This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json) Hash identifier: Vb0dZXEm6BCizq/IC+ytAE2KxB5GfnFzk1T3YxNUn98= Subject key identifier: 9D:18:2B:6D:51:A1:A6:E6:47:A9:52:F1:4B:48:D9:16:00:6D:72:9E Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Certificate serial: 019B37216453844BE5FEBA005182F42D0697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft Manifest number: 0DE6 Signing time: Fri 19 Dec 2025 15:01:33 +0000 Manifest this update: Fri 19 Dec 2025 15:01:33 +0000 Manifest next update: Sat 20 Dec 2025 15:01:33 +0000 Files and hashes: 1: NleuP1D5q1HYCx1bniu7S0UGnKU.roa (hash: ZHCVqddSwzrZ5jTMPPMLkCEjlBptOTx+uNZ09AcVm1s=) 2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: B1Uroulza1xKafKvIm3QHk8L9XtNQ5UKb93u+mPvih4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:64:53:84:4b:e5:fe:ba:00:51:82:f4:2d:06:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Validity Not Before: Dec 19 15:01:33 2025 GMT Not After : Dec 20 15:01:33 2025 GMT Subject: CN=9d182b6d51a1a6e647a952f14b48d916006d729e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:17:2b:ab:3f:fb:37:f1:cd:53:02:01:aa:81: 79:ce:83:28:fb:ef:7e:40:40:96:95:06:4a:d8:6f: 6f:19:e8:2c:2c:c2:f3:b2:7b:77:d2:b5:39:85:45: 73:4b:20:ab:9c:f2:f2:3f:5d:b6:9f:44:e1:2a:12: 8c:8a:5e:aa:83:55:d1:9f:a3:30:15:9f:74:4c:98: 74:48:7e:cc:8a:a8:28:69:1d:60:e0:08:2f:0c:d7: fe:4e:49:dc:4f:78:a3:c6:f5:15:de:0b:d3:b5:ad: 2e:d7:ed:11:50:a3:4b:6f:7d:6d:bb:3e:9d:c1:e6: 7e:ae:fe:03:e4:75:3c:3c:6d:20:2e:ea:78:1e:08: 22:cc:82:42:37:91:0d:b9:dc:42:2b:ad:75:65:b3: a8:b1:ca:b2:3c:49:b3:44:a5:a8:9f:2a:74:0f:e4: bf:12:0d:bb:3d:d5:4a:9e:7e:87:2a:2f:37:8e:f9: 1e:3f:2e:42:5d:5b:a2:53:29:5c:e1:8b:1b:10:73: 2f:2e:8e:bb:20:25:02:05:5e:55:46:d0:5f:9f:73: 01:19:60:44:f0:f8:03:35:93:db:fe:d0:e8:c5:72: 3b:80:82:1d:5c:05:e1:01:7e:74:c3:48:f2:43:cc: c4:98:5f:6a:bc:6e:69:26:0d:a7:7d:1c:ba:ad:ba: ff:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:18:2B:6D:51:A1:A6:E6:47:A9:52:F1:4B:48:D9:16:00:6D:72:9E X509v3 Authority Key Identifier: keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a7:5d:85:6c:fb:c9:34:8a:81:35:43:4b:bf:5a:24:a6:04: c5:a1:90:3e:3d:cc:e6:6e:ed:dd:59:b2:50:27:a5:3a:83:0c: d2:92:74:99:a2:9a:1d:e9:0c:a9:43:af:55:35:56:77:0f:2e: 6d:bf:fb:5d:4b:ad:55:c3:cd:f5:fc:c0:08:ff:56:6a:86:24: 76:ac:71:f5:c9:92:b5:5f:d4:9d:fa:a0:57:64:5b:41:32:a0: d1:c9:77:12:27:2e:e9:7e:ea:e5:a3:2e:44:11:0d:79:4a:a2: c0:10:77:d9:a9:b6:6d:55:91:f4:59:4e:ef:8e:99:54:03:b3: 7c:14:81:74:ac:ea:65:10:18:5e:78:43:46:10:ef:94:05:ac: 37:12:3a:30:9b:51:e5:c0:1c:ad:71:66:67:f6:07:1e:08:d7: 0a:4e:2a:e8:9a:43:a4:25:29:bf:b3:b8:14:03:52:e1:d9:5f: 15:b7:23:77:a3:87:fd:75:e9:0b:96:08:fd:73:d4:70:56:92: cd:ef:ed:d4:ef:ff:a4:75:c2:6f:2d:2b:14:66:d9:c2:be:d8: 4b:9f:79:c8:ed:dc:6f:d9:b3:05:c8:1b:aa:fe:0a:ca:ab:7e: 5d:83:37:f1:4f:a9:30:a0:95:19:90:59:22:c7:42:af:f5:a2: 1a:28:ed:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWRThEvl/roAUYL0LQaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4 YjZlNDMwHhcNMjUxMjE5MTUwMTMzWhcNMjUxMjIwMTUwMTMzWjAzMTEwLwYDVQQD Eyg5ZDE4MmI2ZDUxYTFhNmU2NDdhOTUyZjE0YjQ4ZDkxNjAwNmQ3MjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBcrqz/7N/HNUwIBqoF5zoMo++9+ QECWlQZK2G9vGegsLMLzsnt30rU5hUVzSyCrnPLyP122n0ThKhKMil6qg1XRn6Mw FZ90TJh0SH7MiqgoaR1g4AgvDNf+TkncT3ijxvUV3gvTta0u1+0RUKNLb31tuz6d weZ+rv4D5HU8PG0gLup4HggizIJCN5ENudxCK611ZbOoscqyPEmzRKWonyp0D+S/ Eg27PdVKnn6HKi83jvkePy5CXVuiUylc4YsbEHMvLo67ICUCBV5VRtBfn3MBGWBE 8PgDNZPb/tDoxXI7gIIdXAXhAX50w0jyQ8zEmF9qvG5pJg2nfRy6rbr/kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0YK21RoabmR6lS8UtI2RYAbXKeMB8GA1UdIwQY MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt NzhjMDRiY2VkYWQzLzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6ddhWz7 yTSKgTVDS79aJKYExaGQPj3M5m7t3VmyUCelOoMM0pJ0maKaHekMqUOvVTVWdw8u bb/7XUutVcPN9fzACP9WaoYkdqxx9cmStV/UnfqgV2RbQTKg0cl3Eicu6X7q5aMu RBENeUqiwBB32am2bVWR9FlO746ZVAOzfBSBdKzqZRAYXnhDRhDvlAWsNxI6MJtR 5cAcrXFmZ/YHHgjXCk4q6JpDpCUpv7O4FANS4dlfFbcjd6OH/XXpC5YI/XPUcFaS ze/t1O//pHXCby0rFGbZwr7YS595yO3cb9mzBcgbqv4Kyqt+XYM38U+pMKCVGZBZ IsdCr/WiGijtag== -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:59 2025 by rpki-client