This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft File: wb6oOT9qHTeZGYndh1_FMeQIQDE.mft (raw, json) Hash identifier: gxHrlB5hCqry1wrdv4ks2p/4EDaUEUDDfKwAPxVUyh0= Subject key identifier: A4:1D:7C:24:C7:CC:09:57:EA:82:9C:F2:06:F3:65:7B:CB:4E:EC:71 Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31 Certificate issuer: /CN=c1bea8393f6a1d37991989dd875fc531e4084031 Certificate serial: 019B62E6B1BBB4FE62162E76AC92826B3DC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft Manifest number: 13E0 Signing time: Sun 28 Dec 2025 03:00:44 +0000 Manifest this update: Sun 28 Dec 2025 03:00:44 +0000 Manifest next update: Mon 29 Dec 2025 03:00:44 +0000 Files and hashes: 1: wb6oOT9qHTeZGYndh1_FMeQIQDE.crl (hash: +GYedW+eaeK/9G6Z1ZD0MhrS42v97gx0n37bA0yNVs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:e6:b1:bb:b4:fe:62:16:2e:76:ac:92:82:6b:3d:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031 Validity Not Before: Dec 28 03:00:44 2025 GMT Not After : Dec 29 03:00:44 2025 GMT Subject: CN=a41d7c24c7cc0957ea829cf206f3657bcb4eec71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:fc:f7:ed:95:23:c3:92:17:82:19:8f:a6: fd:aa:d7:a2:02:d8:81:4f:e0:5c:4c:65:5c:ee:bb: 6d:b5:b8:81:29:06:b9:fa:13:06:03:46:bc:5a:ed: b0:c9:9e:b6:9a:23:d1:dc:7d:29:7d:8b:44:44:7b: cb:53:4a:f4:9d:d0:0c:31:16:38:35:24:67:74:e2: 89:ac:f2:97:f4:ea:e4:e0:ff:df:3e:f1:dd:14:ef: 42:55:10:b0:ec:41:56:86:fa:22:d7:d8:c2:d1:a3: 59:5e:a9:a6:5a:41:35:37:52:bb:52:dd:ac:95:d6: 8b:8c:79:89:59:fb:6e:14:85:21:4f:14:17:71:2e: 65:42:ae:e3:1b:90:31:3f:33:f0:30:d5:39:8d:0b: fa:3e:30:2f:77:7b:96:0d:7e:66:31:30:59:3b:51: 59:b9:6a:df:f0:20:c9:7b:ba:d8:83:39:e5:db:04: 6b:57:3c:f5:50:a8:74:73:37:c7:cc:51:3d:79:c4: 58:c1:52:9c:12:83:65:bb:0c:f5:36:aa:62:11:79: a6:ec:24:19:90:ff:40:d9:9e:68:83:d0:54:e7:f5: d7:a7:73:41:47:81:d6:26:7f:a6:a7:f8:a1:5b:a1: 2c:86:f6:96:24:83:c0:1d:51:75:77:88:a6:59:dd: eb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1D:7C:24:C7:CC:09:57:EA:82:9C:F2:06:F3:65:7B:CB:4E:EC:71 X509v3 Authority Key Identifier: keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:51:d5:84:f1:57:50:06:13:1f:34:17:f1:73:22:f8:ea:f8: cb:0f:02:34:cc:a9:f1:bc:b2:27:2c:4a:a6:51:95:e7:df:bc: da:64:0b:ea:1a:cd:95:8a:9b:7e:b6:61:84:8d:6d:11:f4:31: 0c:b6:8e:87:3b:a3:9e:3e:df:e9:46:f7:1b:e2:f3:91:d4:1d: 85:8d:99:81:2b:e9:52:32:05:5d:4c:35:ad:e9:64:de:de:0b: 09:c2:73:53:c3:f5:4c:6b:17:88:41:b4:ba:92:57:a0:aa:15: 11:07:ec:11:cb:5e:31:ac:af:98:47:17:9c:9e:85:67:e1:9c: 85:3d:a7:e8:8a:f4:27:e6:2b:e6:52:f4:c1:d2:f9:02:69:94: d7:f0:f2:02:19:fe:9e:84:4a:f5:e4:1a:e0:a2:fb:31:71:c5: 34:86:ab:43:90:21:7e:33:fe:22:0f:9d:80:5b:4d:16:33:3f: 83:28:f5:6a:54:40:33:48:5f:6d:2d:23:68:0e:51:6b:5b:41: 68:94:98:94:c7:c0:58:84:2a:c0:0e:86:e2:75:a3:bf:5d:8f: ff:72:17:ea:fa:af:e6:d2:2c:0d:00:62:e7:d9:85:bb:5e:bc: 87:7e:66:ae:46:26:c0:5e:58:30:b5:26:61:a9:e5:88:51:5a: 6f:d3:6f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZti5rG7tP5iFi52rJKCaz3FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmVhODM5M2Y2YTFkMzc5OTE5ODlkZDg3NWZjNTMxZTQw ODQwMzEwHhcNMjUxMjI4MDMwMDQ0WhcNMjUxMjI5MDMwMDQ0WjAzMTEwLwYDVQQD EyhhNDFkN2MyNGM3Y2MwOTU3ZWE4MjljZjIwNmYzNjU3YmNiNGVlYzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHH89+2VI8OSF4IZj6b9qteiAtiB T+BcTGVc7rtttbiBKQa5+hMGA0a8Wu2wyZ62miPR3H0pfYtERHvLU0r0ndAMMRY4 NSRndOKJrPKX9Ork4P/fPvHdFO9CVRCw7EFWhvoi19jC0aNZXqmmWkE1N1K7Ut2s ldaLjHmJWftuFIUhTxQXcS5lQq7jG5AxPzPwMNU5jQv6PjAvd3uWDX5mMTBZO1FZ uWrf8CDJe7rYgznl2wRrVzz1UKh0czfHzFE9ecRYwVKcEoNluwz1NqpiEXmm7CQZ kP9A2Z5og9BU5/XXp3NBR4HWJn+mp/ihW6EshvaWJIPAHVF1d4imWd3rFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQdfCTHzAlX6oKc8gbzZXvLTuxxMB8GA1UdIwQY MBaAFMG+qDk/ah03mRmJ3YdfxTHkCEAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMWVlZWQtMzg4ZC00MGMwLWIxN2Qt ZjU1M2RkZDllZDFhLzEvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zMWVlZWQtMzg4ZC00MGMwLWIxN2QtZjU1M2RkZDllZDFh LzEvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFHVhPFX UAYTHzQX8XMi+Or4yw8CNMyp8byyJyxKplGV59+82mQL6hrNlYqbfrZhhI1tEfQx DLaOhzujnj7f6Ub3G+LzkdQdhY2ZgSvpUjIFXUw1relk3t4LCcJzU8P1TGsXiEG0 upJXoKoVEQfsEcteMayvmEcXnJ6FZ+GchT2n6Ir0J+Yr5lL0wdL5AmmU1/DyAhn+ noRK9eQa4KL7MXHFNIarQ5AhfjP+Ig+dgFtNFjM/gyj1alRAM0hfbS0jaA5Ra1tB aJSYlMfAWIQqwA6G4nWjv12P/3IX6vqv5tIsDQBi59mFu168h35mrkYmwF5YMLUm YanliFFab9NvUw== -----END CERTIFICATE-----Generated at Sun Dec 28 11:24:43 2025 by rpki-client