This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft File: wb80sZClHOUwAleRGvMEBPSVH7Y.mft (raw, json) Hash identifier: VuKYJ0FxwutH7BdJPRa1rot1TvH5PKRvIHNlGLKWVJY= Subject key identifier: 08:B6:73:A8:65:A6:E9:20:0F:94:33:DE:86:6F:7D:F8:70:CE:E0:1A Authority key identifier: C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 Certificate issuer: /CN=c1bf34b190a51ce5300257911af30404f4951fb6 Certificate serial: 019B19BB8D87CC5008920F90D3D70CAA3A85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 22:01:20 +0000 Manifest this update: Sat 13 Dec 2025 22:01:20 +0000 Manifest next update: Sun 14 Dec 2025 22:01:20 +0000 Files and hashes: 1: 0tyV27ZaRKIuc5h8kTDsBiv4BZI.roa (hash: 1dyOdZnQpGVWWsvnKswgEprRwbXy0vsePve+ulQremU=) 2: wb80sZClHOUwAleRGvMEBPSVH7Y.crl (hash: j7/6t05eZxPUVcgrip2ilQDaP3TME+IGQKIkVgNB3Us=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bb:8d:87:cc:50:08:92:0f:90:d3:d7:0c:aa:3a:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf34b190a51ce5300257911af30404f4951fb6 Validity Not Before: Dec 13 22:01:20 2025 GMT Not After : Dec 14 22:01:20 2025 GMT Subject: CN=08b673a865a6e9200f9433de866f7df870cee01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:76:75:31:df:58:34:a2:e3:d1:1a:53:16:c0: b7:e5:40:c0:d5:6b:3a:8f:da:b4:02:39:e4:bc:76: 8f:dd:af:32:41:db:bf:2b:48:20:30:4a:4d:20:01: 13:2d:4e:e0:23:38:73:f5:46:e1:df:07:12:3b:18: 77:bd:83:76:20:af:d5:a4:74:59:ce:03:5a:32:a4: eb:1d:d1:ed:58:1d:56:e0:d5:a0:a6:e0:a4:9f:5a: 6b:d4:e2:70:8f:64:53:54:95:d2:9c:dd:1f:4f:8b: 07:c9:fa:94:ec:31:5c:c9:c1:95:b5:01:e0:b3:96: 25:db:01:98:cc:5e:ee:46:8b:18:72:fa:6c:51:47: 74:22:04:4f:14:22:37:50:b3:86:18:44:30:5d:36: 47:61:56:56:58:9f:af:4a:48:40:96:67:3a:7e:eb: 89:d8:41:6e:14:0e:9b:0e:10:05:4b:ec:e9:9f:3b: ec:c1:c3:2e:a7:19:24:ac:fe:d2:33:04:d3:f6:56: f7:ab:a0:19:63:31:fc:4d:6c:47:49:fb:2c:7d:ba: 69:80:5b:b9:5f:ed:22:35:47:bc:01:90:ce:04:7e: 56:23:ab:bf:b0:51:6a:1f:10:69:61:ab:b8:d5:f2: 3a:3c:a1:2a:ff:3d:11:62:d6:72:ae:88:dd:d9:3a: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B6:73:A8:65:A6:E9:20:0F:94:33:DE:86:6F:7D:F8:70:CE:E0:1A X509v3 Authority Key Identifier: keyid:C1:BF:34:B1:90:A5:1C:E5:30:02:57:91:1A:F3:04:04:F4:95:1F:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb80sZClHOUwAleRGvMEBPSVH7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/153d53-6e69-4301-abd3-f311bac2a37f/1/wb80sZClHOUwAleRGvMEBPSVH7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:14:5c:40:bd:21:e9:7b:87:4e:1d:c3:1c:df:03:af:cd:6b: c5:b3:cc:25:86:53:0b:e9:3e:ed:ed:21:04:84:2b:43:db:36: 03:62:4e:35:14:ec:af:4b:72:3f:8c:e2:ca:4a:3b:bf:23:c6: 24:7d:91:eb:ea:54:d4:4f:30:15:20:e5:16:ea:03:7b:14:2f: 64:55:8e:ec:83:f3:f6:14:6e:57:dd:d7:3b:ab:ed:14:8a:fa: 82:97:31:1f:de:8d:04:53:a1:f8:dd:75:05:15:2b:f2:65:00: c0:5f:81:f3:ce:78:20:2f:9f:af:79:21:1f:a5:58:8c:32:1b: 21:12:aa:06:de:9b:be:02:9b:3b:10:2b:1a:93:9f:77:f9:7f: f4:ab:76:18:ff:b0:11:a5:17:ac:91:da:74:47:5a:c3:2d:0d: 29:bd:e7:4f:13:5b:2a:5a:b2:a0:d4:33:ce:ab:50:5a:f9:12: 01:09:ee:59:c2:c7:85:9e:a0:5d:92:cc:41:ef:f2:90:cf:bf: 71:f6:65:42:69:69:96:10:7e:a6:a1:49:37:af:af:e3:8b:47: 31:33:05:d0:7d:70:c7:44:df:66:0d:39:46:36:4b:c4:a8:cb: a9:55:04:64:e5:43:cb:ce:93:2a:b9:73:37:e3:20:b7:3c:f4: 3b:08:34:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZu42HzFAIkg+Q09cMqjqFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmYzNGIxOTBhNTFjZTUzMDAyNTc5MTFhZjMwNDA0ZjQ5 NTFmYjYwHhcNMjUxMjEzMjIwMTIwWhcNMjUxMjE0MjIwMTIwWjAzMTEwLwYDVQQD EygwOGI2NzNhODY1YTZlOTIwMGY5NDMzZGU4NjZmN2RmODcwY2VlMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Z1Md9YNKLj0RpTFsC35UDA1Ws6 j9q0AjnkvHaP3a8yQdu/K0ggMEpNIAETLU7gIzhz9Ubh3wcSOxh3vYN2IK/VpHRZ zgNaMqTrHdHtWB1W4NWgpuCkn1pr1OJwj2RTVJXSnN0fT4sHyfqU7DFcycGVtQHg s5Yl2wGYzF7uRosYcvpsUUd0IgRPFCI3ULOGGEQwXTZHYVZWWJ+vSkhAlmc6fuuJ 2EFuFA6bDhAFS+zpnzvswcMupxkkrP7SMwTT9lb3q6AZYzH8TWxHSfssfbppgFu5 X+0iNUe8AZDOBH5WI6u/sFFqHxBpYau41fI6PKEq/z0RYtZyrojd2TqriwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi2c6hlpukgD5Qz3oZvffhwzuAaMB8GA1UdIwQY MBaAFMG/NLGQpRzlMAJXkRrzBAT0lR+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMt ZjMxMWJhYzJhMzdmLzEvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS8xNTNkNTMtNmU2OS00MzAxLWFiZDMtZjMxMWJhYzJhMzdm LzEvd2I4MHNaQ2xIT1V3QWxlUkd2TUVCUFNWSDdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRRcQL0h 6XuHTh3DHN8Dr81rxbPMJYZTC+k+7e0hBIQrQ9s2A2JONRTsr0tyP4ziyko7vyPG JH2R6+pU1E8wFSDlFuoDexQvZFWO7IPz9hRuV93XO6vtFIr6gpcxH96NBFOh+N11 BRUr8mUAwF+B8854IC+fr3khH6VYjDIbIRKqBt6bvgKbOxArGpOfd/l/9Kt2GP+w EaUXrJHadEdawy0NKb3nTxNbKlqyoNQzzqtQWvkSAQnuWcLHhZ6gXZLMQe/ykM+/ cfZlQmlplhB+pqFJN6+v44tHMTMF0H1wx0TfZg05RjZLxKjLqVUEZOVDy86TKrlz N+Mgtzz0Owg0cA== -----END CERTIFICATE-----Generated at Sun Dec 14 03:26:58 2025 by rpki-client