This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft File: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft (raw, json) Hash identifier: 9KRRGbKbzp7IQ6iq6YCugTWKcr3JoDA0G85v7cPU7IQ= Subject key identifier: 6B:B8:41:71:92:82:D4:01:C0:6C:21:BA:A8:1C:FC:61:47:ED:2A:26 Authority key identifier: C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 Certificate issuer: /CN=c0142e5d5cfaa452166bc7b55a65558f524d6751 Certificate serial: 019B32D5E8B95FE21D3CD726D6BC1115EFB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:00:37 +0000 Manifest this update: Thu 18 Dec 2025 19:00:37 +0000 Manifest next update: Fri 19 Dec 2025 19:00:37 +0000 Files and hashes: 1: sNmSuLPwop12596I--vLe1Fw_L8.roa (hash: rnnFcpfS8qT33aKuf/kRcr+W7tCgIM7nW6QVvMfILWQ=) 2: wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl (hash: As/2RiAv8iyUSKNZO5iBNhZMzQounmFTZ+feQMBL3sk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:e8:b9:5f:e2:1d:3c:d7:26:d6:bc:11:15:ef:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0142e5d5cfaa452166bc7b55a65558f524d6751 Validity Not Before: Dec 18 19:00:37 2025 GMT Not After : Dec 19 19:00:37 2025 GMT Subject: CN=6bb841719282d401c06c21baa81cfc6147ed2a26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:02:7d:ff:88:3d:80:94:91:57:ac:bc:be:10: 21:14:4e:ba:f1:f1:b1:6f:1d:3d:75:14:63:d3:fc: 92:9a:c2:28:cb:49:49:9f:7a:8f:23:e8:a6:db:9a: 0e:03:3a:5e:5e:0e:9d:1e:a5:1b:41:57:e1:0a:09: ac:ff:fb:79:91:a2:24:6f:5f:e1:91:21:d7:89:d4: df:2b:fa:95:59:71:6d:9e:a3:15:45:45:7b:a7:3d: d1:1b:fb:1d:92:0e:20:64:02:54:76:d8:9d:24:37: 68:6a:b4:9d:96:df:f9:3b:d5:f9:81:7e:ab:3f:df: 5a:16:a0:c8:14:b9:d5:af:d7:97:75:0d:89:c0:fd: d0:e2:2f:ab:2c:ab:f4:60:20:78:6d:e0:70:d7:22: 07:bd:e4:c5:17:0a:dc:45:f0:aa:e3:98:15:51:41: db:d8:51:1e:fb:83:aa:3e:1f:fe:e0:d6:e4:60:52: 45:18:ef:87:e6:2f:b3:f0:4e:4d:d9:d1:e4:94:68: 68:c9:d1:85:bc:6f:4b:fb:41:b0:72:04:4a:0a:40: 24:b1:35:44:8e:f0:97:71:93:9f:60:f1:a6:93:a1: a9:bf:d9:6e:c6:f5:06:bb:a7:ae:02:c9:27:1c:21: b4:0a:43:37:fc:f3:69:f6:fd:8e:50:8b:e4:3b:3b: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B8:41:71:92:82:D4:01:C0:6C:21:BA:A8:1C:FC:61:47:ED:2A:26 X509v3 Authority Key Identifier: keyid:C0:14:2E:5D:5C:FA:A4:52:16:6B:C7:B5:5A:65:55:8F:52:4D:67:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b7f1da-467a-4362-8b2e-1970de84a1f0/1/wBQuXVz6pFIWa8e1WmVVj1JNZ1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:ae:13:dc:0e:97:cd:70:4b:d9:29:4d:68:ca:f2:6c:6e:70: 