This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft File: WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json) Hash identifier: x75sQgnzjp016KGm3lym6itrLVT+Kj3pyVk7RxPBRHE= Subject key identifier: 86:81:59:A3:A6:25:82:E0:D3:FE:42:BE:A9:BD:19:82:D0:C4:35:A8 Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9 Certificate issuer: /CN=5b040b39cd994909f550410dc47945bb5b4952f9 Certificate serial: 019B443831C373B558E3588D34504BC93405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft Manifest number: 1788 Signing time: Mon 22 Dec 2025 04:01:31 +0000 Manifest this update: Mon 22 Dec 2025 04:01:31 +0000 Manifest next update: Tue 23 Dec 2025 04:01:31 +0000 Files and hashes: 1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: l1WJauEIYFuBn1EaX69no6YUjLXWx9+BHRgyo4IEeCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:38:31:c3:73:b5:58:e3:58:8d:34:50:4b:c9:34:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9 Validity Not Before: Dec 22 04:01:31 2025 GMT Not After : Dec 23 04:01:31 2025 GMT Subject: CN=868159a3a62582e0d3fe42bea9bd1982d0c435a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6f:cb:26:e2:03:4c:92:45:ff:56:33:f1:e0: 67:cc:8d:bc:25:93:20:9d:ea:b1:1a:1a:4a:ba:40: db:06:54:8b:90:e2:b3:04:fa:dc:c2:58:9f:2e:95: df:aa:10:5b:8d:4a:49:f9:85:cf:df:5e:b2:b6:ba: 13:4f:33:01:d9:b0:fe:29:d4:fd:aa:d9:c2:1b:95: de:6e:e4:12:53:69:ef:83:fd:54:02:6a:7e:89:08: 96:d2:3b:8d:1b:08:b3:56:14:44:1b:25:38:52:c1: 15:7a:a6:d5:20:c5:30:e9:68:33:db:7f:f9:49:4d: ae:19:78:bc:e0:bf:c9:fb:3c:32:19:29:a0:fb:1e: 2e:36:11:82:fa:ce:4b:36:11:d6:18:82:0e:a6:88: b6:40:ad:d6:7e:83:ea:d1:1f:51:4d:fd:83:b0:b0: 4f:3f:91:28:5b:cb:7e:d5:36:d4:8e:67:b6:11:a5: 42:b4:82:bb:4a:7f:46:2f:07:52:48:9a:5a:2e:45: 4a:22:1b:28:04:1e:30:09:be:ac:f4:60:66:17:5f: 0b:df:d9:9b:34:86:cb:52:b3:dc:b3:be:44:ff:b9: c1:b9:91:a3:fa:e0:a9:be:97:06:c7:1e:9f:35:2c: 5b:9d:13:7b:cd:7f:1f:a2:8d:65:00:d6:16:3b:09: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:81:59:A3:A6:25:82:E0:D3:FE:42:BE:A9:BD:19:82:D0:C4:35:A8 X509v3 Authority Key Identifier: keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:c8:e2:0a:44:b5:92:4b:ef:71:dd:18:0c:07:cb:47:92: fc:2d:c2:93:ff:e9:d1:fd:20:06:7b:01:e8:b8:fe:bc:2a:31: 05:df:cd:fa:3f:7a:1c:73:c2:e3:05:c3:70:1d:24:53:2e:a4: f9:8e:56:75:96:1c:5e:4f:3f:4d:47:d6:d2:31:f1:ae:8a:51: 29:0f:d3:9e:a1:b0:d5:27:4b:4e:22:91:23:f4:0c:4f:6d:54: 2b:af:a7:cc:75:72:cd:3d:f1:22:cc:8a:82:49:c6:76:66:5b: 2d:2e:1a:a1:3d:25:b9:76:13:72:c5:c5:14:43:6e:e0:cf:02: 13:ca:27:a7:01:99:30:c7:32:3f:b2:d4:b3:ef:16:55:4c:e7: d9:f4:42:99:52:13:b3:ee:e5:d7:7c:bc:41:ef:0d:17:38:29: 0f:99:6d:92:9e:08:b8:36:90:fe:b7:de:f7:0b:be:20:7a:50: 5f:10:ee:a8:e6:89:a5:02:6a:af:74:aa:a6:63:be:bb:57:b3: 2b:7f:dc:b0:7e:a4:76:b3:8e:4c:f7:9e:12:0e:92:61:a4:4f: cf:26:7b:6a:bc:0c:48:d5:dd:a9:ad:42:e5:cc:ca:40:dd:f3: 12:55:fb:09:9a:57:7e:e3:8e:d6:92:e8:6a:5c:47:89:2d:b0: 81:35:37:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEODHDc7VY41iNNFBLyTQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMDQwYjM5Y2Q5OTQ5MDlmNTUwNDEwZGM0Nzk0NWJiNWI0 OTUyZjkwHhcNMjUxMjIyMDQwMTMxWhcNMjUxMjIzMDQwMTMxWjAzMTEwLwYDVQQD Eyg4NjgxNTlhM2E2MjU4MmUwZDNmZTQyYmVhOWJkMTk4MmQwYzQzNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2/LJuIDTJJF/1Yz8eBnzI28JZMg neqxGhpKukDbBlSLkOKzBPrcwlifLpXfqhBbjUpJ+YXP316ytroTTzMB2bD+KdT9 qtnCG5XebuQSU2nvg/1UAmp+iQiW0juNGwizVhREGyU4UsEVeqbVIMUw6Wgz23/5 SU2uGXi84L/J+zwyGSmg+x4uNhGC+s5LNhHWGIIOpoi2QK3WfoPq0R9RTf2DsLBP P5EoW8t+1TbUjme2EaVCtIK7Sn9GLwdSSJpaLkVKIhsoBB4wCb6s9GBmF18L39mb NIbLUrPcs75E/7nBuZGj+uCpvpcGxx6fNSxbnRN7zX8foo1lANYWOwlKXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaBWaOmJYLg0/5Cvqm9GYLQxDWoMB8GA1UdIwQY MBaAFFsECznNmUkJ9VBBDcR5RbtbSVL5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTkt NTVlNzAyMDliZTMyLzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9iM2FmYzktNDFmMC00NjY3LWI5MTktNTVlNzAyMDliZTMy LzEvV3dRTE9jMlpTUW4xVUVFTnhIbEZ1MXRKVXZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPXI4gpE tZJL73HdGAwHy0eS/C3Ck//p0f0gBnsB6Lj+vCoxBd/N+j96HHPC4wXDcB0kUy6k +Y5WdZYcXk8/TUfW0jHxropRKQ/TnqGw1SdLTiKRI/QMT21UK6+nzHVyzT3xIsyK gknGdmZbLS4aoT0luXYTcsXFFENu4M8CE8onpwGZMMcyP7LUs+8WVUzn2fRCmVIT s+7l13y8Qe8NFzgpD5ltkp4IuDaQ/rfe9wu+IHpQXxDuqOaJpQJqr3SqpmO+u1ez K3/csH6kdrOOTPeeEg6SYaRPzyZ7arwMSNXdqa1C5czKQN3zElX7CZpXfuOO1pLo alxHiS2wgTU3Uw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:05:23 2025 by rpki-client