This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File: wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier: +b7XYHs6borPRXK1/l86kBggwGPVujYB/BrnHm35O8w=
Subject key identifier: 77:2F:D6:AA:EA:27:3A:CE:C1:0F:9E:EA:08:DD:D1:6E:3E:A1:27:92
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial: 019AF19A9D233B14074F94D1C4223738183C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number: 176C
Signing time: Sat 06 Dec 2025 03:00:32 +0000
Manifest this update: Sat 06 Dec 2025 03:00:32 +0000
Manifest next update: Sun 07 Dec 2025 03:00:32 +0000
Files and hashes: 1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=)
6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: L/H06oADr31C2k3fpZG2udpntT7xs0fb5MSgfx0dgww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:9a:9d:23:3b:14:07:4f:94:d1:c4:22:37:38:18:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Validity
Not Before: Dec 6 03:00:32 2025 GMT
Not After : Dec 7 03:00:32 2025 GMT
Subject: CN=772fd6aaea273acec10f9eea08ddd16e3ea12792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:e8:e9:c5:e2:ab:e5:77:c7:b1:12:e6:51:
9b:05:2a:8b:64:2f:75:0e:b2:8c:a3:a2:45:ba:58:
8c:1e:ce:a8:ba:c5:76:e0:0e:24:20:37:f5:3b:b2:
fa:a6:3a:fa:d2:30:41:a5:0f:5e:83:a4:19:30:f0:
55:e9:15:2a:5d:68:ea:28:2a:63:70:ac:bc:e0:d1:
c2:a3:07:10:04:6b:8a:93:06:64:20:ad:04:e9:7e:
94:a4:50:12:fc:4d:d9:ec:e2:8b:23:95:25:11:7b:
0a:dd:c3:38:e8:24:0c:74:6f:0f:e6:1b:4f:af:4c:
fa:50:c9:0b:bd:3c:65:48:de:b2:61:55:b4:d2:c1:
5d:69:e8:b5:a5:f0:cd:db:d3:3b:8f:f7:7e:93:31:
37:82:ae:7c:3e:b7:89:b8:de:e8:6c:48:a1:d5:40:
20:89:c4:94:23:ad:23:c4:51:78:17:06:c5:dc:f6:
9d:bd:c0:82:f7:46:a0:fb:0f:f2:33:fe:04:e2:3c:
a5:a3:02:70:e4:9a:55:78:88:2e:88:24:b4:a2:09:
6e:01:0b:83:ac:83:d3:c8:58:2c:ba:ff:96:28:60:
82:41:84:b8:8f:12:b8:08:40:ae:a7:d4:5d:69:4d:
9a:b3:f1:c6:b8:38:cb:a6:65:54:2e:b6:05:72:62:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:2F:D6:AA:EA:27:3A:CE:C1:0F:9E:EA:08:DD:D1:6E:3E:A1:27:92
X509v3 Authority Key Identifier:
keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:03:fc:44:f8:00:9d:3a:b7:75:be:d6:07:ed:d1:8d:b4:4b:
f9:48:2a:3b:57:2c:7c:1b:9b:32:95:b0:fc:e9:da:ef:46:6a:
97:57:be:59:22:83:43:c4:dc:b8:33:f6:c0:3e:7d:8b:cd:47:
4f:41:2c:d4:a9:1e:23:02:45:c0:df:08:6f:db:a6:b1:60:3f:
2b:58:22:04:0d:1d:22:d4:58:9c:1d:ff:d1:36:1d:9a:9e:c9:
15:1e:0d:b7:33:9d:be:27:e0:51:bf:4a:ff:ba:b2:4e:13:b1:
d6:c9:1a:51:c9:0e:b7:20:28:53:7c:de:3b:38:1f:eb:e8:6c:
e8:1d:89:ff:57:86:65:b8:47:26:a6:ec:ea:04:4b:69:94:a3:
e1:fb:1e:45:65:b8:bd:78:74:e7:73:c5:43:3e:d7:fd:d7:cc:
9f:ce:0b:28:20:a3:d6:97:e9:02:e2:1f:8b:36:89:59:52:60:
42:59:1f:54:e6:75:f3:a5:64:1c:89:8d:48:03:51:ae:92:e1:
56:9a:9f:c7:16:0a:5d:61:69:6d:8e:67:70:b4:7a:13:ad:1c:
d6:47:80:18:d5:bd:24:3c:72:71:83:6c:65:2f:3b:23:61:a8:
73:3d:5f:fd:f2:be:50:20:90:48:86:66:16:52:14:39:99:d1:
ba:f1:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:23:15 2025 by rpki-client