This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft File: wBZuIWw2DDbg91sNORI9utQiZOk.mft (raw, json) Hash identifier: rDOzvsVU0cE5+ga14X0+q+0tUlNzoLqKNm2Qms/rB28= Subject key identifier: 80:7C:0C:DD:E5:67:36:03:09:AF:C4:65:F4:21:11:98:57:36:3B:F4 Authority key identifier: C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 Certificate issuer: /CN=c0166e216c360c36e0f75b0d39123dbad42264e9 Certificate serial: 019B41A4D82BE8803A85B5B5AE408F8448FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 16:01:20 +0000 Manifest this update: Sun 21 Dec 2025 16:01:20 +0000 Manifest next update: Mon 22 Dec 2025 16:01:20 +0000 Files and hashes: 1: Wxr7kgALDgcsOOCQfZoACHYOwbQ.roa (hash: B9f7m4dPaZeRMrrY3iGXe7xjmu9+7nX6lw2kW7YcneQ=) 2: wBZuIWw2DDbg91sNORI9utQiZOk.crl (hash: Yy4L8wP0PmsIu4YkuQCd7H++pTRuGE0Leswx0K6OqCE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:d8:2b:e8:80:3a:85:b5:b5:ae:40:8f:84:48:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0166e216c360c36e0f75b0d39123dbad42264e9 Validity Not Before: Dec 21 16:01:20 2025 GMT Not After : Dec 22 16:01:20 2025 GMT Subject: CN=807c0cdde567360309afc465f421119857363bf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:43:ec:42:19:f3:e9:62:e0:fc:8c:84:87:75: 22:14:34:27:b4:dc:5b:f2:63:63:5e:82:16:dd:af: af:61:ad:24:3e:97:d2:c3:31:94:d0:9d:89:51:f6: ee:46:fd:7d:e5:d7:d5:c9:40:f2:ff:80:06:d2:26: e4:c2:9b:37:8d:f0:86:fe:ce:b2:f2:65:fc:d2:78: 25:98:25:e4:97:9d:46:bd:26:52:47:f0:27:8e:6f: 5d:f7:d2:a3:fe:cf:9a:0e:90:b5:62:3a:54:6a:3c: 8f:22:da:a9:d8:8e:45:1d:3e:b1:3e:e4:02:da:31: 4f:6c:c6:d0:e2:55:7f:9a:0b:47:20:9d:a4:b4:bf: 3c:ce:27:ca:24:20:7f:b7:e3:d6:c3:6a:48:68:52: 6e:1f:20:03:d0:05:59:b6:a1:58:35:97:14:67:c7: 8a:e3:aa:e3:26:3a:10:0f:fd:d0:1a:25:db:fc:aa: ee:bd:95:ff:81:17:9e:f0:e4:ea:81:30:26:7d:28: 5b:17:e1:ac:bb:34:b6:16:e3:67:4b:99:49:d3:27: 22:cd:ef:64:e3:62:1a:1e:55:41:7c:af:f8:27:62: 66:81:d3:e0:d1:e4:02:a4:74:2e:e2:df:0a:98:67: e2:37:c6:a7:f0:5a:2c:eb:eb:89:70:f8:92:3b:d5: 7e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7C:0C:DD:E5:67:36:03:09:AF:C4:65:F4:21:11:98:57:36:3B:F4 X509v3 Authority Key Identifier: keyid:C0:16:6E:21:6C:36:0C:36:E0:F7:5B:0D:39:12:3D:BA:D4:22:64:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBZuIWw2DDbg91sNORI9utQiZOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bb19bc-8da1-4729-8686-fcce147c327a/1/wBZuIWw2DDbg91sNORI9utQiZOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:de:70:2d:9a:74:12:a7:35:a4:47:24:cd:2a:6e:69:80:d0: 