This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft File: wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json) Hash identifier: YFeqA0BQIGPHnz8fNm41cWmyv2qCc0Q/NSKZ4Wud4Yg= Subject key identifier: B8:1B:93:1A:07:50:F6:AC:D0:4A:88:71:FD:95:B2:EA:33:80:F3:F5 Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC Certificate issuer: /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc Certificate serial: 019B5C0918762FA936E0EFB9813689A6B94A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft Manifest number: 0B09 Signing time: Fri 26 Dec 2025 19:00:58 +0000 Manifest this update: Fri 26 Dec 2025 19:00:58 +0000 Manifest next update: Sat 27 Dec 2025 19:00:58 +0000 Files and hashes: 1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: IIXcw5+E+YmFOlftR101aYy/uZKmcS+uEOc4hRVQ3RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:18:76:2f:a9:36:e0:ef:b9:81:36:89:a6:b9:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc Validity Not Before: Dec 26 19:00:58 2025 GMT Not After : Dec 27 19:00:58 2025 GMT Subject: CN=b81b931a0750f6acd04a8871fd95b2ea3380f3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d2:d0:43:ec:d6:1e:06:49:0a:8c:95:05:e1: 05:b2:42:c2:68:e6:d4:2a:8f:fa:76:40:3d:58:9a: 01:db:d8:36:d2:50:5a:10:ed:da:e2:3a:cd:bc:f4: 44:40:7c:82:88:0c:6f:1b:6e:a4:a0:8e:8b:0b:a6: d6:3c:3d:2f:42:fb:da:ab:18:fc:2c:b4:ab:bc:74: 27:be:0b:a2:6f:8d:d0:c8:1b:5d:0f:1d:5e:87:e9: ef:b4:6d:e0:4d:81:55:e1:72:0f:53:cb:e2:d0:08: de:99:c1:8e:a8:c2:d3:5d:a9:78:8c:ab:01:f3:eb: 17:5a:53:da:1d:a6:c4:f6:9d:65:7a:d3:18:b5:5f: d1:59:f8:d1:d9:f3:da:b6:80:77:75:5b:6d:9e:de: d3:92:da:d7:23:7c:ae:18:1f:a6:d6:c4:01:44:c1: e0:26:fa:e3:2e:ad:6e:90:df:63:bf:9c:41:e3:91: d9:6f:1d:ef:f9:46:92:77:a7:78:40:2c:3a:45:be: 3e:bc:28:f4:9b:b4:00:49:de:56:56:7d:d6:73:7f: 16:3f:37:74:5f:41:e2:fd:97:6e:3e:39:0a:32:b1: 12:45:10:a3:52:fa:ab:29:14:74:17:29:78:9f:d2: 3d:69:b4:86:73:a0:10:96:55:d0:92:55:57:50:02: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1B:93:1A:07:50:F6:AC:D0:4A:88:71:FD:95:B2:EA:33:80:F3:F5 X509v3 Authority Key Identifier: keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1b:a7:cc:a6:66:1d:a1:3a:90:41:a8:e1:2e:3b:64:b1:cf: ab:27:c1:b7:0e:f3:af:6f:e7:a7:8d:c4:a2:0b:32:bc:62:70: 28:a8:e5:5a:8d:a8:7f:2a:30:7e:44:40:ae:45:97:e9:30:e0: 84:f9:dd:15:92:6f:d7:cf:2a:d2:fa:12:06:29:82:46:1f:47: 7a:24:01:4f:3e:bc:ea:4d:a8:c1:f4:bb:64:52:7a:54:a8:06: 1e:88:1e:16:cc:cd:63:a0:99:c2:24:55:87:6e:0f:97:ec:ba: 15:2c:ee:6b:33:22:b4:a9:6f:fb:64:bf:cc:d9:fd:46:81:15: 5a:e6:05:6a:2d:70:2c:e7:53:dc:3f:25:03:f7:21:13:fe:a1: 4c:12:f9:a9:92:05:c7:5b:a2:0c:6d:63:63:79:a3:e8:81:54: de:39:31:12:32:05:26:2e:95:25:59:41:64:aa:83:b4:b1:a3: b6:32:7f:63:69:67:04:ce:ea:0e:f4:46:94:a3:3c:03:12:04: d8:b3:99:a5:bd:09:7d:98:ac:e4:d2:af:da:0e:97:24:54:20: f4:9c:8b:98:23:92:6d:6a:32:02:ec:e5:ab:4f:9a:df:23:24: d9:d2:98:92:4d:d8:29:29:6e:71:cf:79:9a:59:74:07:ea:40: 78:79:42:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCRh2L6k24O+5gTaJprlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYTliMjBmNmI5YjgyNTkzZWMwN2UwY2I4YmI4NzBjZTEx ODY1ZGMwHhcNMjUxMjI2MTkwMDU4WhcNMjUxMjI3MTkwMDU4WjAzMTEwLwYDVQQD EyhiODFiOTMxYTA3NTBmNmFjZDA0YTg4NzFmZDk1YjJlYTMzODBmM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9LQQ+zWHgZJCoyVBeEFskLCaObU Ko/6dkA9WJoB29g20lBaEO3a4jrNvPREQHyCiAxvG26koI6LC6bWPD0vQvvaqxj8 LLSrvHQnvguib43QyBtdDx1eh+nvtG3gTYFV4XIPU8vi0AjemcGOqMLTXal4jKsB 8+sXWlPaHabE9p1letMYtV/RWfjR2fPatoB3dVttnt7TktrXI3yuGB+m1sQBRMHg JvrjLq1ukN9jv5xB45HZbx3v+UaSd6d4QCw6Rb4+vCj0m7QASd5WVn3Wc38WPzd0 X0Hi/ZduPjkKMrESRRCjUvqrKRR0Fyl4n9I9abSGc6AQllXQklVXUAIkWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgbkxoHUPas0EqIcf2VsuozgPP1MB8GA1UdIwQY MBaAFMCpsg9rm4JZPsB+DLi7hwzhGGXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEt YjFhMWVkZGE3N2NkLzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9iNGNkNmUtM2U4Yy00NDAyLWIyYzEtYjFhMWVkZGE3N2Nk LzEvd0tteUQydWJnbGstd0g0TXVMdUhET0VZWmR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALBunzKZm HaE6kEGo4S47ZLHPqyfBtw7zr2/np43EogsyvGJwKKjlWo2ofyowfkRArkWX6TDg hPndFZJv188q0voSBimCRh9HeiQBTz686k2owfS7ZFJ6VKgGHogeFszNY6CZwiRV h24Pl+y6FSzuazMitKlv+2S/zNn9RoEVWuYFai1wLOdT3D8lA/chE/6hTBL5qZIF x1uiDG1jY3mj6IFU3jkxEjIFJi6VJVlBZKqDtLGjtjJ/Y2lnBM7qDvRGlKM8AxIE 2LOZpb0JfZis5NKv2g6XJFQg9JyLmCOSbWoyAuzlq0+a3yMk2dKYkk3YKSlucc95 mll0B+pAeHlCsw== -----END CERTIFICATE-----Generated at Sat Dec 27 02:36:12 2025 by rpki-client