This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft File: wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json) Hash identifier: V1J0+GeADNJkAlBrgG4lkQGP6SeLUa8FlgShxfwzRc8= Subject key identifier: 12:51:31:37:AF:4C:C2:75:C8:E6:29:F5:A3:02:19:36:7B:09:C8:A5 Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 Certificate issuer: /CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Certificate serial: 019B6D3337652AE92AE0C6950E8059DBA6F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft Manifest number: 14AE Signing time: Tue 30 Dec 2025 03:00:31 +0000 Manifest this update: Tue 30 Dec 2025 03:00:31 +0000 Manifest next update: Wed 31 Dec 2025 03:00:31 +0000 Files and hashes: 1: MnIaRmi-qtJjMOo5DcZACYHEh7Q.roa (hash: DOu8g3e2V+bo5Ia9CdK+7hGNXc1/nocclAIwTEkGmxQ=) 2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: X2FSJYzP4FgamwcMQ/GOoWcNwjlgNYqax8A9h0GaC7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:37:65:2a:e9:2a:e0:c6:95:0e:80:59:db:a6:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Validity Not Before: Dec 30 03:00:31 2025 GMT Not After : Dec 31 03:00:31 2025 GMT Subject: CN=12513137af4cc275c8e629f5a30219367b09c8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e0:87:51:ad:d1:11:c5:a0:6b:84:ad:9b:ca: 03:02:1f:aa:7e:24:69:50:5a:1b:3f:65:77:cc:74: ad:e7:ba:01:5a:4e:ed:96:88:a2:8a:7e:e7:5b:b3: 65:66:1f:3b:10:05:9d:8c:bd:2f:ae:2f:28:79:9c: f5:35:4e:4f:02:07:08:64:8c:94:bf:60:e4:96:50: 13:f0:a6:6f:b3:ca:61:60:7f:3c:67:0a:c6:6e:d0: 68:e5:ff:a6:9d:e2:b2:0d:32:56:fc:94:f2:e7:60: 03:7a:ab:02:e5:5c:88:da:cb:4c:8d:b0:14:b3:05: be:cf:b1:08:64:b5:7b:7f:0e:e6:a2:ae:9c:6c:40: 33:5d:93:7a:2c:d4:23:0e:dc:e0:f9:01:14:41:7b: 6b:1e:36:1a:6f:8d:c3:bd:7e:d2:5f:4f:b7:58:bf: 42:34:32:7c:36:19:ba:ac:88:9a:dd:7d:f9:c2:f2: 6a:59:27:05:9c:65:de:f9:30:0f:ec:ae:26:47:6f: 79:f9:d5:6a:6e:c1:36:59:2e:c4:9e:4e:4c:9f:07: b3:1b:c5:01:51:0e:76:00:c9:ee:31:8b:e0:b4:72: d1:76:d8:27:8d:7b:d4:69:a5:61:1d:e8:e6:6f:2c: fa:85:53:ce:87:2e:c9:89:e6:66:2a:ce:80:8c:78: 49:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:51:31:37:AF:4C:C2:75:C8:E6:29:F5:A3:02:19:36:7B:09:C8:A5 X509v3 Authority Key Identifier: keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:21:77:65:0b:bd:e7:52:ec:0d:51:dd:f8:61:c5:ce:ae:8f: 95:67:08:03:fb:f3:ad:14:5a:76:30:57:92:ca:07:f4:09:7f: 2a:42:f5:03:61:03:1a:50:a2:35:50:66:dc:0c:91:85:09:22: fc:c1:e9:51:46:04:68:22:3f:fb:16:8a:0f:52:37:37:1d:bb: f4:03:d2:e5:3b:f2:0c:5b:ed:c5:78:6c:bc:7e:d2:8b:0a:81: 99:9a:2d:75:3d:a4:be:34:5b:10:b3:90:e2:39:5d:8a:ef:91: 2a:0c:35:19:9c:c4:54:5b:15:db:6d:1b:40:22:71:b4:05:8c: dd:3a:6e:47:6b:f7:8e:f8:93:a5:ee:a2:c4:59:a9:4d:15:11: e0:f3:e1:db:24:3f:dd:c1:67:b5:1f:2b:0a:30:84:ec:dc:3f: a3:24:29:9a:1d:94:1c:0a:4b:b3:5c:da:23:96:14:6a:5f:ce: 36:d8:8f:66:02:05:33:9a:6a:6f:bc:ef:36:ae:0e:12:c3:54: 66:9e:6e:f2:61:0f:70:33:90:46:53:c4:84:13:15:54:3b:ee: 4e:be:9b:de:00:87:85:19:39:6d:95:98:84:ef:50:af:20:40: 99:dd:fb:61:36:dc:5b:8c:c1:ed:79:74:d5:de:76:9c:1a:61: ee:74:64:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttMzdlKukq4MaVDoBZ26b1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjYwN2M1ODUxNTM2N2QzN2M5ZjNlNjk5NDgyZTU3YTMz YzczZjUwHhcNMjUxMjMwMDMwMDMxWhcNMjUxMjMxMDMwMDMxWjAzMTEwLwYDVQQD EygxMjUxMzEzN2FmNGNjMjc1YzhlNjI5ZjVhMzAyMTkzNjdiMDljOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeCHUa3REcWga4Stm8oDAh+qfiRp UFobP2V3zHSt57oBWk7tloiiin7nW7NlZh87EAWdjL0vri8oeZz1NU5PAgcIZIyU v2DkllAT8KZvs8phYH88ZwrGbtBo5f+mneKyDTJW/JTy52ADeqsC5VyI2stMjbAU swW+z7EIZLV7fw7moq6cbEAzXZN6LNQjDtzg+QEUQXtrHjYab43DvX7SX0+3WL9C NDJ8Nhm6rIia3X35wvJqWScFnGXe+TAP7K4mR295+dVqbsE2WS7Enk5MnwezG8UB UQ52AMnuMYvgtHLRdtgnjXvUaaVhHejmbyz6hVPOhy7JieZmKs6AjHhJ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBJRMTevTMJ1yOYp9aMCGTZ7CcilMB8GA1UdIwQY MBaAFMG2B8WFFTZ9N8nz5plILlejPHP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQt YjFlYTA4N2I5NTI1LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQtYjFlYTA4N2I5NTI1 LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAayF3ZQu9 51LsDVHd+GHFzq6PlWcIA/vzrRRadjBXksoH9Al/KkL1A2EDGlCiNVBm3AyRhQki /MHpUUYEaCI/+xaKD1I3Nx279APS5TvyDFvtxXhsvH7SiwqBmZotdT2kvjRbELOQ 4jldiu+RKgw1GZzEVFsV220bQCJxtAWM3TpuR2v3jviTpe6ixFmpTRUR4PPh2yQ/ 3cFntR8rCjCE7Nw/oyQpmh2UHApLs1zaI5YUal/ONtiPZgIFM5pqb7zvNq4OEsNU Zp5u8mEPcDOQRlPEhBMVVDvuTr6b3gCHhRk5bZWYhO9QryBAmd37YTbcW4zB7Xl0 1d52nBph7nRkJg== -----END CERTIFICATE-----Generated at Tue Dec 30 06:23:23 2025 by rpki-client