This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json) Hash identifier: H10l9cNnVVMNve8tK2y1BJnvISrc13f1+z0Ne8Uwj1A= Subject key identifier: 45:AC:11:E0:F6:1C:9F:D9:9B:34:4A:AF:8F:9F:51:3A:21:15:BA:86 Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Certificate serial: 019B38A2FE850B5B6F7B08495B6E69F380EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft Manifest number: 0AA6 Signing time: Fri 19 Dec 2025 22:02:44 +0000 Manifest this update: Fri 19 Dec 2025 22:02:44 +0000 Manifest next update: Sat 20 Dec 2025 22:02:44 +0000 Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=) 2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: NoJlFqhzwzGUmhdCrZz3k8VceGKH9avS2gOUPvKPgiE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:fe:85:0b:5b:6f:7b:08:49:5b:6e:69:f3:80:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Validity Not Before: Dec 19 22:02:44 2025 GMT Not After : Dec 20 22:02:44 2025 GMT Subject: CN=45ac11e0f61c9fd99b344aaf8f9f513a2115ba86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:69:57:b9:a3:e2:41:8c:ff:fe:32:be:ea:92: 89:51:3b:03:f6:32:02:f7:3b:1e:76:07:67:26:c5: 77:3b:fa:be:c2:ae:d6:66:ec:b8:b9:c3:f2:cd:b7: 9f:c1:1a:d0:0e:03:b4:7b:3e:39:58:1d:15:48:35: 02:fb:a0:e5:ca:b0:67:6a:23:fb:ba:a0:72:18:5a: 66:e3:da:4c:3c:c9:ad:16:b9:e9:95:e4:ec:58:f7: 63:66:c3:77:3c:d2:82:6d:14:8e:fa:aa:be:c6:0d: 28:8a:70:67:10:fb:14:c3:7b:32:97:be:cb:b4:1f: dd:b7:51:7a:a5:e6:67:70:43:12:1e:83:0a:09:8d: cc:8b:2a:d1:f7:54:99:e7:c0:c3:60:01:19:c1:3b: 17:71:60:af:60:a6:04:8d:b7:dd:a3:9e:cc:5e:f4: fe:ef:45:24:ed:61:72:12:c5:8f:17:c2:63:33:33: 05:a7:d0:ca:bd:83:24:05:fb:a5:ee:03:9d:47:66: 73:2c:52:1e:20:52:15:48:c9:1f:0b:2e:7d:1c:47: a7:5d:ff:18:8e:71:e6:e2:1e:9a:97:bf:d5:3e:66: 0f:a8:94:bb:2d:c7:37:38:ca:c2:95:a1:81:3b:c8: 7c:93:40:2b:2e:8b:b9:bf:51:a5:fe:13:77:14:d1: e1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AC:11:E0:F6:1C:9F:D9:9B:34:4A:AF:8F:9F:51:3A:21:15:BA:86 X509v3 Authority Key Identifier: keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:34:10:2c:32:01:5a:8b:8c:ad:1d:6f:d2:2e:2b:63:87:13: 17:ba:0f:dc:3c:d7:6f:90:e1:1a:f3:53:0b:76:ec:a4:07:d1: 03:b8:b2:a0:83:60:cb:56:a5:64:22:b9:31:b3:21:49:59:ec: bf:78:e5:1c:4b:d7:03:b2:18:05:43:42:06:33:8b:59:04:ee: 3a:6d:dc:c5:0d:84:c8:9d:cd:bc:55:b3:12:1d:20:e4:67:f5: fb:9f:dd:c7:e1:ce:97:20:69:65:d7:f5:c1:a8:39:7c:47:92: 1a:6c:3a:5f:a7:ca:d9:ec:01:c6:0c:f1:9b:a6:f0:67:5c:bf: e0:7f:f9:14:4f:87:fc:6e:ac:79:92:e1:33:3b:95:60:fa:01: 02:7a:1b:fc:1e:1c:69:b8:16:fc:7a:75:bc:b3:2e:a4:6d:62: d8:2a:78:f2:42:3c:1c:c5:93:17:8a:1e:a7:95:df:b6:88:18: 86:fa:bd:c6:20:40:bf:1f:e8:dc:32:b5:28:ec:a7:c3:bf:ae: 73:f8:46:c1:91:49:fd:99:93:f6:33:5e:50:11:30:7d:2c:03: fe:ec:d0:cf:c8:ce:40:e1:09:ea:e1:f4:3d:e0:21:09:36:02: f6:06:94:f1:58:19:61:6f:ac:4c:52:ad:61:d1:12:d2:1a:be: 3a:3f:28:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4ov6FC1tvewhJW25p84DqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjMyZjIxZjI4OTJiZTdjNGJjZDdlZTEwNmYwMTlhNmRl ODg3MDcwHhcNMjUxMjE5MjIwMjQ0WhcNMjUxMjIwMjIwMjQ0WjAzMTEwLwYDVQQD Eyg0NWFjMTFlMGY2MWM5ZmQ5OWIzNDRhYWY4ZjlmNTEzYTIxMTViYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGlXuaPiQYz//jK+6pKJUTsD9jIC 9zsedgdnJsV3O/q+wq7WZuy4ucPyzbefwRrQDgO0ez45WB0VSDUC+6DlyrBnaiP7 uqByGFpm49pMPMmtFrnpleTsWPdjZsN3PNKCbRSO+qq+xg0oinBnEPsUw3syl77L tB/dt1F6peZncEMSHoMKCY3MiyrR91SZ58DDYAEZwTsXcWCvYKYEjbfdo57MXvT+ 70Uk7WFyEsWPF8JjMzMFp9DKvYMkBful7gOdR2ZzLFIeIFIVSMkfCy59HEenXf8Y jnHm4h6al7/VPmYPqJS7Lcc3OMrClaGBO8h8k0ArLou5v1Gl/hN3FNHhMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWsEeD2HJ/ZmzRKr4+fUTohFbqGMB8GA1UdIwQY MBaAFMGzLyHyiSvnxLzX7hBvAZpt6IcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTkt Njg1ZGRiNjU1NTZmLzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTktNjg1ZGRiNjU1NTZm LzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozQQLDIB WouMrR1v0i4rY4cTF7oP3DzXb5DhGvNTC3bspAfRA7iyoINgy1alZCK5MbMhSVns v3jlHEvXA7IYBUNCBjOLWQTuOm3cxQ2EyJ3NvFWzEh0g5Gf1+5/dx+HOlyBpZdf1 wag5fEeSGmw6X6fK2ewBxgzxm6bwZ1y/4H/5FE+H/G6seZLhMzuVYPoBAnob/B4c abgW/Hp1vLMupG1i2Cp48kI8HMWTF4oep5XftogYhvq9xiBAvx/o3DK1KOynw7+u c/hGwZFJ/ZmT9jNeUBEwfSwD/uzQz8jOQOEJ6uH0PeAhCTYC9gaU8VgZYW+sTFKt YdES0hq+Oj8o9g== -----END CERTIFICATE-----Generated at Sat Dec 20 00:53:51 2025 by rpki-client