This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft File: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft (raw, json) Hash identifier: e0MFfVLkroX5ergiQC6dulnhzSiMte15gl9WjCRek1s= Subject key identifier: F2:F2:E4:1E:46:93:47:30:D5:F0:41:B0:F1:54:6E:B9:C9:AA:D5:50 Authority key identifier: C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2 Certificate issuer: /CN=c086e72d6882aba20424c8c8277a7e23c0772cd2 Certificate serial: 019B59AC89BEA7F360ECEEA66B665889AC2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft Manifest number: 0131 Signing time: Fri 26 Dec 2025 08:00:38 +0000 Manifest this update: Fri 26 Dec 2025 08:00:38 +0000 Manifest next update: Sat 27 Dec 2025 08:00:38 +0000 Files and hashes: 1: HZihVFJ3txZ3OW6s1qo-blP1Efk.roa (hash: N+ZzWONseQF5HNODvYH9OIzGzY5Yo+h2JcqNwXkMfQE=) 2: wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl (hash: 7icUW9MZ6ZVyKZNPqVLNfd99fEuC5O5H24Dbe3TJiT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:89:be:a7:f3:60:ec:ee:a6:6b:66:58:89:ac:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c086e72d6882aba20424c8c8277a7e23c0772cd2 Validity Not Before: Dec 26 08:00:38 2025 GMT Not After : Dec 27 08:00:38 2025 GMT Subject: CN=f2f2e41e46934730d5f041b0f1546eb9c9aad550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:2c:e4:85:9d:96:1a:35:05:02:42:1c:36: b7:5d:5c:dd:85:cb:68:1f:0d:80:b4:58:9a:e4:2d: 95:68:eb:4c:5c:59:02:7b:2b:00:d8:40:af:2d:f1: 52:e2:13:38:6c:c2:a5:5d:d7:6a:59:eb:52:f5:50: 54:f8:74:2f:f6:88:95:3f:3b:21:58:ef:b0:96:24: 89:21:03:e0:a1:92:64:77:43:91:19:25:ed:65:ee: 43:f2:1c:44:f4:53:23:47:3c:db:d6:52:ab:43:cb: e0:af:fb:62:e3:ba:6e:b2:cd:4b:48:93:95:5a:49: 33:b5:7b:16:4d:1a:63:03:ee:bb:5c:66:aa:bb:f4: 20:94:c5:f5:71:71:dc:8c:12:81:83:2b:c7:91:1a: d9:c2:75:8d:98:13:5f:1d:14:a5:ee:54:60:ba:b7: 1b:5f:95:97:d3:c2:2e:ea:10:a8:f4:74:31:61:0d: 0b:c8:fa:5e:9f:f9:60:e8:8f:23:ac:28:e2:17:a8: 9e:03:91:3a:f8:48:c3:f3:24:f2:6c:c3:04:7f:aa: 70:50:87:a7:f4:27:df:70:a1:93:5b:fc:91:c8:16: 17:9b:da:68:b5:c8:29:5f:fe:bd:80:76:19:b1:02: 4d:8e:62:82:57:2a:67:1a:a2:2b:e9:e4:0f:d9:49: 68:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F2:E4:1E:46:93:47:30:D5:F0:41:B0:F1:54:6E:B9:C9:AA:D5:50 X509v3 Authority Key Identifier: keyid:C0:86:E7:2D:68:82:AB:A2:04:24:C8:C8:27:7A:7E:23:C0:77:2C:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5bec72-0f1e-4208-b124-ec578e1cceed/1/wIbnLWiCq6IEJMjIJ3p-I8B3LNI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:0b:1c:c9:dd:c2:4c:96:5d:82:01:ae:50:c7:b8:81:7b:d1: 