This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json) Hash identifier: 0wR8Jm8NpjJniW7O2NzLpjYv3owf4zFJ05UpoJE6XyA= Subject key identifier: 9A:2D:18:FA:BA:01:26:E2:8E:6C:C2:C3:25:3B:F0:ED:0C:4A:77:BD Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d Certificate serial: 019B443898846C9689A4B1AD8BC55D985158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 04:01:58 +0000 Manifest this update: Mon 22 Dec 2025 04:01:58 +0000 Manifest next update: Tue 23 Dec 2025 04:01:58 +0000 Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: xK/oBGhm3ppMPLpNuz2o6D7BGlvV4j114CZJWBA2a14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:98:84:6c:96:89:a4:b1:ad:8b:c5:5d:98:51:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d Validity Not Before: Dec 22 04:01:58 2025 GMT Not After : Dec 23 04:01:58 2025 GMT Subject: CN=9a2d18faba0126e28e6cc2c3253bf0ed0c4a77bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c6:30:bf:37:15:4a:aa:38:3b:47:32:03:69: 5b:08:64:70:4f:80:7c:da:7e:e0:6e:0e:9e:52:24: 7d:e9:99:44:11:73:ca:96:25:d9:66:d0:0a:7e:de: f4:11:59:e8:df:93:70:79:45:01:46:85:3e:5d:38: eb:0a:d2:4b:d2:65:3c:d5:3e:82:d0:9b:6d:98:3f: 3e:cc:1b:d6:b0:5c:24:98:fe:5d:a2:9b:7d:be:40: 24:34:21:bd:e4:4e:42:15:14:a7:51:2b:c1:7c:2d: bf:f5:6d:5a:8c:d4:7e:86:aa:08:ba:fa:8e:55:a5: 6a:b2:35:b6:a0:99:26:d3:4b:e8:47:6e:1d:19:f5: f4:80:56:55:bb:fb:58:13:46:dd:4e:0b:69:0f:81: d3:ab:10:be:f8:65:4b:dc:97:7d:04:f4:03:4f:d3: 31:be:37:44:8d:a9:92:55:eb:7e:c5:7e:13:bf:55: e2:99:62:c3:d1:5d:7e:36:86:ad:34:c6:82:1c:8f: f9:10:11:30:46:5c:49:15:4d:e4:a7:7e:5e:0d:ea: 0f:9c:47:33:f6:fe:4e:d3:31:80:19:14:06:e8:eb: 9d:d3:c0:84:f0:f6:a2:ce:e2:93:29:19:03:82:70: 28:cb:24:70:02:bf:5f:95:08:1a:c3:75:50:2a:d5: 89:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2D:18:FA:BA:01:26:E2:8E:6C:C2:C3:25:3B:F0:ED:0C:4A:77:BD X509v3 Authority Key Identifier: keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:94:0b:36:27:bc:4b:91:73:05:b3:43:43:c6:f1:6c:5b:ba: 69:bf:ca:38:cc:f3:2f:16:84:23:d3:c2:74:37:dd:b5:c6:66: 1c:41:78:55:9b:7a:b2:2c:ab:74:f3:79:e9:c9:c0:a8:ee:09: 21:08:a8:74:0f:a7:a0:25:8c:be:e7:6e:45:01:a6:f6:22:b8: 9a:9a:fe:91:1b:66:2e:44:58:49:24:94:7b:5f:70:70:b1:f5: f9:87:69:c6:f9:6f:39:3e:c1:df:29:4c:51:d4:88:6b:28:25: 58:c7:01:12:2c:ad:5a:27:0a:3e:c4:bb:57:94:cb:f7:04:c8: 1a:4a:dc:db:86:5f:74:fc:35:cf:5d:2e:23:ec:cb:7f:4f:ca: ba:ca:26:f3:2c:b1:a3:59:ac:e9:c9:01:f9:f0:f0:dd:28:4a: 76:18:95:06:5e:f4:c4:cc:92:de:8a:54:63:8b:85:f3:7f:2d: 67:7b:74:59:54:17:67:1f:d2:0c:3f:26:c0:55:a2:f0:58:a6: fb:95:5c:7b:26:9a:10:29:01:d0:f3:76:a2:6f:08:56:31:6e: ce:c6:44:ea:a8:0a:a2:56:ec:1c:5a:d6:b4:32:0a:3a:0b:9e: 4a:b9:17:a2:49:39:25:fa:df:16:cc:32:2a:37:b8:95:7b:59: c5:7e:25:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOJiEbJaJpLGti8VdmFFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYmQ2OWQ5OTg0ODRjMTM5ZmFjMTI2NWE2NDU3NDVmMzMz M2NmMWQwHhcNMjUxMjIyMDQwMTU4WhcNMjUxMjIzMDQwMTU4WjAzMTEwLwYDVQQD Eyg5YTJkMThmYWJhMDEyNmUyOGU2Y2MyYzMyNTNiZjBlZDBjNGE3N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18YwvzcVSqo4O0cyA2lbCGRwT4B8 2n7gbg6eUiR96ZlEEXPKliXZZtAKft70EVno35NweUUBRoU+XTjrCtJL0mU81T6C 0JttmD8+zBvWsFwkmP5dopt9vkAkNCG95E5CFRSnUSvBfC2/9W1ajNR+hqoIuvqO VaVqsjW2oJkm00voR24dGfX0gFZVu/tYE0bdTgtpD4HTqxC++GVL3Jd9BPQDT9Mx vjdEjamSVet+xX4Tv1XimWLD0V1+NoatNMaCHI/5EBEwRlxJFU3kp35eDeoPnEcz 9v5O0zGAGRQG6Oud08CE8PaizuKTKRkDgnAoyyRwAr9flQgaw3VQKtWJ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJotGPq6ASbijmzCwyU78O0MSne9MB8GA1UdIwQY MBaAFFu9admYSEwTn6wSZaZFdF8zM88dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAt Y2ZhOTczODRiYzlhLzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAtY2ZhOTczODRiYzlh LzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmpQLNie8 S5FzBbNDQ8bxbFu6ab/KOMzzLxaEI9PCdDfdtcZmHEF4VZt6siyrdPN56cnAqO4J IQiodA+noCWMvuduRQGm9iK4mpr+kRtmLkRYSSSUe19wcLH1+YdpxvlvOT7B3ylM UdSIayglWMcBEiytWicKPsS7V5TL9wTIGkrc24ZfdPw1z10uI+zLf0/Kusom8yyx o1ms6ckB+fDw3ShKdhiVBl70xMyS3opUY4uF838tZ3t0WVQXZx/SDD8mwFWi8Fim +5VceyaaECkB0PN2om8IVjFuzsZE6qgKolbsHFrWtDIKOgueSrkXokk5JfrfFswy Kje4lXtZxX4lLA== -----END CERTIFICATE-----Generated at Mon Dec 22 12:14:22 2025 by rpki-client