This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft File: WBPibXGsW2pgEVbZDODczsWYYkM.mft (raw, json) Hash identifier: QUE7/KFsXNS1UUXiayq88STftK8khNKyrz3aFiGwAbI= Subject key identifier: 17:5D:77:17:D5:F0:E2:A6:BF:15:96:0C:F2:C6:B8:1F:E1:6F:25:AC Authority key identifier: 58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43 Certificate issuer: /CN=5813e26d71ac5b6a601156d90ce0dccec5986243 Certificate serial: 019B3B34EE026680C53A8CA60D817C5658E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft Manifest number: 06A1 Signing time: Sat 20 Dec 2025 10:01:23 +0000 Manifest this update: Sat 20 Dec 2025 10:01:23 +0000 Manifest next update: Sun 21 Dec 2025 10:01:23 +0000 Files and hashes: 1: 0RROrS7EP_5CwYaWtOibTCuabhc.roa (hash: uwLvq6OyphLPb9DhsW74rLK9fPzz8lUuatzazhiEDUA=) 2: WBPibXGsW2pgEVbZDODczsWYYkM.crl (hash: wPxE2sr6KACdCoV1VjW8NSbHjMVRfPGBnl3kyW5E/j0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:ee:02:66:80:c5:3a:8c:a6:0d:81:7c:56:58:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5813e26d71ac5b6a601156d90ce0dccec5986243 Validity Not Before: Dec 20 10:01:23 2025 GMT Not After : Dec 21 10:01:23 2025 GMT Subject: CN=175d7717d5f0e2a6bf15960cf2c6b81fe16f25ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d3:a8:7d:5e:12:ec:36:c6:43:93:f5:82:6f: eb:1d:6d:39:e3:22:cf:48:4e:95:82:6d:05:bb:39: f2:87:be:62:86:1d:84:3e:e5:09:25:c1:a7:5c:6b: ee:e6:13:40:45:c0:54:d0:10:fb:b3:83:b5:4f:9b: 48:2b:2d:4f:aa:23:48:af:70:d3:71:20:2d:5f:39: 7f:f0:80:5f:23:e2:68:9a:c7:de:60:20:3c:f0:f0: 21:e7:81:9f:d6:d6:68:f2:bc:46:5a:2d:2c:a7:fc: 10:ea:77:e1:46:a3:d4:8e:df:23:09:2f:62:6b:4f: 48:52:17:c5:88:a7:eb:e4:f1:99:3f:1c:e7:31:0f: b2:40:e6:f8:4f:bb:f3:35:73:37:a8:71:11:54:38: 9c:47:59:79:67:ef:f1:ca:9f:39:fa:b7:3d:cb:01: 50:8a:f2:cf:39:c7:1c:65:97:07:b5:27:d3:d3:43: 97:81:8b:7c:08:ab:2e:41:35:77:13:09:f8:af:dc: ad:7b:d3:06:3a:a3:36:3e:0f:9a:02:5f:5e:52:40: b0:d6:5b:cf:2a:e9:f9:11:b2:ed:60:53:03:93:e1: cc:7c:6d:e3:be:4c:b9:df:93:ec:96:79:e6:63:a0: d0:41:5f:bf:eb:8d:42:32:5e:36:3f:9f:f8:a5:53: 89:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5D:77:17:D5:F0:E2:A6:BF:15:96:0C:F2:C6:B8:1F:E1:6F:25:AC X509v3 Authority Key Identifier: keyid:58:13:E2:6D:71:AC:5B:6A:60:11:56:D9:0C:E0:DC:CE:C5:98:62:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBPibXGsW2pgEVbZDODczsWYYkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/64ae31-d1c8-4004-a778-06df1dc03367/1/WBPibXGsW2pgEVbZDODczsWYYkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6b:78:f4:cb:c8:6c:2e:fb:15:1b:94:7b:4c:2f:ab:3e:86: 