This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File: wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier: P6xcjdVYJs54UyMLuGCsm81XGCgGD+n5hfi5NtccrPs=
Subject key identifier: A2:85:56:2C:77:32:47:2C:EC:6F:25:88:E3:54:EA:A8:91:81:46:69
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 019B5229EA85D11FB7A46746ACC228F8BAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number: 179E
Signing time: Wed 24 Dec 2025 21:00:37 +0000
Manifest this update: Wed 24 Dec 2025 21:00:37 +0000
Manifest next update: Thu 25 Dec 2025 21:00:37 +0000
Files and hashes: 1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=)
6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: /lFii83pb39FAGxvywPh9J7UHCpU4Q1ZiIQPUGM5Vb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Dec 2025 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:52:29:ea:85:d1:1f:b7:a4:67:46:ac:c2:28:f8:ba:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Dec 24 21:00:37 2025 GMT
Not After : Dec 25 21:00:37 2025 GMT
Subject: CN=a285562c7732472cec6f2588e354eaa891814669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:19:f6:97:dd:f7:ea:17:dc:19:9b:2b:a7:
66:16:98:a3:76:01:f5:b8:ae:65:d8:f8:68:df:08:
f1:b5:45:a2:95:e2:20:36:1d:00:d3:07:5b:25:58:
8b:aa:8d:ed:37:9a:6a:0c:bc:92:d1:ac:19:0a:de:
ca:e8:8c:bc:bf:a6:fd:55:78:1a:f3:ad:93:1c:a8:
38:af:8e:e1:f1:12:11:4a:7c:64:d4:52:11:72:ac:
b2:2c:a5:0a:ec:43:ab:9d:40:20:46:32:39:84:4d:
c0:64:e6:bb:b3:a0:e9:90:2f:8a:a4:7d:e6:25:32:
fc:f9:eb:b2:42:64:69:d9:1a:a2:b5:da:e1:d3:a9:
d6:e3:8c:70:e1:6e:be:5c:84:4b:a7:d7:b8:55:1d:
4e:76:2b:9a:42:9c:68:cf:eb:29:60:22:be:c0:92:
f0:70:10:35:e8:5a:47:ed:49:9f:74:a0:19:c7:d3:
77:9b:e5:a4:b2:ba:75:05:9c:e3:7b:7f:75:36:7c:
70:6e:6d:c0:c2:44:b0:db:31:50:55:18:76:35:bf:
48:9a:9f:43:08:ea:dd:b2:a6:ac:69:d1:8e:ad:ff:
31:29:35:2a:c9:1d:16:10:b7:23:bb:84:09:9c:a2:
b8:8b:d3:cf:f7:c1:ba:04:b4:3b:9c:49:ba:f9:82:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:85:56:2C:77:32:47:2C:EC:6F:25:88:E3:54:EA:A8:91:81:46:69
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:06:6a:2b:9c:b9:85:6e:8a:7f:ef:18:d1:c9:82:40:1f:d9:
f4:5a:b0:52:9e:e4:fb:52:5e:24:8b:e3:fe:1a:7e:9c:9d:c2:
a3:61:f1:fc:7a:f0:cd:6c:88:1c:c8:11:14:36:4f:c1:7d:2b:
92:6a:be:71:56:90:22:05:2e:70:b1:ce:38:7a:41:18:c7:2d:
ee:52:3e:1c:20:74:b2:fc:ff:93:6a:ba:a4:f5:66:e9:c1:21:
4b:c2:2d:a5:ba:3f:73:ef:4d:21:3f:74:5c:53:43:23:ca:55:
cf:35:09:fe:13:00:ec:8a:08:cd:cf:53:c4:e1:b7:7f:b8:a7:
f3:fb:0b:fb:d2:14:69:35:52:51:49:0a:e3:8e:2b:e9:75:85:
fd:33:ae:90:87:b7:e3:9d:f5:24:3b:48:58:3e:61:17:c8:56:
88:fe:fe:38:a6:77:82:60:f8:7f:3e:11:03:af:f2:06:44:e1:
f0:e6:7c:b2:8c:85:51:a1:bc:e0:0d:fc:b2:0f:24:4e:44:11:
4b:fd:55:34:35:a0:99:02:ad:16:c3:2c:9c:e7:eb:b6:c1:d2:
80:0f:91:47:22:66:10:91:f0:c4:9e:bb:6c:25:7a:d5:e8:b8:
63:9d:5c:6e:bd:d3:3b:ec:99:0e:8a:46:cb:6d:93:35:78:64:
32:7c:b5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 04:32:59 2025 by rpki-client