This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft File: W8PKDWOo_M3A6SqIprrO_ydecEY.mft (raw, json) Hash identifier: /eN9JTRCRicfYjQ3geTyXPrLQSCD/uwKAUQXscGvIiA= Subject key identifier: 59:AA:09:0D:BA:A2:BC:36:B2:AC:95:97:B5:54:36:97:C6:B8:0A:16 Authority key identifier: 5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46 Certificate issuer: /CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046 Certificate serial: 019B4392F237114C69628EFCB6CEF4B7E7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft Manifest number: 1787 Signing time: Mon 22 Dec 2025 01:01:02 +0000 Manifest this update: Mon 22 Dec 2025 01:01:02 +0000 Manifest next update: Tue 23 Dec 2025 01:01:02 +0000 Files and hashes: 1: W8PKDWOo_M3A6SqIprrO_ydecEY.crl (hash: P7LKqZbrM8o/yFWB/JfFEbAJWqkXCRzuHwmLXVPGSQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:f2:37:11:4c:69:62:8e:fc:b6:ce:f4:b7:e7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bc3ca0d63a8fccdc0e92a88a6baceff275e7046 Validity Not Before: Dec 22 01:01:02 2025 GMT Not After : Dec 23 01:01:02 2025 GMT Subject: CN=59aa090dbaa2bc36b2ac9597b5543697c6b80a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:39:49:74:f7:7b:c2:b6:de:54:38:17:67: 66:b2:5b:97:59:6f:07:ca:34:ce:1b:44:c2:58:fd: ce:de:bf:c3:5a:2a:8e:a1:3f:ef:8c:e0:2b:6a:4f: 02:40:5c:5c:d5:69:51:6f:d5:ce:cd:2e:5e:48:91: 44:5e:3a:1b:e4:68:be:5c:d8:18:52:7c:e7:f9:3b: 2e:d6:34:e7:45:8c:58:c4:14:5b:f1:8e:1f:bf:f6: 2c:f0:9e:83:28:a9:91:ac:1a:49:15:ae:b3:ad:03: 6e:c9:7c:07:6a:35:a1:48:94:85:03:54:37:27:85: eb:0f:7e:50:1e:6d:99:e6:aa:7e:17:04:9b:c0:7c: 57:fb:69:1b:89:fb:a3:79:0b:ec:2b:49:02:99:5d: 35:3a:08:02:2c:db:8e:f7:6c:a6:76:4a:35:50:bd: f2:ba:1c:b3:c9:63:47:88:ae:46:14:fc:e6:8d:34: 0f:e3:e5:19:90:83:84:1e:99:65:75:72:97:6a:9d: b4:8f:78:2f:99:98:8e:0f:34:5d:13:8f:36:99:8d: ba:62:f4:89:01:78:6b:8e:81:46:46:df:56:82:8b: 74:6a:1c:11:a2:9b:0b:9f:b9:11:d3:a4:86:ca:83: c0:c9:6e:c1:8e:96:49:7e:8f:09:70:6a:98:ae:86: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:AA:09:0D:BA:A2:BC:36:B2:AC:95:97:B5:54:36:97:C6:B8:0A:16 X509v3 Authority Key Identifier: keyid:5B:C3:CA:0D:63:A8:FC:CD:C0:E9:2A:88:A6:BA:CE:FF:27:5E:70:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8PKDWOo_M3A6SqIprrO_ydecEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1073e6-c487-478f-b9d9-3c1e0518f9e5/1/W8PKDWOo_M3A6SqIprrO_ydecEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:62:a1:cc:0e:2b:6d:0d:07:2b:af:61:7e:4f:92:39:57:bf: