This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: 9e1DlztN7i8212zusfroIAFDhBp69vTd4494X/o4FUk= Subject key identifier: FE:F9:41:92:DA:42:54:B8:29:C1:45:9D:6B:D2:A4:71:94:CA:E0:B5 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019AF2767085BE8130776D81E8A73B51D727 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1782 Signing time: Sat 06 Dec 2025 07:00:39 +0000 Manifest this update: Sat 06 Dec 2025 07:00:39 +0000 Manifest next update: Sun 07 Dec 2025 07:00:39 +0000 Files and hashes: 1: 1-g043uZGbcoJpf0hDKUAK6KYjMY.roa (hash: oXh/AdBAL+hhAJ60ylz2T4fDifmqPlRHNnfI4LxfO4g=) 2: 4UV2kYJsBRO1Uo0sYaR8d-zWu7M.roa (hash: 4lr6xQLhcUwRUwjrbz/Q9ig+qZGJYjRtsOrl+llFTZI=) 3: 7Df7JRlOKH8gDykOMVukqaTvgiY.roa (hash: Uk5pTOJ/i2noBJtpzBqTt/F61tyL656kiSZXzf/FEP0=) 4: 8yYiY1YNwyk677GprCpY-cRpwSM.roa (hash: eqdijA/aHk9KZOfgIpUzQWlBgXMp62c/42Y4/ug1w4U=) 5: 9YFs85YsKGTIVDBM56breEqVtxA.roa (hash: qqV3B5vzjjlBmuMS8CdNVBF1exlyNiMWJZdCD+80Tlg=) 6: 9oF_YBPk2N7TBl4840GxsFnZQ7I.roa (hash: AlGFLtN9GjJwBPE0gCs6Q6TU04FkoUZ/Kroy0jMJUjM=) 7: BjjnvskFHojAmLtOcKHf6cIeor4.roa (hash: 68wQkVvr9s70ErwyewLwg/v+Sn8FP7xN+7ToSgJC2eQ=) 8: NuHik6seRrJpGJ5bX_CsrIhY3zU.roa (hash: XhwvgWvGJ+x8g9oj4CIMVsKuWXxNSgrsroLsfVnE6Dw=) 9: O82D9-Sl5TuPA51YDMjd3oEQ_Bw.roa (hash: GpWxPeguh9vxIQvIL/oOPSEMASvNh0GDzUvixDoM4bM=) 10: VklwYAMB76GdFlZEPkNhX4QuNYk.roa (hash: 8+ZNddyslsyHAQNuItAdRnRBvt4AbAN/VlPdsNqo93A=) 11: kxW1ACFlthp6zFliAhXG5aZtJrg.roa (hash: gl4ysipzIWR3k1Nea68+h+I7SDKD7ZPTCg44K0WQbck=) 12: nV6d6dYJokqR_WNJ0e5S9DIoVtk.roa (hash: ZHD4y/aBIOK9FnRbF/fVjipRuAyUMG3sRGTAcZNGLRk=) 13: pO3sjHr6a0aftr_c4hFnOCTpu-k.roa (hash: 0HEZ96PPuctS/ZloTVzx6CjdJPtvxwr82RYy3GTaOCE=) 14: ri2xAd-oHR-fT9LflEmMOZqy2Kw.roa (hash: hVv7MJmhWiXR3Iis6smsr081jaLjufwCt16mF67L6FU=) 15: vNevB1xF-PoTwPfY-Z2XsIwL7H8.roa (hash: vt4+GN3bRBOdbYFvvPoZYOFbNH+Yt+zM3zx61HscKi0=) 16: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: HLzh2WnQ+jQcFUGVK9njHRYLTn9xFIOuIdkidUbRrvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:70:85:be:81:30:77:6d:81:e8:a7:3b:51:d7:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Dec 6 07:00:39 2025 GMT Not After : Dec 7 07:00:39 2025 GMT Subject: CN=fef94192da4254b829c1459d6bd2a47194cae0b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:40:05:cc:ea:ae:47:f3:38:e7:f4:35:78:27: 4e:9f:e9:94:93:63:e9:68:fb:62:de:d7:16:f1:f4: 10:ea:3d:d1:aa:42:37:43:03:a4:fb:8e:ee:15:4f: 1b:81:ad:12:c6:fe:7a:36:c2:ad:51:80:46:0d:02: 7e:a1:7c:1f:7c:5f:a8:59:bd:ad:eb:2b:1b:a9:81: 4c:fa:d4:2a:fe:c3:d3:97:7d:37:a7:28:67:3a:c6: 39:90:b4:5e:13:81:44:af:96:c4:01:25:b7:42:d5: