This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft File: wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft (raw, json) Hash identifier: MFZQdE/i2+xu4LrbHWYtlEI07DRwngJP6Lg8VpHiWeU= Subject key identifier: 1A:5E:8F:9B:61:3C:A5:13:E5:DE:11:9E:E4:48:FB:E9:5A:DF:40:FA Authority key identifier: C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54 Certificate issuer: /CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54 Certificate serial: 019B32D64FC396ACF3A69ED2DFF029864DD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft Manifest number: 09FC Signing time: Thu 18 Dec 2025 19:01:04 +0000 Manifest this update: Thu 18 Dec 2025 19:01:04 +0000 Manifest next update: Fri 19 Dec 2025 19:01:04 +0000 Files and hashes: 1: wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl (hash: XNgede7EW7445IX9yRpLTTGJ3Vu6/FqDrOZqHjo97jA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:4f:c3:96:ac:f3:a6:9e:d2:df:f0:29:86:4d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c9088f5b4438a4348c805eebcbf4a80e07ff54 Validity Not Before: Dec 18 19:01:04 2025 GMT Not After : Dec 19 19:01:04 2025 GMT Subject: CN=1a5e8f9b613ca513e5de119ee448fbe95adf40fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ab:c4:1f:5a:43:be:bb:36:93:f1:fa:ed:dc: 30:5a:3f:7a:e9:0d:29:f2:b8:a2:7b:ae:77:1d:35: 73:2b:6d:6a:9c:92:5b:ab:94:5b:7e:e2:55:0e:5c: 17:2a:2f:c0:f6:98:76:e6:56:1e:27:3c:66:8f:b6: e6:b4:81:4a:b4:06:01:26:8d:ea:0c:5b:a7:c3:73: 13:e4:2b:6a:87:2f:0c:7d:9c:61:6e:d4:c9:eb:e6: b5:24:d9:db:29:80:b4:7a:c1:f7:96:50:f1:67:43: 78:70:ec:d2:58:08:9f:c4:c9:bc:f0:46:6b:ba:66: 7d:20:29:18:81:15:f5:86:44:f3:df:24:3a:1b:63: 71:ee:96:d6:27:ca:cd:24:fe:c9:c4:0c:f5:e9:ca: 2d:a7:d9:74:21:b7:57:62:d3:64:5a:f8:c0:2e:e2: a1:fb:d0:07:b1:f3:e8:4b:a7:ca:89:3d:4c:df:e3: 67:da:55:39:01:6e:13:4a:45:be:3a:26:9e:c0:8a: 15:e7:25:fd:d7:b3:71:25:b4:05:64:a7:f2:6b:da: f0:0e:a8:cc:12:95:d4:f2:87:cb:fb:30:f4:ff:85: fd:54:ff:fc:a5:11:af:89:b4:32:e8:96:84:12:6d: d1:ac:2c:23:a2:46:60:4e:5e:b7:8d:b0:ea:41:eb: d5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:8F:9B:61:3C:A5:13:E5:DE:11:9E:E4:48:FB:E9:5A:DF:40:FA X509v3 Authority Key Identifier: keyid:C1:C9:08:8F:5B:44:38:A4:34:8C:80:5E:EB:CB:F4:A8:0E:07:FF:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wckIj1tEOKQ0jIBe68v0qA4H_1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/d662a6-0af5-459f-a77b-6ad533df0d24/1/wckIj1tEOKQ0jIBe68v0qA4H_1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ae:d4:66:77:d2:51:77:f6:f8:12:e2:ee:2e:4a:24:0c:01: 