This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft File: wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json) Hash identifier: YrB2gT5Xp6SHxY73RTbWIeUfnps60qwdQXhyZAcBPs8= Subject key identifier: E1:99:6C:04:00:62:8D:F4:4D:DD:12:5A:5C:5B:78:49:66:0F:4E:8B Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03 Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203 Certificate serial: 019B2F6800A76C0DC18B9697C54D2BC14D6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:01:43 +0000 Manifest this update: Thu 18 Dec 2025 03:01:43 +0000 Manifest next update: Fri 19 Dec 2025 03:01:43 +0000 Files and hashes: 1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=) 2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=) 3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=) 4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: ZUMhRMvZvbkzA8J1uaJozzvghIpHQncdOsdmI/XH4dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:68:00:a7:6c:0d:c1:8b:96:97:c5:4d:2b:c1:4d:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203 Validity Not Before: Dec 18 03:01:43 2025 GMT Not After : Dec 19 03:01:43 2025 GMT Subject: CN=e1996c0400628df44ddd125a5c5b7849660f4e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8b:d5:93:85:f7:24:14:fd:5c:02:5b:0c:e8: 77:db:47:af:0e:80:23:71:4a:16:c5:6f:f3:5a:c5: 40:9c:58:a8:89:cc:04:8e:d7:bd:13:45:fd:56:b5: 96:28:08:f0:c1:91:dd:0a:7c:12:20:e0:32:f7:41: ca:43:0b:b9:d6:b9:30:fb:00:5c:73:7a:e6:52:b4: cf:f5:c8:b0:cf:9b:b2:0a:3e:59:49:53:c5:6c:33: 9c:9b:54:f4:78:ed:a9:54:f4:d1:b3:5d:db:7e:ca: ef:b5:0e:d9:be:4d:1b:91:db:1d:6f:c9:d0:50:b1: 1a:66:47:8d:e4:18:6e:e5:32:7f:d0:97:b7:53:53: 5d:74:9a:68:79:39:a2:f6:cc:5a:bf:bc:9e:a4:81: 53:51:ca:a7:e6:0f:03:2e:cd:cd:fc:29:66:f4:21: dc:7e:02:c8:ee:d0:cf:86:6c:b6:25:04:55:3c:fb: 1e:75:59:76:6e:2b:89:19:b1:64:30:58:92:a7:d6: ca:fb:4c:54:1b:65:f1:14:09:83:4a:88:21:f1:77: c4:3c:da:ca:ae:34:03:74:68:09:ec:38:a3:95:ce: 47:4d:1c:a3:b0:81:ab:72:fd:d4:bf:7f:31:e6:0b: cc:f7:da:86:57:8b:99:29:55:59:6f:93:18:8a:87: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:99:6C:04:00:62:8D:F4:4D:DD:12:5A:5C:5B:78:49:66:0F:4E:8B X509v3 Authority Key Identifier: keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:51:56:97:ab:0e:ae:65:73:20:6d:01:28:87:30:88:87:82: a7:fe:71:dd:e2:74:84:00:82:5d:bc:a7:48:0c:3d:b7:b9:99: de:f0:72:4e:36:c9:fb:f6:99:df:2f:ce:08:e3:89:97:d1:41: ed:bd:74:ee:31:58:33:65:03:e7:75:c8:9c:8d:73:8a:fa:b3: 55:6b:0d:e5:3e:5c:86:84:24:0f:fc:66:98:5d:ce:ce:0c:f1: ac:73:8f:b8:84:42:03:ef:ae:90:c1:f6:b4:f5:49:36:e0:9b: d5:16:b5:6a:28:ad:c4:e0:6c:5c:6f:29:d7:12:01:a5:c7:1e: c5:1f:ec:77:a5:b1:11:04:8a:2e:78:08:11:0f:52:fa:78:0d: eb:b2:1f:f5:5b:23:52:1d:76:12:01:60:3a:95:ee:5c:da:26: a6:80:af:2c:3b:c3:f7:0b:c7:96:2e:6b:0a:c8:3c:b7:ec:8b: 63:54:67:91:7a:8c:7c:da:9f:5c:26:f5:09:b0:71:16:b7:58: eb:0b:ad:d1:37:ea:55:14:56:be:3a:3b:8f:5f:b5:25:91:94: 7d:d3:0d:1e:87:f1:01:77:5c:b6:d2:94:88:e1:35:45:fc:61: 2d:1f:0e:cb:01:8d:98:e8:d4:12:b2:21:aa:6c:ba:f5:aa:0d: 15:32:1b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvaACnbA3Bi5aXxU0rwU1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTFlZTA2NjY0MTc1MGE1MTE0N2Q4ZGM5OWExYjEwNTY1 OGQyMDMwHhcNMjUxMjE4MDMwMTQzWhcNMjUxMjE5MDMwMTQzWjAzMTEwLwYDVQQD EyhlMTk5NmMwNDAwNjI4ZGY0NGRkZDEyNWE1YzViNzg0OTY2MGY0ZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYvVk4X3JBT9XAJbDOh320evDoAj cUoWxW/zWsVAnFioicwEjte9E0X9VrWWKAjwwZHdCnwSIOAy90HKQwu51rkw+wBc c3rmUrTP9ciwz5uyCj5ZSVPFbDOcm1T0eO2pVPTRs13bfsrvtQ7Zvk0bkdsdb8nQ ULEaZkeN5Bhu5TJ/0Je3U1NddJpoeTmi9sxav7yepIFTUcqn5g8DLs3N/Clm9CHc fgLI7tDPhmy2JQRVPPsedVl2biuJGbFkMFiSp9bK+0xUG2XxFAmDSogh8XfEPNrK rjQDdGgJ7Dijlc5HTRyjsIGrcv3Uv38x5gvM99qGV4uZKVVZb5MYiocVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGZbAQAYo30Td0SWlxbeElmD06LMB8GA1UdIwQY MBaAFMAR7gZmQXUKURR9jcmaGxBWWNIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODkt MzY5Y2Q4YmUyNWZlLzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODktMzY5Y2Q4YmUyNWZl LzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1FWl6sO rmVzIG0BKIcwiIeCp/5x3eJ0hACCXbynSAw9t7mZ3vByTjbJ+/aZ3y/OCOOJl9FB 7b107jFYM2UD53XInI1zivqzVWsN5T5choQkD/xmmF3OzgzxrHOPuIRCA++ukMH2 tPVJNuCb1Ra1aiitxOBsXG8p1xIBpccexR/sd6WxEQSKLngIEQ9S+ngN67If9Vsj Uh12EgFgOpXuXNompoCvLDvD9wvHli5rCsg8t+yLY1RnkXqMfNqfXCb1CbBxFrdY 6wut0TfqVRRWvjo7j1+1JZGUfdMNHofxAXdcttKUiOE1RfxhLR8OywGNmOjUErIh qmy69aoNFTIbHg== -----END CERTIFICATE-----Generated at Thu Dec 18 05:08:40 2025 by rpki-client