This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft File: wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json) Hash identifier: DJNKfzipEjcgPEceNJjo1ZYT7PWBf4kryWiaUdZnfYY= Subject key identifier: B6:0C:29:E9:3A:EE:36:C3:27:0E:29:B0:05:BF:FB:FB:17:6C:74:67 Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 Certificate issuer: /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Certificate serial: 019B04EA84B1A447E05CB628D3C6BB804AD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft Manifest number: 176C Signing time: Tue 09 Dec 2025 21:00:36 +0000 Manifest this update: Tue 09 Dec 2025 21:00:36 +0000 Manifest next update: Wed 10 Dec 2025 21:00:36 +0000 Files and hashes: 1: mOHhCAnpxR-dp3-6rcl-KfmxQF4.roa (hash: 3p2JZm+3j1SVt0MOxqOY+5HYmBdbi1aC8iIMBMpg4u0=) 2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: jBOxoYSqiIyO0nit7X52nPC0mJ2ro0U54K6tL0mOr14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:ea:84:b1:a4:47:e0:5c:b6:28:d3:c6:bb:80:4a:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89 Validity Not Before: Dec 9 21:00:36 2025 GMT Not After : Dec 10 21:00:36 2025 GMT Subject: CN=b60c29e93aee36c3270e29b005bffbfb176c7467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:e5:12:43:09:c4:94:d2:61:96:99:a5:2a: ee:af:62:d1:7d:2c:ce:e3:e3:38:7c:b9:79:ed:6d: 4c:34:8d:00:4c:3e:74:fc:5a:f1:30:25:d0:97:9d: c1:ac:1f:1a:67:1b:b1:01:cc:e5:79:00:d0:f6:e9: c8:d4:e0:d5:7c:a7:9d:83:71:09:5f:df:ac:d0:5c: 51:3b:ea:8a:e8:72:9c:4b:b1:87:d1:36:72:3c:61: cc:1d:be:81:3b:c3:f4:5c:2e:bb:53:b4:8f:5d:ca: e5:1f:56:31:ea:ae:28:7a:25:73:b6:d7:0e:63:71: 81:39:8c:6b:09:34:81:17:66:89:1e:14:79:f2:17: 11:eb:75:1b:5a:a1:61:54:7a:60:ad:91:38:b7:f4: 36:ac:5d:f3:af:93:bc:1b:0d:3c:2c:f2:f3:48:b8: 31:5b:e8:8e:13:b1:d0:5f:55:b5:c5:04:4f:1a:39: 07:81:1e:7b:7d:24:bc:1a:c4:7a:a2:a4:e3:95:2a: c1:f3:2b:31:5b:7e:8b:8d:0e:8d:db:45:e9:c6:f6: eb:7e:35:d0:ad:db:4c:73:5e:b3:ef:3a:38:20:0a: e0:a5:b9:fb:c7:86:9b:c4:56:c3:9e:b6:81:99:0f: dd:e9:f5:d9:f1:6c:f7:a1:65:b8:98:f4:30:54:d8: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0C:29:E9:3A:EE:36:C3:27:0E:29:B0:05:BF:FB:FB:17:6C:74:67 X509v3 Authority Key Identifier: keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:ee:03:db:d4:fd:06:53:4b:5e:6f:69:64:a5:0c:74:9c:8a: 6a:8d:25:84:14:51:05:8a:ba:65:a0:08:fa:bc:71:66:a1:a2: 93:13:43:01:26:5e:2a:52:8a:66:71:81:d6:00:c0:1a:27:b4: 95:f4:58:61:38:af:f6:fe:e5:1c:0d:80:c3:4a:e9:1b:0d:3a: e8:47:5f:8a:87:32:85:96:59:6c:df:e9:b2:31:1a:bc:50:63: 4a:6f:35:73:bc:a3:2e:47:91:9f:a2:ec:ed:3a:87:d9:fa:66: 0a:35:cd:23:50:40:e2:7f:02:c1:a5:62:34:21:c1:27:a4:3c: 42:59:4a:1f:26:06:c5:72:c3:fe:b1:8c:cb:02:7c:18:de:2a: a3:63:86:7f:58:e9:86:77:be:a9:3f:b6:28:82:69:ee:75:be: 44:3d:17:ff:a8:3c:b1:81:d8:6f:11:be:e1:ce:ff:aa:19:dc: 66:00:28:bd:05:14:df:37:75:9a:89:0f:b3:9a:2d:4d:92:66: 90:00:b5:fd:cb:2a:e8:8e:16:cd:d5:90:06:97:3d:51:bc:c4: 05:32:6a:11:50:c1:c1:05:cb:85:bd:8b:ad:13:ca:0e:d2:a8: 85:24:7c:cf:a0:90:5c:f5:c0:d6:e0:ee:80:91:e0:1b:dc:00: 7a:de:08:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsE6oSxpEfgXLYo08a7gErWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTZkMjVmMWZkZDAwZGM4MGRkNmQyMjViMjExMTliZjIx MjFlODkwHhcNMjUxMjA5MjEwMDM2WhcNMjUxMjEwMjEwMDM2WjAzMTEwLwYDVQQD EyhiNjBjMjllOTNhZWUzNmMzMjcwZTI5YjAwNWJmZmJmYjE3NmM3NDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr7lEkMJxJTSYZaZpSrur2LRfSzO 4+M4fLl57W1MNI0ATD50/FrxMCXQl53BrB8aZxuxAczleQDQ9unI1ODVfKedg3EJ X9+s0FxRO+qK6HKcS7GH0TZyPGHMHb6BO8P0XC67U7SPXcrlH1Yx6q4oeiVzttcO Y3GBOYxrCTSBF2aJHhR58hcR63UbWqFhVHpgrZE4t/Q2rF3zr5O8Gw08LPLzSLgx W+iOE7HQX1W1xQRPGjkHgR57fSS8GsR6oqTjlSrB8ysxW36LjQ6N20XpxvbrfjXQ rdtMc16z7zo4IArgpbn7x4abxFbDnraBmQ/d6fXZ8Wz3oWW4mPQwVNiydwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLYMKek67jbDJw4psAW/+/sXbHRnMB8GA1UdIwQY MBaAFMJW0l8f3QDcgN1tIlshEZvyEh6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMt Y2YzMmEwZDkyODI1LzEvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lNWE4MTQtMTZhNS00MDNiLTkzZjMtY2YzMmEwZDkyODI1 LzEvd2xiU1h4X2RBTnlBM1cwaVd5RVJtX0lTSG9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFO4D29T9 BlNLXm9pZKUMdJyKao0lhBRRBYq6ZaAI+rxxZqGikxNDASZeKlKKZnGB1gDAGie0 lfRYYTiv9v7lHA2Aw0rpGw066EdfiocyhZZZbN/psjEavFBjSm81c7yjLkeRn6Ls 7TqH2fpmCjXNI1BA4n8CwaViNCHBJ6Q8QllKHyYGxXLD/rGMywJ8GN4qo2OGf1jp hne+qT+2KIJp7nW+RD0X/6g8sYHYbxG+4c7/qhncZgAovQUU3zd1mokPs5otTZJm kAC1/csq6I4WzdWQBpc9UbzEBTJqEVDBwQXLhb2LrRPKDtKohSR8z6CQXPXA1uDu gJHgG9wAet4IRA== -----END CERTIFICATE-----Generated at Wed Dec 10 06:16:21 2025 by rpki-client