After : Dec 23 22:00:44 2025 GMT Subject: CN=e95197b3f5a7f1aeda38cb9bfe8f48336cf010d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:45:8e:9a:45:e2:48:a8:78:86:ba:bc:50: 91:f2:22:b9:2a:2e:97:64:3f:21:34:b9:04:be:20: 1c:ec:8c:fa:13:b3:d5:7f:d0:13:f9:cf:ce:76:0b: 31:13:03:33:4c:cd:5d:4e:31:7a:f8:ae:b6:98:f8: 25:88:db:55:64:67:7a:39:65:30:37:4c:a4:4d:22: a8:eb:08:62:0d:45:69:61:7a:0c:84:93:5f:77:24: 68:e4:15:da:1c:a0:4c:1c:f9:d4:5c:4d:ec:45:d9: 20:35:36:aa:18:79:d6:c2:7c:64:48:71:75:d3:f7: a2:50:ea:7f:78:06:e0:71:37:b2:a5:27:35:34:9d: 60:5d:57:bf:be:99:6b:ac:6a:e4:5c:c4:98:d7:83: b7:44:46:87:46:04:37:f3:8a:62:a1:6f:f3:a8:47: c6:45:0c:e4:78:49:2c:b3:db:27:2d:7c:cf:04:7a: 72:50:3c:09:d1:02:8a:fe:c9:7d:71:b8:49:ce:b8: 46:7b:a7:a9:09:a8:11:71:64:57:4d:9e:ae:91:b6: cc:83:b2:9c:76:e7:4e:af:02:52:99:7e:0d:6c:7f: 80:29:1f:b2:7f:c0:57:c7:86:4b:b5:40:0e:8c:44: 8c:18:d5:a3:a5:49:22:1d:7f:ad:0d:16:9a:18:14: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:51:97:B3:F5:A7:F1:AE:DA:38:CB:9B:FE:8F:48:33:6C:F0:10:D2 X509v3 Authority Key Identifier: keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1e:0b:7b:00:6c:e9:dc:a0:eb:9d:3e:26:d4:f8:7d:0b:9f: a6:1d:68:6b:ed:ff:5a:9f:28:19:70:72:7c:84:27:2d:30:9b: 1c:5d:7d:f6:6a:0a:b2:5f:5c:1a:2f:fe:a8:73:a5:d9:7b:d6: bf:90:e8:66:38:4b:38:19:38:cc:80:7b:3c:e2:74:15:a9:25: 25:c3:3e:fb:7b:4a:62:40:e3:bf:f0:3c:55:bc:d8:f4:e5:f9: e4:b1:dd:d1:f2:f2:c4:81:d8:f5:73:6a:85:d9:4b:aa:28:82: 55:95:b9:a6:61:a9:b4:c7:22:67:f8:36:96:d1:67:ee:63:d1: 70:1c:40:83:76:7c:91:f2:ca:cd:21:4c:28:e2:22:20:96:ab: 01:2b:a7:98:8f:2e:61:62:25:23:32:7d:4b:d7:0b:f8:2a:a1: 7c:d5:ae:da:5d:de:fa:b0:5d:0e:36:72:c7:f7:3a:5a:9c:4b: 83:5d:41:bc:c6:c3:f7:5d:f6:9d:f1:e2:7d:d3:31:7e:2c:2a: 8a:cf:5d:9a:30:ee:9f:c5:56:7e:4d:c1:24:3c:14:25:c6:63: 67:77:a7:68:0c:f0:38:02:45:e1:2c:ab:51:12:f8:7f:80:48: 05:be:45:21:f8:98:b2:ad:73:0a:0d:c1:fd:a7:8a:4c:27:f7: 09:b3:91:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFD0bqu2FNRaZ96xJZvF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZmU5OTNkMWYzMTBlODE3M2MxN2NlOTI3OGYxZTlmOGUy MmUzYzIwHhcNMjUxMjIyMjIwMDQ0WhcNMjUxMjIzMjIwMDQ0WjAzMTEwLwYDVQQD EyhlOTUxOTdiM2Y1YTdmMWFlZGEzOGNiOWJmZThmNDgzMzZjZjAxMGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOhFjppF4kioeIa6vFCR8iK5Ki6X ZD8hNLkEviAc7Iz6E7PVf9AT+c/OdgsxEwMzTM1dTjF6+K62mPgliNtVZGd6OWUw N0ykTSKo6whiDUVpYXoMhJNfdyRo5BXaHKBMHPnUXE3sRdkgNTaqGHnWwnxkSHF1 0/eiUOp/eAbgcTeypSc1NJ1gXVe/vplrrGrkXMSY14O3REaHRgQ384pioW/zqEfG RQzkeEkss9snLXzPBHpyUDwJ0QKK/sl9cbhJzrhGe6epCagRcWRXTZ6ukbbMg7Kc dudOrwJSmX4NbH+AKR+yf8BXx4ZLtUAOjESMGNWjpUkiHX+tDRaaGBSNWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlRl7P1p/Gu2jjLm/6PSDNs8BDSMB8GA1UdIwQY MBaAFML+mT0fMQ6Bc8F86SePHp+OIuPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDIt NjliNDMyNzk5MzcyLzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDItNjliNDMyNzk5Mzcy LzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB4LewBs 6dyg650+JtT4fQufph1oa+3/Wp8oGXByfIQnLTCbHF199moKsl9cGi/+qHOl2XvW v5DoZjhLOBk4zIB7POJ0FaklJcM++3tKYkDjv/A8VbzY9OX55LHd0fLyxIHY9XNq hdlLqiiCVZW5pmGptMciZ/g2ltFn7mPRcBxAg3Z8kfLKzSFMKOIiIJarASunmI8u YWIlIzJ9S9cL+CqhfNWu2l3e+rBdDjZyx/c6WpxLg11BvMbD9132nfHifdMxfiwq is9dmjDun8VWfk3BJDwUJcZjZ3enaAzwOAJF4SyrURL4f4BIBb5FIfiYsq1zCg3B /aeKTCf3CbORQQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:14:41 2025 by rpki-client