This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft File: wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json) Hash identifier: bWYP6a83V0wtBYCRsrskAGIU4W4dTFRsbZMfa8OXuZ0= Subject key identifier: A8:EF:EC:CF:E2:B6:D2:B5:F4:B1:E0:CB:C8:EE:50:B2:4E:DD:04:04 Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E Certificate issuer: /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e Certificate serial: 019B311E8261CB32F175DBED27D53D5CA6E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft Manifest number: 0444 Signing time: Thu 18 Dec 2025 11:00:41 +0000 Manifest this update: Thu 18 Dec 2025 11:00:41 +0000 Manifest next update: Fri 19 Dec 2025 11:00:41 +0000 Files and hashes: 1: nEKK32oFQy3X2Yzvdv8fEhGcazg.roa (hash: LMYqTrguswdi0QtX9F4iCp/SyY8hGayYOolliB1rgCg=) 2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: eLO/N7FlgLaJbQmLcduTWbRFpj8daYdZg1vmk9i22II=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:82:61:cb:32:f1:75:db:ed:27:d5:3d:5c:a6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e Validity Not Before: Dec 18 11:00:41 2025 GMT Not After : Dec 19 11:00:41 2025 GMT Subject: CN=a8efeccfe2b6d2b5f4b1e0cbc8ee50b24edd0404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:c2:66:7e:c6:fe:57:10:92:ed:f8:ea:30: a1:ad:90:bf:48:c6:f9:3b:e4:6c:03:c2:ef:96:87: 49:fc:33:97:dd:3c:0c:19:97:25:bd:e2:87:1e:17: ad:83:bc:59:1a:ee:e3:fc:60:97:a3:2e:55:be:40: 66:bd:20:68:fe:71:05:df:a8:ab:c8:1d:35:99:e5: 59:75:ba:9f:ad:df:c9:89:2f:57:83:57:65:56:5e: 71:95:d2:d2:b0:ac:90:af:d0:2a:6e:42:4a:7a:b1: 9e:3d:e8:e6:a7:76:7e:a6:58:0e:e4:6e:69:2b:00: 44:8d:96:09:47:80:29:ab:7d:ae:68:a9:7f:f1:da: e4:a0:0b:31:73:26:d6:cf:dd:e4:fc:d4:a5:43:0f: 83:83:32:54:fe:58:32:76:cc:8a:ab:15:bc:fb:19: 53:10:3b:9c:f5:d6:b8:f9:e0:5a:e5:f2:1b:ba:8e: 78:29:08:2b:9c:63:72:f5:ef:ce:16:da:ec:58:0b: e2:c1:37:f0:2b:a0:21:8a:31:1d:2d:23:40:1c:63: 28:af:e6:02:35:51:70:68:b3:b6:d0:a4:89:f9:87: cf:1c:78:1d:36:df:3c:a6:a8:3f:8c:48:27:b6:88: cb:9d:29:b3:c7:b6:5c:c0:d0:ac:4f:97:b3:0f:1a: a2:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EF:EC:CF:E2:B6:D2:B5:F4:B1:E0:CB:C8:EE:50:B2:4E:DD:04:04 X509v3 Authority Key Identifier: keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b7:a9:49:4c:4c:35:54:3b:65:a3:36:f2:b1:53:14:3d:0d: f5:dd:12:27:f3:bd:22:7d:7c:a0:fe:b5:46:4c:5e:60:0c:36: bb:0b:f5:53:2c:48:e4:1b:2d:02:23:74:3b:f5:09:e3:cd:6a: 91:05:8d:bb:c4:5b:4b:4e:71:98:37:d6:45:de:0a:ba:a1:7c: 66:49:f3:a1:87:49:56:ef:c1:d4:04:a6:14:89:23:f8:ee:6a: 7c:10:2e:19:60:76:14:3b:7f:ab:00:dc:6d:7c:77:d5:ec:2b: 44:f0:8f:e7:13:98:f2:64:d2:e3:45:20:2f:ff:5e:cf:e6:b5: 48:85:1e:fb:2e:81:e6:cb:e5:67:d7:4c:8a:2a:d3:0c:32:08: 1d:a2:2a:ef:0f:df:5a:36:3a:d9:20:fd:9a:61:75:f7:7b:77: d8:40:11:50:78:71:d8:25:fb:a1:e2:f4:4d:76:8c:a6:70:c2: b0:c3:1b:57:49:09:b5:7d:52:77:98:87:26:1e:8e:f9:77:1b: 69:98:b5:c5:fa:94:d8:ab:ac:f9:59:0a:88:94:38:e7:6c:f4: d7:07:b4:2e:7f:16:70:86:53:df:d1:4b:8d:26:79:cc:d5:1f: 15:c5:90:be:1c:28:6d:75:30:fd:c7:c1:57:68:57:ad:f7:8c: 23:77:f3:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHoJhyzLxddvtJ9U9XKblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTU3NGNiOWUwZTM1YmY5NzU0ZWY5MTc1MDE0YmM3NDYw MDhmMGUwHhcNMjUxMjE4MTEwMDQxWhcNMjUxMjE5MTEwMDQxWjAzMTEwLwYDVQQD EyhhOGVmZWNjZmUyYjZkMmI1ZjRiMWUwY2JjOGVlNTBiMjRlZGQwNDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6fCZn7G/lcQku346jChrZC/SMb5 O+RsA8LvlodJ/DOX3TwMGZclveKHHhetg7xZGu7j/GCXoy5VvkBmvSBo/nEF36ir yB01meVZdbqfrd/JiS9Xg1dlVl5xldLSsKyQr9AqbkJKerGePejmp3Z+plgO5G5p KwBEjZYJR4Apq32uaKl/8drkoAsxcybWz93k/NSlQw+DgzJU/lgydsyKqxW8+xlT EDuc9da4+eBa5fIbuo54KQgrnGNy9e/OFtrsWAviwTfwK6AhijEdLSNAHGMor+YC NVFwaLO20KSJ+YfPHHgdNt88pqg/jEgntojLnSmzx7ZcwNCsT5ezDxqiCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjv7M/ittK19LHgy8juULJO3QQEMB8GA1UdIwQY MBaAFMAVdMueDjW/l1TvkXUBS8dGAI8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMt OGZlZTdlYzdjM2NkLzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMtOGZlZTdlYzdjM2Nk LzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrepSUxM NVQ7ZaM28rFTFD0N9d0SJ/O9In18oP61RkxeYAw2uwv1UyxI5BstAiN0O/UJ481q kQWNu8RbS05xmDfWRd4KuqF8ZknzoYdJVu/B1ASmFIkj+O5qfBAuGWB2FDt/qwDc bXx31ewrRPCP5xOY8mTS40UgL/9ez+a1SIUe+y6B5svlZ9dMiirTDDIIHaIq7w/f WjY62SD9mmF193t32EARUHhx2CX7oeL0TXaMpnDCsMMbV0kJtX1Sd5iHJh6O+Xcb aZi1xfqU2Kus+VkKiJQ452z01we0Ln8WcIZT39FLjSZ5zNUfFcWQvhwobXUw/cfB V2hXrfeMI3fzdw== -----END CERTIFICATE-----Generated at Thu Dec 18 20:37:15 2025 by rpki-client