This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json) Hash identifier: erI6tY+aZIR1PcPzz3NhiwpqItrlyYtACQOP5Ok+QcU= Subject key identifier: 4A:F6:16:76:41:3A:64:B7:6C:DA:D6:AE:EA:B3:65:6E:1F:60:33:3C Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Certificate serial: 019B42800D33F0928FC94F1F260B5D5601D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft Manifest number: 030C Signing time: Sun 21 Dec 2025 20:00:46 +0000 Manifest this update: Sun 21 Dec 2025 20:00:46 +0000 Manifest next update: Mon 22 Dec 2025 20:00:46 +0000 Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: IMFOUDv1+0t2jwFmGtzJoeJD8XByeDZ9uHnfBhAfxqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:0d:33:f0:92:8f:c9:4f:1f:26:0b:5d:56:01:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Validity Not Before: Dec 21 20:00:46 2025 GMT Not After : Dec 22 20:00:46 2025 GMT Subject: CN=4af61676413a64b76cdad6aeeab3656e1f60333c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ec:05:9a:4b:55:90:11:18:b5:f4:bd:e0:62: cc:90:86:2d:c7:5c:07:8c:61:06:75:7a:67:ed:cd: d6:69:41:c2:8f:7a:75:ba:50:5c:90:bb:64:d8:98: 1b:ae:c0:5e:6d:e0:b4:29:7a:5c:0c:47:fd:03:52: 21:f5:e7:89:05:ac:67:2c:06:34:23:d6:ff:e2:45: 1c:74:e8:f4:22:f4:6d:ab:e6:b8:04:f9:13:bb:0e: 2a:9e:23:a4:24:ec:0b:19:b4:f7:08:28:71:6e:e8: ad:0c:26:50:0c:65:30:a5:55:b4:46:8c:29:3a:6c: b0:22:2b:a2:97:ed:99:bc:db:4a:cb:da:4e:c9:2f: 99:1a:c6:46:41:9c:c6:8e:da:49:58:93:eb:c1:15: 6e:02:11:b3:09:ae:77:f8:34:e7:a9:1a:32:02:1f: 6d:ea:a8:a2:d1:54:7c:cd:83:42:ec:d2:ce:5d:c4: 64:9f:f6:dd:ed:1c:7f:56:06:0d:5d:87:5d:37:db: 08:41:72:ea:af:be:80:19:39:85:25:15:fd:ca:63: 9b:11:97:e1:5b:61:ae:5b:4f:82:93:95:07:f1:80: 12:f6:e6:c8:a2:e5:03:be:4c:8d:55:2f:6c:f8:91: 4b:80:e4:41:b7:62:08:19:85:ce:84:3f:03:91:dc: 45:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F6:16:76:41:3A:64:B7:6C:DA:D6:AE:EA:B3:65:6E:1F:60:33:3C X509v3 Authority Key Identifier: keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:40:69:d8:fa:5f:f6:54:07:04:ed:1d:bb:e0:97:74:d5:e2: 4e:43:8c:c7:88:04:e9:f7:c5:08:19:a1:90:6d:bd:fe:e6:27: d4:5c:65:2c:55:03:a2:4e:65:ac:1c:85:8f:19:47:b5:4f:b3: f8:a6:80:73:80:40:ad:f6:d1:eb:65:31:c7:8a:db:f3:fb:ac: 9d:03:2d:c1:59:42:8a:a7:77:66:47:c7:17:b4:b2:e0:15:a5: 95:bc:48:c4:7b:99:69:7c:6e:63:95:cf:da:2e:e2:d9:dc:9a: 70:45:00:88:6a:db:1f:cd:a4:49:75:4f:98:af:ae:d5:12:88: de:38:0f:5d:f4:37:1b:70:ce:08:3b:bb:09:38:61:8e:35:b1: c1:f1:cb:e7:2e:aa:61:e0:9b:36:e0:db:94:42:f1:07:c8:52: c9:ff:a6:38:b1:6d:66:c6:57:fa:ac:3c:d1:78:a1:11:f7:88: 43:77:b7:ed:0d:bb:61:fe:d0:8a:16:ec:da:b5:b7:9b:92:f2: 29:4f:6a:6d:64:f2:65:a7:74:a9:7d:94:94:09:1d:bd:fd:17: 9a:a4:c9:37:f7:f7:13:13:f6:82:fe:dc:b8:d8:c8:0a:50:99: a2:2c:2f:09:92:b4:65:eb:fb:5f:b7:2c:3b:4e:c7:86:c9:79: 3b:e6:68:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgA0z8JKPyU8fJgtdVgHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2ZlOTRmZGVjMzA5YWM1NTMwNWFjOTBlN2MzZDYyOGRm ZDQwNmEwHhcNMjUxMjIxMjAwMDQ2WhcNMjUxMjIyMjAwMDQ2WjAzMTEwLwYDVQQD Eyg0YWY2MTY3NjQxM2E2NGI3NmNkYWQ2YWVlYWIzNjU2ZTFmNjAzMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OwFmktVkBEYtfS94GLMkIYtx1wH jGEGdXpn7c3WaUHCj3p1ulBckLtk2JgbrsBebeC0KXpcDEf9A1Ih9eeJBaxnLAY0 I9b/4kUcdOj0IvRtq+a4BPkTuw4qniOkJOwLGbT3CChxbuitDCZQDGUwpVW0Rowp OmywIiuil+2ZvNtKy9pOyS+ZGsZGQZzGjtpJWJPrwRVuAhGzCa53+DTnqRoyAh9t 6qii0VR8zYNC7NLOXcRkn/bd7Rx/VgYNXYddN9sIQXLqr76AGTmFJRX9ymObEZfh W2GuW0+Ck5UH8YAS9ubIouUDvkyNVS9s+JFLgORBt2IIGYXOhD8DkdxFjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr2FnZBOmS3bNrWruqzZW4fYDM8MB8GA1UdIwQY MBaAFMLP6U/ewwmsVTBayQ58PWKN/UBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjIt ZTBlMDk5NjQwZWFjLzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjItZTBlMDk5NjQwZWFj LzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUBp2Ppf 9lQHBO0du+CXdNXiTkOMx4gE6ffFCBmhkG29/uYn1FxlLFUDok5lrByFjxlHtU+z +KaAc4BArfbR62Uxx4rb8/usnQMtwVlCiqd3ZkfHF7Sy4BWllbxIxHuZaXxuY5XP 2i7i2dyacEUAiGrbH82kSXVPmK+u1RKI3jgPXfQ3G3DOCDu7CThhjjWxwfHL5y6q YeCbNuDblELxB8hSyf+mOLFtZsZX+qw80XihEfeIQ3e37Q27Yf7Qihbs2rW3m5Ly KU9qbWTyZad0qX2UlAkdvf0XmqTJN/f3ExP2gv7cuNjIClCZoiwvCZK0Zev7X7cs O07Hhsl5O+ZoqQ== -----END CERTIFICATE-----Generated at Sun Dec 21 23:59:55 2025 by rpki-client