This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json) Hash identifier: Ai+XOxsdFgoWvk+xe/1YahhR/SoH+jOlxz/WHzgnQ2U= Subject key identifier: 5A:FF:4F:17:A8:D3:B1:E1:8D:4A:9E:5D:6B:CF:70:26:6F:EB:C0:B6 Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9 Certificate serial: 019B4392CD087D317D78CD24DEEAF6C2EB35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 01:00:52 +0000 Manifest this update: Mon 22 Dec 2025 01:00:52 +0000 Manifest next update: Tue 23 Dec 2025 01:00:52 +0000 Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=) 2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: bWYy+0woAmgiXZLE6FwN+FXwoCD9CtbF8wf53a9YbxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:cd:08:7d:31:7d:78:cd:24:de:ea:f6:c2:eb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9 Validity Not Before: Dec 22 01:00:52 2025 GMT Not After : Dec 23 01:00:52 2025 GMT Subject: CN=5aff4f17a8d3b1e18d4a9e5d6bcf70266febc0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:16:ee:bc:54:fc:17:9b:68:62:bd:cc:76:5b: da:97:46:aa:7a:68:e7:70:51:e7:8d:ef:ce:1b:ee: 66:ad:d3:f5:8b:af:24:06:ca:77:6a:3f:1e:e6:18: f7:cc:ae:9d:78:f0:d1:8b:4a:3e:90:f3:b6:09:66: 68:37:82:39:f1:7c:0b:ee:11:98:12:d1:9c:92:9e: f4:a7:62:81:8c:52:8f:7a:ac:04:96:35:e6:ff:95: 7b:fb:48:8f:7a:04:80:fe:bb:d9:46:6d:b0:da:30: ca:20:93:66:6e:62:d8:9f:79:d5:03:91:e3:14:77: 4d:f1:f4:60:8a:cb:5e:e3:7e:05:1c:29:a8:de:c0: cf:11:84:88:c9:77:03:62:49:8a:fb:d7:0f:16:f0: 09:73:b9:35:a5:f6:6c:0d:07:31:86:31:2a:8f:bf: e3:d5:b6:3b:87:84:b3:72:3c:02:30:18:0b:0d:db: 5d:e7:b1:18:50:94:0b:63:1a:ad:02:1f:69:18:7d: 6a:31:10:8c:75:ee:f9:1f:9f:04:0c:66:a0:48:75: 1e:35:62:bb:cf:20:49:28:e6:21:fb:fa:aa:a1:d2: 0b:a4:dd:6b:e4:42:c2:1a:d6:e5:b4:ca:58:38:8a: a9:b2:7d:73:7a:c2:6e:84:79:e0:54:6d:b3:c5:71: 3e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:FF:4F:17:A8:D3:B1:E1:8D:4A:9E:5D:6B:CF:70:26:6F:EB:C0:B6 X509v3 Authority Key Identifier: keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:15:14:2d:eb:c9:87:ce:cb:df:00:fb:e2:18:76:d6:f9:3d: 09:c0:8d:6e:bc:d0:7f:a8:6a:66:bf:df:64:c5:38:81:c7:97: d3:5d:c4:dc:d4:2b:6c:ca:c5:3f:c3:fc:34:b4:76:e0:40:b0: 5f:ec:1c:a5:28:7c:db:9a:0c:ca:7d:7a:50:7a:04:35:4c:d1: 3c:2d:b3:a0:d3:cb:bd:e0:04:d8:2b:ab:ff:c1:b1:d4:bb:79: 78:2e:fc:e5:e2:a8:43:15:fa:ff:7e:2b:bb:4a:de:46:e5:e1: 3a:39:4c:cc:83:63:6d:dc:ea:ca:80:23:f3:2e:3b:0e:ff:19: d8:05:32:11:32:f6:a1:03:9d:2e:8b:28:83:c6:3e:ec:96:e0: 7b:0a:f4:9a:de:4d:09:36:34:ac:60:56:33:54:03:90:26:4d: e9:ed:c5:4f:07:66:24:42:19:82:04:85:c6:d7:d9:99:1f:a3: 19:b6:31:0d:81:5e:55:1e:76:aa:3a:ba:96:00:f7:97:ad:82: 41:31:a7:64:14:59:95:31:64:07:9f:b4:09:65:27:61:f2:74: 97:2c:17:9b:b3:e9:10:4f:fc:5f:ea:c2:4b:20:a1:c5:53:5c: ed:8c:5e:ee:3d:34:2c:ff:68:9c:bc:87:c5:b6:60:10:55:52: e3:51:72:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDks0IfTF9eM0k3ur2wus1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTY2ZTIxNmMzNjBjMzZlMGY3NWIwZDM5MTIzZGJhZDQy MjY0ZTkwHhcNMjUxMjIyMDEwMDUyWhcNMjUxMjIzMDEwMDUyWjAzMTEwLwYDVQQD Eyg1YWZmNGYxN2E4ZDNiMWUxOGQ0YTllNWQ2YmNmNzAyNjZmZWJjMGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhbuvFT8F5toYr3Mdlval0aqemjn cFHnje/OG+5mrdP1i68kBsp3aj8e5hj3zK6dePDRi0o+kPO2CWZoN4I58XwL7hGY EtGckp70p2KBjFKPeqwEljXm/5V7+0iPegSA/rvZRm2w2jDKIJNmbmLYn3nVA5Hj FHdN8fRgiste434FHCmo3sDPEYSIyXcDYkmK+9cPFvAJc7k1pfZsDQcxhjEqj7/j 1bY7h4SzcjwCMBgLDdtd57EYUJQLYxqtAh9pGH1qMRCMde75H58EDGagSHUeNWK7 zyBJKOYh+/qqodILpN1r5ELCGtbltMpYOIqpsn1zesJuhHngVG2zxXE+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFr/Txeo07HhjUqeXWvPcCZv68C2MB8GA1UdIwQY MBaAFMAWbiFsNgw24PdbDTkSPbrUImTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYt ZmNjZTE0N2MzMjdhLzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYtZmNjZTE0N2MzMjdh LzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKRUULevJ h87L3wD74hh21vk9CcCNbrzQf6hqZr/fZMU4gceX013E3NQrbMrFP8P8NLR24ECw X+wcpSh825oMyn16UHoENUzRPC2zoNPLveAE2Cur/8Gx1Lt5eC785eKoQxX6/34r u0reRuXhOjlMzINjbdzqyoAj8y47Dv8Z2AUyETL2oQOdLosog8Y+7Jbgewr0mt5N CTY0rGBWM1QDkCZN6e3FTwdmJEIZggSFxtfZmR+jGbYxDYFeVR52qjq6lgD3l62C QTGnZBRZlTFkB5+0CWUnYfJ0lywXm7PpEE/8X+rCSyChxVNc7Yxe7j00LP9onLyH xbZgEFVS41Fy/A== -----END CERTIFICATE-----Generated at Mon Dec 22 03:48:14 2025 by rpki-client