This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft File: WbWUsQer_jKkbE0dvge7tOa7Fjo.mft (raw, json) Hash identifier: 8UBRkaFtDER6G/HXaN7GjLG9h/dkhfJJSVKkJBf83ZU= Subject key identifier: BF:8A:D0:7F:B4:54:E7:D3:A8:7A:DE:90:15:42:16:0F:AE:80:2D:5B Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A Certificate issuer: /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a Certificate serial: 019B35D72D9478D7F920811C2379C7B8F801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft Manifest number: 0C17 Signing time: Fri 19 Dec 2025 09:00:52 +0000 Manifest this update: Fri 19 Dec 2025 09:00:52 +0000 Manifest next update: Sat 20 Dec 2025 09:00:52 +0000 Files and hashes: 1: WbWUsQer_jKkbE0dvge7tOa7Fjo.crl (hash: Q41nOvi+8QHxQNGaOIJ/DvF52iJn1SOsD1aMpiZOWuM=) 2: iaYhX-wTSSW1QYw64E4AzhGwws8.roa (hash: wTQucH27CFyiNY63Xms6GuDAYhKr9yvb+MoiHvTWRCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:2d:94:78:d7:f9:20:81:1c:23:79:c7:b8:f8:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a Validity Not Before: Dec 19 09:00:52 2025 GMT Not After : Dec 20 09:00:52 2025 GMT Subject: CN=bf8ad07fb454e7d3a87ade901542160fae802d5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cf:50:e3:ca:1d:b2:dd:94:c6:41:b7:bf:16: 64:3e:02:a1:0c:60:a6:30:32:81:c2:f8:85:da:11: 85:63:14:32:4d:8e:19:04:67:bd:d9:6a:31:c3:87: 2e:ce:fd:ad:46:0f:6f:53:75:92:bb:85:14:07:d8: 5a:87:ff:21:eb:08:b8:df:3c:2b:c5:52:96:51:b0: 88:4c:d5:71:02:9c:a8:90:a6:3e:aa:32:c0:b9:e1: 5e:b2:89:87:09:ea:b8:2c:82:91:c1:e2:7c:3c:ba: 3d:7e:e8:0a:a6:25:5f:91:2c:94:9b:e0:6f:03:cf: 8e:17:f8:00:97:0e:7f:01:a7:f1:0d:de:e6:bd:ec: b9:92:46:97:9e:6f:39:32:d7:0b:f6:43:a6:e8:5f: c1:63:7f:42:17:db:bd:88:e6:05:b2:28:fa:7c:c2: de:95:77:9e:35:96:71:6a:fe:64:b6:42:bd:ce:e2: fa:dc:10:e1:0e:7f:fc:47:9c:fb:34:16:30:6a:fc: 7a:bf:76:b0:66:6c:b9:09:57:09:d1:20:3a:3c:78: 52:32:97:8e:54:71:97:23:0d:83:67:48:c1:c7:8f: 86:0b:29:21:1f:e3:5e:5a:fe:8e:31:d1:40:d9:f1: fb:51:c1:77:4a:48:80:43:c6:80:fa:14:ea:3a:ab: 56:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8A:D0:7F:B4:54:E7:D3:A8:7A:DE:90:15:42:16:0F:AE:80:2D:5B X509v3 Authority Key Identifier: keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f5:00:aa:fd:49:cd:98:45:4e:fe:06:45:94:fc:c0:24:fa: 72:41:36:bd:dd:ce:67:b0:b3:f6:4e:47:66:88:4c:e1:6e:18: 7c:bc:1e:52:35:ce:29:b9:9b:94:70:95:93:11:11:fc:bf:4b: c9:7e:0d:38:e4:29:dd:a7:2d:ce:29:de:46:20:a1:7a:17:36: ec:f3:a5:90:b4:18:f2:dd:64:4c:26:17:b5:0c:60:17:3d:e2: 01:82:d6:f0:d6:37:47:43:06:a5:f0:1a:dd:82:dd:26:59:64: 66:69:59:9b:e7:44:b8:d2:fa:86:0e:a6:67:83:8c:a0:4a:e4: 4e:17:09:dc:40:9b:5b:2e:36:fa:97:78:db:c5:ac:26:f6:b4: 0f:01:7f:cf:29:42:5d:b1:a8:94:0f:28:02:9b:d2:4f:83:0d: 77:7e:4a:3f:b4:99:10:69:e8:96:c8:8b:36:37:fc:43:dd:5d: 41:4b:09:07:06:9d:fb:86:82:db:0e:0b:54:11:e6:18:c0:c1: 38:8c:9e:c6:6e:bc:08:9c:f6:e1:59:df:90:2d:93:1b:40:15: 48:05:ca:eb:f4:d6:1e:bb:03:22:a6:29:57:db:9a:d6:a8:14: 33:3f:85:9e:89:91:e4:d0:b0:5a:c7:42:cb:ff:ca:1c:ac:4e: a9:de:1a:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11y2UeNf5IIEcI3nHuPgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YjU5NGIxMDdhYmZlMzJhNDZjNGQxZGJlMDdiYmI0ZTZi YjE2M2EwHhcNMjUxMjE5MDkwMDUyWhcNMjUxMjIwMDkwMDUyWjAzMTEwLwYDVQQD EyhiZjhhZDA3ZmI0NTRlN2QzYTg3YWRlOTAxNTQyMTYwZmFlODAyZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM9Q48odst2UxkG3vxZkPgKhDGCm MDKBwviF2hGFYxQyTY4ZBGe92Woxw4cuzv2tRg9vU3WSu4UUB9hah/8h6wi43zwr xVKWUbCITNVxApyokKY+qjLAueFesomHCeq4LIKRweJ8PLo9fugKpiVfkSyUm+Bv A8+OF/gAlw5/AafxDd7mvey5kkaXnm85MtcL9kOm6F/BY39CF9u9iOYFsij6fMLe lXeeNZZxav5ktkK9zuL63BDhDn/8R5z7NBYwavx6v3awZmy5CVcJ0SA6PHhSMpeO VHGXIw2DZ0jBx4+GCykhH+NeWv6OMdFA2fH7UcF3SkiAQ8aA+hTqOqtWCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL+K0H+0VOfTqHrekBVCFg+ugC1bMB8GA1UdIwQY MBaAFFm1lLEHq/4ypGxNHb4Hu7TmuxY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2Mt YjNmNTY3ODA1YTdjLzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2MtYjNmNTY3ODA1YTdj LzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHvUAqv1J zZhFTv4GRZT8wCT6ckE2vd3OZ7Cz9k5HZohM4W4YfLweUjXOKbmblHCVkxER/L9L yX4NOOQp3actzineRiChehc27POlkLQY8t1kTCYXtQxgFz3iAYLW8NY3R0MGpfAa 3YLdJllkZmlZm+dEuNL6hg6mZ4OMoErkThcJ3ECbWy42+pd428WsJva0DwF/zylC XbGolA8oApvST4MNd35KP7SZEGnolsiLNjf8Q91dQUsJBwad+4aC2w4LVBHmGMDB OIyexm68CJz24VnfkC2TG0AVSAXK6/TWHrsDIqYpV9ua1qgUMz+FnomR5NCwWsdC y//KHKxOqd4ajQ== -----END CERTIFICATE-----Generated at Fri Dec 19 18:10:26 2025 by rpki-client