41:61:1f:84:87:a4:03:48:6e:1c:ef:8b:09:23:58:78:1e:77: 13:a7:3c:9d:42:16:13:7a:53:c5:46:af:50:d8:ca:b8:69:02: cb:0a:79:dc:7d:1c:a6:fe:75:53:02:e0:b4:1f:5b:5b:58:5e: 49:95:59:81:74:61:fe:e3:4f:db:08:45:ae:fd:1a:9c:c6:7f: b6:67:22:c9:1b:42:8a:c3:c3:0b:6c:a6:a1:95:7e:8f:ad:c5: bb:ba:82:3b:4f:e7:26:38:79:93:e4:71:cc:e1:23:95:aa:ee: 46:e5:5d:90:0c:47:fe:e5:e1:48:6f:46:f2:d0:f2:b6:ac:10: 51:57:e4:13:9e:d9:dc:51:5b:38:ad:9c:33:cb:1b:2a:48:bc: b5:7e:bd:71:0a:82:19:23:1a:2b:19:63:8c:a3:7d:c1:b8:44: 4d:02:62:07:4a:e8:1e:64:0a:3d:0f:c6:a5:46:1e:57:6d:79: 31:77:6a:9c:0c:78:07:28:be:6c:ac:1c:7c:bc:c0:74:a5:ab: e5:de:12:b4:ca:6f:0d:f2:5d:05:43:5d:d3:f2:9e:21:c1:fb: aa:ea:a0:07:c0:98:f9:90:b8:08:61:2e:08:39:0a:d9:12:8c: db:a8:44:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpNgr6IA6hbW1rkCPhEj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTY2ZTIxNmMzNjBjMzZlMGY3NWIwZDM5MTIzZGJhZDQy MjY0ZTkwHhcNMjUxMjIxMTYwMTIwWhcNMjUxMjIyMTYwMTIwWjAzMTEwLwYDVQQD Eyg4MDdjMGNkZGU1NjczNjAzMDlhZmM0NjVmNDIxMTE5ODU3MzYzYmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kPsQhnz6WLg/IyEh3UiFDQntNxb 8mNjXoIW3a+vYa0kPpfSwzGU0J2JUfbuRv195dfVyUDy/4AG0ibkwps3jfCG/s6y 8mX80nglmCXkl51GvSZSR/Anjm9d99Kj/s+aDpC1YjpUajyPItqp2I5FHT6xPuQC 2jFPbMbQ4lV/mgtHIJ2ktL88zifKJCB/t+PWw2pIaFJuHyAD0AVZtqFYNZcUZ8eK 46rjJjoQD/3QGiXb/KruvZX/gRee8OTqgTAmfShbF+GsuzS2FuNnS5lJ0ycize9k 42IaHlVBfK/4J2JmgdPg0eQCpHQu4t8KmGfiN8an8Fos6+uJcPiSO9V+3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIB8DN3lZzYDCa/EZfQhEZhXNjv0MB8GA1UdIwQY MBaAFMAWbiFsNgw24PdbDTkSPbrUImTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYt ZmNjZTE0N2MzMjdhLzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iYjE5YmMtOGRhMS00NzI5LTg2ODYtZmNjZTE0N2MzMjdh LzEvd0JadUlXdzJERGJnOTFzTk9SSTl1dFFpWk9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKN5wLZp0 Eqc1pEckzSpuaYDQQWEfhIekA0huHO+LCSNYeB53E6c8nUIWE3pTxUavUNjKuGkC ywp53H0cpv51UwLgtB9bW1heSZVZgXRh/uNP2whFrv0anMZ/tmciyRtCisPDC2ym oZV+j63Fu7qCO0/nJjh5k+RxzOEjlaruRuVdkAxH/uXhSG9G8tDytqwQUVfkE57Z 3FFbOK2cM8sbKki8tX69cQqCGSMaKxljjKN9wbhETQJiB0roHmQKPQ/GpUYeV215 MXdqnAx4Byi+bKwcfLzAdKWr5d4StMpvDfJdBUNd0/KeIcH7quqgB8CY+ZC4CGEu CDkK2RKM26hEiA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:12:47 2025 by rpki-client