This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json) Hash identifier: Nc0ZA96YO9Kee8V4pP4M/eHiHoHn2LZcrNFLZkR5HGY= Subject key identifier: B1:6F:77:B5:AB:AB:7D:02:31:64:31:01:94:32:9A:33:9C:A4:FF:0D Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Certificate serial: 019AF577CDDC2C51044DEB03FB9E1D7E761B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft Manifest number: 0DC4 Signing time: Sat 06 Dec 2025 21:01:00 +0000 Manifest this update: Sat 06 Dec 2025 21:01:00 +0000 Manifest next update: Sun 07 Dec 2025 21:01:00 +0000 Files and hashes: 1: NleuP1D5q1HYCx1bniu7S0UGnKU.roa (hash: ZHCVqddSwzrZ5jTMPPMLkCEjlBptOTx+uNZ09AcVm1s=) 2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: 3HfrgMb9FkpYbE7lAIYdUVU7Cbd4aGHdGYyZ2928AIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:cd:dc:2c:51:04:4d:eb:03:fb:9e:1d:7e:76:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Validity Not Before: Dec 6 21:01:00 2025 GMT Not After : Dec 7 21:01:00 2025 GMT Subject: CN=b16f77b5abab7d023164310194329a339ca4ff0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:5f:2a:73:b8:24:b4:cc:20:a7:ef:df:1b: a3:6c:c3:17:86:ee:45:8b:f2:16:77:dc:56:dc:af: b8:b2:42:3f:62:37:2d:ca:b6:fc:45:77:4d:9f:46: 4f:e6:d1:86:9e:34:eb:e4:13:da:d2:e0:a7:68:aa: 13:39:f6:53:be:dc:f3:89:d8:7f:03:b6:8e:ad:d5: 87:d3:b8:ad:47:ca:68:49:e2:52:a5:be:df:dc:b8: e1:86:68:64:71:4c:b3:2a:c2:5b:f1:d0:65:ab:4c: 89:ef:01:a5:46:27:84:1c:f2:bd:e0:28:e5:c1:ab: 30:78:ae:26:91:34:95:74:6b:71:1d:50:56:92:98: e1:36:f0:b0:de:81:86:c2:5a:d5:6a:dc:83:71:7c: 34:ed:8c:2e:7e:c8:91:52:9f:76:6c:0d:04:e4:d8: db:b3:c2:d6:b8:35:8c:37:50:82:8c:bc:ca:42:64: 68:42:d7:cd:c6:01:90:68:a2:8a:56:4f:ab:00:e1: 1e:35:9c:50:ba:df:3c:59:ee:cb:27:2d:97:9c:1a: 33:b7:1b:7d:9a:1c:de:ea:c8:c8:ba:b5:8e:3c:1d: 91:d4:b8:cd:c5:76:43:10:a4:3b:33:bf:32:05:20: 16:50:db:d6:3a:e3:63:c6:29:11:fc:5c:f6:51:e5: 0d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:6F:77:B5:AB:AB:7D:02:31:64:31:01:94:32:9A:33:9C:A4:FF:0D X509v3 Authority Key Identifier: keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5a:34:59:58:b7:06:39:fb:cf:03:7b:d2:74:00:42:b5:d9: 2f:97:7b:81:1f:25:90:65:d9:d5:30:64:e5:c8:40:19:31:d4: e8:1a:84:c1:a5:4a:5f:e3:a6:d5:aa:d9:0b:1b:9f:9f:76:c3: ea:af:7b:e8:f4:1d:8e:09:6f:5d:3c:71:c9:ae:5a:50:66:ba: cf:88:55:f0:41:be:a2:41:9c:49:b3:78:24:51:72:37:a6:57: c2:c8:97:ac:a1:56:91:16:b4:cd:dd:37:50:d9:e9:ef:45:e8: 0b:1f:79:78:c3:d1:e4:e9:c0:c2:52:71:ca:e0:06:6c:cd:8e: ad:96:23:8a:9d:39:d9:e4:ba:43:04:1c:ff:85:e0:6e:fa:9c: 93:df:ec:8c:0f:a0:86:b1:ee:2e:c4:10:62:69:1a:65:e8:78: 30:3b:2b:66:98:d5:7e:8e:9a:1b:d7:c8:63:02:ec:2c:64:67: 2d:53:a2:ef:22:88:89:dd:e1:d3:a8:23:75:09:32:13:60:3a: 04:6f:4f:67:d5:67:fc:40:95:a6:54:8b:27:a4:12:82:b1:d4: 7b:42:20:4a:0a:70:7a:c5:db:c2:eb:e8:a0:e7:ae:4a:32:83: 09:53:ee:f9:d0:ca:e7:fa:ac:fb:40:a9:f3:58:d1:63:49:cb: b4:43:40:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d83cLFEETesD+54dfnYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4 YjZlNDMwHhcNMjUxMjA2MjEwMTAwWhcNMjUxMjA3MjEwMTAwWjAzMTEwLwYDVQQD EyhiMTZmNzdiNWFiYWI3ZDAyMzE2NDMxMDE5NDMyOWEzMzljYTRmZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwldfKnO4JLTMIKfv3xujbMMXhu5F i/IWd9xW3K+4skI/Yjctyrb8RXdNn0ZP5tGGnjTr5BPa0uCnaKoTOfZTvtzzidh/ A7aOrdWH07itR8poSeJSpb7f3LjhhmhkcUyzKsJb8dBlq0yJ7wGlRieEHPK94Cjl wasweK4mkTSVdGtxHVBWkpjhNvCw3oGGwlrVatyDcXw07YwufsiRUp92bA0E5Njb s8LWuDWMN1CCjLzKQmRoQtfNxgGQaKKKVk+rAOEeNZxQut88We7LJy2XnBoztxt9 mhze6sjIurWOPB2R1LjNxXZDEKQ7M78yBSAWUNvWOuNjxikR/Fz2UeUN5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFvd7Wrq30CMWQxAZQymjOcpP8NMB8GA1UdIwQY MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt NzhjMDRiY2VkYWQzLzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFo0WVi3 Bjn7zwN70nQAQrXZL5d7gR8lkGXZ1TBk5chAGTHU6BqEwaVKX+Om1arZCxufn3bD 6q976PQdjglvXTxxya5aUGa6z4hV8EG+okGcSbN4JFFyN6ZXwsiXrKFWkRa0zd03 UNnp70XoCx95eMPR5OnAwlJxyuAGbM2OrZYjip052eS6QwQc/4Xgbvqck9/sjA+g hrHuLsQQYmkaZeh4MDsrZpjVfo6aG9fIYwLsLGRnLVOi7yKIid3h06gjdQkyE2A6 BG9PZ9Vn/ECVplSLJ6QSgrHUe0IgSgpwesXbwuvooOeuSjKDCVPu+dDK5/qs+0Cp 81jRY0nLtENA+g== -----END CERTIFICATE-----Generated at Sun Dec 7 03:21:07 2025 by rpki-client