This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json) Hash identifier: DDxb8N38rT4FA0WsgZ/GFJTbLd4l/J04cebnP5kaoPs= Subject key identifier: 4D:AB:9F:7A:E2:7B:A5:33:23:93:A1:8D:15:E8:7F:8C:30:51:74:27 Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c Certificate serial: 019B32D716D73DD73110A5156F805C6B7323 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft Manifest number: 03CF Signing time: Thu 18 Dec 2025 19:01:55 +0000 Manifest this update: Thu 18 Dec 2025 19:01:55 +0000 Manifest next update: Fri 19 Dec 2025 19:01:55 +0000 Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: Li2VTPdhTY/W3Vo56R4Xg76Tec0wSi2ycpUuoyQC/Bs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:16:d7:3d:d7:31:10:a5:15:6f:80:5c:6b:73:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c Validity Not Before: Dec 18 19:01:55 2025 GMT Not After : Dec 19 19:01:55 2025 GMT Subject: CN=4dab9f7ae27ba5332393a18d15e87f8c30517427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e7:7a:77:b5:5b:eb:32:d2:bd:6e:42:6b:a7: ee:b6:2f:a3:77:ef:b3:16:5c:3e:aa:72:70:51:c6: 97:ce:25:21:7b:db:53:8e:0d:0a:cd:74:c9:cb:a5: e8:86:4c:f5:9a:23:7d:f1:52:4f:4b:7c:8d:35:44: fe:3f:c6:df:11:c4:32:23:b2:29:bc:f8:d3:1c:32: 70:86:83:d5:df:a4:8e:07:e8:20:7e:d1:52:e3:4a: 74:03:be:19:86:5a:c2:16:0d:b7:09:d9:75:b1:1c: f2:95:fa:04:15:60:3c:7b:2d:fb:44:4f:88:ce:bf: ab:6d:e1:f0:f9:18:51:fb:55:74:92:75:7e:1b:e5: 21:6c:34:e7:91:73:e9:f4:20:89:e4:be:56:e2:2b: 85:3c:93:bc:e6:32:c0:f5:10:b3:b5:c8:07:91:df: 13:3a:e4:36:c6:63:87:2e:5e:70:e4:50:30:ef:b3: 95:23:e6:42:d7:7d:da:79:b4:3a:e5:95:7c:c5:1f: 98:aa:10:ee:11:36:f0:8b:28:31:ca:02:ee:e5:81: 91:da:fe:8b:f3:93:d2:cd:da:23:fa:2c:3c:d0:ec: e3:83:e1:55:87:39:40:52:b9:56:78:a1:84:f5:c5: 2e:c4:77:29:50:b1:6e:ee:78:e9:e2:66:a7:24:23: 03:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:9F:7A:E2:7B:A5:33:23:93:A1:8D:15:E8:7F:8C:30:51:74:27 X509v3 Authority Key Identifier: keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:12:9c:0d:6a:e5:97:ae:d1:2d:96:eb:5c:91:34:ba:fd:ca: fb:58:56:ea:10:19:12:9c:76:08:f7:71:1d:48:d4:79:cb:5c: 2a:c2:ae:6e:4f:59:00:dc:54:69:c6:03:a9:6f:11:3d:53:60: 17:5f:f8:85:eb:28:74:11:b8:9a:ef:bd:da:b8:db:2e:c6:b8: 95:f2:01:c3:ca:d6:1d:86:02:db:40:0e:1e:df:ea:10:90:93: 0c:f9:6c:3e:a5:0e:a7:34:4a:d3:b6:13:28:dd:ed:38:81:33: 25:d1:ab:6a:b1:4c:2c:b7:7b:5a:85:65:f6:04:2b:f7:97:d4: 47:9b:51:5c:a1:3d:32:5d:92:08:c5:0c:95:ec:92:fa:c8:76: b4:6a:0f:d5:a7:48:ce:e7:5c:cc:d7:2d:44:d6:0e:d7:84:3c: 0b:9a:db:ce:36:ed:5d:cd:af:df:7d:3c:a6:92:46:2b:f9:2d: 35:f6:54:08:df:67:72:16:4e:08:b4:44:0f:b9:d8:1a:4b:79: f4:0b:42:e3:1b:7d:cd:23:a9:12:a7:5b:60:bf:5c:71:46:ac: 2a:f4:21:ac:f3:80:d3:3e:42:6d:5b:e2:8c:1a:d4:6c:17:97: 2c:d5:b0:d6:be:44:2a:0d:ba:31:1a:a1:2a:46:13:07:03:c5: 5a:49:10:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xbXPdcxEKUVb4Bca3MjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODBjOWQwOTI0NDcwZTFjMWUzMGJjNGVlZmYxOTkwOTBh NzAzNWMwHhcNMjUxMjE4MTkwMTU1WhcNMjUxMjE5MTkwMTU1WjAzMTEwLwYDVQQD Eyg0ZGFiOWY3YWUyN2JhNTMzMjM5M2ExOGQxNWU4N2Y4YzMwNTE3NDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiud6d7Vb6zLSvW5Ca6futi+jd++z Flw+qnJwUcaXziUhe9tTjg0KzXTJy6Xohkz1miN98VJPS3yNNUT+P8bfEcQyI7Ip vPjTHDJwhoPV36SOB+ggftFS40p0A74ZhlrCFg23Cdl1sRzylfoEFWA8ey37RE+I zr+rbeHw+RhR+1V0knV+G+UhbDTnkXPp9CCJ5L5W4iuFPJO85jLA9RCztcgHkd8T OuQ2xmOHLl5w5FAw77OVI+ZC133aebQ65ZV8xR+YqhDuETbwiygxygLu5YGR2v6L 85PSzdoj+iw80Ozjg+FVhzlAUrlWeKGE9cUuxHcpULFu7njp4manJCMDLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2rn3rie6UzI5OhjRXof4wwUXQnMB8GA1UdIwQY MBaAFFuAydCSRHDhweMLxO7/GZCQpwNcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yY2I3M2ItZGU2Ni00YjQxLWJmODMt ZjIxZjdlOGVhZDVjLzEvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yY2I3M2ItZGU2Ni00YjQxLWJmODMtZjIxZjdlOGVhZDVj LzEvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxKcDWrl l67RLZbrXJE0uv3K+1hW6hAZEpx2CPdxHUjUectcKsKubk9ZANxUacYDqW8RPVNg F1/4hesodBG4mu+92rjbLsa4lfIBw8rWHYYC20AOHt/qEJCTDPlsPqUOpzRK07YT KN3tOIEzJdGrarFMLLd7WoVl9gQr95fUR5tRXKE9Ml2SCMUMleyS+sh2tGoP1adI zudczNctRNYO14Q8C5rbzjbtXc2v3308ppJGK/ktNfZUCN9nchZOCLRED7nYGkt5 9AtC4xt9zSOpEqdbYL9ccUasKvQhrPOA0z5CbVvijBrUbBeXLNWw1r5EKg26MRqh KkYTBwPFWkkQjg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:21:11 2025 by rpki-client