This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft File: wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json) Hash identifier: tbjf2QElItL5NSUKjnX59t7HLrTsWvKFfos+Rlqn/ZI= Subject key identifier: 0E:7C:10:2B:EB:61:E0:19:FF:50:B9:28:11:19:4A:9A:CD:DC:85:E6 Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42 Certificate issuer: /CN=c1bb082d86f507bffadf9192aa676ab7da270d42 Certificate serial: 019B2C9D0542283FD4E455A9408708021D42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft Manifest number: 177D Signing time: Wed 17 Dec 2025 14:00:46 +0000 Manifest this update: Wed 17 Dec 2025 14:00:46 +0000 Manifest next update: Thu 18 Dec 2025 14:00:46 +0000 Files and hashes: 1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=) 2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: x7dF5KtoR4nlOgsWOGds+FFw9ZKEme5ry/aweWiK/xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:05:42:28:3f:d4:e4:55:a9:40:87:08:02:1d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42 Validity Not Before: Dec 17 14:00:46 2025 GMT Not After : Dec 18 14:00:46 2025 GMT Subject: CN=0e7c102beb61e019ff50b92811194a9acddc85e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:81:65:aa:40:41:bc:80:78:57:ae:f5:28:a9: 63:44:c1:d1:ba:29:72:35:10:79:19:02:c4:d5:ec: a7:66:7f:cc:26:28:af:38:68:04:2b:42:de:5e:5b: 28:e8:81:9b:41:fc:6a:47:1e:52:d5:ff:b4:ea:b2: a8:b0:c6:0d:67:a6:bc:8a:23:eb:b6:a8:f3:16:7c: d7:c8:17:89:0e:c7:df:27:05:d3:d8:87:35:c4:85: 6e:99:83:f1:b6:a6:49:8e:b3:aa:4e:27:50:3d:34: 11:f5:f4:5c:16:4f:93:0c:8a:6b:33:f3:b3:f3:dc: 4d:36:24:8f:04:2c:01:2f:83:94:8f:2b:16:0c:d5: 44:72:cc:33:f7:cf:1d:c0:65:ba:16:3e:25:fa:72: e3:41:fd:67:36:28:e0:ac:16:f2:6f:9a:4f:75:85: 48:0c:06:ad:07:25:45:8f:07:fb:6a:7d:cf:51:d1: fa:06:e8:ce:54:76:b5:34:a1:22:b7:0f:b9:c9:45: 3f:a9:12:6d:62:31:e5:af:56:32:9e:58:19:b5:75: 2b:2d:21:02:23:7d:cb:40:d5:4c:3b:56:86:d2:51: 55:54:ed:44:7f:61:4a:ca:b1:e7:19:ac:51:de:74: fe:f7:01:fe:66:f9:be:92:51:27:2c:06:c4:80:ea: 95:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7C:10:2B:EB:61:E0:19:FF:50:B9:28:11:19:4A:9A:CD:DC:85:E6 X509v3 Authority Key Identifier: keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ff:b4:b9:29:45:8e:5f:7e:de:6c:9e:f1:dd:fe:de:e1:b9: d4:3e:60:b9:de:67:2a:71:38:8e:31:b4:8d:e9:e0:a8:7c:9e: b5:95:74:9e:c4:88:05:f7:7c:a5:d3:a4:84:57:43:a8:43:58: a3:42:60:e5:26:73:41:7d:b5:f9:20:42:f1:11:07:9f:9c:81: ef:a7:02:e8:bc:90:d6:ac:66:67:ea:75:2f:cd:4a:19:80:f5: 50:bb:f4:f7:c3:20:ee:f7:20:d0:40:9d:80:46:c7:b0:e6:1f: 8b:60:8a:e5:76:c1:b8:32:b6:28:9c:c8:4d:fb:2f:ed:ca:80: 6c:3a:a1:9c:dc:1a:20:eb:a0:fd:4e:93:58:54:9c:0d:ec:7e: 49:09:de:41:92:bc:31:cc:34:27:3d:45:67:40:95:e1:7f:c2: f8:a6:4c:11:1d:39:4d:b6:3a:03:01:bd:d3:94:45:77:c7:40: 6d:05:af:ed:2e:51:cc:fc:05:2f:ca:0d:5c:11:56:12:7d:5f: 9c:a6:3c:31:a3:11:69:90:e9:9b:70:af:8a:70:28:a7:e5:cc: cb:33:e5:84:c1:f2:7e:08:59:bc:fd:89:b7:fc:f2:09:4b:a6: 83:16:85:c5:0a:a1:c3:62:e6:1b:2a:b2:01:4a:2f:36:96:2d: 5f:ad:35:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnQVCKD/U5FWpQIcIAh1CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmIwODJkODZmNTA3YmZmYWRmOTE5MmFhNjc2YWI3ZGEy NzBkNDIwHhcNMjUxMjE3MTQwMDQ2WhcNMjUxMjE4MTQwMDQ2WjAzMTEwLwYDVQQD EygwZTdjMTAyYmViNjFlMDE5ZmY1MGI5MjgxMTE5NGE5YWNkZGM4NWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoFlqkBBvIB4V671KKljRMHRuily NRB5GQLE1eynZn/MJiivOGgEK0LeXlso6IGbQfxqRx5S1f+06rKosMYNZ6a8iiPr tqjzFnzXyBeJDsffJwXT2Ic1xIVumYPxtqZJjrOqTidQPTQR9fRcFk+TDIprM/Oz 89xNNiSPBCwBL4OUjysWDNVEcswz988dwGW6Fj4l+nLjQf1nNijgrBbyb5pPdYVI DAatByVFjwf7an3PUdH6BujOVHa1NKEitw+5yUU/qRJtYjHlr1YynlgZtXUrLSEC I33LQNVMO1aG0lFVVO1Ef2FKyrHnGaxR3nT+9wH+Zvm+klEnLAbEgOqVmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA58ECvrYeAZ/1C5KBEZSprN3IXmMB8GA1UdIwQY MBaAFMG7CC2G9Qe/+t+RkqpnarfaJw1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzIt ZTg3YzlmNGJhOTdkLzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzItZTg3YzlmNGJhOTdk LzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/+0uSlF jl9+3mye8d3+3uG51D5gud5nKnE4jjG0jengqHyetZV0nsSIBfd8pdOkhFdDqENY o0Jg5SZzQX21+SBC8REHn5yB76cC6LyQ1qxmZ+p1L81KGYD1ULv098Mg7vcg0ECd gEbHsOYfi2CK5XbBuDK2KJzITfsv7cqAbDqhnNwaIOug/U6TWFScDex+SQneQZK8 Mcw0Jz1FZ0CV4X/C+KZMER05TbY6AwG905RFd8dAbQWv7S5RzPwFL8oNXBFWEn1f nKY8MaMRaZDpm3CvinAop+XMyzPlhMHyfghZvP2Jt/zyCUumgxaFxQqhw2LmGyqy AUovNpYtX6013w== -----END CERTIFICATE-----Generated at Wed Dec 17 18:11:03 2025 by rpki-client