This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft File: WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json) Hash identifier: DO4SkNiKZGBezPKMUWP+z1oqjbCIv7HR6IHNG/RiC5w= Subject key identifier: A7:E2:F9:09:B0:B5:EF:25:D4:1D:F5:C0:4A:2D:1B:40:F8:40:27:09 Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42 Certificate issuer: /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42 Certificate serial: 019B22196C3BBAD62DFA7CCBB9A58482C556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 13:00:49 +0000 Manifest this update: Mon 15 Dec 2025 13:00:49 +0000 Manifest next update: Tue 16 Dec 2025 13:00:49 +0000 Files and hashes: 1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: kqeU91ytyUUU21dgNXkGeiOihKVutS3QaMK8CkuQMjU=) 2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:6c:3b:ba:d6:2d:fa:7c:cb:b9:a5:84:82:c5:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42 Validity Not Before: Dec 15 13:00:49 2025 GMT Not After : Dec 16 13:00:49 2025 GMT Subject: CN=a7e2f909b0b5ef25d41df5c04a2d1b40f8402709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7b:7b:de:87:47:df:2e:4d:00:cc:f1:ca:92: 61:43:a2:3c:c3:dc:d0:87:c5:8e:01:79:05:f2:dc: a7:b8:a5:64:7e:cc:10:7e:4d:3a:00:88:7d:28:62: 6e:b5:82:25:77:87:6e:9e:7d:ad:ad:82:6f:ec:29: 05:c9:fb:9b:9f:41:ac:0e:90:3c:24:86:00:98:7f: bd:10:7d:ba:16:76:24:36:7e:7c:d8:7c:e7:7a:9c: 4a:e5:3a:4f:3b:a6:ee:49:b4:d0:6c:80:37:68:8f: 56:d6:eb:c1:13:29:7c:55:0a:a0:1c:bd:80:f3:d9: ff:9b:e1:62:a3:f0:6d:e1:13:21:c7:15:a9:f9:a1: 2a:9e:db:90:0c:51:7b:5d:50:3e:21:fc:05:e2:50: db:82:9d:28:5f:94:01:93:c5:b1:d2:d2:c9:1c:87: cf:26:71:3a:b4:50:63:ae:0c:11:63:a6:9d:79:20: c3:73:db:60:3c:b1:c7:d5:b3:59:b7:f0:ff:c8:5b: ef:ca:ff:45:32:8e:90:86:3a:6c:0c:f0:c5:41:71: 70:87:76:b1:cf:ce:b0:15:8a:bd:a6:88:4e:10:21: ea:6f:4f:cf:6d:04:c5:33:f5:26:34:8b:90:c7:1d: 47:e8:bd:1f:ec:dd:15:89:5a:f6:73:6d:8b:6e:e3: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E2:F9:09:B0:B5:EF:25:D4:1D:F5:C0:4A:2D:1B:40:F8:40:27:09 X509v3 Authority Key Identifier: keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bb:fd:3b:8c:a7:40:dc:64:d2:38:57:93:b5:37:ae:83:03: ea:c6:bd:19:0a:e0:51:db:6a:e8:4b:3a:b6:28:cf:49:0c:d8: b5:ef:18:a0:12:34:c3:1d:68:a4:13:da:c5:35:8a:0c:72:1d: 4f:84:30:8d:d2:a0:cb:4c:fa:2d:47:03:39:6d:a2:c6:36:79: e1:5e:7e:4d:ad:b0:ee:52:77:06:e4:ff:23:1f:bc:e8:35:ef: c6:2c:28:33:65:79:5d:f9:c3:29:30:82:4e:00:58:fb:4e:27: bd:3d:74:22:0f:bf:62:90:34:bd:8b:72:36:f6:83:35:92:5a: 41:4d:cb:c3:ef:76:5b:88:80:97:9a:1e:39:91:3b:15:24:29: d3:89:77:93:b7:7e:26:b8:41:03:3f:2c:05:b8:90:5d:68:ff: 26:a2:71:f6:bf:1a:eb:31:07:a7:be:66:10:a7:db:80:44:b2: fd:23:6d:8a:d9:ca:df:33:0c:f4:68:f8:7b:f3:6c:9e:21:ae: a1:b5:91:17:13:73:31:7e:06:97:89:1a:de:9a:fd:94:cc:72: 56:52:8f:1a:14:f7:b3:4e:b4:72:02:e4:c0:ec:0a:b2:85:90: e0:78:16:ba:5f:78:fa:a3:6e:12:2c:6f:26:bb:ed:91:f1:79: d3:55:a0:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGWw7utYt+nzLuaWEgsVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MDRhYmViMGVkNGZmODY2YzA2NWZlMzZjMmM2Mjg0ZTI1 MjBiNDIwHhcNMjUxMjE1MTMwMDQ5WhcNMjUxMjE2MTMwMDQ5WjAzMTEwLwYDVQQD EyhhN2UyZjkwOWIwYjVlZjI1ZDQxZGY1YzA0YTJkMWI0MGY4NDAyNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nt73odH3y5NAMzxypJhQ6I8w9zQ h8WOAXkF8tynuKVkfswQfk06AIh9KGJutYIld4dunn2trYJv7CkFyfubn0GsDpA8 JIYAmH+9EH26FnYkNn582HznepxK5TpPO6buSbTQbIA3aI9W1uvBEyl8VQqgHL2A 89n/m+Fio/Bt4RMhxxWp+aEqntuQDFF7XVA+IfwF4lDbgp0oX5QBk8Wx0tLJHIfP JnE6tFBjrgwRY6adeSDDc9tgPLHH1bNZt/D/yFvvyv9FMo6QhjpsDPDFQXFwh3ax z86wFYq9pohOECHqb0/PbQTFM/UmNIuQxx1H6L0f7N0ViVr2c22LbuNp2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfi+Qmwte8l1B31wEotG0D4QCcJMB8GA1UdIwQY MBaAFFkEq+sO1P+GbAZf42wsYoTiUgtCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYt NzdkNjVlZjMwNWIwLzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lYTQxZTAtN2I1MS00OTBmLThkMWYtNzdkNjVlZjMwNWIw LzEvV1FTcjZ3N1VfNFpzQmxfamJDeGloT0pTQzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7v9O4yn QNxk0jhXk7U3roMD6sa9GQrgUdtq6Es6tijPSQzYte8YoBI0wx1opBPaxTWKDHId T4QwjdKgy0z6LUcDOW2ixjZ54V5+Ta2w7lJ3BuT/Ix+86DXvxiwoM2V5XfnDKTCC TgBY+04nvT10Ig+/YpA0vYtyNvaDNZJaQU3Lw+92W4iAl5oeOZE7FSQp04l3k7d+ JrhBAz8sBbiQXWj/JqJx9r8a6zEHp75mEKfbgESy/SNtitnK3zMM9Gj4e/NsniGu obWRFxNzMX4Gl4ka3pr9lMxyVlKPGhT3s060cgLkwOwKsoWQ4HgWul94+qNuEixv JrvtkfF501WgDA== -----END CERTIFICATE-----Generated at Mon Dec 15 15:32:50 2025 by rpki-client