This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft File: wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json) Hash identifier: KSALEaHlk/7gj+5Jj8y8AOmvT1v5L65Fb5TicOesGgY= Subject key identifier: 5B:F0:B1:31:64:B7:1D:9B:98:CD:46:BB:A3:E3:2A:07:2A:CE:11:A1 Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 Certificate issuer: /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Certificate serial: 019B4C5F12F5BC072D5DEC37B1AC4DC504DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft Manifest number: 1791 Signing time: Tue 23 Dec 2025 18:00:57 +0000 Manifest this update: Tue 23 Dec 2025 18:00:57 +0000 Manifest next update: Wed 24 Dec 2025 18:00:57 +0000 Files and hashes: 1: mOHhCAnpxR-dp3-6rcl-KfmxQF4.roa (hash: 3p2JZm+3j1SVt0MOxqOY+5HYmBdbi1aC8iIMBMpg4u0=) 2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: hogULPbTwdW/Rb7Q15f/avzVXlrJUtONRU5iyvzK4L8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:12:f5:bc:07:2d:5d:ec:37:b1:ac:4d:c5:04:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Validity Not Before: Dec 23 18:00:57 2025 GMT Not After : Dec 24 18:00:57 2025 GMT Subject: CN=5bf0b13164b71d9b98cd46bba3e32a072ace11a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5c:24:bf:41:36:d5:88:f1:ad:71:12:30:0f: ed:3d:73:19:22:26:d1:85:48:c4:e4:b3:20:d1:7f: aa:91:c2:74:cb:00:49:be:64:72:d3:6a:1b:3e:f9: ed:1e:a6:67:73:10:92:f2:7c:65:2a:0e:6b:cf:27: 63:1f:23:36:b8:d6:e4:d2:80:26:9c:c3:10:11:27: d6:9e:be:58:a7:bf:67:47:92:5a:24:bd:86:02:fe: 1d:2a:a4:a7:ae:0c:ba:14:a0:33:41:da:f2:2a:96: 10:0f:a9:8c:1f:34:04:95:a3:24:3e:3b:c6:2f:4c: 9f:14:e8:e1:29:6a:11:fc:60:a7:43:02:c4:84:a8: b5:4e:e6:60:3d:2d:78:f7:7b:5a:2f:d3:63:36:f9: 2e:71:b2:10:84:d8:78:62:9b:66:e1:c2:c3:3d:3a: d9:23:1e:63:2c:0a:3a:36:ea:e8:07:3d:a8:53:0e: 23:9a:32:ba:de:b8:b8:72:c2:79:0b:4c:7a:c3:1d: 45:dd:7c:10:ae:53:34:45:28:e3:b7:e9:54:42:57: fc:f2:48:8b:4a:3b:37:94:e6:55:cb:43:92:67:c8: fa:5f:c8:a4:1b:ad:c2:c2:d6:45:af:1d:56:a6:46: 7b:81:3f:84:99:e6:e3:fe:b4:7e:dd:72:04:e2:d5: 6d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F0:B1:31:64:B7:1D:9B:98:CD:46:BB:A3:E3:2A:07:2A:CE:11:A1 X509v3 Authority Key Identifier: keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:05:c5:cc:57:9b:e2:45:2b:ad:a9:f4:37:be:d5:0a:d4:18: dd:0a:08:dc:fb:66:55:96:0f:95:f0:23:5e:27:07:db:6a:4d: 8b:f0:8d:7f:57:8c:23:1c:92:93:78:a7:c1:95:84:60:44:45: 6f:15:2e:cb:cb:34:48:cf:f4:9d:31:05:bf:40:97:48:e3:d1: c3:cc:85:2d:06:04:cd:3d:a7:9a:0f:97:8f:c2:8c:4e:ac:6b: 93:2d:e0:f6:ed:0f:11:6c:c8:00:cc:14:18:8c:9e:68:54:d7: ba:ab:aa:5f:35:c7:b5:fb:67:9e:9a:2e:d9:cc:74:4e:81:b3: ad:1f:8c:92:c5:9b:1e:4e:d3:fd:7e:76:4c:26:85:63:ee:35: 21:c3:ae:42:56:13:07:2e:a6:99:a1:0c:6c:e2:f5:19:81:39: 3f:c0:94:28:5d:fc:02:f0:c6:ac:4f:50:0e:09:d4:03:d8:cc: 23:3c:f6:cd:0a:0f:44:ee:6f:94:cc:cd:25:4e:e7:09:04:f7: a2:37:25:f2:ab:32:87:38:d3:4f:1b:96:34:92:99:1e:c7:7d: c8:66:22:45:be:2d:e7:6e:c0:e3:ac:53:bf:3c:7d:cc:36:52: 62:92:4f:7a:56:c7:a0:55:15:e7:31:b0:32:2d:07:3e:14:a0: 6a:3f:c1:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXxL1vActXew3saxNxQTeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTZkMjVmMWZkZDAwZGM4MGRkNmQyMjViMjExMTliZjIx MjFlODkwHhcNMjUxMjIzMTgwMDU3WhcNMjUxMjI0MTgwMDU3WjAzMTEwLwYDVQQD Eyg1YmYwYjEzMTY0YjcxZDliOThjZDQ2YmJhM2UzMmEwNzJhY2UxMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVwkv0E21YjxrXESMA/tPXMZIibR hUjE5LMg0X+qkcJ0ywBJvmRy02obPvntHqZncxCS8nxlKg5rzydjHyM2uNbk0oAm nMMQESfWnr5Yp79nR5JaJL2GAv4dKqSnrgy6FKAzQdryKpYQD6mMHzQElaMkPjvG L0yfFOjhKWoR/GCnQwLEhKi1TuZgPS1493taL9NjNvkucbIQhNh4Yptm4cLDPTrZ Ix5jLAo6NuroBz2oUw4jmjK63ri4csJ5C0x6wx1F3XwQrlM0RSjjt+lUQlf88kiL Sjs3lOZVy0OSZ8j6X8ikG63CwtZFrx1WpkZ7gT+Emebj/rR+3XIE4tVtrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvwsTFktx2bmM1Gu6PjKgcqzhGhMB8GA1UdIwQY MBaAFMJW0l8f3QDcgN1tIlshEZvyEh6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMt Y2YzMmEwZDkyODI1LzEvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMtY2YzMmEwZDkyODI1 LzEvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQXFzFeb 4kUrran0N77VCtQY3QoI3PtmVZYPlfAjXicH22pNi/CNf1eMIxySk3inwZWEYERF bxUuy8s0SM/0nTEFv0CXSOPRw8yFLQYEzT2nmg+Xj8KMTqxrky3g9u0PEWzIAMwU GIyeaFTXuquqXzXHtftnnpou2cx0ToGzrR+MksWbHk7T/X52TCaFY+41IcOuQlYT By6mmaEMbOL1GYE5P8CUKF38AvDGrE9QDgnUA9jMIzz2zQoPRO5vlMzNJU7nCQT3 ojcl8qsyhzjTTxuWNJKZHsd9yGYiRb4t527A46xTvzx9zDZSYpJPelbHoFUV5zGw Mi0HPhSgaj/B4g== -----END CERTIFICATE-----Generated at Wed Dec 24 03:32:05 2025 by rpki-client