This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft File: wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json) Hash identifier: TMbhws31EPTkotjizgcOb9ZgxBFWaZspA/d0pz03RyA= Subject key identifier: 84:FE:9B:8C:FE:98:59:FF:4B:91:C5:63:D9:84:2E:C8:D4:F5:CA:2C Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 Certificate issuer: /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Certificate serial: 019AF5779E1A07D462146F7BA815714D2D90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:00:48 +0000 Manifest this update: Sat 06 Dec 2025 21:00:48 +0000 Manifest next update: Sun 07 Dec 2025 21:00:48 +0000 Files and hashes: 1: mOHhCAnpxR-dp3-6rcl-KfmxQF4.roa (hash: 3p2JZm+3j1SVt0MOxqOY+5HYmBdbi1aC8iIMBMpg4u0=) 2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: WavJhZFOS7XyvSMS0JkAN1tQYZmwK2vod2Qmf94sABA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:9e:1a:07:d4:62:14:6f:7b:a8:15:71:4d:2d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Validity Not Before: Dec 6 21:00:48 2025 GMT Not After : Dec 7 21:00:48 2025 GMT Subject: CN=84fe9b8cfe9859ff4b91c563d9842ec8d4f5ca2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:c6:fd:77:d5:00:ce:86:0c:85:33:d8:47: 71:f1:d1:6f:02:54:63:2f:81:58:65:99:19:d0:e2: 43:02:3e:16:bc:9a:23:d1:29:f1:f0:32:79:f7:1c: bc:7a:9c:11:01:eb:fd:1a:b3:e5:29:76:61:b2:45: 58:89:9d:ac:63:bf:da:10:50:76:cf:4c:01:8c:8f: 88:82:fa:12:f1:9a:d8:0f:b7:7d:35:d5:ff:68:f3: ac:5c:b2:f2:cf:ab:c8:0e:1e:cf:f8:8b:10:ab:07: 5e:99:9a:d0:1f:46:7e:f2:09:22:6e:ec:d4:21:fe: 3f:07:ee:6b:24:aa:b9:06:32:15:27:16:3f:ee:73: 0d:fc:84:a5:ba:55:46:7f:75:32:7e:18:cf:43:62: 65:c5:03:d9:59:55:f9:89:e7:d4:16:13:36:4e:d7: 68:bb:b5:73:74:ea:f2:7b:9a:27:b8:cf:00:34:db: bc:1f:c0:e3:48:50:dd:16:27:96:fc:c8:e7:49:92: bb:ba:28:3a:57:87:9a:da:9f:54:b6:e9:1f:7c:b8: 46:bd:f4:79:e4:62:8f:32:b5:91:95:71:9a:a9:2a: 5f:8a:f9:0e:d0:40:d7:b4:91:79:df:c5:26:f9:ac: 63:6b:a0:7e:51:ba:4f:06:49:79:32:bd:ce:19:df: 4a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:FE:9B:8C:FE:98:59:FF:4B:91:C5:63:D9:84:2E:C8:D4:F5:CA:2C X509v3 Authority Key Identifier: keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d7:38:38:ee:9e:d3:ca:58:ca:cf:60:7b:12:64:f0:ee:25: a6:3e:93:54:9b:2b:b9:f9:69:83:36:51:e1:c2:f9:b6:ae:1b: dc:10:1a:51:4d:f7:06:aa:ae:6b:98:aa:e7:21:0c:2b:99:7a: 6d:0a:98:7b:3b:ab:1d:97:33:25:fa:7a:7c:9b:81:24:71:49: 88:7f:bc:13:6a:52:d2:59:f2:84:93:cd:72:ad:63:26:cc:0f: 2d:3d:f2:45:c1:40:04:49:4b:4d:fa:00:2a:12:6b:c9:32:92: 78:8d:c5:ff:9d:55:b7:59:a4:a7:bd:da:7e:9e:67:46:da:cb: 88:cc:8b:72:54:57:ce:3f:cd:2f:31:97:c6:f8:80:fc:74:64: 97:00:50:b9:1d:76:1f:4c:75:76:17:0f:62:23:63:17:30:a6: 18:56:90:68:82:86:a0:78:64:fa:3d:a0:58:ff:68:c3:2d:16: 0e:b0:d7:49:63:e9:db:d4:d9:c9:34:9a:d3:2b:8d:bd:95:c8: d4:59:80:f9:bf:57:a4:55:ed:7f:cf:86:a2:a8:76:24:90:b8: c6:7c:e1:a4:4b:ec:53:6b:1b:9e:dd:6e:e2:12:30:18:e9:fc: cd:ad:65:5e:78:2d:80:a8:9e:48:67:4b:ae:67:86:88:df:7a: 62:a4:6b:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d54aB9RiFG97qBVxTS2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTZkMjVmMWZkZDAwZGM4MGRkNmQyMjViMjExMTliZjIx MjFlODkwHhcNMjUxMjA2MjEwMDQ4WhcNMjUxMjA3MjEwMDQ4WjAzMTEwLwYDVQQD Eyg4NGZlOWI4Y2ZlOTg1OWZmNGI5MWM1NjNkOTg0MmVjOGQ0ZjVjYTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunPG/XfVAM6GDIUz2Edx8dFvAlRj L4FYZZkZ0OJDAj4WvJoj0Snx8DJ59xy8epwRAev9GrPlKXZhskVYiZ2sY7/aEFB2 z0wBjI+IgvoS8ZrYD7d9NdX/aPOsXLLyz6vIDh7P+IsQqwdemZrQH0Z+8gkibuzU If4/B+5rJKq5BjIVJxY/7nMN/ISlulVGf3UyfhjPQ2JlxQPZWVX5iefUFhM2Ttdo u7VzdOrye5onuM8ANNu8H8DjSFDdFieW/MjnSZK7uig6V4ea2p9UtukffLhGvfR5 5GKPMrWRlXGaqSpfivkO0EDXtJF538Um+axja6B+UbpPBkl5Mr3OGd9KAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIT+m4z+mFn/S5HFY9mELsjU9cosMB8GA1UdIwQY MBaAFMJW0l8f3QDcgN1tIlshEZvyEh6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMt Y2YzMmEwZDkyODI1LzEvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMtY2YzMmEwZDkyODI1 LzEvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAStc4OO6e 08pYys9gexJk8O4lpj6TVJsruflpgzZR4cL5tq4b3BAaUU33Bqqua5iq5yEMK5l6 bQqYezurHZczJfp6fJuBJHFJiH+8E2pS0lnyhJPNcq1jJswPLT3yRcFABElLTfoA KhJryTKSeI3F/51Vt1mkp73afp5nRtrLiMyLclRXzj/NLzGXxviA/HRklwBQuR12 H0x1dhcPYiNjFzCmGFaQaIKGoHhk+j2gWP9owy0WDrDXSWPp29TZyTSa0yuNvZXI 1FmA+b9XpFXtf8+Goqh2JJC4xnzhpEvsU2sbnt1u4hIwGOn8za1lXngtgKieSGdL rmeGiN96YqRr6A== -----END CERTIFICATE-----Generated at Sun Dec 7 07:08:59 2025 by rpki-client