This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json) Hash identifier: 4d+vPe6GbunRkUda2BKO5o+GHtiYJGD84mGa/i5VrZE= Subject key identifier: 73:1F:CA:2E:13:DF:A5:C5:34:8F:3E:2C:20:0C:DF:F1:99:ED:D4:12 Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed Certificate serial: 019B6E0EE6859DE006F17C7A399C4FAC4E52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft Manifest number: 179E Signing time: Tue 30 Dec 2025 07:00:28 +0000 Manifest this update: Tue 30 Dec 2025 07:00:28 +0000 Manifest next update: Wed 31 Dec 2025 07:00:28 +0000 Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: C+6R1RmqO/IW5+v7IzR4Fk3AYUS5a94CmBTx8Y4oeP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 07:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:0e:e6:85:9d:e0:06:f1:7c:7a:39:9c:4f:ac:4e:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed Validity Not Before: Dec 30 07:00:28 2025 GMT Not After : Dec 31 07:00:28 2025 GMT Subject: CN=731fca2e13dfa5c5348f3e2c200cdff199edd412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:a2:6d:3c:7f:4d:ec:4c:af:3b:37:68:10: b4:7a:d3:c8:85:c5:af:0c:53:b3:4d:b0:f9:9b:8b: ca:19:fe:66:58:65:18:20:73:0f:d8:b1:dc:8d:31: a3:84:15:dd:d1:7e:1b:7f:63:e4:f0:44:c5:2c:a8: 00:35:94:d6:89:de:b3:c6:a9:8e:5f:f1:7b:6d:b2: 93:ab:83:8e:7e:17:5d:4e:92:83:14:91:8c:f1:0c: a4:6b:a9:1e:66:bc:9e:27:68:c9:6f:02:7d:4b:5d: a8:42:65:0f:8c:5f:3d:a8:2c:17:9c:c8:94:f7:a1: be:b5:f2:ac:60:de:75:5b:5c:be:f2:86:1f:0c:d1: 39:d4:57:cd:87:f0:68:b3:25:e2:24:fe:71:d3:46: ba:b0:84:f9:2e:af:65:7d:66:8a:bc:1a:3a:fc:c1: 34:8c:a6:f2:36:5a:bb:e1:b7:b7:0f:51:2b:10:8e: 9d:97:74:48:f3:46:b4:35:80:ee:b9:ae:51:1c:4d: 4b:cf:0d:ab:7b:e4:88:2a:d4:5b:2d:09:e3:84:84: 3b:df:9f:70:45:e9:ce:f0:99:a1:a4:f4:0f:61:bc: 89:0d:98:65:3c:70:ab:37:8a:82:96:3a:83:4b:e1: b1:00:e9:bd:8f:ff:d9:3f:0e:2e:c0:74:6a:8b:fe: 56:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:1F:CA:2E:13:DF:A5:C5:34:8F:3E:2C:20:0C:DF:F1:99:ED:D4:12 X509v3 Authority Key Identifier: keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2d:bc:68:42:0c:07:bd:2c:d2:fe:98:eb:07:00:86:a3:cf: 95:4e:fd:34:81:30:dc:b6:93:8a:91:67:98:62:8d:7c:24:53: 3f:4e:3e:47:ac:66:db:ad:8d:01:73:28:f8:fb:30:86:29:09: c6:34:04:8a:4a:61:19:11:ef:97:a6:36:40:99:9a:d8:4a:57: 5a:05:17:13:64:10:ad:bc:6c:f7:01:a8:b7:1c:19:31:31:00: 57:23:77:e8:f6:68:3f:e9:f4:c1:48:d1:31:5c:27:b4:dc:f9: d0:a4:ed:8f:9d:6b:d7:bd:fd:b6:4d:2b:b2:31:db:57:19:ad: 33:c4:6e:f6:bd:80:20:2f:8f:39:a5:59:38:4a:c2:89:62:60: a2:5f:46:a8:ec:2f:a2:20:af:90:06:0f:b1:69:23:eb:62:e1: e2:78:18:cc:36:5b:74:0d:b0:79:76:2f:66:dd:8c:f6:16:6f: 78:32:a5:e1:dd:00:31:11:50:db:31:f1:88:d5:e9:66:c5:cc: 4a:aa:db:1b:ce:09:77:55:68:7b:c0:d9:0c:97:2c:10:30:8f: 76:84:11:4b:65:10:2d:fe:d1:02:dd:f2:76:c8:ef:f8:00:2f: 1c:c0:59:66:5d:cc:47:b8:fd:bf:1c:d9:67:f8:41:6e:61:9c: c6:fa:5c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuDuaFneAG8Xx6OZxPrE5SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzU2ZWI0M2YyMjBlYjUxNDFlZDg2MTUzMGFmZjI1MjFi MjFlZWQwHhcNMjUxMjMwMDcwMDI4WhcNMjUxMjMxMDcwMDI4WjAzMTEwLwYDVQQD Eyg3MzFmY2EyZTEzZGZhNWM1MzQ4ZjNlMmMyMDBjZGZmMTk5ZWRkNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsOibTx/TexMrzs3aBC0etPIhcWv DFOzTbD5m4vKGf5mWGUYIHMP2LHcjTGjhBXd0X4bf2Pk8ETFLKgANZTWid6zxqmO X/F7bbKTq4OOfhddTpKDFJGM8Qyka6keZryeJ2jJbwJ9S12oQmUPjF89qCwXnMiU 96G+tfKsYN51W1y+8oYfDNE51FfNh/BosyXiJP5x00a6sIT5Lq9lfWaKvBo6/ME0 jKbyNlq74be3D1ErEI6dl3RI80a0NYDuua5RHE1Lzw2re+SIKtRbLQnjhIQ7359w RenO8JmhpPQPYbyJDZhlPHCrN4qCljqDS+GxAOm9j//ZPw4uwHRqi/5WKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMfyi4T36XFNI8+LCAM3/GZ7dQSMB8GA1UdIwQY MBaAFMLFbrQ/Ig61FB7YYVMK/yUhsh7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEt MDk4MmJiZDMxZGQ0LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEtMDk4MmJiZDMxZGQ0 LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXC28aEIM B70s0v6Y6wcAhqPPlU79NIEw3LaTipFnmGKNfCRTP04+R6xm262NAXMo+PswhikJ xjQEikphGRHvl6Y2QJma2EpXWgUXE2QQrbxs9wGotxwZMTEAVyN36PZoP+n0wUjR MVwntNz50KTtj51r1739tk0rsjHbVxmtM8Ru9r2AIC+POaVZOErCiWJgol9GqOwv oiCvkAYPsWkj62Lh4ngYzDZbdA2weXYvZt2M9hZveDKl4d0AMRFQ2zHxiNXpZsXM SqrbG84Jd1Voe8DZDJcsEDCPdoQRS2UQLf7RAt3ydsjv+AAvHMBZZl3MR7j9vxzZ Z/hBbmGcxvpciw== -----END CERTIFICATE-----Generated at Tue Dec 30 10:51:45 2025 by rpki-client