This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json) Hash identifier: +gq9yZkzXjTtes6ywUHNsX4DX5b6HJ7SeINh2LOYRJw= Subject key identifier: FF:BD:51:7E:DE:38:DB:F0:0D:39:0A:4B:11:B8:7B:52:9F:39:F4:A7 Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed Certificate serial: 019B41A4137B4CA5B6D2DB88B18F529CFE2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 16:00:30 +0000 Manifest this update: Sun 21 Dec 2025 16:00:30 +0000 Manifest next update: Mon 22 Dec 2025 16:00:30 +0000 Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: w15x9DTVCrEFKz5VUPByVtdHd+HSk45Hl422e8ojcMg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:13:7b:4c:a5:b6:d2:db:88:b1:8f:52:9c:fe:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed Validity Not Before: Dec 21 16:00:30 2025 GMT Not After : Dec 22 16:00:30 2025 GMT Subject: CN=ffbd517ede38dbf00d390a4b11b87b529f39f4a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5e:72:d3:86:e6:24:95:a6:42:be:2a:d2:69: c9:15:92:c7:74:24:1e:d1:72:4d:2a:63:38:38:ca: 33:8e:07:e0:9e:dc:c7:af:a8:a7:fa:f2:51:ba:85: e7:8d:af:ca:20:79:53:d7:45:a9:b2:fa:ac:c8:d0: 64:06:1d:2a:6d:a2:e4:f5:21:36:a0:e8:87:09:c7: 4a:94:03:4d:75:51:96:12:ca:cb:fd:35:06:7f:30: f2:db:b9:03:58:d5:42:05:bd:b0:ea:ea:1e:4f:29: a0:cc:21:95:34:1b:f1:69:4b:0e:1f:ae:05:d6:6e: 8a:d4:bc:39:74:10:85:0d:3b:8a:13:7e:d8:32:0b: f2:7d:35:91:b3:10:d8:c1:2c:e4:8d:66:9a:8c:02: c2:98:bb:d6:1b:99:bf:e1:33:e1:46:b1:4f:54:be: 06:bf:2d:50:d0:47:e0:9d:ea:f0:a9:d0:ec:92:c1: 22:21:33:3c:c7:8c:e4:bb:96:bf:36:d1:f3:25:fa: 33:ca:0a:ed:37:16:11:f6:bb:e2:74:49:e3:91:22: 1c:3d:c4:52:3a:72:21:00:f3:d6:ff:39:dc:9a:be: 03:5f:59:f5:0d:8b:a8:7c:40:89:56:65:ed:27:0e: af:a2:3a:e1:e4:a2:86:17:6e:9b:72:23:b9:d4:75: f8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BD:51:7E:DE:38:DB:F0:0D:39:0A:4B:11:B8:7B:52:9F:39:F4:A7 X509v3 Authority Key Identifier: keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ee:ae:23:51:e4:99:bd:85:74:75:52:6f:1f:12:20:ba:2b: 2b:ea:eb:b8:78:0c:e4:4d:e5:c3:79:92:50:db:10:c4:a7:5f: 6b:28:6e:c6:32:2e:ab:13:9f:bc:31:e1:ee:98:44:4b:ac:5e: ff:0b:9b:48:d1:79:0a:00:59:09:28:50:e2:d8:61:cc:9e:41: 2a:f0:7f:68:05:6b:eb:85:f6:a2:73:a1:92:d5:4a:3d:d5:a1: b2:6a:59:94:91:0b:75:01:01:43:a3:7d:d1:68:ae:a8:f7:de: 86:b9:dd:f2:b9:51:37:23:06:a9:b2:29:f8:27:4b:9e:50:c4: 6d:57:47:ce:8d:01:28:22:e6:71:d0:e5:b2:c6:fd:48:a3:d4: bc:2b:f9:08:8b:a2:ac:f0:ee:57:46:87:f5:26:8f:57:1b:47: 76:b0:44:23:37:c3:8b:91:6c:eb:43:59:c7:79:de:e8:57:a8: dc:8f:21:f7:d0:21:cb:87:92:fb:1b:21:95:1e:e7:de:dd:92: 36:1c:3c:12:8e:8b:75:98:c5:12:14:78:72:22:ed:e7:85:45: 37:5a:ee:9b:82:32:bc:fa:3e:cc:6f:7b:da:8a:9f:01:63:6a: 1a:bf:ba:64:15:b3:40:e3:d4:6d:10:a4:dd:08:e9:37:c8:96: 09:af:58:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpBN7TKW20tuIsY9SnP4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzU2ZWI0M2YyMjBlYjUxNDFlZDg2MTUzMGFmZjI1MjFi MjFlZWQwHhcNMjUxMjIxMTYwMDMwWhcNMjUxMjIyMTYwMDMwWjAzMTEwLwYDVQQD EyhmZmJkNTE3ZWRlMzhkYmYwMGQzOTBhNGIxMWI4N2I1MjlmMzlmNGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V5y04bmJJWmQr4q0mnJFZLHdCQe 0XJNKmM4OMozjgfgntzHr6in+vJRuoXnja/KIHlT10WpsvqsyNBkBh0qbaLk9SE2 oOiHCcdKlANNdVGWEsrL/TUGfzDy27kDWNVCBb2w6uoeTymgzCGVNBvxaUsOH64F 1m6K1Lw5dBCFDTuKE37YMgvyfTWRsxDYwSzkjWaajALCmLvWG5m/4TPhRrFPVL4G vy1Q0EfgnerwqdDsksEiITM8x4zku5a/NtHzJfozygrtNxYR9rvidEnjkSIcPcRS OnIhAPPW/zncmr4DX1n1DYuofECJVmXtJw6vojrh5KKGF26bciO51HX46wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+9UX7eONvwDTkKSxG4e1KfOfSnMB8GA1UdIwQY MBaAFMLFbrQ/Ig61FB7YYVMK/yUhsh7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEt MDk4MmJiZDMxZGQ0LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEtMDk4MmJiZDMxZGQ0 LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+6uI1Hk mb2FdHVSbx8SILorK+rruHgM5E3lw3mSUNsQxKdfayhuxjIuqxOfvDHh7phES6xe /wubSNF5CgBZCShQ4thhzJ5BKvB/aAVr64X2onOhktVKPdWhsmpZlJELdQEBQ6N9 0WiuqPfehrnd8rlRNyMGqbIp+CdLnlDEbVdHzo0BKCLmcdDlssb9SKPUvCv5CIui rPDuV0aH9SaPVxtHdrBEIzfDi5Fs60NZx3ne6Feo3I8h99Ahy4eS+xshlR7n3t2S Nhw8Eo6LdZjFEhR4ciLt54VFN1rum4IyvPo+zG972oqfAWNqGr+6ZBWzQOPUbRCk 3QjpN8iWCa9YSA== -----END CERTIFICATE-----Generated at Sun Dec 21 23:00:44 2025 by rpki-client