13:d2:8a:e8:2e:e0:80:fb:6e:6c:79:2a:d1:76:f9:b8:84:24: eb:bc:4a:d5:6e:a5:74:b2:eb:cf:bc:84:f1:9c:a7:4e:27:3c: 95:be:24:cc:c9:05:cb:71:7c:3c:b2:75:4c:87:b0:63:ce:6d: f4:f9:31:83:ee:44:82:8f:e0:14:3d:da:9b:ed:f0:a6:af:56: f4:28:ec:e7:a0:a0:51:19:a4:0e:f9:65:c2:53:e4:64:05:c2: 47:8c:8f:e8:e3:88:28:e7:fd:6b:12:90:18:dc:76:61:ce:b7: d4:e0:63:98:c2:5e:46:25:5d:1b:96:c1:0a:74:e3:9f:05:eb: da:7a:d7:f0:24:fa:96:ed:15:05:3c:0c:23:45:90:26:9c:a6: 88:0c:87:80:7b:2d:bf:e2:13:37:ad:d4:df:81:d5:e8:16:2e: c5:3d:92:c4:92:98:b3:43:f1:67:fb:c6:79:64:00:6e:37:ae: 9d:68:0a:05:c9:5d:d0:ea:db:94:24:60:36:0c:b4:46:61:6e: 3c:66:83:fc:32:a9:26:13:63:0d:85:ea:dc:6f:04:b7:83:6c: fe:40:d0:1c:fc:6a:bf:6a:26:30:8c:66:fc:a8:88:3e:cc:a6: 3e:3f:63:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1k/Dlqzzpp7S3/Aphk3VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzkwODhmNWI0NDM4YTQzNDhjODA1ZWViY2JmNGE4MGUw N2ZmNTQwHhcNMjUxMjE4MTkwMTA0WhcNMjUxMjE5MTkwMTA0WjAzMTEwLwYDVQQD EygxYTVlOGY5YjYxM2NhNTEzZTVkZTExOWVlNDQ4ZmJlOTVhZGY0MGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKvEH1pDvrs2k/H67dwwWj966Q0p 8riie653HTVzK21qnJJbq5RbfuJVDlwXKi/A9ph25lYeJzxmj7bmtIFKtAYBJo3q DFunw3MT5Ctqhy8MfZxhbtTJ6+a1JNnbKYC0esH3llDxZ0N4cOzSWAifxMm88EZr umZ9ICkYgRX1hkTz3yQ6G2Nx7pbWJ8rNJP7JxAz16cotp9l0IbdXYtNkWvjALuKh +9AHsfPoS6fKiT1M3+Nn2lU5AW4TSkW+OiaewIoV5yX917NxJbQFZKfya9rwDqjM EpXU8ofL+zD0/4X9VP/8pRGvibQy6JaEEm3RrCwjokZgTl63jbDqQevV2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpej5thPKUT5d4RnuRI++la30D6MB8GA1UdIwQY MBaAFMHJCI9bRDikNIyAXuvL9KgOB/9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9kNjYyYTYtMGFmNS00NTlmLWE3N2It NmFkNTMzZGYwZDI0LzEvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9kNjYyYTYtMGFmNS00NTlmLWE3N2ItNmFkNTMzZGYwZDI0 LzEvd2NrSWoxdEVPS1EwaklCZTY4djBxQTRIXzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASK7UZnfS UXf2+BLi7i5KJAwBE9KK6C7ggPtubHkq0Xb5uIQk67xK1W6ldLLrz7yE8ZynTic8 lb4kzMkFy3F8PLJ1TIewY85t9Pkxg+5Ego/gFD3am+3wpq9W9Cjs56CgURmkDvll wlPkZAXCR4yP6OOIKOf9axKQGNx2Yc631OBjmMJeRiVdG5bBCnTjnwXr2nrX8CT6 lu0VBTwMI0WQJpymiAyHgHstv+ITN63U34HV6BYuxT2SxJKYs0PxZ/vGeWQAbjeu nWgKBcld0OrblCRgNgy0RmFuPGaD/DKpJhNjDYXq3G8Et4Ns/kDQHPxqv2omMIxm /KiIPsymPj9jMg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:43 2025 by rpki-client