This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json) Hash identifier: jhbguHC6P2GuqPVJL1h7tl7qHxuxNx81UD5Z0uwlBhU= Subject key identifier: 11:6F:81:2D:F6:CE:FF:E1:01:07:10:6A:8E:68:96:1B:A9:82:2D:35 Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Certificate serial: 019B42B7B6CD8742FF89A5BEC2C7B56ECAF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft Manifest number: 0DEC Signing time: Sun 21 Dec 2025 21:01:34 +0000 Manifest this update: Sun 21 Dec 2025 21:01:34 +0000 Manifest next update: Mon 22 Dec 2025 21:01:34 +0000 Files and hashes: 1: NleuP1D5q1HYCx1bniu7S0UGnKU.roa (hash: ZHCVqddSwzrZ5jTMPPMLkCEjlBptOTx+uNZ09AcVm1s=) 2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: hdwmcR3CnoWNd9nK2a1flJTfqM6/dRsS0zaEAjMHm7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:b6:cd:87:42:ff:89:a5:be:c2:c7:b5:6e:ca:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Validity Not Before: Dec 21 21:01:34 2025 GMT Not After : Dec 22 21:01:34 2025 GMT Subject: CN=116f812df6ceffe10107106a8e68961ba9822d35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:07:c0:44:c5:2b:0c:62:cb:94:19:31:fa:c6: 27:2f:e9:60:01:9c:3b:4b:15:8f:d7:39:f4:7f:18: 5f:cd:60:0f:e9:d9:6e:b7:06:a3:f3:7b:36:1c:06: 7d:07:32:2a:1d:e0:5f:2e:ee:2e:5d:06:76:22:28: 70:24:1a:8a:74:4f:b9:19:48:3b:80:06:3e:11:7b: c5:27:25:27:d7:52:cf:24:e9:cc:38:98:2e:59:49: b8:70:e6:72:d2:38:a1:60:0b:3e:ea:29:0d:4b:1c: 0f:32:bd:bf:09:e9:64:ad:d0:2a:17:2e:55:fe:0b: a7:f5:1b:1a:88:33:54:c6:18:6f:be:31:ec:d6:fe: 96:b7:57:3c:99:d0:b7:c3:07:ff:f0:be:2e:68:26: af:31:17:15:69:f9:7c:ec:5b:a7:88:bd:4a:ff:3e: a7:41:17:05:ad:e7:6d:f5:e8:52:b7:2d:9b:e4:86: 21:ed:7f:83:52:b8:8d:6c:d5:a1:8c:a1:48:1a:a8: 07:db:60:03:10:87:99:17:f8:30:cc:63:7b:42:36: 68:ae:77:be:5e:7a:f7:40:fd:59:33:36:31:25:b2: 90:a0:6e:09:fc:25:5d:5e:a2:5e:ae:36:04:22:49: 88:c1:dd:ac:3a:4d:77:c5:8f:29:b1:86:65:fd:d4: dd:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6F:81:2D:F6:CE:FF:E1:01:07:10:6A:8E:68:96:1B:A9:82:2D:35 X509v3 Authority Key Identifier: keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:40:46:89:b1:73:43:6f:25:78:78:bd:d8:02:4b:5c:20:a0: ef:32:6f:c3:07:8b:5b:35:f5:90:5d:a3:e6:65:e5:71:03:77: 34:eb:70:22:00:eb:d9:b5:85:01:36:bd:5d:ca:25:1a:fe:8b: 44:00:44:8e:91:7c:e4:4b:9f:e1:eb:1d:76:1c:e3:89:f5:59: ce:d0:32:7f:6f:61:82:4a:e1:24:5c:ed:ad:5d:b4:ba:99:ff: 0b:d8:de:79:86:2e:b4:1c:69:91:bb:09:b9:27:71:e3:54:86: c3:77:6d:39:c5:46:6f:46:97:75:54:6a:85:74:da:d2:3a:0d: 69:da:e2:10:b8:4f:c4:5b:8f:5a:9e:e5:e6:f2:1a:41:4f:4e: cb:a6:d5:d5:60:7d:aa:c3:e6:05:48:e0:7b:e5:86:84:0e:90: 83:58:bc:a6:00:29:93:a6:04:43:b1:80:d6:ae:33:3c:c3:23: 6b:10:83:c4:0c:36:4f:26:bc:61:63:2b:03:af:17:04:e8:d9: cb:ac:d9:8d:1a:fa:77:e1:df:a8:f0:90:c9:cc:da:24:02:ab: 7f:80:3d:6d:3a:5f:21:65:56:89:3f:e5:6b:89:4e:1a:ae:a7: fe:cc:c5:c1:b0:46:3d:e8:f5:f0:c2:16:a2:73:34:19:7e:cf: 43:fe:5b:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt7bNh0L/iaW+wse1bsryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4 YjZlNDMwHhcNMjUxMjIxMjEwMTM0WhcNMjUxMjIyMjEwMTM0WjAzMTEwLwYDVQQD EygxMTZmODEyZGY2Y2VmZmUxMDEwNzEwNmE4ZTY4OTYxYmE5ODIyZDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugfARMUrDGLLlBkx+sYnL+lgAZw7 SxWP1zn0fxhfzWAP6dlutwaj83s2HAZ9BzIqHeBfLu4uXQZ2IihwJBqKdE+5GUg7 gAY+EXvFJyUn11LPJOnMOJguWUm4cOZy0jihYAs+6ikNSxwPMr2/CelkrdAqFy5V /gun9RsaiDNUxhhvvjHs1v6Wt1c8mdC3wwf/8L4uaCavMRcVafl87FuniL1K/z6n QRcFredt9ehSty2b5IYh7X+DUriNbNWhjKFIGqgH22ADEIeZF/gwzGN7QjZorne+ Xnr3QP1ZMzYxJbKQoG4J/CVdXqJerjYEIkmIwd2sOk13xY8psYZl/dTdYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFvgS32zv/hAQcQao5olhupgi01MB8GA1UdIwQY MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt NzhjMDRiY2VkYWQzLzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdkBGibFz Q28leHi92AJLXCCg7zJvwweLWzX1kF2j5mXlcQN3NOtwIgDr2bWFATa9XcolGv6L RABEjpF85Euf4esddhzjifVZztAyf29hgkrhJFztrV20upn/C9jeeYYutBxpkbsJ uSdx41SGw3dtOcVGb0aXdVRqhXTa0joNadriELhPxFuPWp7l5vIaQU9Oy6bV1WB9 qsPmBUjge+WGhA6Qg1i8pgApk6YEQ7GA1q4zPMMjaxCDxAw2Tya8YWMrA68XBOjZ y6zZjRr6d+HfqPCQyczaJAKrf4A9bTpfIWVWiT/la4lOGq6n/szFwbBGPej18MIW onM0GX7PQ/5bfg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:22:32 2025 by rpki-client