This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft File: wb_RnDPps9MzU8_rZBee9z0yMys.mft (raw, json) Hash identifier: cUbQv32zCp7/c8SJJXHIAfPPBAZq+qaQ4OwYLz0nCSQ= Subject key identifier: B0:B4:C2:B9:39:E2:2A:9F:A8:B4:7E:9B:8B:EC:1C:45:FC:13:19:44 Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B Certificate issuer: /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b Certificate serial: 019AF31BDBED057B4BA3B3675EBD2FCF9C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:20 +0000 Manifest this update: Sat 06 Dec 2025 10:01:20 +0000 Manifest next update: Sun 07 Dec 2025 10:01:20 +0000 Files and hashes: 1: DBFDlK5pJ_In8yUaHfIwunse1tE.roa (hash: hBkF1wd780ez4BIZdoVbu1TdvJ7vKBgxWpbafISeX7E=) 2: wb_RnDPps9MzU8_rZBee9z0yMys.crl (hash: A8uq97wTxRwObXBscQjrhYtMBYvta7G6JZCamHUveSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:db:ed:05:7b:4b:a3:b3:67:5e:bd:2f:cf:9c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b Validity Not Before: Dec 6 10:01:20 2025 GMT Not After : Dec 7 10:01:20 2025 GMT Subject: CN=b0b4c2b939e22a9fa8b47e9b8bec1c45fc131944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:dd:5d:16:0f:ec:85:98:18:a7:80:39:a3:be: 57:ed:b6:e1:ca:8b:b0:4d:dc:f8:f6:a2:22:e8:cf: f0:43:55:05:82:bf:6c:4a:b6:30:87:28:42:29:a5: d3:8a:2d:74:48:5d:9c:d9:a5:51:b1:a8:27:30:cb: c0:0b:8d:d2:03:5b:d7:d9:2c:fb:46:4a:4c:dc:62: 8d:e4:1e:18:c9:00:e5:b1:e7:cb:76:e9:58:fd:e8: 27:b3:b3:6b:4a:ff:e6:84:81:e6:2f:e7:53:be:66: 1d:f4:7b:f0:a1:25:5f:55:d6:6f:0b:f2:bc:fc:86: 0f:1c:8a:25:0a:47:4b:a7:87:07:62:65:32:da:0a: 8a:54:f8:00:d7:fe:f5:01:28:8f:2c:22:7c:23:10: 57:40:da:8c:d6:05:ed:a8:89:8c:8a:0d:1a:bb:a8: 0d:c6:41:3f:01:e0:02:00:4b:b1:1c:8c:49:f2:76: ee:16:ac:16:ef:fa:1e:46:13:b1:81:cf:bb:66:b7: b6:a3:6b:9f:23:4c:f3:6f:27:73:d9:31:9d:49:d7: 54:fd:e3:bc:15:81:f6:81:ce:ad:24:6a:54:14:af: d5:da:f4:26:b8:b0:31:e1:c4:bf:ef:b9:f2:a3:ea: 3c:88:8c:14:3c:6a:18:82:c5:b0:b2:4f:f7:6c:ee: 3d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:B4:C2:B9:39:E2:2A:9F:A8:B4:7E:9B:8B:EC:1C:45:FC:13:19:44 X509v3 Authority Key Identifier: keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:e7:7a:23:4b:f7:b4:14:8d:ba:e0:bd:6c:75:96:77:0a:52: f8:a0:7c:e5:d2:ae:c3:93:2c:82:6b:0b:fe:4c:4e:e1:ae:3d: aa:17:f8:21:df:d6:e7:17:c1:f4:95:76:9c:6a:2c:9a:aa:f4: 0d:ba:17:cc:8d:cf:53:7b:8c:d5:fb:4f:01:56:76:a6:34:cd: e5:4a:d4:f5:60:ca:0e:55:f0:6f:23:35:23:02:68:25:e5:41: e1:1f:b1:20:4f:84:7f:2d:5e:c2:78:8a:35:f9:10:b7:5e:41: 78:6c:ce:5a:56:3b:64:4f:b2:24:c6:d2:d5:ff:8d:fc:1d:d3: 91:f2:13:73:64:5d:13:72:97:0d:05:46:74:53:01:fb:ad:53: ad:17:ba:ac:15:a9:4c:65:34:57:ce:a5:ad:65:57:c2:2e:14: 18:10:c8:fd:63:2d:fa:fe:c8:36:f9:2e:b7:7f:ad:43:35:41: 36:64:73:a1:32:95:4c:52:d3:5e:02:ac:86:30:23:91:5d:1b: 92:a0:e6:df:82:65:2f:33:67:09:b2:3b:9a:c7:07:ea:55:dd: bc:dd:a7:87:96:a6:76:d1:35:8e:4b:01:0b:99:16:9c:ce:3a: c8:81:b4:bb:a2:d5:67:57:e4:21:81:a4:11:30:52:e7:98:56: 12:68:77:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9vtBXtLo7NnXr0vz5yTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmZkMTljMzNlOWIzZDMzMzUzY2ZlYjY0MTc5ZWY3M2Qz MjMzMmIwHhcNMjUxMjA2MTAwMTIwWhcNMjUxMjA3MTAwMTIwWjAzMTEwLwYDVQQD EyhiMGI0YzJiOTM5ZTIyYTlmYThiNDdlOWI4YmVjMWM0NWZjMTMxOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d1dFg/shZgYp4A5o75X7bbhyouw Tdz49qIi6M/wQ1UFgr9sSrYwhyhCKaXTii10SF2c2aVRsagnMMvAC43SA1vX2Sz7 RkpM3GKN5B4YyQDlsefLdulY/egns7NrSv/mhIHmL+dTvmYd9HvwoSVfVdZvC/K8 /IYPHIolCkdLp4cHYmUy2gqKVPgA1/71ASiPLCJ8IxBXQNqM1gXtqImMig0au6gN xkE/AeACAEuxHIxJ8nbuFqwW7/oeRhOxgc+7Zre2o2ufI0zzbydz2TGdSddU/eO8 FYH2gc6tJGpUFK/V2vQmuLAx4cS/77nyo+o8iIwUPGoYgsWwsk/3bO49pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLC0wrk54iqfqLR+m4vsHEX8ExlEMB8GA1UdIwQY MBaAFMG/0Zwz6bPTM1PP62QXnvc9MjMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQt NWQ4YzdhZGM3OTYyLzEvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQtNWQ4YzdhZGM3OTYy LzEvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARed6I0v3 tBSNuuC9bHWWdwpS+KB85dKuw5MsgmsL/kxO4a49qhf4Id/W5xfB9JV2nGosmqr0 DboXzI3PU3uM1ftPAVZ2pjTN5UrU9WDKDlXwbyM1IwJoJeVB4R+xIE+Efy1ewniK NfkQt15BeGzOWlY7ZE+yJMbS1f+N/B3TkfITc2RdE3KXDQVGdFMB+61TrRe6rBWp TGU0V86lrWVXwi4UGBDI/WMt+v7INvkut3+tQzVBNmRzoTKVTFLTXgKshjAjkV0b kqDm34JlLzNnCbI7mscH6lXdvN2nh5amdtE1jksBC5kWnM46yIG0u6LVZ1fkIYGk ETBS55hWEmh3Kg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:35:03 2025 by rpki-client