20:ac:23:fa:95:48:a4:55:17:6d:f6:24:f6:91:f7:fc:4e:89: 0c:aa:4f:ce:40:89:52:b7:ae:7c:58:06:ac:34:1e:d3:59:b8: 56:77:3c:a3:b6:fd:62:a7:85:79:82:5f:b9:50:5e:e2:43:76: dd:ec:cd:be:0a:b3:2c:7d:f4:df:67:17:2c:89:ed:55:4d:bf: b9:10:bf:ec:90:fa:72:f6:69:a1:b1:80:2b:56:88:c7:21:7c: ec:8a:e9:91:0a:9a:96:94:b3:01:dd:72:50:4e:5c:75:85:ca: 1a:b2:e7:8e:07:a7:05:72:dd:4b:a4:da:7c:cd:16:0b:68:ef: d5:f8:1b:50:16:14:26:f1:29:b7:b8:d9:30:5d:f7:8b:8e:a8: 0b:e5:8a:78:ab:2d:42:80:25:9b:d2:02:9c:7f:90:55:84:0e: 57:93:24:85:8f:04:db:0f:f5:7a:21:fe:61:d6:62:62:4d:81: dd:e0:43:5c:00:b4:f8:8a:4a:1f:9c:e4:d4:4f:d4:9f:3a:f1: c3:57:46:98:21:33:ff:89:39:0d:80:af:e6:76:dc:5f:5d:7e: 9d:55:3c:61:cb:93:0d:53:98:12:db:74:53:ae:ff:16:14:c6: a4:97:01:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NO4CZoDFOoymDYF8VljoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTNlMjZkNzFhYzViNmE2MDExNTZkOTBjZTBkY2NlYzU5 ODYyNDMwHhcNMjUxMjIwMTAwMTIzWhcNMjUxMjIxMTAwMTIzWjAzMTEwLwYDVQQD EygxNzVkNzcxN2Q1ZjBlMmE2YmYxNTk2MGNmMmM2YjgxZmUxNmYyNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tOofV4S7DbGQ5P1gm/rHW054yLP SE6Vgm0Fuznyh75ihh2EPuUJJcGnXGvu5hNARcBU0BD7s4O1T5tIKy1PqiNIr3DT cSAtXzl/8IBfI+JomsfeYCA88PAh54Gf1tZo8rxGWi0sp/wQ6nfhRqPUjt8jCS9i a09IUhfFiKfr5PGZPxznMQ+yQOb4T7vzNXM3qHERVDicR1l5Z+/xyp85+rc9ywFQ ivLPOcccZZcHtSfT00OXgYt8CKsuQTV3Ewn4r9yte9MGOqM2Pg+aAl9eUkCw1lvP Kun5EbLtYFMDk+HMfG3jvky535PslnnmY6DQQV+/641CMl42P5/4pVOJZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBdddxfV8OKmvxWWDPLGuB/hbyWsMB8GA1UdIwQY MBaAFFgT4m1xrFtqYBFW2Qzg3M7FmGJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3Nzgt MDZkZjFkYzAzMzY3LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi82NGFlMzEtZDFjOC00MDA0LWE3NzgtMDZkZjFkYzAzMzY3 LzEvV0JQaWJYR3NXMnBnRVZiWkRPRGN6c1dZWWtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATWt49MvI bC77FRuUe0wvqz6GIKwj+pVIpFUXbfYk9pH3/E6JDKpPzkCJUreufFgGrDQe01m4 Vnc8o7b9YqeFeYJfuVBe4kN23ezNvgqzLH3032cXLIntVU2/uRC/7JD6cvZpobGA K1aIxyF87IrpkQqalpSzAd1yUE5cdYXKGrLnjgenBXLdS6TafM0WC2jv1fgbUBYU JvEpt7jZMF33i46oC+WKeKstQoAlm9ICnH+QVYQOV5MkhY8E2w/1eiH+YdZiYk2B 3eBDXAC0+IpKH5zk1E/Unzrxw1dGmCEz/4k5DYCv5nbcX11+nVU8YcuTDVOYEtt0 U67/FhTGpJcBdw== -----END CERTIFICATE-----Generated at Sat Dec 20 15:10:26 2025 by rpki-client