e4:9f:ec:45:0c:03:47:df:37:ef:90:33:c7:f1:8f: a2:54:2a:3b:2e:28:c0:5f:60:74:86:98:52:e6:ee: e0:ed:80:8b:a5:1b:8a:1e:fd:ad:75:91:00:2d:df: 03:f3:be:75:d5:44:94:ea:21:98:07:13:b4:17:c7: 26:3e:fe:ff:d3:35:86:5e:22:95:a1:46:a8:24:99: eb:93:19:cb:b8:bf:6c:87:87:71:da:c4:7f:c0:6c: 38:2c:3c:c7:9f:97:d6:61:66:9f:f4:2e:a7:ab:21: c1:f8:83:78:05:64:ec:99:4e:43:24:db:fe:ac:7b: d5:97:57:fd:b2:b4:65:89:ca:61:cc:9c:e7:1c:1c: 6a:bb:14:65:34:b2:49:85:c2:00:45:f0:ab:b9:e8: f8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:F9:41:92:DA:42:54:B8:29:C1:45:9D:6B:D2:A4:71:94:CA:E0:B5 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:38:f7:61:5d:94:3d:35:4b:27:71:f6:fd:32:d6:bb:2b:34: d1:61:d0:05:7f:68:f6:09:35:21:14:ee:dc:21:8f:d6:62:26: eb:2d:98:c4:c8:33:37:88:9c:9d:43:4d:c4:f6:a3:d1:b4:05: b8:ab:a8:2b:34:fb:67:00:3a:e7:98:ab:af:7e:e8:aa:ee:a7: f5:84:68:6c:ea:79:23:49:2d:e1:8e:64:fd:3a:07:61:28:79: a7:5b:79:05:aa:9d:fa:60:18:2a:e1:f1:47:65:b0:08:61:d2: 6c:58:77:72:c4:47:c2:47:bc:27:b7:d7:d6:4c:d9:03:9a:e1: ad:52:94:3c:55:72:1e:49:34:b4:99:f4:82:49:bc:ad:4c:88: 6e:13:5c:ee:01:16:3d:48:35:99:5b:47:08:43:e4:ff:aa:7b: 75:16:33:63:be:67:24:3b:91:39:62:e9:93:a6:e3:c4:65:a6: 61:80:71:c8:2b:34:82:05:cf:08:79:90:07:ce:36:ab:a6:70: 92:ac:b1:20:67:1d:0c:b0:95:e3:1f:e9:7d:54:58:ba:dd:be: 0b:b5:fa:86:42:f9:fa:19:5f:19:6d:31:70:7e:7f:a6:f5:32: f2:a1:7f:e9:43:43:60:62:d3:f5:b0:33:85:7c:50:bd:33:ee: 7e:5d:10:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnCFvoEwd22B6Kc7UdcnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjUxMjA2MDcwMDM5WhcNMjUxMjA3MDcwMDM5WjAzMTEwLwYDVQQD EyhmZWY5NDE5MmRhNDI1NGI4MjljMTQ1OWQ2YmQyYTQ3MTk0Y2FlMGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkAFzOquR/M45/Q1eCdOn+mUk2Pp aPti3tcW8fQQ6j3RqkI3QwOk+47uFU8bga0Sxv56NsKtUYBGDQJ+oXwffF+oWb2t 6ysbqYFM+tQq/sPTl303pyhnOsY5kLReE4FEr5bEASW3QtXkn+xFDANH3zfvkDPH 8Y+iVCo7LijAX2B0hphS5u7g7YCLpRuKHv2tdZEALd8D87511USU6iGYBxO0F8cm Pv7/0zWGXiKVoUaoJJnrkxnLuL9sh4dx2sR/wGw4LDzHn5fWYWaf9C6nqyHB+IN4 BWTsmU5DJNv+rHvVl1f9srRlicphzJznHBxquxRlNLJJhcIARfCruej4FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP75QZLaQlS4KcFFnWvSpHGUyuC1MB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzj3YV2U PTVLJ3H2/TLWuys00WHQBX9o9gk1IRTu3CGP1mIm6y2YxMgzN4icnUNNxPaj0bQF uKuoKzT7ZwA655irr37oqu6n9YRobOp5I0kt4Y5k/ToHYSh5p1t5Baqd+mAYKuHx R2WwCGHSbFh3csRHwke8J7fX1kzZA5rhrVKUPFVyHkk0tJn0gkm8rUyIbhNc7gEW PUg1mVtHCEPk/6p7dRYzY75nJDuROWLpk6bjxGWmYYBxyCs0ggXPCHmQB842q6Zw kqyxIGcdDLCV4x/pfVRYut2+C7X6hkL5+hlfGW0xcH5/pvUy8qF/6UNDYGLT9bAz hXxQvTPufl0QbA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:40 2025 by rpki-client