This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft File: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json) Hash identifier: JSFsrt7J77lPW6KiSc/EUmZLNnJjRj69YtzsvON2Xg4= Subject key identifier: 23:BA:57:01:E4:E4:61:53:1D:1B:8B:52:F6:6E:A0:3A:B2:A7:4D:84 Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2 Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2 Certificate serial: 019B3CB53E8A980E344BBA8CBB0E8A97EF3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft Manifest number: 0122 Signing time: Sat 20 Dec 2025 17:01:09 +0000 Manifest this update: Sat 20 Dec 2025 17:01:09 +0000 Manifest next update: Sun 21 Dec 2025 17:01:09 +0000 Files and hashes: 1: HZihVFJ3txZ3OW6s1qo-blP1Efk.roa (hash: N+ZzWONseQF5HNODvYH9OIzGzY5Yo+h2JcqNwXkMfQE=) 2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: Fw2Hycgp+nc5R1jtHwA+sGvwLC8rr3fgq9pmO456Uy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3e:8a:98:0e:34:4b:ba:8c:bb:0e:8a:97:ef:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2 Validity Not Before: Dec 20 17:01:09 2025 GMT Not After : Dec 21 17:01:09 2025 GMT Subject: CN=23ba5701e4e461531d1b8b52f66ea03ab2a74d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:f0:76:7e:9a:25:8e:33:03:72:5c:b4:ef: c2:22:78:de:fc:46:4f:5a:82:e1:4a:31:2c:09:ac: 24:4a:20:aa:c6:7f:a9:fa:4a:92:fb:11:0d:d5:8c: 68:e7:eb:2b:ea:e6:0b:39:2c:58:bb:31:39:30:4c: c0:11:6f:de:5f:cf:8c:64:6b:41:67:00:65:a1:42: de:bf:b5:cc:bb:5a:fb:e6:ad:52:cc:0f:eb:c9:27: 95:a8:a0:ef:87:e3:59:31:3b:44:95:a4:25:02:ef: 9a:dc:b7:42:73:bc:84:cc:53:3e:c0:a9:c4:70:c5: 2f:b1:47:6e:fa:04:7d:f4:7b:07:14:a9:00:09:d9: 4f:76:d8:ca:50:e3:b2:c2:8f:b5:b5:43:6b:5f:1a: 39:4f:4e:40:21:84:b0:9b:6b:e1:40:db:6f:81:b7: 09:38:e1:b6:4e:30:a1:fc:88:a9:c7:ee:00:e1:19: cd:de:78:f0:bc:a5:65:4f:5f:4e:d5:77:49:96:f3: ed:5c:63:a7:d9:a0:c0:4b:10:18:ac:69:a7:32:18: a6:8d:eb:70:e6:ad:30:f4:96:cf:a9:f6:fe:09:d9: b3:fa:ca:f1:3b:b9:1f:98:d3:b5:c5:3f:3e:e0:71: a9:f4:ac:8f:12:0f:6d:c7:5a:2c:dd:c4:f1:b6:f0: 87:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:BA:57:01:E4:E4:61:53:1D:1B:8B:52:F6:6E:A0:3A:B2:A7:4D:84 X509v3 Authority Key Identifier: keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:8e:2d:2d:5c:f2:eb:68:a1:17:14:bd:90:c4:40:ce:10:12: c8:7e:aa:d3:c4:09:01:87:ea:4e:14:6c:3c:9a:8d:ab:26:4a: f9:b1:bf:86:2f:81:3c:00:1d:ce:36:16:ba:56:62:98:7b:f3: 6f:77:66:da:0b:7a:92:d7:6a:e8:3c:3a:47:02:72:fc:ea:91: dd:9e:9d:84:8d:4e:e4:3c:c1:ef:18:d8:2d:5c:9d:81:be:a8: 01:bf:6f:2a:ca:37:0d:39:c7:69:ca:08:28:b4:2b:d4:f9:f5: a7:2d:16:a4:e6:b2:45:79:4b:af:ce:51:c3:bf:d3:b8:e8:8b: 1a:6b:e5:01:c1:12:2b:31:c4:01:34:1d:fb:80:50:41:d6:c0: 00:54:9e:bd:d4:26:f8:ec:aa:29:ac:77:91:d8:14:6a:53:10: 2a:4e:b4:9f:6f:f6:19:93:89:d0:dc:73:1d:26:2a:80:54:03: 44:41:31:a6:26:62:52:ad:26:af:4a:28:11:ca:f5:6e:ae:7e: cc:1b:a2:cd:b4:81:83:91:02:3a:c9:a2:fd:59:ee:bc:db:85: 36:7d:e9:e5:28:c2:8e:f8:46:1c:c2:ee:89:48:a7:66:bd:b8: 96:dc:54:59:cd:09:80:12:0f:19:22:6c:60:58:b9:90:41:da: 9a:03:86:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tT6KmA40S7qMuw6Kl+8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3 NzJjZDIwHhcNMjUxMjIwMTcwMTA5WhcNMjUxMjIxMTcwMTA5WjAzMTEwLwYDVQQD EygyM2JhNTcwMWU0ZTQ2MTUzMWQxYjhiNTJmNjZlYTAzYWIyYTc0ZDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqjwdn6aJY4zA3JctO/CInje/EZP WoLhSjEsCawkSiCqxn+p+kqS+xEN1Yxo5+sr6uYLOSxYuzE5MEzAEW/eX8+MZGtB ZwBloULev7XMu1r75q1SzA/rySeVqKDvh+NZMTtElaQlAu+a3LdCc7yEzFM+wKnE cMUvsUdu+gR99HsHFKkACdlPdtjKUOOywo+1tUNrXxo5T05AIYSwm2vhQNtvgbcJ OOG2TjCh/Iipx+4A4RnN3njwvKVlT19O1XdJlvPtXGOn2aDASxAYrGmnMhimjetw 5q0w9JbPqfb+Cdmz+srxO7kfmNO1xT8+4HGp9KyPEg9tx1os3cTxtvCHVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCO6VwHk5GFTHRuLUvZuoDqyp02EMB8GA1UdIwQY MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt ZWM1NzhlMWNjZWVkLzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArI4tLVzy 62ihFxS9kMRAzhASyH6q08QJAYfqThRsPJqNqyZK+bG/hi+BPAAdzjYWulZimHvz b3dm2gt6ktdq6Dw6RwJy/OqR3Z6dhI1O5DzB7xjYLVydgb6oAb9vKso3DTnHacoI KLQr1Pn1py0WpOayRXlLr85Rw7/TuOiLGmvlAcESKzHEATQd+4BQQdbAAFSevdQm +OyqKax3kdgUalMQKk60n2/2GZOJ0NxzHSYqgFQDREExpiZiUq0mr0ooEcr1bq5+ zBuizbSBg5ECOsmi/VnuvNuFNn3p5SjCjvhGHMLuiUinZr24ltxUWc0JgBIPGSJs YFi5kEHamgOGwg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:06 2025 by rpki-client