This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft File: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft (raw, json) Hash identifier: DBCRYOHPAbft6JxKTmroEV6igeesqQLZ2gxWhMA1bns= Subject key identifier: AC:A1:F9:5B:3A:1D:E7:22:09:22:0E:14:DD:EB:18:4A:D2:C8:87:19 Authority key identifier: C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 Certificate issuer: /CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Certificate serial: 019AF12E8F3878C4F57769850E4F17D60B1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft Manifest number: 0A81 Signing time: Sat 06 Dec 2025 01:02:31 +0000 Manifest this update: Sat 06 Dec 2025 01:02:31 +0000 Manifest next update: Sun 07 Dec 2025 01:02:31 +0000 Files and hashes: 1: BTTvC8v66O2EpK1CYoUyKwsnmsY.roa (hash: 8Cg+TzwOE6bqFQKwpEVGr60uQJS1JrcoMWvltGsfhb0=) 2: wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl (hash: /xsN9rz8O8m8TDg1Ka/8zDQVLTWGDlelVwUV/P9ps4g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:8f:38:78:c4:f5:77:69:85:0e:4f:17:d6:0b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b32f21f2892be7c4bcd7ee106f019a6de88707 Validity Not Before: Dec 6 01:02:31 2025 GMT Not After : Dec 7 01:02:31 2025 GMT Subject: CN=aca1f95b3a1de72209220e14ddeb184ad2c88719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:50:71:9b:e0:54:67:e4:95:5a:b0:b3:a7: 68:a2:e5:52:a2:99:5c:f1:8f:8c:01:a9:64:75:a6: 35:76:d1:fe:dc:8c:54:ad:79:6f:7c:c7:a9:35:e1: 70:87:89:75:89:d3:ed:0f:99:2d:80:db:53:8a:b7: bf:74:53:12:2d:74:2e:2e:d7:99:0e:53:b2:cb:d8: 77:ee:f3:e8:6e:cc:ef:32:8f:64:95:cd:b9:a1:e5: 9f:a3:79:01:f6:90:d3:c8:3d:7e:1e:d0:3d:1d:bd: 11:42:7e:08:5e:cf:01:f7:da:c4:48:57:53:8f:c8: 5d:df:23:9a:9b:51:24:5d:c8:69:28:f5:21:0b:36: f5:ea:e3:9e:85:62:98:90:9f:f7:a5:aa:58:86:25: cb:70:f9:85:de:6e:56:1c:66:a3:34:8b:f2:ce:d6: 9d:2f:c3:29:e6:7d:96:53:73:35:6b:06:c0:03:9a: b2:c5:21:e3:87:46:19:9f:1a:16:57:b4:1e:69:4b: 03:dd:b7:8e:f9:fe:f1:0b:02:a7:8b:f3:1a:18:3e: 8e:7c:e9:6d:0a:fc:df:02:12:f4:3f:e7:19:74:12: 15:79:66:4c:b5:45:a7:2d:d4:3a:fc:d1:fb:14:e8: 36:b6:d5:eb:82:16:74:33:5a:96:4f:1b:bc:ec:c9: 5d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A1:F9:5B:3A:1D:E7:22:09:22:0E:14:DD:EB:18:4A:D2:C8:87:19 X509v3 Authority Key Identifier: