This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft File: wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json) Hash identifier: 912Do1ZS2EbJjKeOj9fLNJQfuhLXfZPBrn5LZz3pH6M= Subject key identifier: 9E:42:64:37:61:AC:F1:85:13:1F:42:37:6F:A5:2E:9A:66:6A:6C:91 Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E Certificate issuer: /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Certificate serial: 019B2399FB837AB6142AB707CD7F30686BB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft Manifest number: 177E Signing time: Mon 15 Dec 2025 20:00:52 +0000 Manifest this update: Mon 15 Dec 2025 20:00:52 +0000 Manifest next update: Tue 16 Dec 2025 20:00:52 +0000 Files and hashes: 1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=) 2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: 7JBPPhEc5cltv5Oy7V5hRqLPSEX7nqORarCxCzOZmk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:fb:83:7a:b6:14:2a:b7:07:cd:7f:30:68:6b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e Validity Not Before: Dec 15 20:00:52 2025 GMT Not After : Dec 16 20:00:52 2025 GMT Subject: CN=9e42643761acf185131f42376fa52e9a666a6c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bf:c2:46:f3:32:a3:36:32:84:0d:a4:8b:4b: d9:17:30:09:d8:92:d5:da:e9:5c:ab:c2:8c:72:9f: ec:e2:a2:2f:38:75:df:53:e5:ff:55:24:dc:8f:bd: 1e:ba:5a:95:f7:f9:69:65:61:78:56:70:fc:73:62: ae:75:75:80:ea:c3:df:b8:d1:2b:56:c6:41:fa:c7: 25:cf:bb:6f:bf:dc:a4:fd:f3:4e:5b:db:00:36:ac: 53:f7:91:b9:fd:c0:52:ca:cd:74:0d:34:d9:70:d3: 9f:78:d6:b7:fd:65:ad:6a:50:4a:6e:be:8b:a6:ec: 02:cf:9a:46:4a:c6:45:9c:cc:88:c3:a2:ff:4e:79: 9c:09:48:56:28:84:64:14:d7:e2:1f:69:ab:2f:31: 00:5b:c9:35:77:99:b9:b5:07:ad:34:2d:7e:48:11: e8:5a:21:64:90:3f:93:21:91:93:d4:66:1e:f4:e1: e8:43:4c:78:b5:d9:bf:5a:68:5d:6c:40:2e:46:aa: 3c:aa:db:fa:cd:73:2b:a9:b0:79:5d:25:ce:6d:c2: 22:7c:3b:7f:49:fc:04:c5:46:3b:ef:4b:b7:c6:d8: 50:e6:08:c2:32:36:2d:dc:cd:4b:28:7a:b1:4d:16: 20:c6:bf:50:cc:a4:37:33:1b:17:ee:56:3b:78:f1: 7a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:42:64:37:61:AC:F1:85:13:1F:42:37:6F:A5:2E:9A:66:6A:6C:91 X509v3 Authority Key Identifier: keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e3:3f:11:bf:b3:3e:a1:9c:79:bc:59:b9:a4:47:5e:72:f9:65: 08:99:70:f0:23:dd:6b:60:c3:96:76:49:5a:02:b9:9c:56:e8: c9:f5:b5:59:fe:60:06:6e:66:78:2d:4d:6f:97:b7:7b:f0:b9: 81:9c:4f:9a:98:02:fb:94:fd:af:10:38:df:81:59:02:67:30: e7:6b:56:aa:27:28:30:72:dc:84:65:c4:7b:a6:f1:52:d7:ea: 10:61:38:36:85:8e:19:3e:ab:3a:6e:80:ab:89:79:10:50:da: 79:3f:32:7e:08:8c:22:e3:b7:fe:2f:74:46:29:71:57:0b:33: ff:16:8c:0e:2b:b0:4d:30:bf:3c:89:14:93:83:08:b9:5f:2c: ee:46:2c:45:87:73:83:ea:56:d5:51:05:4f:88:26:54:92:b3: 6f:fa:5b:23:c9:e0:fb:35:1c:d7:46:7d:d2:80:44:c9:e2:b8: 31:97:83:cc:6d:13:f2:4c:63:76:db:8d:c3:28:91:5a:10:18: 0f:c6:d4:55:b7:01:d2:7b:8f:a8:e2:7d:3b:07:22:00:5c:f8: 46:16:b2:3a:6b:59:cc:62:0c:5f:26:b9:59:1a:21:f9:d1:f5: 1d:78:37:65:e8:1f:48:9f:2d:66:5f:9b:e5:04:36:2f:7c:57: f1:7b:08:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmfuDerYUKrcHzX8waGu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMjRiZGJkZWQ2ZTVkMmZlMGZiNTI2NTAwYjNmZjg3NjY1 YjYwMGUwHhcNMjUxMjE1MjAwMDUyWhcNMjUxMjE2MjAwMDUyWjAzMTEwLwYDVQQD Eyg5ZTQyNjQzNzYxYWNmMTg1MTMxZjQyMzc2ZmE1MmU5YTY2NmE2YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb/CRvMyozYyhA2ki0vZFzAJ2JLV 2ulcq8KMcp/s4qIvOHXfU+X/VSTcj70eulqV9/lpZWF4VnD8c2KudXWA6sPfuNEr VsZB+sclz7tvv9yk/fNOW9sANqxT95G5/cBSys10DTTZcNOfeNa3/WWtalBKbr6L puwCz5pGSsZFnMyIw6L/TnmcCUhWKIRkFNfiH2mrLzEAW8k1d5m5tQetNC1+SBHo WiFkkD+TIZGT1GYe9OHoQ0x4tdm/WmhdbEAuRqo8qtv6zXMrqbB5XSXObcIifDt/ SfwExUY770u3xthQ5gjCMjYt3M1LKHqxTRYgxr9QzKQ3MxsX7lY7ePF6fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5CZDdhrPGFEx9CN2+lLppmamyRMB8GA1UdIwQY MBaAFMAkvb3tbl0v4PtSZQCz/4dmW2AOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDct YWVhYTlkZjAxYTlkLzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDctYWVhYTlkZjAxYTlk LzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4z8Rv7M+ oZx5vFm5pEdecvllCJlw8CPda2DDlnZJWgK5nFboyfW1Wf5gBm5meC1Nb5e3e/C5 gZxPmpgC+5T9rxA434FZAmcw52tWqicoMHLchGXEe6bxUtfqEGE4NoWOGT6rOm6A q4l5EFDaeT8yfgiMIuO3/i90RilxVwsz/xaMDiuwTTC/PIkUk4MIuV8s7kYsRYdz g+pW1VEFT4gmVJKzb/pbI8ng+zUc10Z90oBEyeK4MZeDzG0T8kxjdtuNwyiRWhAY D8bUVbcB0nuPqOJ9OwciAFz4RhayOmtZzGIMXya5WRoh+dH1HXg3ZegfSJ8tZl+b 5QQ2L3xX8XsIdg== -----END CERTIFICATE-----Generated at Tue Dec 16 00:30:23 2025 by rpki-client