This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft File: wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json) Hash identifier: CgSIbhMTHhzxKjBoZMq7fYHriFkcZah9TOnuEShJQHw= Subject key identifier: EA:49:54:65:20:7C:06:9A:0B:2C:2C:FC:88:54:DD:2F:16:D5:74:CC Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 Certificate issuer: /CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Certificate serial: 019B5DC02F59EC1025276CCF0D0A018303C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft Manifest number: 14A6 Signing time: Sat 27 Dec 2025 03:00:34 +0000 Manifest this update: Sat 27 Dec 2025 03:00:34 +0000 Manifest next update: Sun 28 Dec 2025 03:00:34 +0000 Files and hashes: 1: MnIaRmi-qtJjMOo5DcZACYHEh7Q.roa (hash: DOu8g3e2V+bo5Ia9CdK+7hGNXc1/nocclAIwTEkGmxQ=) 2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: sw1zIDgf81XjWT+aJrKbs8/fer2zdcBhMEny8C+DZyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 03:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:2f:59:ec:10:25:27:6c:cf:0d:0a:01:83:03:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Validity Not Before: Dec 27 03:00:34 2025 GMT Not After : Dec 28 03:00:34 2025 GMT Subject: CN=ea495465207c069a0b2c2cfc8854dd2f16d574cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1e:fe:13:29:d1:6f:f0:3a:52:bc:0f:a5:e1: b5:f5:62:8b:75:fa:8b:9f:4d:57:36:88:63:f4:49: 42:20:19:18:94:f8:e9:56:49:2a:dc:85:7d:35:36: 83:a9:f2:f6:9d:54:72:a3:49:e5:f1:57:15:55:ad: 8f:78:b1:7e:66:5e:4a:57:ad:e1:15:4e:d1:9c:81: 48:e6:db:62:d5:d0:7e:d0:c5:1e:ea:f7:48:85:8f: 8d:12:8e:b3:16:36:05:1d:54:55:c3:28:cd:b2:f1: 12:29:98:d3:cd:e7:22:61:ca:dd:e1:ec:6e:0e:45: bb:6d:ed:a2:47:9f:8d:5a:6e:34:5e:fa:ea:8d:62: 29:5c:0d:cb:d4:e9:c7:8f:da:ba:cf:b7:60:f3:17: 27:d2:1a:e0:a7:af:a3:87:ca:8f:81:f0:23:77:30: 8f:6b:ce:13:cf:d4:a5:5d:e0:ae:b5:e8:dc:be:a8: b9:3d:3c:a5:2b:58:b6:b3:3d:ab:b7:68:99:70:25: 62:66:d2:19:c2:18:92:e0:31:af:b1:c1:18:15:e1: 68:8c:b5:ce:da:b4:3f:0b:2e:93:cd:92:03:97:e6: b9:ba:59:ed:5e:aa:4f:9f:ce:3d:ba:1f:e9:27:c0: 74:60:64:92:d2:81:9a:59:4c:94:1f:b5:3a:20:af: c4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:49:54:65:20:7C:06:9A:0B:2C:2C:FC:88:54:DD:2F:16:D5:74:CC X509v3 Authority Key Identifier: keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0b:52:34:87:a6:9d:28:c5:e3:7b:b7:55:ca:72:53:54:49: 2c:cc:e5:99:cd:da:53:ca:31:51:a1:e0:66:b6:35:1e:d5:ac: a6:c4:0b:9f:90:15:14:05:ac:bf:54:dd:a6:44:34:0a:c2:84: 6a:44:84:b1:5e:b0:aa:ed:04:e4:17:0a:77:97:36:67:ba:38: b8:c8:b4:7d:46:22:76:d2:89:28:d2:ab:9c:ce:65:2b:d6:e8: 77:71:56:22:58:44:67:49:2e:02:7e:3b:64:03:8b:ce:d0:c6: 9c:40:df:51:57:92:ef:f3:8a:a4:10:e6:56:9f:30:c3:91:7d: 61:dc:9b:02:7d:db:2b:2a:f2:70:9e:03:1a:05:7a:48:10:1b: 26:29:0f:3a:1c:a9:58:cb:d1:80:b3:1c:76:30:8a:f3:5f:8b: 1e:3c:ca:99:53:7a:85:d0:97:f8:ee:ad:bb:65:fe:95:7c:c1: ab:3a:1d:e7:e1:e3:d5:d9:6b:75:96:6c:85:e7:84:13:68:fc: 2d:bd:e2:85:cb:7d:82:2e:0b:f9:ce:4b:9c:76:82:6f:8b:09: 85:48:6c:c8:2a:bf:a5:d9:8d:62:cb:38:3f:8b:70:2d:c8:7b: 4b:4f:28:04:20:97:0d:9e:3d:9d:de:d1:84:27:31:7e:fd:2e: 48:c1:49:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwC9Z7BAlJ2zPDQoBgwPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjYwN2M1ODUxNTM2N2QzN2M5ZjNlNjk5NDgyZTU3YTMz YzczZjUwHhcNMjUxMjI3MDMwMDM0WhcNMjUxMjI4MDMwMDM0WjAzMTEwLwYDVQQD EyhlYTQ5NTQ2NTIwN2MwNjlhMGIyYzJjZmM4ODU0ZGQyZjE2ZDU3NGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR7+EynRb/A6UrwPpeG19WKLdfqL n01XNohj9ElCIBkYlPjpVkkq3IV9NTaDqfL2nVRyo0nl8VcVVa2PeLF+Zl5KV63h FU7RnIFI5tti1dB+0MUe6vdIhY+NEo6zFjYFHVRVwyjNsvESKZjTzeciYcrd4exu DkW7be2iR5+NWm40XvrqjWIpXA3L1OnHj9q6z7dg8xcn0hrgp6+jh8qPgfAjdzCP a84Tz9SlXeCutejcvqi5PTylK1i2sz2rt2iZcCViZtIZwhiS4DGvscEYFeFojLXO 2rQ/Cy6TzZIDl+a5ulntXqpPn849uh/pJ8B0YGSS0oGaWUyUH7U6IK/ERwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpJVGUgfAaaCyws/IhU3S8W1XTMMB8GA1UdIwQY MBaAFMG2B8WFFTZ9N8nz5plILlejPHP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQt YjFlYTA4N2I5NTI1LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQtYjFlYTA4N2I5NTI1 LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABAtSNIem nSjF43u3VcpyU1RJLMzlmc3aU8oxUaHgZrY1HtWspsQLn5AVFAWsv1TdpkQ0CsKE akSEsV6wqu0E5BcKd5c2Z7o4uMi0fUYidtKJKNKrnM5lK9bod3FWIlhEZ0kuAn47 ZAOLztDGnEDfUVeS7/OKpBDmVp8ww5F9YdybAn3bKyrycJ4DGgV6SBAbJikPOhyp WMvRgLMcdjCK81+LHjzKmVN6hdCX+O6tu2X+lXzBqzod5+Hj1dlrdZZsheeEE2j8 Lb3ihct9gi4L+c5LnHaCb4sJhUhsyCq/pdmNYss4P4twLch7S08oBCCXDZ49nd7R hCcxfv0uSMFJMw== -----END CERTIFICATE-----Generated at Sat Dec 27 12:45:52 2025 by rpki-client