This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json) Hash identifier: 26gRmj7OsNMyBgEG18/W16nEYSFa88TFeQuna+BUXXY= Subject key identifier: 22:95:BB:82:D0:77:1E:EC:D3:2F:5E:FE:2D:E9:01:40:36:1A:0E:38 Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6 Certificate serial: 019B273FB42F5624622198CB4C52324FF73D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 13:00:44 +0000 Manifest this update: Tue 16 Dec 2025 13:00:44 +0000 Manifest next update: Wed 17 Dec 2025 13:00:44 +0000 Files and hashes: 1: 0tyV27ZaRKIuc5h8kTDsBiv4BZI.roa (hash: 1dyOdZnQpGVWWsvnKswgEprRwbXy0vsePve+ulQremU=) 2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: /iUZMVTBIWkEIxJwc+B89mNJb5A1QqpTEpRI0wHpI3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:b4:2f:56:24:62:21:98:cb:4c:52:32:4f:f7:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6 Validity Not Before: Dec 16 13:00:44 2025 GMT Not After : Dec 17 13:00:44 2025 GMT Subject: CN=2295bb82d0771eecd32f5efe2de90140361a0e38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:48:f1:4b:36:e6:42:45:41:3e:71:ab:52: bb:fa:84:5f:77:61:74:78:cf:b5:bb:60:68:6e:a3: 2c:d7:b4:b2:11:65:58:07:06:f9:06:6e:b0:0e:02: 42:8c:b2:ac:1c:cc:96:76:52:84:f5:21:86:51:4a: e3:74:f7:9f:8f:46:70:9e:0d:da:88:5b:58:49:9d: 42:4d:0b:99:00:09:39:f9:9c:ef:e0:b6:ed:58:7f: c8:7f:48:2b:f2:b3:b6:83:e6:a1:a4:b8:a7:ff:76: 8c:f1:08:bc:02:1d:cf:8f:f1:00:dc:be:42:e1:f7: 30:23:0b:6d:4e:3f:36:39:4c:da:4d:77:8b:48:76: fe:92:98:ad:f6:ef:60:03:32:ef:f7:5d:dd:5c:d7: c8:9a:2f:3e:23:20:85:f1:e9:09:ca:f0:43:af:49: 02:0e:13:18:93:9d:6b:ca:46:88:bc:f7:d7:12:f1: 09:3a:c5:1c:d0:ba:8a:b1:c1:b2:51:69:c5:95:32: 47:97:96:64:b6:be:49:d2:2e:ad:f3:b9:02:d7:5c: c8:03:21:ed:4a:7f:c2:0e:ae:77:8a:2c:0a:96:7f: 92:0e:42:20:fd:2b:29:aa:86:0f:7b:5d:bd:69:e1: 39:ce:27:82:3f:24:53:5f:a6:47:5f:b8:d1:a9:33: 1d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:95:BB:82:D0:77:1E:EC:D3:2F:5E:FE:2D:E9:01:40:36:1A:0E:38 X509v3 Authority Key Identifier: keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:98:a2:9b:c0:cc:6a:c6:04:9d:64:91:f1:86:2a:4f:85:51: 59:61:5f:16:51:00:4a:78:b0:aa:0e:10:d5:34:d2:a6:6e:6c: 57:f0:57:30:f2:45:a4:a4:cc:78:71:a9:4f:3a:f3:ff:fa:3a: ce:cb:76:46:f1:18:0d:6c:d3:69:f1:24:0e:8f:86:b3:4b:78: 60:70:63:fc:65:78:a6:78:88:4e:36:0c:d6:c5:a1:93:19:50: 3e:6f:5a:9b:9a:45:91:9c:e0:54:5a:3a:7e:4f:9d:ef:26:16: 6a:5d:61:cb:6d:61:3e:34:a1:7d:fd:b0:34:fe:38:82:a8:46: b9:f5:19:a8:f6:ae:ef:69:3f:c8:95:fe:6b:bc:64:cf:37:75: 69:40:e4:f0:fd:90:bd:a6:46:5e:42:31:e0:a4:03:82:69:5e: 5e:d6:45:15:be:b6:cf:7a:a4:18:1b:15:c8:a6:bc:c9:51:80: 2b:2d:f1:e1:97:b7:46:33:c8:b3:5b:70:34:98:a8:c2:33:82: 63:1d:ca:07:cb:a0:64:64:df:ee:e1:e7:99:65:fe:5b:8d:88: ac:2c:f4:95:f1:a6:50:e1:44:71:04:ac:9e:f8:5b:71:e9:91: 0f:b7:84:13:84:e2:9a:0c:70:4b:3a:a3:47:b3:91:dc:94:a0: 8c:cb:8e:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP7QvViRiIZjLTFIyT/c9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmYzNGIxOTBhNTFjZTUzMDAyNTc5MTFhZjMwNDA0ZjQ5 NTFmYjYwHhcNMjUxMjE2MTMwMDQ0WhcNMjUxMjE3MTMwMDQ0WjAzMTEwLwYDVQQD EygyMjk1YmI4MmQwNzcxZWVjZDMyZjVlZmUyZGU5MDE0MDM2MWEwZTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+9I8Us25kJFQT5xq1K7+oRfd2F0 eM+1u2BobqMs17SyEWVYBwb5Bm6wDgJCjLKsHMyWdlKE9SGGUUrjdPefj0Zwng3a iFtYSZ1CTQuZAAk5+Zzv4LbtWH/If0gr8rO2g+ahpLin/3aM8Qi8Ah3Pj/EA3L5C 4fcwIwttTj82OUzaTXeLSHb+kpit9u9gAzLv913dXNfImi8+IyCF8ekJyvBDr0kC DhMYk51rykaIvPfXEvEJOsUc0LqKscGyUWnFlTJHl5Zktr5J0i6t87kC11zIAyHt Sn/CDq53iiwKln+SDkIg/SspqoYPe129aeE5zieCPyRTX6ZHX7jRqTMdGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKVu4LQdx7s0y9e/i3pAUA2Gg44MB8GA1UdIwQY MBaAFMG/NLGQpRzlMAJXkRrzBAT0lR+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMt ZjMxMWJhYzJhMzdmLzEvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMtZjMxMWJhYzJhMzdm LzEvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5iim8DM asYEnWSR8YYqT4VRWWFfFlEASniwqg4Q1TTSpm5sV/BXMPJFpKTMeHGpTzrz//o6 zst2RvEYDWzTafEkDo+Gs0t4YHBj/GV4pniITjYM1sWhkxlQPm9am5pFkZzgVFo6 fk+d7yYWal1hy21hPjShff2wNP44gqhGufUZqPau72k/yJX+a7xkzzd1aUDk8P2Q vaZGXkIx4KQDgmleXtZFFb62z3qkGBsVyKa8yVGAKy3x4Ze3RjPIs1twNJiowjOC Yx3KB8ugZGTf7uHnmWX+W42IrCz0lfGmUOFEcQSsnvhbcemRD7eEE4TimgxwSzqj R7OR3JSgjMuOiw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:16:34 2025 by rpki-client