This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft File: wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json) Hash identifier: 0Oksb4eg5vCH50UUKki273VHPHAmWv5vW/aC1ElnWJs= Subject key identifier: C2:56:3E:4C:B5:CD:03:B0:F5:3F:DE:9D:78:8A:98:25:29:02:7A:83 Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 Certificate issuer: /CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Certificate serial: 019B42B6E78CE6F7410C850E59E13828D245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft Manifest number: 1498 Signing time: Sun 21 Dec 2025 21:00:41 +0000 Manifest this update: Sun 21 Dec 2025 21:00:41 +0000 Manifest next update: Mon 22 Dec 2025 21:00:41 +0000 Files and hashes: 1: MnIaRmi-qtJjMOo5DcZACYHEh7Q.roa (hash: DOu8g3e2V+bo5Ia9CdK+7hGNXc1/nocclAIwTEkGmxQ=) 2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: 9Zi09xkfSqFJCiIwIQ+00VuDVslyWuT3g+ipnxWBxug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:e7:8c:e6:f7:41:0c:85:0e:59:e1:38:28:d2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5 Validity Not Before: Dec 21 21:00:41 2025 GMT Not After : Dec 22 21:00:41 2025 GMT Subject: CN=c2563e4cb5cd03b0f53fde9d788a982529027a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:28:c6:cb:e2:71:13:fa:da:f8:c7:83:d8:8e: 43:af:f6:50:12:d6:d4:d7:6b:4e:4d:c2:b5:b0:ce: 50:b5:38:43:e9:a5:ec:7a:53:be:4b:6e:08:e1:7e: 1f:e0:d8:2c:ed:b0:dc:85:41:96:6e:0e:13:92:02: d3:e8:35:4e:02:ff:0a:53:57:21:f3:e2:7a:75:8d: b6:b9:32:84:4f:4a:08:13:db:3d:0b:e1:a2:cd:5f: bc:6f:5a:9e:74:e4:b4:60:2a:c5:46:40:d9:a4:10: 14:b7:be:ac:77:4e:dd:3f:65:c8:4b:65:0a:fd:93: a5:cf:a1:2f:3e:da:4b:73:1c:82:c1:86:48:df:b3: 00:96:d3:2b:44:0b:a1:6c:65:f6:a5:85:bf:2d:0d: 77:a4:36:c6:4e:01:44:4d:75:80:6a:84:ff:b4:32: a7:41:b8:e1:09:95:21:49:e0:6e:51:c4:21:83:d8: 2a:3c:ec:2f:de:65:00:d9:4e:10:6f:23:db:b1:37: 0a:7e:2d:45:63:4e:1d:3d:80:84:04:12:0b:60:98: 74:72:ab:f2:41:1f:db:85:90:02:89:db:45:e4:96: 4c:22:e7:ce:42:40:7b:a5:8e:29:36:b6:81:4b:91: e7:b6:e7:11:08:4e:88:00:ce:b4:40:d1:c3:1f:6c: ab:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:56:3E:4C:B5:CD:03:B0:F5:3F:DE:9D:78:8A:98:25:29:02:7A:83 X509v3 Authority Key Identifier: keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ab:c9:63:7b:4c:4b:5c:f4:32:d4:86:1a:72:28:d2:a3:02: 0b:4e:94:6a:53:e1:43:9e:4a:d2:bc:ee:60:7e:a7:28:6a:44: 56:72:7a:9a:a4:10:bc:6c:ae:69:08:49:4d:8e:c6:f2:a7:db: 2a:7c:80:fd:4d:45:81:a3:30:a6:0e:ff:93:6d:b4:7a:30:55: e1:aa:36:b9:8e:ef:27:fa:7f:1c:1c:11:e5:24:f8:16:6b:1b: f3:94:17:ef:49:b5:98:78:9a:e3:4a:2f:82:ad:e9:90:14:a2: 62:d0:d2:90:71:d8:08:0c:02:ce:38:17:94:e1:2b:9e:de:15: cc:64:23:06:cf:df:ea:42:7b:4d:84:a6:b8:ad:15:98:ca:73: ca:a5:24:58:dd:57:f3:80:33:18:15:ca:a7:2a:0e:a2:08:f6: a5:be:a6:38:1f:41:8c:67:c1:3a:3d:c7:7b:ac:fe:a6:e2:be: 24:04:28:ee:12:b1:d7:0d:5d:2d:0f:58:e9:d9:04:e0:5c:86: 43:be:17:a7:4e:31:f2:2b:32:b3:73:15:02:20:82:06:72:67: 43:2f:5a:7c:a0:f0:af:99:a5:55:36:ba:30:28:9b:d0:cc:26: 47:0f:22:f5:da:bf:9b:d9:9f:39:3c:e3:1d:af:fd:07:69:0c: f5:9e:73:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtueM5vdBDIUOWeE4KNJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYjYwN2M1ODUxNTM2N2QzN2M5ZjNlNjk5NDgyZTU3YTMz YzczZjUwHhcNMjUxMjIxMjEwMDQxWhcNMjUxMjIyMjEwMDQxWjAzMTEwLwYDVQQD EyhjMjU2M2U0Y2I1Y2QwM2IwZjUzZmRlOWQ3ODhhOTgyNTI5MDI3YTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SjGy+JxE/ra+MeD2I5Dr/ZQEtbU 12tOTcK1sM5QtThD6aXselO+S24I4X4f4Ngs7bDchUGWbg4TkgLT6DVOAv8KU1ch 8+J6dY22uTKET0oIE9s9C+GizV+8b1qedOS0YCrFRkDZpBAUt76sd07dP2XIS2UK /ZOlz6EvPtpLcxyCwYZI37MAltMrRAuhbGX2pYW/LQ13pDbGTgFETXWAaoT/tDKn QbjhCZUhSeBuUcQhg9gqPOwv3mUA2U4QbyPbsTcKfi1FY04dPYCEBBILYJh0cqvy QR/bhZACidtF5JZMIufOQkB7pY4pNraBS5HntucRCE6IAM60QNHDH2yrSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJWPky1zQOw9T/enXiKmCUpAnqDMB8GA1UdIwQY MBaAFMG2B8WFFTZ9N8nz5plILlejPHP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQt YjFlYTA4N2I5NTI1LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQtYjFlYTA4N2I5NTI1 LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOqvJY3tM S1z0MtSGGnIo0qMCC06UalPhQ55K0rzuYH6nKGpEVnJ6mqQQvGyuaQhJTY7G8qfb KnyA/U1FgaMwpg7/k220ejBV4ao2uY7vJ/p/HBwR5ST4Fmsb85QX70m1mHia40ov gq3pkBSiYtDSkHHYCAwCzjgXlOErnt4VzGQjBs/f6kJ7TYSmuK0VmMpzyqUkWN1X 84AzGBXKpyoOogj2pb6mOB9BjGfBOj3He6z+puK+JAQo7hKx1w1dLQ9Y6dkE4FyG Q74Xp04x8isys3MVAiCCBnJnQy9afKDwr5mlVTa6MCib0MwmRw8i9dq/m9mfOTzj Ha/9B2kM9Z5zsQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:59:46 2025 by rpki-client