This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft File: wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json) Hash identifier: WcfNJM0/gy9U6s1gesifnOOTUII7Di8cvg2M78qCZRY= Subject key identifier: 31:7C:F8:E7:E3:76:96:7A:E1:CF:94:D1:DA:81:9B:E9:6A:30:9C:74 Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 Certificate issuer: /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Certificate serial: 019B2F9E0E8E2737249EB98E59DA70F6A8EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 04:00:46 +0000 Manifest this update: Thu 18 Dec 2025 04:00:46 +0000 Manifest next update: Fri 19 Dec 2025 04:00:46 +0000 Files and hashes: 1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=) 2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: ezJprBH1dzPfRowcWLLL9KmkE7R5FDRRqxR3i+gXSHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:0e:8e:27:37:24:9e:b9:8e:59:da:70:f6:a8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218 Validity Not Before: Dec 18 04:00:46 2025 GMT Not After : Dec 19 04:00:46 2025 GMT Subject: CN=317cf8e7e376967ae1cf94d1da819be96a309c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4d:12:ec:60:54:7b:ec:ae:70:4f:c5:a5:2f: dc:94:ee:dc:87:11:e7:fb:4b:0c:11:96:a5:35:6e: b0:49:bb:8f:db:17:9c:8e:65:26:6f:2f:8d:17:19: 4e:2a:38:4c:1c:08:e6:65:e8:60:f6:52:e2:fa:99: ce:6d:fe:14:4f:bf:0a:37:15:f7:c7:c1:b9:f1:13: 10:55:fe:77:62:c4:8a:17:8c:7b:ad:8b:a7:3b:54: c2:58:8e:f8:aa:4e:30:bd:e8:ad:c0:73:41:c7:e6: 83:c2:19:8f:e5:78:df:33:d7:23:c8:5c:e9:8c:08: 0f:e1:d8:a8:77:8a:92:dd:07:75:f7:5b:5a:4b:ff: ff:35:fa:a3:6d:57:7c:3d:45:d0:d8:80:1d:5b:51: 1c:ce:49:3a:93:c7:b5:78:96:5b:59:27:96:04:82: f3:78:77:29:fb:32:c2:e4:2e:b0:a5:8b:78:3a:31: f1:9c:3b:57:60:39:56:0a:cd:df:0f:d0:2f:40:13: 30:da:cd:bc:e6:36:7d:ef:fe:ae:9f:9c:11:9a:5f: 5e:64:fd:7f:58:a8:1a:61:9a:2f:f2:50:eb:57:fb: 8d:b1:fe:65:60:a6:36:3d:18:cc:46:4e:a6:53:87: f6:13:e0:a7:9b:3c:57:be:58:ca:9f:81:22:8e:46: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7C:F8:E7:E3:76:96:7A:E1:CF:94:D1:DA:81:9B:E9:6A:30:9C:74 X509v3 Authority Key Identifier: keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4b:9f:2f:35:cf:a0:f2:2b:e4:2b:fd:36:50:d2:2f:0a:40: c8:04:3b:bf:d8:51:bb:54:fb:cf:b9:b2:58:54:c8:09:03:73: fb:9a:55:93:39:51:7b:58:36:fb:5a:83:e3:09:3e:f4:e1:04: d2:9d:84:f4:a6:a6:33:51:73:fd:5e:bc:ab:9b:2d:03:19:c2: 63:d2:25:89:35:35:77:16:08:ba:86:ef:b4:23:b0:f7:77:9a: 99:88:82:1f:5a:a9:10:4f:ba:6c:c3:61:42:07:26:a7:cf:47: fe:3f:dd:29:22:19:c4:df:78:dd:3d:87:b7:bb:ec:7d:12:af: 69:d3:2c:de:bb:18:e0:f9:35:ae:7a:a3:96:5b:af:c8:d8:01: 74:11:59:12:9c:98:cb:64:13:1e:ea:2d:f1:56:3e:0f:21:6f: 17:65:d5:a2:0e:26:19:45:bd:39:ec:8e:9b:af:18:88:f4:c9: 17:a3:14:1c:8f:a4:48:32:6d:c9:7d:cc:72:24:d8:d1:94:22: a0:d0:23:8f:e9:29:5a:dc:9a:f4:21:54:19:65:70:bc:1d:77: 15:41:bc:0b:70:94:c2:5e:47:fc:fc:ac:89:53:d9:f1:4d:c8: 41:8d:6b:dc:14:1f:39:07:2b:76:f0:ff:a8:f8:fb:9a:27:bd: e6:fa:55:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvng6OJzcknrmOWdpw9qjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNjdjNTkxY2MxYjk2YTFjYTRmOTEwZmUxMDFlZjkwNGRh MWUyMTgwHhcNMjUxMjE4MDQwMDQ2WhcNMjUxMjE5MDQwMDQ2WjAzMTEwLwYDVQQD EygzMTdjZjhlN2UzNzY5NjdhZTFjZjk0ZDFkYTgxOWJlOTZhMzA5Yzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0S7GBUe+yucE/FpS/clO7chxHn +0sMEZalNW6wSbuP2xecjmUmby+NFxlOKjhMHAjmZehg9lLi+pnObf4UT78KNxX3 x8G58RMQVf53YsSKF4x7rYunO1TCWI74qk4wveitwHNBx+aDwhmP5XjfM9cjyFzp jAgP4diod4qS3Qd191taS///NfqjbVd8PUXQ2IAdW1Eczkk6k8e1eJZbWSeWBILz eHcp+zLC5C6wpYt4OjHxnDtXYDlWCs3fD9AvQBMw2s285jZ97/6un5wRml9eZP1/ WKgaYZov8lDrV/uNsf5lYKY2PRjMRk6mU4f2E+CnmzxXvljKn4Eijka0/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDF8+OfjdpZ64c+U0dqBm+lqMJx0MB8GA1UdIwQY MBaAFMFnxZHMG5ahyk+RD+EB75BNoeIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDkt OWNhMzBmMTkxOTM0LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy81NDUzZGItYmU4Zi00MGNiLWJkMDktOWNhMzBmMTkxOTM0 LzEvd1dmRmtjd2JscUhLVDVFUDRRSHZrRTJoNGhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0ufLzXP oPIr5Cv9NlDSLwpAyAQ7v9hRu1T7z7myWFTICQNz+5pVkzlRe1g2+1qD4wk+9OEE 0p2E9KamM1Fz/V68q5stAxnCY9IliTU1dxYIuobvtCOw93eamYiCH1qpEE+6bMNh Qgcmp89H/j/dKSIZxN943T2Ht7vsfRKvadMs3rsY4Pk1rnqjlluvyNgBdBFZEpyY y2QTHuot8VY+DyFvF2XVog4mGUW9OeyOm68YiPTJF6MUHI+kSDJtyX3MciTY0ZQi oNAjj+kpWtya9CFUGWVwvB13FUG8C3CUwl5H/PysiVPZ8U3IQY1r3BQfOQcrdvD/ qPj7mie95vpVbw== -----END CERTIFICATE-----Generated at Thu Dec 18 11:27:53 2025 by rpki-client