This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft File: wbsILYb1B7_635GSqmdqt9onDUI.mft (raw, json) Hash identifier: TpI4ud9jp2RAHaUqHE+jDAvn0WCS2HOsZSfIzAluP+A= Subject key identifier: D4:D1:A7:FB:3A:4F:11:A6:ED:12:DC:BD:93:D5:10:4D:C3:90:4D:8A Authority key identifier: C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42 Certificate issuer: /CN=c1bb082d86f507bffadf9192aa676ab7da270d42 Certificate serial: 019B26D1E91FE8791E1BFD3DE01E4C08005E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft Manifest number: 177A Signing time: Tue 16 Dec 2025 11:00:49 +0000 Manifest this update: Tue 16 Dec 2025 11:00:49 +0000 Manifest next update: Wed 17 Dec 2025 11:00:49 +0000 Files and hashes: 1: oQclDl8_JxNhzqNyrIJDWCORZJA.roa (hash: JcEUx0LCrdDEqt2JdZzmeRRb5CPjlWwu7xHPm1S7f5w=) 2: wbsILYb1B7_635GSqmdqt9onDUI.crl (hash: ktOQLFiCj63JkgrQjCwLJNEmIbqbY/dI7wrPP6oeNvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d1:e9:1f:e8:79:1e:1b:fd:3d:e0:1e:4c:08:00:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bb082d86f507bffadf9192aa676ab7da270d42 Validity Not Before: Dec 16 11:00:49 2025 GMT Not After : Dec 17 11:00:49 2025 GMT Subject: CN=d4d1a7fb3a4f11a6ed12dcbd93d5104dc3904d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6f:42:3d:9c:6d:fd:30:bb:47:04:15:eb:7c: b0:95:3b:1f:28:ca:23:5c:d5:92:02:c1:31:97:2b: fd:de:a4:a3:94:de:c2:81:6e:3b:65:df:bc:19:de: b9:ce:ad:85:0a:f2:70:12:9f:9b:a9:94:9f:4e:6b: 72:44:f6:3f:30:9f:14:2b:05:17:aa:d2:dc:0f:f0: 90:8b:a6:98:80:c7:66:50:62:d6:c8:77:11:b6:df: fc:9a:ba:69:39:07:dd:1b:f2:fa:05:c6:7f:92:a3: ec:ab:e9:04:fa:25:57:34:3e:33:56:3a:bc:ef:1b: 8c:49:7e:5f:bf:94:a9:7d:5f:62:68:9f:ca:81:9b: 94:bb:24:a4:85:7b:64:04:f7:bf:98:95:27:f4:9f: 79:82:13:4f:b4:e6:16:0b:3f:02:08:99:f1:01:86: 85:8e:eb:06:16:8c:8c:c2:11:84:d7:0f:da:18:47: 48:3c:d3:cd:03:a9:ee:3c:e2:6c:98:ae:01:3f:3d: 0d:8c:01:b9:da:79:53:cb:20:01:ec:d5:9d:9e:c5: 92:93:bf:c2:37:c7:90:3e:db:9a:b9:6a:e4:33:c0: bf:1e:9e:63:07:03:c6:65:ab:2b:34:fe:9c:6f:99: fd:25:d2:75:77:3d:77:bd:14:c3:d9:f6:32:b7:e9: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:D1:A7:FB:3A:4F:11:A6:ED:12:DC:BD:93:D5:10:4D:C3:90:4D:8A X509v3 Authority Key Identifier: keyid:C1:BB:08:2D:86:F5:07:BF:FA:DF:91:92:AA:67:6A:B7:DA:27:0D:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbsILYb1B7_635GSqmdqt9onDUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/ae40f1-4afd-439d-86c2-e87c9f4ba97d/1/wbsILYb1B7_635GSqmdqt9onDUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:94:3f:a8:82:3e:f5:69:49:09:c4:50:d2:97:da:09:a0:8d: 