This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json) Hash identifier: MopgLl2/7DXifzGwTf+hppnkQk8tmsfU0w/rQeojyGU= Subject key identifier: 93:63:F2:AD:BF:83:E2:A1:11:35:EF:0B:22:54:C1:3A:BF:E6:D6:0B Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Certificate serial: 019B3AFD875DA19EEE88F200B57789681537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft Manifest number: 0DE8 Signing time: Sat 20 Dec 2025 09:00:52 +0000 Manifest this update: Sat 20 Dec 2025 09:00:52 +0000 Manifest next update: Sun 21 Dec 2025 09:00:52 +0000 Files and hashes: 1: NleuP1D5q1HYCx1bniu7S0UGnKU.roa (hash: ZHCVqddSwzrZ5jTMPPMLkCEjlBptOTx+uNZ09AcVm1s=) 2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: aCXMvL6E28BTVSCCWlhvMkqOTTkBPltk3VkGJbHTojc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:87:5d:a1:9e:ee:88:f2:00:b5:77:89:68:15:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Validity Not Before: Dec 20 09:00:52 2025 GMT Not After : Dec 21 09:00:52 2025 GMT Subject: CN=9363f2adbf83e2a11135ef0b2254c13abfe6d60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a5:c8:c8:95:43:b4:d6:49:b6:68:b1:02:e7: 0a:9f:85:64:7d:fc:01:86:78:b7:7c:15:31:b9:2c: a7:e6:11:96:98:4b:3e:2b:59:c9:cd:5c:da:fe:a5: f7:f1:a4:50:b0:66:f2:29:df:d6:a2:29:69:61:8e: 73:90:86:34:50:01:78:72:2c:9e:0c:33:5e:fd:3c: 0e:74:e4:f5:d9:04:cf:23:2c:4b:53:72:be:e9:da: 46:cf:6c:f3:6b:6d:59:86:41:51:50:b4:ba:ed:66: a8:4f:35:0f:45:51:cf:ac:48:9f:20:29:68:2c:30: 11:dd:6e:87:71:fe:cc:c9:80:f6:9c:0a:b4:dd:17: 97:d9:b4:20:9e:96:b2:97:12:80:9d:cc:4e:eb:9c: 55:4f:e2:e4:13:08:c1:bc:ff:7f:0a:3c:99:f2:cf: 65:36:d2:3a:ac:96:51:bf:20:44:ab:8d:c0:77:7f: 57:ad:e0:2e:eb:63:d0:47:73:03:95:1f:93:a2:2d: bc:1f:4d:b6:87:0a:f9:6b:eb:9e:89:57:a7:50:89: e7:a6:8b:78:16:9c:de:b6:02:84:99:0d:a7:f0:a9: 2f:8d:e6:20:94:f5:c4:27:25:eb:6d:b4:b3:61:ec: 0a:bb:ac:83:b0:f8:d7:7f:66:70:af:c9:10:f2:18: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:63:F2:AD:BF:83:E2:A1:11:35:EF:0B:22:54:C1:3A:BF:E6:D6:0B X509v3 Authority Key Identifier: keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3a:f8:6d:aa:25:e1:f3:19:04:3b:3f:40:17:9c:63:1c:fd: b0:f4:02:ce:5e:e9:c6:f8:9e:4c:b3:ae:3f:1c:31:d6:d7:f9: d8:06:51:10:21:7a:08:07:8d:2f:b4:3b:76:f3:28:7d:e5:9f: 27:31:20:d2:ca:1f:a7:45:a6:6d:b3:17:f0:53:d6:2c:32:de: 9b:9a:fc:09:26:16:24:a9:be:f4:98:01:73:79:50:e8:09:5b: 9a:16:d6:e7:28:3a:e7:62:37:6c:7a:c4:0f:0e:95:ec:22:f3: 01:ea:e0:07:b4:34:b3:9b:cd:80:b6:6d:17:5f:9f:63:a3:19: 82:53:6b:33:62:fe:58:1a:20:67:ec:09:f2:7b:1c:5a:0a:9c: 04:88:e2:a2:55:1e:bd:f1:3d:b4:d5:b2:b0:04:be:ff:11:de: a7:1c:ff:64:90:68:c5:a1:29:5b:7a:67:10:1f:21:0b:20:0a: e3:27:23:d9:31:e2:34:a2:67:26:9a:31:65:12:08:5b:59:90: 9e:54:31:d4:d3:df:38:a8:e9:67:d1:b1:91:25:23:f5:3c:0b: 8a:95:53:1f:d9:dc:19:91:98:48:48:20:cd:2e:2e:ee:c3:3a: fc:01:4c:71:26:b6:5a:14:76:2a:f8:e5:9d:92:7e:a2:3c:1e: 88:15:de:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/YddoZ7uiPIAtXeJaBU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4 YjZlNDMwHhcNMjUxMjIwMDkwMDUyWhcNMjUxMjIxMDkwMDUyWjAzMTEwLwYDVQQD Eyg5MzYzZjJhZGJmODNlMmExMTEzNWVmMGIyMjU0YzEzYWJmZTZkNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6XIyJVDtNZJtmixAucKn4VkffwB hni3fBUxuSyn5hGWmEs+K1nJzVza/qX38aRQsGbyKd/WoilpYY5zkIY0UAF4ciye DDNe/TwOdOT12QTPIyxLU3K+6dpGz2zza21ZhkFRULS67WaoTzUPRVHPrEifIClo LDAR3W6Hcf7MyYD2nAq03ReX2bQgnpaylxKAncxO65xVT+LkEwjBvP9/CjyZ8s9l NtI6rJZRvyBEq43Ad39XreAu62PQR3MDlR+Toi28H022hwr5a+ueiVenUInnpot4 FpzetgKEmQ2n8KkvjeYglPXEJyXrbbSzYewKu6yDsPjXf2Zwr8kQ8hgOhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNj8q2/g+KhETXvCyJUwTq/5tYLMB8GA1UdIwQY MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt NzhjMDRiY2VkYWQzLzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzr4baol 4fMZBDs/QBecYxz9sPQCzl7pxvieTLOuPxwx1tf52AZRECF6CAeNL7Q7dvMofeWf JzEg0sofp0WmbbMX8FPWLDLem5r8CSYWJKm+9JgBc3lQ6AlbmhbW5yg652I3bHrE Dw6V7CLzAergB7Q0s5vNgLZtF1+fY6MZglNrM2L+WBogZ+wJ8nscWgqcBIjiolUe vfE9tNWysAS+/xHepxz/ZJBoxaEpW3pnEB8hCyAK4ycj2THiNKJnJpoxZRIIW1mQ nlQx1NPfOKjpZ9GxkSUj9TwLipVTH9ncGZGYSEggzS4u7sM6/AFMcSa2WhR2Kvjl nZJ+ojweiBXerg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:18:44 2025 by rpki-client