This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft File: wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json) Hash identifier: GAP9gqDurkrS+7d5jZMF11RFWo7tCJ4pcTKb+ptFvfo= Subject key identifier: AB:1A:D0:2F:6F:CE:7B:88:79:EE:94:0D:DF:B8:67:82:7E:25:0F:93 Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 Certificate issuer: /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Certificate serial: 019B300BC5A05BD0C3157BEDB7B12164D225 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft Manifest number: 072D Signing time: Thu 18 Dec 2025 06:00:36 +0000 Manifest this update: Thu 18 Dec 2025 06:00:36 +0000 Manifest next update: Fri 19 Dec 2025 06:00:36 +0000 Files and hashes: 1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=) 2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: q5Q1ivUOW+ym9pcRDKWv7ip6zvScED+rH9O5iXiSlFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0b:c5:a0:5b:d0:c3:15:7b:ed:b7:b1:21:64:d2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08 Validity Not Before: Dec 18 06:00:36 2025 GMT Not After : Dec 19 06:00:36 2025 GMT Subject: CN=ab1ad02f6fce7b8879ee940ddfb867827e250f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:1b:38:a3:0d:a6:2f:b1:60:74:84:12:9a: 17:af:c0:39:4a:f4:d2:fc:4e:f4:57:08:54:a8:5b: 66:33:c7:3b:e9:bd:21:0e:df:1e:86:56:4c:f6:82: 7f:50:2e:69:c2:68:57:3f:6e:21:a7:20:1a:37:76: 83:98:8c:84:3c:1c:26:6d:c5:fb:86:72:35:0f:12: 82:2b:95:30:34:71:4d:5c:5c:c1:cd:dc:f1:b3:90: dc:76:01:25:5a:7e:b7:d8:6a:b1:d9:61:d2:f0:5d: 17:1b:da:7e:f0:1c:32:68:88:93:85:03:28:a3:44: 71:f8:1d:87:46:7f:30:2c:ea:d2:d3:f2:ca:f2:45: 84:57:14:d4:e9:30:9b:8a:ae:dc:e7:51:e2:47:60: 04:0e:3c:20:d8:26:b0:76:97:24:27:ff:5b:79:82: 70:c1:a2:af:3a:78:0b:56:f7:7d:a3:5b:2a:33:10: 64:bc:9b:04:5a:a8:da:a2:17:de:33:72:42:84:8e: eb:b8:c6:a7:3c:cf:f8:2a:05:33:28:a7:f2:02:74: d7:aa:17:08:27:ed:a5:91:2f:09:40:f1:3d:ce:be: 9e:85:e8:39:3e:88:57:41:63:74:fc:c4:42:82:46: 97:df:f9:5e:f5:87:3f:89:54:78:3e:12:47:4b:a8: b9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:D0:2F:6F:CE:7B:88:79:EE:94:0D:DF:B8:67:82:7E:25:0F:93 X509v3 Authority Key Identifier: keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:81:1e:a1:05:05:13:a0:5b:f3:38:fd:6a:fb:bc:df:14:4c: 0d:2e:d2:66:b9:96:c3:3e:a9:97:07:89:c9:85:07:bd:51:11: e4:a4:bd:cf:9d:c6:94:d4:a3:83:2b:da:23:51:7d:14:98:05: 9a:84:c0:e0:1d:54:8b:f7:d8:4f:d4:f5:b3:c0:d4:6d:5e:ba: 96:36:7a:41:b2:4c:6a:fb:db:cb:68:d4:a8:6e:ea:00:e5:82: 45:b9:7e:61:74:d0:8e:7b:75:56:86:b7:95:c9:7c:8a:4b:2f: f1:ab:05:47:f9:4e:f4:f3:42:8e:0f:35:63:75:b1:88:9a:60: 25:7f:b2:d2:d9:72:67:d8:6e:1d:1f:e0:f9:7e:3e:05:e4:f6: 2d:57:89:3f:25:0d:bc:37:81:0c:02:5b:a5:60:c9:1d:ed:83: 72:f5:26:e1:f7:d7:88:98:ea:7f:4e:8f:45:8c:59:92:2f:80: 39:2f:98:0a:f8:7f:20:7c:c3:4e:51:55:0e:4f:c2:1c:7e:1b: cd:05:d6:ba:c5:39:e6:fe:63:0a:52:a6:62:9e:e4:18:95:2a: 44:97:a8:9a:43:c3:aa:16:f4:0d:7a:e1:2e:63:a2:a2:98:26: 2e:0a:83:c7:78:f4:28:1b:04:41:43:bb:8e:e6:a3:de:2d:94: 4c:67:c7:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswC8WgW9DDFXvtt7EhZNIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTk1YjZjOGFlODZjZjkwNjlhYmEzZWJhNmRkZjJhNjgy MzdmMDgwHhcNMjUxMjE4MDYwMDM2WhcNMjUxMjE5MDYwMDM2WjAzMTEwLwYDVQQD EyhhYjFhZDAyZjZmY2U3Yjg4NzllZTk0MGRkZmI4Njc4MjdlMjUwZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnIbOKMNpi+xYHSEEpoXr8A5SvTS /E70VwhUqFtmM8c76b0hDt8ehlZM9oJ/UC5pwmhXP24hpyAaN3aDmIyEPBwmbcX7 hnI1DxKCK5UwNHFNXFzBzdzxs5DcdgElWn632Gqx2WHS8F0XG9p+8BwyaIiThQMo o0Rx+B2HRn8wLOrS0/LK8kWEVxTU6TCbiq7c51HiR2AEDjwg2CawdpckJ/9beYJw waKvOngLVvd9o1sqMxBkvJsEWqjaohfeM3JChI7ruManPM/4KgUzKKfyAnTXqhcI J+2lkS8JQPE9zr6eheg5PohXQWN0/MRCgkaX3/le9Yc/iVR4PhJHS6i5jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsa0C9vznuIee6UDd+4Z4J+JQ+TMB8GA1UdIwQY MBaAFMBZW2yK6Gz5Bpq6Prpt3ypoI38IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAt MTkxYjJhZTNmYTVhLzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWJmYjUtMTYyZC00YzdlLWI3MDAtMTkxYjJhZTNmYTVh LzEvd0ZsYmJJcm9iUGtHbXJvLXVtM2ZLbWdqZndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYIEeoQUF E6Bb8zj9avu83xRMDS7SZrmWwz6plweJyYUHvVER5KS9z53GlNSjgyvaI1F9FJgF moTA4B1Ui/fYT9T1s8DUbV66ljZ6QbJMavvby2jUqG7qAOWCRbl+YXTQjnt1Voa3 lcl8iksv8asFR/lO9PNCjg81Y3WxiJpgJX+y0tlyZ9huHR/g+X4+BeT2LVeJPyUN vDeBDAJbpWDJHe2DcvUm4ffXiJjqf06PRYxZki+AOS+YCvh/IHzDTlFVDk/CHH4b zQXWusU55v5jClKmYp7kGJUqRJeomkPDqhb0DXrhLmOiopgmLgqDx3j0KBsEQUO7 juaj3i2UTGfHBQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:25:25 2025 by rpki-client