70:a1:1d:1e:71:55:08:79:28:f4:50:97:8c:3b:6a:41:2d:c5: 00:b0:b4:f8:25:c6:be:2c:b4:85:fa:e7:37:d5:3a:7b:58:17: 8f:55:8d:8f:74:ef:30:60:51:c8:a2:f0:44:64:5e:15:0f:f5: 72:cd:72:20:fa:ce:bc:a0:b1:4a:96:cb:9d:b6:12:9b:04:cb: c9:16:f5:c0:c6:a3:ac:f3:71:83:89:df:de:07:75:0f:b0:91: 77:22:43:27:42:e7:ac:ae:86:4d:3e:e4:09:43:7f:52:80:2a: cf:64:33:0f:cd:f1:3a:66:6c:ab:17:17:f3:19:6d:a8:73:bc: 15:2a:bf:5f:0e:8a:f0:61:a2:38:de:dd:0a:d2:2d:a4:4a:a9: 35:78:1e:b8:1b:38:48:38:eb:b5:e2:8d:c8:93:6f:f9:3f:0e: 86:c7:ca:44:4f:3b:e9:40:49:6c:c8:c3:62:62:93:8f:f2:72: 13:d0:f2:40:ff:88:9d:f2:fa:8a:bc:85:d0:76:30:09:08:00: f0:33:98:b5:8b:52:c9:3c:92:80:36:fe:8f:88:1f:89:60:6e: a9:5e:c7:7a:b2:90:a6:dc:65:53:c2:38:24:8e:4a:8b:d0:67: fd:72:b6:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1ei5X+IdPNcm1rwRFe+yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTQyZTVkNWNmYWE0NTIxNjZiYzdiNTVhNjU1NThmNTI0 ZDY3NTEwHhcNMjUxMjE4MTkwMDM3WhcNMjUxMjE5MTkwMDM3WjAzMTEwLwYDVQQD Eyg2YmI4NDE3MTkyODJkNDAxYzA2YzIxYmFhODFjZmM2MTQ3ZWQyYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgJ9/4g9gJSRV6y8vhAhFE668fGx bx09dRRj0/ySmsIoy0lJn3qPI+im25oOAzpeXg6dHqUbQVfhCgms//t5kaIkb1/h kSHXidTfK/qVWXFtnqMVRUV7pz3RG/sdkg4gZAJUdtidJDdoarSdlt/5O9X5gX6r P99aFqDIFLnVr9eXdQ2JwP3Q4i+rLKv0YCB4beBw1yIHveTFFwrcRfCq45gVUUHb 2FEe+4OqPh/+4NbkYFJFGO+H5i+z8E5N2dHklGhoydGFvG9L+0GwcgRKCkAksTVE jvCXcZOfYPGmk6Gpv9luxvUGu6euAsknHCG0CkM3/PNp9v2OUIvkOztfswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu4QXGSgtQBwGwhuqgc/GFH7SomMB8GA1UdIwQY MBaAFMAULl1c+qRSFmvHtVplVY9STWdRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUt MTk3MGRlODRhMWYwLzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iN2YxZGEtNDY3YS00MzYyLThiMmUtMTk3MGRlODRhMWYw LzEvd0JRdVhWejZwRklXYThlMVdtVlZqMUpOWjFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbK4T3A6X zXBL2SlNaMrybG5wcKEdHnFVCHko9FCXjDtqQS3FALC0+CXGviy0hfrnN9U6e1gX j1WNj3TvMGBRyKLwRGReFQ/1cs1yIPrOvKCxSpbLnbYSmwTLyRb1wMajrPNxg4nf 3gd1D7CRdyJDJ0LnrK6GTT7kCUN/UoAqz2QzD83xOmZsqxcX8xltqHO8FSq/Xw6K 8GGiON7dCtItpEqpNXgeuBs4SDjrteKNyJNv+T8OhsfKRE876UBJbMjDYmKTj/Jy E9DyQP+InfL6iryF0HYwCQgA8DOYtYtSyTySgDb+j4gfiWBuqV7HerKQptxlU8I4 JI5Ki9Bn/XK2Lw== -----END CERTIFICATE-----Generated at Fri Dec 19 03:09:03 2025 by rpki-client