f2:bc:93:f5:4e:bd:c5:11:06:3a:e6:35:90:2b:99:10:9d:22: 17:ed:53:77:bf:23:fa:a5:49:2b:50:30:d2:a2:cc:7f:f1:45: a0:52:da:5c:e3:9f:45:ae:9b:f5:54:79:71:40:b6:eb:55:69: 0d:3b:e8:a8:94:d2:1a:b9:17:2d:0f:05:a8:6b:eb:13:0f:7a: 92:5a:9e:b2:d8:31:6a:c5:92:fa:4b:aa:20:2d:59:c2:7f:96: 82:46:ee:50:de:bf:89:37:b4:fe:5c:ac:4d:c0:a2:e3:99:31: 6d:6e:0b:a0:59:a3:a6:75:04:ea:45:75:8a:0b:b7:7c:20:b5: 8b:9a:f6:f4:e1:8b:b8:de:96:2c:6a:54:25:a0:62:44:c6:29: 79:88:09:5f:62:51:c2:d3:a6:9b:66:09:ff:e6:57:bc:35:64: 50:74:a2:b1:af:21:b8:02:87:ea:20:f6:da:21:46:27:95:96: c6:a8:87:6c:d1:08:4c:4f:e8:3a:63:a1:33:c7:6f:04:93:e5: 87:5d:9c:90:fe:25:61:60:ad:2e:12:cb:7f:20:cb:0e:c5:7b: 57:eb:a6:4d:f9:04:e7:36:70:d5:bb:07:f4:ee:26:22:3c:d4: f1:68:8a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkvI3EUxpYo78ts70t+evMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYzNjYTBkNjNhOGZjY2RjMGU5MmE4OGE2YmFjZWZmMjc1 ZTcwNDYwHhcNMjUxMjIyMDEwMTAyWhcNMjUxMjIzMDEwMTAyWjAzMTEwLwYDVQQD Eyg1OWFhMDkwZGJhYTJiYzM2YjJhYzk1OTdiNTU0MzY5N2M2YjgwYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Q5SXT3e8K23lQ4F2dmsluXWW8H yjTOG0TCWP3O3r/DWiqOoT/vjOArak8CQFxc1WlRb9XOzS5eSJFEXjob5Gi+XNgY Unzn+Tsu1jTnRYxYxBRb8Y4fv/Ys8J6DKKmRrBpJFa6zrQNuyXwHajWhSJSFA1Q3 J4XrD35QHm2Z5qp+FwSbwHxX+2kbifujeQvsK0kCmV01OggCLNuO92ymdko1UL3y uhyzyWNHiK5GFPzmjTQP4+UZkIOEHplldXKXap20j3gvmZiODzRdE482mY26YvSJ AXhrjoFGRt9Wgot0ahwRopsLn7kR06SGyoPAyW7BjpZJfo8JcGqYroZtkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmqCQ26orw2sqyVl7VUNpfGuAoWMB8GA1UdIwQY MBaAFFvDyg1jqPzNwOkqiKa6zv8nXnBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDkt M2MxZTA1MThmOWU1LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMDczZTYtYzQ4Ny00NzhmLWI5ZDktM2MxZTA1MThmOWU1 LzEvVzhQS0RXT29fTTNBNlNxSXByck9feWRlY0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWKhzA4r bQ0HK69hfk+SOVe/8ryT9U69xREGOuY1kCuZEJ0iF+1Td78j+qVJK1Aw0qLMf/FF oFLaXOOfRa6b9VR5cUC261VpDTvoqJTSGrkXLQ8FqGvrEw96klqestgxasWS+kuq IC1Zwn+WgkbuUN6/iTe0/lysTcCi45kxbW4LoFmjpnUE6kV1igu3fCC1i5r29OGL uN6WLGpUJaBiRMYpeYgJX2JRwtOmm2YJ/+ZXvDVkUHSisa8huAKH6iD22iFGJ5WW xqiHbNEITE/oOmOhM8dvBJPlh12ckP4lYWCtLhLLfyDLDsV7V+umTfkE5zZw1bsH 9O4mIjzU8WiK6w== -----END CERTIFICATE-----Generated at Mon Dec 22 07:57:35 2025 by rpki-client