This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft File: wWorxbJu0grF0v3qnayGffkjIFo.mft (raw, json) Hash identifier: d00ZaBA4ZE8ESQkddvfMa/USLyG1On7GtEVCaDYYPlc= Subject key identifier: 08:ED:1B:8B:C8:27:98:94:82:E2:47:36:20:45:8E:1C:D7:DF:BE:10 Authority key identifier: C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A Certificate issuer: /CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a Certificate serial: 019B635513646598C42DD4261936E03772A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft Manifest number: 0772 Signing time: Sun 28 Dec 2025 05:01:18 +0000 Manifest this update: Sun 28 Dec 2025 05:01:18 +0000 Manifest next update: Mon 29 Dec 2025 05:01:18 +0000 Files and hashes: 1: wWorxbJu0grF0v3qnayGffkjIFo.crl (hash: rEKh0evW6AfOwUcqcf+lgJp2MJBh8ZlPy8wJwXeZVK8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:55:13:64:65:98:c4:2d:d4:26:19:36:e0:37:72:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a Validity Not Before: Dec 28 05:01:18 2025 GMT Not After : Dec 29 05:01:18 2025 GMT Subject: CN=08ed1b8bc827989482e2473620458e1cd7dfbe10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:5f:88:77:ff:e7:28:50:3c:23:4b:1f:a0:11: 84:87:9e:6b:92:a1:1c:61:2f:25:e0:07:f1:fb:3a: 49:6e:50:9a:6d:e4:94:4e:6d:92:8b:f9:1f:5a:93: 9f:dd:24:07:0e:c6:8c:75:24:a6:c4:0a:bc:ec:f4: 53:76:a3:55:74:0b:20:29:35:04:ca:34:a2:56:e6: d6:83:0c:ce:2a:07:7f:61:48:10:07:c7:a0:b4:47: a9:29:97:7d:bb:aa:d1:52:5b:30:91:15:07:79:39: 29:11:55:84:f1:19:de:44:7b:04:92:53:11:8f:74: 1c:66:23:63:51:a9:39:df:ee:75:21:47:77:ad:fd: c9:f0:c8:ae:ba:f9:fd:3a:df:60:ad:6b:1e:49:0d: b2:3b:f7:f7:8d:86:3c:5c:6c:12:22:81:5e:08:c8: d5:f5:e9:c8:ee:29:92:c1:ff:df:27:ce:72:02:bf: c3:dd:fb:35:44:7d:e1:1a:8f:9c:e2:d5:3d:1e:69: de:89:3d:81:2f:b7:ae:40:24:5e:a4:59:96:f1:63: b5:24:2a:49:d5:1b:1e:c3:79:0e:59:4b:d3:a8:d9: d1:00:7f:a2:92:83:bf:63:3c:09:68:8b:d9:ca:d8: 9f:78:34:da:ad:41:20:9d:92:4b:8b:36:2d:66:1a: 6e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:ED:1B:8B:C8:27:98:94:82:E2:47:36:20:45:8E:1C:D7:DF:BE:10 X509v3 Authority Key Identifier: keyid:C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:a0:0f:cc:0b:fc:bc:db:cf:1e:8c:4a:58:d0:67:bb:bd:a4: 2e:6f:95:4b:89:91:b8:55:f6:45:9d:72:bb:20:14:3b:d4:5f: ae:28:70:fe:87:43:29:87:7b:1d:14:01:e3:2c:63:12:bb:4c: 4a:6d:15:53:aa:de:77:a1:51:21:9e:3b:87:44:ba:12:b2:6c: 4b:6d:2f:80:fd:0e:22:45:a1:6f:8f:20:ae:43:a9:06:09:4e: b5:6d:e0:d1:e0:7c:98:c0:12:94:16:d7:1d:b1:90:88:f4:bc: 66:96:54:60:16:2e:4a:38:d1:3f:dd:14:7b:00:b0:37:fc:dc: 5d:d7:9b:39:16:1a:f6:98:a4:8b:11:fe:1c:24:af:89:c8:1b: 61:7f:a8:bf:15:bb:f7:c0:64:56:f4:4f:c4:a2:67:a4:b5:41: b1:0d:74:b3:67:d6:ed:f4:4d:98:fa:1f:4c:7a:a1:f3:f3:33: 61:33:3b:ca:37:be:43:b5:76:a6:89:eb:cf:35:05:d8:ac:77: b6:8b:a1:ff:93:17:a8:79:51:38:60:60:95:b7:f3:92:c5:3c: ec:40:95:9d:40:d4:ec:d9:96:33:ba:49:33:6a:ef:61:f5:cd: 0a:e3:70:82:74:c2:17:a4:dd:a1:49:75:d5:57:c3:53:fd:30: 82:48:6a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjVRNkZZjELdQmGTbgN3KmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNmEyYmM1YjI2ZWQyMGFjNWQyZmRlYTlkYWM4NjdkZjky MzIwNWEwHhcNMjUxMjI4MDUwMTE4WhcNMjUxMjI5MDUwMTE4WjAzMTEwLwYDVQQD EygwOGVkMWI4YmM4Mjc5ODk0ODJlMjQ3MzYyMDQ1OGUxY2Q3ZGZiZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjF+Id//nKFA8I0sfoBGEh55rkqEc YS8l4Afx+zpJblCabeSUTm2Si/kfWpOf3SQHDsaMdSSmxAq87PRTdqNVdAsgKTUE yjSiVubWgwzOKgd/YUgQB8egtEepKZd9u6rRUlswkRUHeTkpEVWE8RneRHsEklMR j3QcZiNjUak53+51IUd3rf3J8Miuuvn9Ot9grWseSQ2yO/f3jYY8XGwSIoFeCMjV 9enI7imSwf/fJ85yAr/D3fs1RH3hGo+c4tU9HmneiT2BL7euQCRepFmW8WO1JCpJ 1Rsew3kOWUvTqNnRAH+ikoO/YzwJaIvZytifeDTarUEgnZJLizYtZhpubQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjtG4vIJ5iUguJHNiBFjhzX374QMB8GA1UdIwQY MBaAFMFqK8WybtIKxdL96p2shn35IyBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YjNhODktNjJhOC00MjFjLWI3NGUt OTU3N2ZmNWRkMzM4LzEvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81YjNhODktNjJhOC00MjFjLWI3NGUtOTU3N2ZmNWRkMzM4 LzEvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb6APzAv8 vNvPHoxKWNBnu72kLm+VS4mRuFX2RZ1yuyAUO9Rfrihw/odDKYd7HRQB4yxjErtM Sm0VU6red6FRIZ47h0S6ErJsS20vgP0OIkWhb48grkOpBglOtW3g0eB8mMASlBbX HbGQiPS8ZpZUYBYuSjjRP90UewCwN/zcXdebORYa9pikixH+HCSvicgbYX+ovxW7 98BkVvRPxKJnpLVBsQ10s2fW7fRNmPofTHqh8/MzYTM7yje+Q7V2ponrzzUF2Kx3 touh/5MXqHlROGBglbfzksU87ECVnUDU7NmWM7pJM2rvYfXNCuNwgnTCF6TdoUl1 1VfDU/0wgkhqpw== -----END CERTIFICATE-----Generated at Sun Dec 28 06:39:52 2025 by rpki-client