This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json) Hash identifier: UtkShOO7SkbJuubufAijwk+39Olt4x4i6gFC+uD8sgM= Subject key identifier: 80:8B:5C:76:EF:BD:0E:65:32:11:C6:E6:C6:75:B0:3E:72:33:72:9C Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e Certificate serial: 019B4249C94FF4565E01DF488C78BE15C65E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft Manifest number: 157B Signing time: Sun 21 Dec 2025 19:01:30 +0000 Manifest this update: Sun 21 Dec 2025 19:01:30 +0000 Manifest next update: Mon 22 Dec 2025 19:01:30 +0000 Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: xbgUFPdJkMUqZ+6wfLw21TYYwvbT7a5d0gtslNSmaSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:c9:4f:f4:56:5e:01:df:48:8c:78:be:15:c6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e Validity Not Before: Dec 21 19:01:30 2025 GMT Not After : Dec 22 19:01:30 2025 GMT Subject: CN=808b5c76efbd0e653211c6e6c675b03e7233729c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:60:35:03:56:91:48:71:ae:e8:ab:c5:5f:f7: 7d:60:6d:36:69:db:23:9d:a8:4a:e2:1a:3f:0a:e9: 49:1c:27:ea:80:f5:a3:99:32:28:a6:83:2c:f1:2a: 59:c6:22:a5:38:f2:82:50:a8:5a:aa:cf:21:44:17: 89:a7:26:4d:e7:8b:ca:08:d9:3c:30:34:23:59:25: b9:06:03:a8:15:24:b9:f8:e5:2b:b7:b1:c2:d5:72: 33:25:c3:04:cc:6a:5e:97:0f:5a:fb:91:d8:b5:49: e6:86:9c:e7:6a:06:11:c2:06:7b:63:25:a0:4d:1d: 51:01:8f:88:4c:a3:06:be:b3:3e:54:0a:a5:ef:59: 01:da:40:48:af:83:c8:bc:99:42:96:4e:d7:8b:f8: ab:f4:02:a4:b1:03:7d:ff:5c:13:db:2d:35:77:ba: db:fd:95:54:e0:2b:d6:8f:7e:e2:9b:09:44:55:98: e4:40:e8:aa:e9:a9:90:e9:2a:11:8b:6e:f8:ac:59: c3:4b:31:aa:57:c8:48:18:e4:3b:34:0e:21:78:6f: ca:fb:3b:46:40:e1:9f:60:20:7c:d2:60:7d:af:5e: 72:a1:8f:f5:5a:7d:6f:fd:61:45:ae:48:b3:dc:29: 27:d5:40:8c:8e:19:56:32:76:c2:ed:2d:04:f6:fb: bd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8B:5C:76:EF:BD:0E:65:32:11:C6:E6:C6:75:B0:3E:72:33:72:9C X509v3 Authority Key Identifier: keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:76:b7:0e:97:54:15:6c:40:16:11:ec:2e:d9:61:06:e5:0f: e2:1d:65:08:a0:0d:4a:74:73:ce:38:18:7b:90:2e:5f:3e:94: b0:c5:94:fa:cd:98:cc:d7:90:90:ed:ef:5e:87:20:e4:56:32: 38:95:89:9d:70:bc:38:a6:05:37:e3:c8:f4:0b:b1:f2:e6:34: 00:4b:8a:07:4e:0a:a2:91:b2:e3:ba:16:b4:3f:8a:02:f3:28: c4:da:df:49:bd:80:a8:fc:3d:29:46:16:76:f0:bf:af:4c:92: fd:cf:65:78:67:a6:10:f7:91:fb:4a:a6:30:8d:d5:65:82:2b: cc:3f:b2:24:85:be:65:0a:b0:50:d9:a7:27:9e:c9:7d:b1:59: c1:84:38:59:04:7d:cc:5b:ad:42:97:f8:7f:43:a5:0a:e9:85: 6b:2f:fb:96:78:f7:e6:46:47:10:86:bf:0b:0a:ae:84:2c:f4: 5d:06:76:b8:f8:27:80:ff:95:5f:9d:de:3c:b4:7f:39:56:2c: 66:90:b9:9c:fc:2e:91:7b:4f:5f:c3:f9:17:68:06:da:24:a3: 1a:59:76:6a:e8:11:51:4b:1e:db:8b:0e:d0:44:58:0e:bc:0b: 78:93:12:d0:95:a9:3e:5a:d9:88:ab:55:0e:87:2f:74:fa:02: 78:ad:38:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSclP9FZeAd9IjHi+FcZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMzdmNjM4YzBiZTQ2MDBiNDY2ZGU4ZTMzMGQ0Y2Y2YTdm ZjNiM2UwHhcNMjUxMjIxMTkwMTMwWhcNMjUxMjIyMTkwMTMwWjAzMTEwLwYDVQQD Eyg4MDhiNWM3NmVmYmQwZTY1MzIxMWM2ZTZjNjc1YjAzZTcyMzM3MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2A1A1aRSHGu6KvFX/d9YG02adsj nahK4ho/CulJHCfqgPWjmTIopoMs8SpZxiKlOPKCUKhaqs8hRBeJpyZN54vKCNk8 MDQjWSW5BgOoFSS5+OUrt7HC1XIzJcMEzGpelw9a+5HYtUnmhpznagYRwgZ7YyWg TR1RAY+ITKMGvrM+VAql71kB2kBIr4PIvJlClk7Xi/ir9AKksQN9/1wT2y01d7rb /ZVU4CvWj37imwlEVZjkQOiq6amQ6SoRi274rFnDSzGqV8hIGOQ7NA4heG/K+ztG QOGfYCB80mB9r15yoY/1Wn1v/WFFrkiz3Ckn1UCMjhlWMnbC7S0E9vu9wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICLXHbvvQ5lMhHG5sZ1sD5yM3KcMB8GA1UdIwQY MBaAFME39jjAvkYAtGbejjMNTPan/zs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQt MTU0NmJiNmQzNmJiLzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQtMTU0NmJiNmQzNmJi LzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXa3DpdU FWxAFhHsLtlhBuUP4h1lCKANSnRzzjgYe5AuXz6UsMWU+s2YzNeQkO3vXocg5FYy OJWJnXC8OKYFN+PI9Aux8uY0AEuKB04KopGy47oWtD+KAvMoxNrfSb2AqPw9KUYW dvC/r0yS/c9leGemEPeR+0qmMI3VZYIrzD+yJIW+ZQqwUNmnJ57JfbFZwYQ4WQR9 zFutQpf4f0OlCumFay/7lnj35kZHEIa/CwquhCz0XQZ2uPgngP+VX53ePLR/OVYs ZpC5nPwukXtPX8P5F2gG2iSjGll2augRUUse24sO0ERYDrwLeJMS0JWpPlrZiKtV DocvdPoCeK04Lg== -----END CERTIFICATE-----Generated at Mon Dec 22 02:05:39 2025 by rpki-client