97:e6:7b:b9:80:83:81:33:fd:a5:07:2a:c4:f6:48:e8:0d:3c: 3c:94:d0:ee:18:fb:5b:b1:24:a6:b8:5c:5b:e9:68:c0:a8:4b: c1:82:4c:af:db:4f:5b:55:79:65:bc:69:b2:08:b3:0a:2e:31: f1:59:5f:77:13:40:4d:07:82:98:e8:65:fb:5e:38:07:6f:de: a5:4a:81:b8:8e:92:b1:67:c2:df:5f:10:15:c6:f7:c7:87:04: a9:8f:e3:68:e7:e1:d2:ee:98:20:30:d5:87:e5:36:71:b9:33: 4f:d0:a9:26:27:30:c5:28:86:7a:8f:25:62:4c:64:3c:f0:d2: 4a:2f:39:43:a3:4c:03:a2:c9:09:48:b1:c3:76:d2:f3:a2:28: 12:e5:4c:4e:9f:37:d7:b0:58:c6:ce:cb:b0:6d:f3:46:72:c7: 57:54:5a:b5:67:76:44:2d:2c:d7:51:8c:7c:48:9e:12:42:da: c6:a1:23:61:f9:02:83:19:53:cc:b5:3f:64:a1:b0:7b:bb:2f: c8:0f:a1:82:1d:af:13:5b:c6:8c:be:36:e1:ba:53:c4:b5:93: dc:5a:3e:33:19:e5:03:83:f7:25:86:58:aa:4d:b0:56:6e:e4: 4e:e0:1c:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIm+p/Ng7O6ma2ZYiawsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODZlNzJkNjg4MmFiYTIwNDI0YzhjODI3N2E3ZTIzYzA3 NzJjZDIwHhcNMjUxMjI2MDgwMDM4WhcNMjUxMjI3MDgwMDM4WjAzMTEwLwYDVQQD EyhmMmYyZTQxZTQ2OTM0NzMwZDVmMDQxYjBmMTU0NmViOWM5YWFkNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFws5IWdlho1BQJCHDa3XVzdhcto Hw2AtFia5C2VaOtMXFkCeysA2ECvLfFS4hM4bMKlXddqWetS9VBU+HQv9oiVPzsh WO+wliSJIQPgoZJkd0ORGSXtZe5D8hxE9FMjRzzb1lKrQ8vgr/ti47puss1LSJOV WkkztXsWTRpjA+67XGaqu/QglMX1cXHcjBKBgyvHkRrZwnWNmBNfHRSl7lRgurcb X5WX08Iu6hCo9HQxYQ0LyPpen/lg6I8jrCjiF6ieA5E6+EjD8yTybMMEf6pwUIen 9CffcKGTW/yRyBYXm9potcgpX/69gHYZsQJNjmKCVypnGqIr6eQP2UlogQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPLy5B5Gk0cw1fBBsPFUbrnJqtVQMB8GA1UdIwQY MBaAFMCG5y1ogquiBCTIyCd6fiPAdyzSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQt ZWM1NzhlMWNjZWVkLzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS81YmVjNzItMGYxZS00MjA4LWIxMjQtZWM1NzhlMWNjZWVk LzEvd0libkxXaUNxNklFSk1qSUozcC1JOEIzTE5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Ascyd3C TJZdggGuUMe4gXvRl+Z7uYCDgTP9pQcqxPZI6A08PJTQ7hj7W7EkprhcW+lowKhL wYJMr9tPW1V5ZbxpsgizCi4x8VlfdxNATQeCmOhl+144B2/epUqBuI6SsWfC318Q Fcb3x4cEqY/jaOfh0u6YIDDVh+U2cbkzT9CpJicwxSiGeo8lYkxkPPDSSi85Q6NM A6LJCUixw3bS86IoEuVMTp8317BYxs7LsG3zRnLHV1RatWd2RC0s11GMfEieEkLa xqEjYfkCgxlTzLU/ZKGwe7svyA+hgh2vE1vGjL424bpTxLWT3Fo+MxnlA4P3JYZY qk2wVm7kTuAc5g== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:05 2025 by rpki-client