This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft File: wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json) Hash identifier: 5hxc9BcRfeZDDh+ibvXr1bi7C6dGmbIszus24N4xFnc= Subject key identifier: 31:1F:00:CF:9F:7B:D7:6D:36:33:A4:52:1E:71:A8:72:0C:FC:CA:21 Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B Certificate issuer: /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b Certificate serial: 019B35698BEFAAAD28BD2255BA13B905D50B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft Manifest number: 1781 Signing time: Fri 19 Dec 2025 07:01:08 +0000 Manifest this update: Fri 19 Dec 2025 07:01:08 +0000 Manifest next update: Sat 20 Dec 2025 07:01:08 +0000 Files and hashes: 1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: /zXN8FYVj2mPcJxDP6AzoJ4EE2QP4cJ1Oig3BDfUgtA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:8b:ef:aa:ad:28:bd:22:55:ba:13:b9:05:d5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b Validity Not Before: Dec 19 07:01:08 2025 GMT Not After : Dec 20 07:01:08 2025 GMT Subject: CN=311f00cf9f7bd76d3633a4521e71a8720cfcca21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:b4:8e:e8:0c:18:5d:c2:e9:d2:ee:2b:fc: 55:2e:0f:27:02:7a:66:46:ff:13:81:ad:a4:8a:63: fb:28:b8:94:3d:26:71:51:47:38:a3:6c:80:6e:d6: 2b:c6:7a:f1:37:33:3c:99:41:eb:9c:c6:c5:97:67: da:b3:70:79:c1:66:82:7f:18:10:ea:f4:d0:84:71: 49:79:d0:c3:9d:92:5e:fc:2f:37:09:5d:86:08:67: 00:c4:76:5d:4a:72:ff:e1:8a:63:2c:e2:08:63:88: 0f:20:b4:d2:7d:db:81:61:1a:9a:64:35:b4:e8:39: 40:19:83:d7:3e:e5:72:48:51:cf:ba:cf:08:55:79: b9:bc:9d:f1:03:3f:2e:e6:2e:2f:08:cd:82:c3:22: 6d:13:ba:10:20:de:1d:86:0e:c1:95:1f:7a:3c:3d: b4:97:97:62:ab:7d:21:c7:44:7f:07:32:5d:fb:9d: 11:41:4e:d0:0e:cd:69:6a:fb:93:d9:27:80:2f:77: 80:c8:73:fd:d2:99:c3:7e:b7:0f:1f:02:af:ac:26: 53:52:70:e9:00:dc:6c:19:88:71:9b:af:8f:1e:9a: 36:be:2c:5e:ff:5d:04:4f:f9:7d:4c:31:18:21:c2: 45:12:f4:5d:01:79:ff:f6:35:c6:cd:92:a8:dc:fd: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:00:CF:9F:7B:D7:6D:36:33:A4:52:1E:71:A8:72:0C:FC:CA:21 X509v3 Authority Key Identifier: keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:63:2c:40:b6:1e:1f:11:eb:94:2b:ec:12:95:57:09:e1:57: 0e:c9:9e:0c:18:2f:a6:27:04:b9:27:bd:85:e5:04:29:13:80: ba:87:6c:e8:1e:31:1c:8c:0c:70:9f:0d:c6:39:a7:34:16:6b: 66:c0:9a:9d:fb:87:56:90:be:20:44:a8:78:55:b3:90:45:78: bb:55:7d:14:c0:d1:70:cf:8d:42:9f:d7:df:fa:b2:6b:ef:44: 28:86:40:aa:57:01:94:89:5d:14:00:c6:17:5c:39:8f:1b:e6: 0b:da:da:b2:91:7b:f2:a2:d1:8b:1f:a7:b8:1c:6b:32:11:3e: 9e:d1:ae:66:3b:91:79:77:cd:f2:a0:37:bf:9d:03:e0:1a:a3: 63:9a:4f:28:dd:78:36:1d:d4:49:56:84:42:8b:37:e0:c1:53: 63:f1:2b:29:dd:ea:47:99:c5:70:36:90:fb:71:5c:d4:1d:18: 39:0d:47:f1:be:aa:b3:b8:33:ec:ac:f8:f8:83:ad:18:65:2a: d9:12:10:54:16:cf:c6:cf:b7:d1:d7:74:c2:d1:52:20:39:30: 7d:3b:cb:92:d5:32:fb:95:d5:50:69:fd:30:ce:ca:90:f3:d6: 5b:22:e1:d7:9b:2c:6f:4b:a9:33:91:61:08:a2:62:ce:33:61: 5d:54:7d:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aYvvqq0ovSJVuhO5BdULMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNmZlMTAwOWZiZTY0OTFmN2IxNWNkZWYxOGVmOTZjMGVi ZDQ1OWIwHhcNMjUxMjE5MDcwMTA4WhcNMjUxMjIwMDcwMTA4WjAzMTEwLwYDVQQD EygzMTFmMDBjZjlmN2JkNzZkMzYzM2E0NTIxZTcxYTg3MjBjZmNjYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHe0jugMGF3C6dLuK/xVLg8nAnpm Rv8Tga2kimP7KLiUPSZxUUc4o2yAbtYrxnrxNzM8mUHrnMbFl2fas3B5wWaCfxgQ 6vTQhHFJedDDnZJe/C83CV2GCGcAxHZdSnL/4YpjLOIIY4gPILTSfduBYRqaZDW0 6DlAGYPXPuVySFHPus8IVXm5vJ3xAz8u5i4vCM2CwyJtE7oQIN4dhg7BlR96PD20 l5diq30hx0R/BzJd+50RQU7QDs1pavuT2SeAL3eAyHP90pnDfrcPHwKvrCZTUnDp ANxsGYhxm6+PHpo2vixe/10ET/l9TDEYIcJFEvRdAXn/9jXGzZKo3P1kfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDEfAM+fe9dtNjOkUh5xqHIM/MohMB8GA1UdIwQY MBaAFMFv4QCfvmSR97Fc3vGO+WwOvUWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYt Njc2ZDM3ZjNhMjlhLzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYtNjc2ZDM3ZjNhMjlh LzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEWMsQLYe HxHrlCvsEpVXCeFXDsmeDBgvpicEuSe9heUEKROAuods6B4xHIwMcJ8NxjmnNBZr ZsCanfuHVpC+IESoeFWzkEV4u1V9FMDRcM+NQp/X3/qya+9EKIZAqlcBlIldFADG F1w5jxvmC9raspF78qLRix+nuBxrMhE+ntGuZjuReXfN8qA3v50D4BqjY5pPKN14 Nh3USVaEQos34MFTY/ErKd3qR5nFcDaQ+3Fc1B0YOQ1H8b6qs7gz7Kz4+IOtGGUq 2RIQVBbPxs+30dd0wtFSIDkwfTvLktUy+5XVUGn9MM7KkPPWWyLh15ssb0upM5Fh CKJizjNhXVR9ZQ== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:14 2025 by rpki-client