This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft File: wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json) Hash identifier: MjV1igEZWz8grrgf/eCuhK35uYnhKk3jGbI1P5GrPxY= Subject key identifier: B8:E5:B5:D9:DF:82:C5:7D:2D:F2:0D:07:E4:39:A3:17:24:AD:DC:18 Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D Certificate issuer: /CN=c12c072c35909d525322b027586bacfad119f17d Certificate serial: 019B465D28C9B1B0D96866D246A4B5B2A22A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft Manifest number: 05AF Signing time: Mon 22 Dec 2025 14:01:08 +0000 Manifest this update: Mon 22 Dec 2025 14:01:08 +0000 Manifest next update: Tue 23 Dec 2025 14:01:08 +0000 Files and hashes: 1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: 0vbOGPdxPmSCMW96m8/KAIhyBQgPyUjvf3zxWiB9wl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:28:c9:b1:b0:d9:68:66:d2:46:a4:b5:b2:a2:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12c072c35909d525322b027586bacfad119f17d Validity Not Before: Dec 22 14:01:08 2025 GMT Not After : Dec 23 14:01:08 2025 GMT Subject: CN=b8e5b5d9df82c57d2df20d07e439a31724addc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:a4:0d:e8:c9:98:32:1b:e3:98:0a:fa:df: 19:cd:a2:70:d7:01:e4:8b:d0:ac:a2:65:a4:0d:88: ce:81:44:8a:d3:a3:f4:65:99:1a:34:b9:5f:b9:6b: 4c:56:d8:da:9e:65:c4:1f:18:dd:f9:e5:a1:39:75: cf:bd:45:17:16:1d:7a:58:68:7f:8c:c4:65:2f:06: d2:5e:89:27:f2:26:1b:d9:6c:96:14:7a:97:a2:88: 3d:36:6e:bf:ad:1a:c6:a7:d9:19:6c:51:ae:09:40: 59:a3:2a:a9:c3:83:90:32:1c:c5:34:09:bf:b5:7d: 38:ef:2e:fd:4b:cd:57:9d:d1:9a:bc:8b:db:ea:55: 60:2a:6c:bd:48:68:76:dd:93:26:dc:4a:5e:e8:8b: ea:d2:39:03:e1:44:d4:4e:ca:92:ec:a1:d4:fb:10: 41:d1:b1:3d:86:13:cd:b6:f0:8d:66:7d:12:03:ca: b0:9a:86:fd:a9:dd:42:2c:d0:68:da:02:9e:0a:9e: 84:8b:53:9a:a6:d6:bb:13:a6:da:60:6b:7a:56:a4: d8:a8:1d:ae:9b:2d:da:7f:c6:09:ec:b6:8e:74:40: ec:dd:3a:3f:23:7c:7e:86:65:cc:7b:e4:12:4c:d9: 6a:cb:5c:a9:6f:31:36:b3:85:bc:0f:5b:17:25:f8: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E5:B5:D9:DF:82:C5:7D:2D:F2:0D:07:E4:39:A3:17:24:AD:DC:18 X509v3 Authority Key Identifier: keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:6e:8a:2b:3d:14:99:51:e3:f8:48:ec:ba:07:1f:09:90:04: 48:44:d9:96:a8:af:cc:6a:d3:26:4a:27:6c:42:a3:24:8b:57: f2:ae:f4:ba:bc:8b:a2:ec:fe:18:3a:2d:96:07:12:ee:f2:56: c9:b9:89:21:b5:6c:51:79:ed:2c:21:2c:8f:26:36:45:af:ac: 5a:72:ab:a9:72:9d:f5:4d:e9:28:d0:30:96:55:6c:a0:5e:69: 4e:db:db:9e:1d:ce:c9:72:c6:7b:3b:2c:b0:13:6b:9e:bf:b8: 3d:de:4e:95:41:98:09:45:f8:ea:dc:88:6a:2d:e1:bd:32:7d: 31:2a:b8:4a:4d:4e:01:1d:aa:2e:3c:34:43:d5:be:b8:94:91: a7:7b:c6:42:e4:46:97:5a:ed:55:37:e8:b5:8d:4f:00:fc:7f: 82:16:d5:02:fb:af:ec:50:88:87:76:4b:b5:a7:ec:d4:a7:b4: 14:99:61:6a:92:92:db:fe:d7:c7:05:d5:70:80:02:39:21:b5: 68:05:af:1e:e1:53:cd:3e:f7:5a:46:6d:b1:53:6f:08:6d:6a: bd:dc:c7:ca:cb:33:0e:47:df:8b:9d:1f:81:4f:68:01:ca:40: 52:2b:0a:45:17:da:80:bd:2a:c7:62:2d:94:18:c8:e8:88:4e: 54:2b:b1:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXSjJsbDZaGbSRqS1sqIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmMwNzJjMzU5MDlkNTI1MzIyYjAyNzU4NmJhY2ZhZDEx OWYxN2QwHhcNMjUxMjIyMTQwMTA4WhcNMjUxMjIzMTQwMTA4WjAzMTEwLwYDVQQD EyhiOGU1YjVkOWRmODJjNTdkMmRmMjBkMDdlNDM5YTMxNzI0YWRkYzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrekDejJmDIb45gK+t8ZzaJw1wHk i9CsomWkDYjOgUSK06P0ZZkaNLlfuWtMVtjanmXEHxjd+eWhOXXPvUUXFh16WGh/ jMRlLwbSXokn8iYb2WyWFHqXoog9Nm6/rRrGp9kZbFGuCUBZoyqpw4OQMhzFNAm/ tX047y79S81XndGavIvb6lVgKmy9SGh23ZMm3Epe6Ivq0jkD4UTUTsqS7KHU+xBB 0bE9hhPNtvCNZn0SA8qwmob9qd1CLNBo2gKeCp6Ei1Oapta7E6baYGt6VqTYqB2u my3af8YJ7LaOdEDs3To/I3x+hmXMe+QSTNlqy1ypbzE2s4W8D1sXJfh4+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjltdnfgsV9LfINB+Q5oxckrdwYMB8GA1UdIwQY MBaAFMEsByw1kJ1SUyKwJ1hrrPrRGfF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEt ZjZiNTQ3ZmVlOGUwLzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEtZjZiNTQ3ZmVlOGUw LzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWG6KKz0U mVHj+EjsugcfCZAESETZlqivzGrTJkonbEKjJItX8q70uryLouz+GDotlgcS7vJW ybmJIbVsUXntLCEsjyY2Ra+sWnKrqXKd9U3pKNAwllVsoF5pTtvbnh3OyXLGezss sBNrnr+4Pd5OlUGYCUX46tyIai3hvTJ9MSq4Sk1OAR2qLjw0Q9W+uJSRp3vGQuRG l1rtVTfotY1PAPx/ghbVAvuv7FCIh3ZLtafs1Ke0FJlhapKS2/7XxwXVcIACOSG1 aAWvHuFTzT73WkZtsVNvCG1qvdzHysszDkffi50fgU9oAcpAUisKRRfagL0qx2It lBjI6IhOVCuxiA== -----END CERTIFICATE-----Generated at Mon Dec 22 15:39:41 2025 by rpki-client