86:e1:b4:e7:9d:72:41:a5:60:fe:8b:d8:4e:0b:34:50:b5:f5: ca:9e:2b:58:bd:32:21:93:ee:1a:7c:94:f2:3a:07:76:cc:08: 14:c7:f4:ff:9e:03:c3:5d:4c:3e:e8:6a:eb:b4:5f:e0:77:c5: f1:f2:f8:79:8b:8c:d1:ad:10:a5:da:d8:a1:e8:49:a6:5d:46: 30:9d:42:72:6f:f8:2b:a7:9d:f5:26:28:e9:16:37:d0:75:75: ca:22:53:10:b2:eb:b9:30:7f:d4:e9:fc:ad:27:96:82:f9:e2: 16:88:8a:80:5c:96:0d:a4:27:96:69:23:26:fb:ef:68:f4:41: 98:e6:57:8c:a8:75:02:80:15:45:23:85:b2:b6:7a:49:84:4c: 03:95:ce:f2:e1:19:5c:c9:39:9a:3e:83:ca:da:36:76:23:9a: 0a:e8:46:74:43:7d:5b:6e:89:b9:8c:32:8f:19:50:fe:4c:a1: 0b:d8:63:54:cc:41:55:1b:e5:4d:c2:e0:2a:f4:ed:c7:6f:dc: c0:22:9e:4a:b1:87:79:ae:c6:e8:0c:55:99:f9:f4:ac:88:1a: 71:d9:02:f2:4e:d5:99:1b:cd:c3:0e:5e:e4:58:6c:05:84:ff: 7f:74:d9:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0ekf6HkeG/094B5MCABeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmIwODJkODZmNTA3YmZmYWRmOTE5MmFhNjc2YWI3ZGEy NzBkNDIwHhcNMjUxMjE2MTEwMDQ5WhcNMjUxMjE3MTEwMDQ5WjAzMTEwLwYDVQQD EyhkNGQxYTdmYjNhNGYxMWE2ZWQxMmRjYmQ5M2Q1MTA0ZGMzOTA0ZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoW9CPZxt/TC7RwQV63ywlTsfKMoj XNWSAsExlyv93qSjlN7CgW47Zd+8Gd65zq2FCvJwEp+bqZSfTmtyRPY/MJ8UKwUX qtLcD/CQi6aYgMdmUGLWyHcRtt/8mrppOQfdG/L6BcZ/kqPsq+kE+iVXND4zVjq8 7xuMSX5fv5SpfV9iaJ/KgZuUuySkhXtkBPe/mJUn9J95ghNPtOYWCz8CCJnxAYaF jusGFoyMwhGE1w/aGEdIPNPNA6nuPOJsmK4BPz0NjAG52nlTyyAB7NWdnsWSk7/C N8eQPtuauWrkM8C/Hp5jBwPGZasrNP6cb5n9JdJ1dz13vRTD2fYyt+lvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTRp/s6TxGm7RLcvZPVEE3DkE2KMB8GA1UdIwQY MBaAFMG7CC2G9Qe/+t+RkqpnarfaJw1CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzIt ZTg3YzlmNGJhOTdkLzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9hZTQwZjEtNGFmZC00MzlkLTg2YzItZTg3YzlmNGJhOTdk LzEvd2JzSUxZYjFCN182MzVHU3FtZHF0OW9uRFVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5Q/qII+ 9WlJCcRQ0pfaCaCNhuG0551yQaVg/ovYTgs0ULX1yp4rWL0yIZPuGnyU8joHdswI FMf0/54Dw11MPuhq67Rf4HfF8fL4eYuM0a0QpdrYoehJpl1GMJ1Ccm/4K6ed9SYo 6RY30HV1yiJTELLruTB/1On8rSeWgvniFoiKgFyWDaQnlmkjJvvvaPRBmOZXjKh1 AoAVRSOFsrZ6SYRMA5XO8uEZXMk5mj6Dyto2diOaCuhGdEN9W26JuYwyjxlQ/kyh C9hjVMxBVRvlTcLgKvTtx2/cwCKeSrGHea7G6AxVmfn0rIgacdkC8k7VmRvNww5e 5FhsBYT/f3TZPw== -----END CERTIFICATE-----Generated at Tue Dec 16 18:56:51 2025 by rpki-client