This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json) Hash identifier: aruE5lh/fGaLxjafds6WIcJW1bVwOjUytkDFKhGE+9s= Subject key identifier: DB:BC:47:16:3B:0E:DA:13:EE:79:1E:67:60:A7:18:59:61:52:0D:83 Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Certificate serial: 019B4A03670710CF1F1A9059D5CB2690DE83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft Manifest number: 0AAF Signing time: Tue 23 Dec 2025 07:01:35 +0000 Manifest this update: Tue 23 Dec 2025 07:01:35 +0000 Manifest next update: Wed 24 Dec 2025 07:01:35 +0000 Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=) 2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: fMGelbVpCpH7G5e3oxnlfweBENYXja8H4R2EMmhupGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:67:07:10:cf:1f:1a:90:59:d5:cb:26:90:de:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Validity Not Before: Dec 23 07:01:35 2025 GMT Not After : Dec 24 07:01:35 2025 GMT Subject: CN=dbbc47163b0eda13ee791e6760a7185961520d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:05:7b:d8:55:90:86:b1:39:8a:59:88:0e:dd: 4b:33:de:89:81:bb:42:d6:a1:e1:87:1e:ee:c6:f2: 9e:de:2b:e0:82:38:bf:d5:be:72:e4:30:d8:34:29: f8:ef:68:5b:c0:d1:f9:be:fc:8c:5d:44:db:b5:f8: ce:3d:e3:28:24:be:17:d6:6b:29:8f:88:0e:9f:0e: bb:91:93:88:e9:b8:ed:de:9f:f3:ab:64:62:ac:cf: 3c:da:38:b2:28:cc:75:a8:dc:36:fa:74:5d:c6:8c: 9d:0c:a4:01:b7:dd:13:fd:d7:4c:a2:46:80:08:ab: 63:d6:83:23:fb:dd:46:92:5a:5d:25:f0:78:46:1e: 99:94:bb:3b:82:dc:2f:b0:da:ac:8d:ae:28:78:ca: 89:81:49:c4:da:5b:f8:6c:3a:d4:8b:f0:e6:e5:34: 2e:87:66:c1:46:31:84:62:d5:1a:9a:6c:69:56:47: 15:18:c9:7a:0a:7e:87:da:50:d2:c9:da:35:73:4e: 87:f7:6c:3b:46:ff:00:61:94:bb:77:c8:b3:69:1e: 78:8a:5c:6f:02:95:72:6b:b7:a1:e7:19:07:09:6e: 65:43:2b:a5:3a:c3:dd:ef:f3:c6:ca:73:8c:a0:92: 3d:77:f0:2d:8f:42:e7:f8:ea:49:e2:9c:02:70:47: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BC:47:16:3B:0E:DA:13:EE:79:1E:67:60:A7:18:59:61:52:0D:83 X509v3 Authority Key Identifier: keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:dd:13:bd:c5:74:7f:d7:39:31:b9:6b:61:dc:56:e0:98:83: 5a:19:be:5a:ba:f9:00:f5:ee:9f:a0:f9:36:13:4b:ee:ef:01: 32:82:30:f0:f7:f8:e6:fc:4f:74:0c:5d:7b:e4:ed:fa:f4:ec: a2:04:11:82:f3:23:b5:b6:da:10:1f:17:f3:b6:a9:b9:f6:9f: 67:6e:60:02:71:ac:75:32:e4:ce:96:6a:44:10:ae:d9:56:89: 4f:00:f9:0b:cc:ad:ee:9a:07:d5:ff:77:61:9c:af:ad:a6:c4: 2c:63:cc:fb:e5:40:2a:a3:ca:8a:3b:af:55:27:42:58:a4:f4: de:d7:74:79:41:b2:d8:4d:0f:cf:73:87:93:c0:22:ee:f9:a6: cb:aa:4d:34:4e:79:f3:e4:d3:dc:82:69:fb:cf:8f:01:b4:cb: 16:9f:89:c2:87:17:4c:92:b5:9b:29:10:0c:8c:7f:2a:d5:fd: f2:0f:ca:ff:28:39:db:b8:3f:6e:c9:09:65:46:a8:f5:b9:8e: 58:a9:00:85:e6:af:0a:a8:f8:a9:74:96:70:2f:12:3e:d8:2d: 3d:d1:e5:ab:b4:56:c2:e8:b5:8c:8c:80:bf:fc:ee:8a:73:10: 43:25:69:2a:ba:91:c3:55:21:f7:64:d6:25:88:5d:96:65:b8: 4f:22:e9:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA2cHEM8fGpBZ1csmkN6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjMyZjIxZjI4OTJiZTdjNGJjZDdlZTEwNmYwMTlhNmRl ODg3MDcwHhcNMjUxMjIzMDcwMTM1WhcNMjUxMjI0MDcwMTM1WjAzMTEwLwYDVQQD EyhkYmJjNDcxNjNiMGVkYTEzZWU3OTFlNjc2MGE3MTg1OTYxNTIwZDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwV72FWQhrE5ilmIDt1LM96JgbtC 1qHhhx7uxvKe3ivggji/1b5y5DDYNCn472hbwNH5vvyMXUTbtfjOPeMoJL4X1msp j4gOnw67kZOI6bjt3p/zq2RirM882jiyKMx1qNw2+nRdxoydDKQBt90T/ddMokaA CKtj1oMj+91GklpdJfB4Rh6ZlLs7gtwvsNqsja4oeMqJgUnE2lv4bDrUi/Dm5TQu h2bBRjGEYtUammxpVkcVGMl6Cn6H2lDSydo1c06H92w7Rv8AYZS7d8izaR54ilxv ApVya7eh5xkHCW5lQyulOsPd7/PGynOMoJI9d/Atj0Ln+OpJ4pwCcEftRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu8RxY7DtoT7nkeZ2CnGFlhUg2DMB8GA1UdIwQY MBaAFMGzLyHyiSvnxLzX7hBvAZpt6IcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTkt Njg1ZGRiNjU1NTZmLzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTktNjg1ZGRiNjU1NTZm LzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJt0TvcV0 f9c5MblrYdxW4JiDWhm+Wrr5APXun6D5NhNL7u8BMoIw8Pf45vxPdAxde+Tt+vTs ogQRgvMjtbbaEB8X87apufafZ25gAnGsdTLkzpZqRBCu2VaJTwD5C8yt7poH1f93 YZyvrabELGPM++VAKqPKijuvVSdCWKT03td0eUGy2E0Pz3OHk8Ai7vmmy6pNNE55 8+TT3IJp+8+PAbTLFp+JwocXTJK1mykQDIx/KtX98g/K/yg527g/bskJZUao9bmO WKkAheavCqj4qXSWcC8SPtgtPdHlq7RWwui1jIyAv/zuinMQQyVpKrqRw1Uh92TW JYhdlmW4TyLpUA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:16:30 2025 by rpki-client