keyid:C1:B3:2F:21:F2:89:2B:E7:C4:BC:D7:EE:10:6F:01:9A:6D:E8:87:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4f8185-ddd8-48a5-8059-685ddb65556f/1/wbMvIfKJK-fEvNfuEG8Bmm3ohwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e4:f7:34:7b:c5:bf:e1:fd:b9:43:08:41:04:51:52:06:f4: 17:5b:eb:a8:66:78:42:36:97:42:cd:42:7b:81:a0:db:67:9c: a4:93:f2:29:a4:7b:fb:e9:53:9e:75:cb:8f:2c:19:69:d4:d1: c0:46:c7:fd:88:66:9e:94:8e:6d:4e:a9:5a:3c:94:a0:6e:ba: bd:8a:d6:fe:27:86:2b:62:a1:9f:ca:48:3a:18:1a:87:fe:2a: c3:04:3a:ac:46:39:33:94:2a:de:0e:89:65:00:13:27:e7:c3: c9:d5:5d:a0:cf:ee:ba:ab:80:96:83:78:84:0b:d5:5c:65:5d: bf:de:fa:56:dc:9f:8d:17:f3:a6:38:54:35:b4:7b:80:5d:a7: 46:98:57:05:14:3f:a1:99:8d:3c:07:e0:ae:af:e5:c7:27:fe: e9:a7:43:f7:28:6a:9e:9e:a3:56:5d:46:42:4d:f1:9d:d0:e3: af:72:c5:97:43:2b:7c:2e:56:31:3b:4a:28:ea:e6:53:11:a3: d4:86:b7:be:5b:96:d6:26:e5:80:79:f7:05:0d:bf:ce:9d:7f: a3:8a:b3:de:e1:23:ad:1f:8f:eb:bb:85:85:59:21:74:50:b6: 09:ae:08:97:72:05:fa:0f:8b:d7:4c:a4:95:21:c8:99:b7:c9: f3:01:19:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLo84eMT1d2mFDk8X1gseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjMyZjIxZjI4OTJiZTdjNGJjZDdlZTEwNmYwMTlhNmRl ODg3MDcwHhcNMjUxMjA2MDEwMjMxWhcNMjUxMjA3MDEwMjMxWjAzMTEwLwYDVQQD EyhhY2ExZjk1YjNhMWRlNzIyMDkyMjBlMTRkZGViMTg0YWQyYzg4NzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHlQcZvgVGfklVqws6doouVSoplc 8Y+MAalkdaY1dtH+3IxUrXlvfMepNeFwh4l1idPtD5ktgNtTire/dFMSLXQuLteZ DlOyy9h37vPobszvMo9klc25oeWfo3kB9pDTyD1+HtA9Hb0RQn4IXs8B99rESFdT j8hd3yOam1EkXchpKPUhCzb16uOehWKYkJ/3papYhiXLcPmF3m5WHGajNIvyztad L8Mp5n2WU3M1awbAA5qyxSHjh0YZnxoWV7QeaUsD3beO+f7xCwKni/MaGD6OfOlt CvzfAhL0P+cZdBIVeWZMtUWnLdQ6/NH7FOg2ttXrghZ0M1qWTxu87MldAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyh+Vs6HeciCSIOFN3rGErSyIcZMB8GA1UdIwQY MBaAFMGzLyHyiSvnxLzX7hBvAZpt6IcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTkt Njg1ZGRiNjU1NTZmLzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80ZjgxODUtZGRkOC00OGE1LTgwNTktNjg1ZGRiNjU1NTZm LzEvd2JNdklmS0pLLWZFdk5mdUVHOEJtbTNvaHdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+T3NHvF v+H9uUMIQQRRUgb0F1vrqGZ4QjaXQs1Ce4Gg22ecpJPyKaR7++lTnnXLjywZadTR wEbH/YhmnpSObU6pWjyUoG66vYrW/ieGK2Khn8pIOhgah/4qwwQ6rEY5M5Qq3g6J ZQATJ+fDydVdoM/uuquAloN4hAvVXGVdv976VtyfjRfzpjhUNbR7gF2nRphXBRQ/ oZmNPAfgrq/lxyf+6adD9yhqnp6jVl1GQk3xndDjr3LFl0MrfC5WMTtKKOrmUxGj 1Ia3vluW1iblgHn3BQ2/zp1/o4qz3uEjrR+P67uFhVkhdFC2Ca4Il3IF+g+L10yk lSHImbfJ8wEZ2Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:49 2025 by rpki-client