This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json) Hash identifier: G7s30bqtHgAakz5fRW1dcmQL//H4NHphEONnTHzhJsw= Subject key identifier: CC:C4:D1:2F:3A:F1:04:E3:D0:A1:B7:0C:3C:66:3C:71:FC:E9:42:23 Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Certificate serial: 019B34C59DE47F804F60210A99D561437183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft Manifest number: 0AA4 Signing time: Fri 19 Dec 2025 04:02:04 +0000 Manifest this update: Fri 19 Dec 2025 04:02:04 +0000 Manifest next update: Sat 20 Dec 2025 04:02:04 +0000 Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=) 2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: ekseWbv6WhZ6zEz94ZManAWoLz6LdggfeQGwMaxmz08=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:9d:e4:7f:80:4f:60:21:0a:99:d5:61:43:71:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Validity Not Before: Dec 19 04:02:04 2025 GMT Not After : Dec 20 04:02:04 2025 GMT Subject: CN=ccc4d12f3af104e3d0a1b70c3c663c71fce94223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:12:f6:55:0b:9c:ad:c3:a9:2c:12:f1:2a: 0a:9a:38:c4:83:5c:64:a0:b1:e6:22:54:5c:17:ad: a4:93:34:c1:64:e3:38:01:94:2c:2d:a0:b6:73:ec: 45:92:54:dd:08:33:dd:cb:20:a6:6f:8e:f8:f2:b8: e5:dc:15:68:46:2f:4f:c2:ae:4f:b3:65:41:23:6f: 4f:87:45:0b:31:ca:e8:7d:84:c5:8e:ba:c3:00:12: 7b:fb:36:e8:b4:55:f7:12:45:d6:6a:bf:ff:1e:a7: 07:b0:27:95:d1:7b:16:92:8f:40:7f:e5:2f:69:7b: b0:e4:25:4d:e3:f0:61:a4:a0:5f:87:78:4d:1f:60: d9:1e:51:31:d5:17:c5:ad:f6:86:7b:cd:56:e2:be: e4:52:3a:dd:ea:e2:e7:ea:9c:5a:b4:93:cf:79:74: 80:6b:43:cc:b3:56:a8:4b:e0:72:15:b0:34:ad:55: 8f:b9:25:8c:e0:94:f5:3a:17:4b:99:76:51:b2:2a: 9f:b0:aa:1a:e4:ca:49:12:76:80:75:ab:cd:a9:2d: 07:d4:ef:82:f9:92:f5:a3:f7:6b:ba:1e:9d:a4:99: 92:cd:87:3f:88:20:73:7b:d6:0d:da:44:f3:e9:d5: 1b:9d:65:8d:c1:64:c2:fe:57:db:a2:d1:b6:ad:1d: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:C4:D1:2F:3A:F1:04:E3:D0:A1:B7:0C:3C:66:3C:71:FC:E9:42:23 X509v3 Authority Key Identifier: keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:6d:bf:97:19:41:2f:32:27:31:9d:c8:90:d2:5d:83:19:21: 68:87:aa:37:2d:75:77:0b:cd:6d:bf:d7:eb:d4:d0:a1:ba:5d: 54:35:1a:6d:00:40:17:35:18:73:f0:83:d1:55:45:e8:7f:c1: 8a:02:3d:56:ef:12:59:e5:7c:45:12:74:8a:96:fe:51:46:cb: 44:78:6f:15:32:53:f0:4f:91:79:4b:22:6b:15:03:0e:5e:ad: 16:3d:96:58:97:a9:f5:1d:af:32:c7:0e:a3:8a:44:c6:13:2e: 2e:71:24:1a:50:55:b6:6a:fb:48:e6:dd:b0:c8:51:d7:3f:5c: 20:48:c4:f3:1e:c3:35:a1:b1:80:cb:86:43:86:3d:f4:b0:fe: 92:9c:08:6d:4d:93:e3:d9:1e:ee:2c:6c:56:e2:5f:2b:62:0c: c1:8c:a9:15:f2:98:e5:a6:89:f1:14:15:c5:10:b9:c4:e9:db: 73:da:29:7e:50:ef:a1:07:e6:a7:80:72:fd:69:76:b3:6c:5e: c1:6d:7b:76:40:a7:e8:d5:3b:f4:ee:26:3e:af:8b:e8:c6:dd: f6:6f:5d:77:34:37:69:91:20:3a:c4:27:58:60:c0:3f:47:1e: 0c:71:62:e3:48:b4:58:b1:9c:18:dc:11:19:00:5c:22:58:d0: 2c:92:aa:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xZ3kf4BPYCEKmdVhQ3GDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjMyZjIxZjI4OTJiZTdjNGJjZDdlZTEwNmYwMTlhNmRl ODg3MDcwHhcNMjUxMjE5MDQwMjA0WhcNMjUxMjIwMDQwMjA0WjAzMTEwLwYDVQQD EyhjY2M0ZDEyZjNhZjEwNGUzZDBhMWI3MGMzYzY2M2M3MWZjZTk0MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZwS9lULnK3DqSwS8SoKmjjEg1xk oLHmIlRcF62kkzTBZOM4AZQsLaC2c+xFklTdCDPdyyCmb4748rjl3BVoRi9Pwq5P s2VBI29Ph0ULMcrofYTFjrrDABJ7+zbotFX3EkXWar//HqcHsCeV0XsWko9Af+Uv aXuw5CVN4/BhpKBfh3hNH2DZHlEx1RfFrfaGe81W4r7kUjrd6uLn6pxatJPPeXSA a0PMs1aoS+ByFbA0rVWPuSWM4JT1OhdLmXZRsiqfsKoa5MpJEnaAdavNqS0H1O+C +ZL1o/druh6dpJmSzYc/iCBze9YN2kTz6dUbnWWNwWTC/lfbotG2rR3YRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzE0S868QTj0KG3DDxmPHH86UIjMB8GA1UdIwQY MBaAFMGzLyHyiSvnxLzX7hBvAZpt6IcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTkt Njg1ZGRiNjU1NTZmLzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTktNjg1ZGRiNjU1NTZm LzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtm2/lxlB LzInMZ3IkNJdgxkhaIeqNy11dwvNbb/X69TQobpdVDUabQBAFzUYc/CD0VVF6H/B igI9Vu8SWeV8RRJ0ipb+UUbLRHhvFTJT8E+ReUsiaxUDDl6tFj2WWJep9R2vMscO o4pExhMuLnEkGlBVtmr7SObdsMhR1z9cIEjE8x7DNaGxgMuGQ4Y99LD+kpwIbU2T 49ke7ixsVuJfK2IMwYypFfKY5aaJ8RQVxRC5xOnbc9opflDvoQfmp4By/Wl2s2xe wW17dkCn6NU79O4mPq+L6Mbd9m9ddzQ3aZEgOsQnWGDAP0ceDHFi40i0WLGcGNwR GQBcIljQLJKq+g== -----END CERTIFICATE-----Generated at Fri Dec 19 07:45:51 2025 by rpki-client