This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft File: wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json) Hash identifier: lecErkvmCM7uvedFNUj4EQzBwcP3MPtAg7VwKZCpO9k= Subject key identifier: CE:48:1C:0F:6B:4D:1B:BF:F6:23:59:93:05:79:7F:97:70:86:D9:46 Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B3AFD65991E3FCAD778B29B185B797A68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft Manifest number: 1792 Signing time: Sat 20 Dec 2025 09:00:43 +0000 Manifest this update: Sat 20 Dec 2025 09:00:43 +0000 Manifest next update: Sun 21 Dec 2025 09:00:43 +0000 Files and hashes: 1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=) 2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=) 3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=) 4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=) 5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=) 6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=) 7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=) 8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=) 9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: w67M0BHZMUeGNODzfffMA0bwX2U+ISmLauQJ/ijredc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:65:99:1e:3f:ca:d7:78:b2:9b:18:5b:79:7a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Dec 20 09:00:43 2025 GMT Not After : Dec 21 09:00:43 2025 GMT Subject: CN=ce481c0f6b4d1bbff623599305797f977086d946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:39:83:d3:51:1a:95:7a:e6:b9:18:27:64: 42:d1:7b:c4:f8:1c:1d:b2:0d:08:66:48:eb:2a:ed: d8:fc:b0:f8:70:e4:b5:8a:91:61:fd:67:a0:3f:ab: 80:ab:67:5e:68:c2:c2:4b:2f:61:be:8a:39:2d:a7: 91:cb:47:99:2c:8f:eb:c7:0a:c2:ab:5e:64:be:89: 5a:ec:24:39:13:8a:f2:e7:82:2e:a1:85:0c:0c:c9: 20:0f:18:af:2b:1b:26:eb:a0:a5:ee:55:23:9f:fe: 98:a5:cb:a5:a4:a5:5f:58:80:c2:9e:30:f8:43:f3: 60:8b:cd:6e:db:de:c6:5a:b5:cb:ff:d5:dc:dc:7c: 73:9e:89:93:3e:26:71:68:5b:fc:41:d5:78:ee:1e: 22:bf:14:32:ad:b0:5b:37:a6:eb:5d:b7:15:d1:3b: bb:ec:bc:23:53:77:ed:4a:48:94:7c:4d:52:2c:1d: c8:ff:23:78:71:59:ad:04:47:c4:9b:ce:a6:50:35: fd:20:0e:8f:dd:3c:3c:8d:dc:92:bc:93:e8:82:0b: 73:21:ad:7a:f4:79:b2:ad:14:10:79:d8:b7:ca:f8: 21:64:dd:cd:6a:3c:13:9b:ac:83:94:5a:c4:76:18: 90:0b:d1:99:31:36:36:55:81:aa:4f:16:86:83:aa: 35:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:48:1C:0F:6B:4D:1B:BF:F6:23:59:93:05:79:7F:97:70:86:D9:46 X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:d4:56:12:3e:6f:4b:73:4d:bd:45:89:5d:cb:e1:6d:27:34: 78:f0:f1:69:d6:be:d3:d4:82:2b:6b:83:30:64:3f:04:f6:b0: 0d:b9:f3:76:84:4a:09:99:e9:ed:7e:a8:a3:ce:f6:9f:1f:99: 38:fa:47:23:22:ef:ed:c1:40:52:bb:1c:bc:b6:9f:92:db:c1: 00:d6:82:79:c6:b1:8b:b4:f3:ef:f9:46:aa:4a:45:ff:6b:14: 99:99:54:3b:bc:59:19:1b:5f:a1:93:cc:9f:15:45:21:d1:6a: c6:02:4e:54:9b:f2:8a:49:a3:a0:5d:f4:a6:91:f2:36:3e:e0: 4c:1c:4e:8a:45:78:87:04:71:99:bd:05:71:2f:9a:39:0a:95: 8f:e4:f7:89:13:4a:f7:16:13:1a:50:17:5b:4e:b8:8d:a1:87: f0:49:15:4e:9a:7f:4b:77:33:4c:6c:fe:f7:89:94:66:f1:fd: 8b:1f:e1:8e:90:fa:1a:f9:99:b2:7b:7e:e8:11:5e:66:30:b4: ae:a9:52:b6:e4:3a:4f:e3:f2:0d:f4:07:7c:90:52:e1:ad:e0: 3b:1f:42:44:ea:e1:88:36:9a:84:eb:08:5c:13:08:24:f5:7a: cc:73:b8:82:d4:bf:ff:c6:27:57:fd:fe:f9:a6:d7:51:2e:11: bf:95:b1:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/WWZHj/K13iymxhbeXpoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjUxMjIwMDkwMDQzWhcNMjUxMjIxMDkwMDQzWjAzMTEwLwYDVQQD EyhjZTQ4MWMwZjZiNGQxYmJmZjYyMzU5OTMwNTc5N2Y5NzcwODZkOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD45g9NRGpV65rkYJ2RC0XvE+Bwd sg0IZkjrKu3Y/LD4cOS1ipFh/WegP6uAq2deaMLCSy9hvoo5LaeRy0eZLI/rxwrC q15kvola7CQ5E4ry54IuoYUMDMkgDxivKxsm66Cl7lUjn/6YpculpKVfWIDCnjD4 Q/Ngi81u297GWrXL/9Xc3HxznomTPiZxaFv8QdV47h4ivxQyrbBbN6brXbcV0Tu7 7LwjU3ftSkiUfE1SLB3I/yN4cVmtBEfEm86mUDX9IA6P3Tw8jdySvJPoggtzIa16 9HmyrRQQedi3yvghZN3NajwTm6yDlFrEdhiQC9GZMTY2VYGqTxaGg6o1/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5IHA9rTRu/9iNZkwV5f5dwhtlGMB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNRWEj5v S3NNvUWJXcvhbSc0ePDxada+09SCK2uDMGQ/BPawDbnzdoRKCZnp7X6oo872nx+Z OPpHIyLv7cFAUrscvLafktvBANaCecaxi7Tz7/lGqkpF/2sUmZlUO7xZGRtfoZPM nxVFIdFqxgJOVJvyikmjoF30ppHyNj7gTBxOikV4hwRxmb0FcS+aOQqVj+T3iRNK 9xYTGlAXW064jaGH8EkVTpp/S3czTGz+94mUZvH9ix/hjpD6GvmZsnt+6BFeZjC0 rqlStuQ6T+PyDfQHfJBS4a3gOx9CROrhiDaahOsIXBMIJPV6zHO4gtS//8YnV/3+ +abXUS4Rv5WxRA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:14:39 2025 by rpki-client