This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft File: wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json) Hash identifier: XtdsJmh26RZZmg/vix7Iyef4uG1NCRdIM0JTi6xWHGc= Subject key identifier: 34:3A:E2:3F:48:2E:6F:1D:7D:4D:8E:C1:A4:70:C6:41:43:1C:4C:11 Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03 Certificate issuer: /CN=c011ee066641750a51147d8dc99a1b105658d203 Certificate serial: 019AF19B501B28CFDDCF193B108D9C86320F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=) 2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=) 3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=) 4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: 1GCoPxedQY29XWkQxX9w+dCJnXaiwpsyILeglwD6Bdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:50:1b:28:cf:dd:cf:19:3b:10:8d:9c:86:32:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=343ae23f482e6f1d7d4d8ec1a470c641431c4c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:a9:f8:ec:e3:55:22:6b:74:07:7e:3c:79: a2:28:b8:f1:74:95:f5:1f:77:a1:7c:29:9d:a4:a3: c6:0f:d6:f8:94:67:42:bc:6c:5a:ee:26:1d:8f:d8: 49:dd:b6:c6:63:50:68:75:19:97:87:90:85:54:8e: b3:d5:dd:e2:0a:ae:50:cd:a4:5c:57:f2:ed:fa:99: 91:1e:2b:e5:9e:4d:bf:b6:00:6f:5a:79:20:a4:36: 8c:33:56:1c:ec:b3:65:18:c7:49:01:ad:4d:98:d5: 90:73:66:ba:d7:81:e2:55:5a:ec:c9:29:83:62:78: 70:4f:65:2e:ee:7a:2d:12:2e:d8:0c:dd:21:c7:ba: 33:d9:e1:fa:3b:13:90:f6:b5:4a:1d:3f:54:89:d0: 92:40:35:c8:50:03:58:0a:da:ba:dc:ec:c6:b5:b1: 1a:8a:3e:df:82:f1:df:9a:ab:ab:97:f5:48:77:8a: b8:8c:a5:aa:90:c0:ef:74:c8:2b:a6:e3:63:58:77: 54:db:b9:f9:42:ca:43:2e:16:5c:b0:96:3c:df:90: 0f:23:33:ad:bd:dd:e1:28:7d:a6:df:1d:0a:52:8d: 88:d9:fb:3f:7a:88:02:17:58:16:88:58:2d:1e:9d: 77:0f:b6:54:d2:a6:af:34:48:08:fa:b6:5a:61:26: 0e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3A:E2:3F:48:2E:6F:1D:7D:4D:8E:C1:A4:70:C6:41:43:1C:4C:11 X509v3 Authority Key Identifier: keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:32:bb:35:ac:4d:f4:2d:70:06:44:28:a3:c4:b7:a4:a5:c6: da:3e:78:bb:1a:16:20:1e:c2:30:51:ab:fc:26:a2:d8:4c:79: e2:58:95:ea:32:96:11:c5:e0:ae:79:cb:46:55:0e:51:69:aa: e7:af:cb:13:87:ca:bb:e1:37:7b:75:7f:d4:d6:59:0a:ad:7e: 96:35:ee:00:65:a2:6c:18:c8:c7:d6:d5:21:9e:aa:a3:b3:05: a2:ee:86:27:f9:93:38:61:e6:e5:2b:dc:e0:89:57:24:7c:2a: c2:cf:21:48:d7:03:df:4d:e0:e0:29:d6:6f:77:ca:ed:b2:c9: 37:7b:07:3d:69:38:f4:c2:6a:64:98:1c:53:bc:b6:7d:89:7a: 35:e4:71:4d:f4:eb:6c:8b:01:6b:63:d4:a3:bf:9e:dc:f9:fa: 10:2b:c8:45:6e:32:0d:9f:4c:cb:1e:9f:1f:6b:ee:c8:ca:a7: 20:57:2b:ee:f6:7d:67:53:75:56:3c:f9:5e:a5:f7:4c:c5:90: 46:6c:95:02:f3:fd:df:2d:b7:d1:01:51:2a:c6:f2:1a:99:27: f8:89:0d:01:cd:a7:d9:35:aa:4e:df:8b:6f:6e:99:72:9b:b6: 11:aa:74:e6:50:34:b2:77:bf:39:86:71:59:0b:2f:a8:95:f6: 51:27:7c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1AbKM/dzxk7EI2chjIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTFlZTA2NjY0MTc1MGE1MTE0N2Q4ZGM5OWExYjEwNTY1 OGQyMDMwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EygzNDNhZTIzZjQ4MmU2ZjFkN2Q0ZDhlYzFhNDcwYzY0MTQzMWM0YzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGWp+OzjVSJrdAd+PHmiKLjxdJX1 H3ehfCmdpKPGD9b4lGdCvGxa7iYdj9hJ3bbGY1BodRmXh5CFVI6z1d3iCq5QzaRc V/Lt+pmRHivlnk2/tgBvWnkgpDaMM1Yc7LNlGMdJAa1NmNWQc2a614HiVVrsySmD YnhwT2Uu7notEi7YDN0hx7oz2eH6OxOQ9rVKHT9UidCSQDXIUANYCtq63OzGtbEa ij7fgvHfmqurl/VId4q4jKWqkMDvdMgrpuNjWHdU27n5QspDLhZcsJY835APIzOt vd3hKH2m3x0KUo2I2fs/eogCF1gWiFgtHp13D7ZU0qavNEgI+rZaYSYOIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ64j9ILm8dfU2OwaRwxkFDHEwRMB8GA1UdIwQY MBaAFMAR7gZmQXUKURR9jcmaGxBWWNIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODkt MzY5Y2Q4YmUyNWZlLzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODktMzY5Y2Q4YmUyNWZl LzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTK7NaxN 9C1wBkQoo8S3pKXG2j54uxoWIB7CMFGr/Cai2Ex54liV6jKWEcXgrnnLRlUOUWmq 56/LE4fKu+E3e3V/1NZZCq1+ljXuAGWibBjIx9bVIZ6qo7MFou6GJ/mTOGHm5Svc 4IlXJHwqws8hSNcD303g4CnWb3fK7bLJN3sHPWk49MJqZJgcU7y2fYl6NeRxTfTr bIsBa2PUo7+e3Pn6ECvIRW4yDZ9Myx6fH2vuyMqnIFcr7vZ9Z1N1Vjz5XqX3TMWQ RmyVAvP93y230QFRKsbyGpkn+IkNAc2n2TWqTt+Lb26Zcpu2Eap05lA0sne/OYZx WQsvqJX2USd82g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:27 2025 by rpki-client