This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft File: Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft (raw, json) Hash identifier: JmVHezSTeTZoG0JL+CGXE0mnG+KpEbATGEbCSqDTqlE= Subject key identifier: B0:40:04:3D:90:C0:8D:CB:EA:10:EC:13:AA:EF:71:05:14:FF:A0:19 Authority key identifier: 59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 Certificate issuer: /CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Certificate serial: 019AF276E750BC3F197DCBAB5CF0ADA13A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft Manifest number: 177C Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: HtbMYs01D4cmAdAlFXNYzXOhs04.roa (hash: n0Ze93hrHGGHOW22ZuB1Xc2tkSwX1VXykYJ+iILqIsE=) 2: Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl (hash: 6Xjj4UbqVYx4q1Mh7xtRYy1hGkersd/GmYd7k0NX+Fk=) 3: eZmwFy41-LIbouqrlW9zkimoU3M.roa (hash: zJU/IMiyEvSZt1AwTK7cRbJ+HAzHnx6LAKEgb7nLXYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e7:50:bc:3f:19:7d:cb:ab:5c:f0:ad:a1:3a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda75f8110743d250c3068a356ce6acf1c4fe2 Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=b040043d90c08dcbea10ec13aaef710514ffa019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:42:7e:aa:75:a9:6b:8b:69:9d:26:82:a7: aa:ef:16:24:69:4c:47:c6:c7:a7:32:90:e8:94:58: 3a:ce:69:07:c1:1d:fd:b3:a4:1f:89:a6:40:b1:23: 08:ca:8d:fc:7a:30:c4:d2:3b:b2:d4:48:7f:27:74: 76:a1:e4:47:b2:09:cf:84:64:05:fb:78:05:d8:71: bf:75:4e:97:4b:1c:d3:c4:c2:e9:99:4e:8c:40:1c: 0c:e4:fb:0e:26:5a:b2:66:6b:23:b4:0f:2f:57:7d: a8:e0:76:bc:ee:83:65:0d:d9:14:a5:2c:e4:d0:28: 9f:a6:5b:73:24:9e:10:73:4e:d9:e8:9d:dd:6a:a1: 53:78:cd:8a:87:4f:b1:d9:9e:71:81:81:ba:18:ce: ff:86:ee:14:70:e2:85:c8:f9:9c:a9:99:39:11:7e: de:6c:fd:04:db:7a:a1:ef:6e:d1:90:cb:1a:c1:8a: 35:d5:1f:ba:5e:d7:2d:cf:f2:90:2a:ec:f1:14:58: cf:77:fd:cb:8c:e8:88:a7:0d:7c:b1:db:38:ab:a1: 0f:0e:93:a6:58:72:52:fa:f3:aa:94:48:c2:46:66: 56:ab:fd:9d:84:c4:96:ab:55:07:2f:37:0f:12:8f: c9:8a:16:bd:ff:af:8a:c5:36:72:9f:65:61:10:e8: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:40:04:3D:90:C0:8D:CB:EA:10:EC:13:AA:EF:71:05:14:FF:A0:19 X509v3 Authority Key Identifier: keyid:59:DD:A7:5F:81:10:74:3D:25:0C:30:68:A3:56:CE:6A:CF:1C:4F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2nX4EQdD0lDDBoo1bOas8cT-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ebf3f7-e3ab-4f8c-86e8-7087e3fe2a5d/1/Wd2nX4EQdD0lDDBoo1bOas8cT-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:7e:0d:a0:05:8b:8d:c3:5f:28:26:86:d9:6f:34:40:32:4a: 89:f6:bb:e1:c6:09:f9:82:15:ee:2c:5e:53:c9:6a:d7:b2:16: 7b:6c:bd:d8:ac:47:f4:cb:d0:e0:ed:9e:f5:4a:3a:cb:e7:4c: be:e6:94:ad:3d:4c:e6:2e:58:8e:b4:a9:d5:ea:07:21:d5:de: 07:4f:f4:98:b7:37:4c:d3:68:86:3b:ee:aa:15:51:e1:3a:da: 71:da:3a:59:60:87:5e:bb:71:05:a8:23:12:39:a0:7a:bd:fc: 02:48:d9:4d:bf:f8:c5:72:f1:c9:86:ef:a4:03:f6:7f:3d:ef: a8:ad:3e:a2:94:a7:09:bc:93:90:1c:d7:19:9d:84:97:11:24: 9c:17:83:ea:12:a9:0d:fe:7a:bf:d6:af:10:b1:29:42:0c:dc: af:55:bf:06:6e:36:67:0e:79:ee:f5:50:be:d7:b8:69:88:41: 59:b9:53:cb:b7:9f:6b:47:2b:e1:af:96:c1:16:1b:24:f4:22: fa:2b:4e:e9:6b:86:5d:bb:55:55:f3:10:3f:2d:20:f5:e5:15: 25:50:1f:ba:5b:4a:01:86:89:ac:59:6c:48:42:ca:05:62:17: d8:26:f6:a1:f0:4d:4d:b8:59:97:86:6c:7e:02:b2:f0:0e:09: 1f:a1:b8:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydudQvD8ZfcurXPCtoTpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNzVmODExMDc0M2QyNTBjMzA2OGEzNTZjZTZhY2Yx YzRmZTIwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD EyhiMDQwMDQzZDkwYzA4ZGNiZWExMGVjMTNhYWVmNzEwNTE0ZmZhMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QlCfqp1qWuLaZ0mgqeq7xYkaUxH xsenMpDolFg6zmkHwR39s6QfiaZAsSMIyo38ejDE0juy1Eh/J3R2oeRHsgnPhGQF +3gF2HG/dU6XSxzTxMLpmU6MQBwM5PsOJlqyZmsjtA8vV32o4Ha87oNlDdkUpSzk 0CifpltzJJ4Qc07Z6J3daqFTeM2Kh0+x2Z5xgYG6GM7/hu4UcOKFyPmcqZk5EX7e bP0E23qh727RkMsawYo11R+6Xtctz/KQKuzxFFjPd/3LjOiIpw18sds4q6EPDpOm WHJS+vOqlEjCRmZWq/2dhMSWq1UHLzcPEo/Jiha9/6+KxTZyn2VhEOh1HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBABD2QwI3L6hDsE6rvcQUU/6AZMB8GA1UdIwQY MBaAFFndp1+BEHQ9JQwwaKNWzmrPHE/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgt NzA4N2UzZmUyYTVkLzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYmYzZjctZTNhYi00ZjhjLTg2ZTgtNzA4N2UzZmUyYTVk LzEvV2Qyblg0RVFkRDBsRERCb28xYk9hczhjVC1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl34NoAWL jcNfKCaG2W80QDJKifa74cYJ+YIV7ixeU8lq17IWe2y92KxH9MvQ4O2e9Uo6y+dM vuaUrT1M5i5YjrSp1eoHIdXeB0/0mLc3TNNohjvuqhVR4Tracdo6WWCHXrtxBagj Ejmger38AkjZTb/4xXLxyYbvpAP2fz3vqK0+opSnCbyTkBzXGZ2ElxEknBeD6hKp Df56v9avELEpQgzcr1W/Bm42Zw557vVQvte4aYhBWblTy7efa0cr4a+WwRYbJPQi +itO6WuGXbtVVfMQPy0g9eUVJVAfultKAYaJrFlsSELKBWIX2Cb2ofBNTbhZl4Zs fgKy8A4JH6G4HA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:47:57 2025 by rpki-client