This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json) Hash identifier: 9GnJqVu+emdXncyCAaKXpOV+zliRzktgmcThNSAyk18= Subject key identifier: 6B:37:83:C6:AC:4F:D8:E5:42:4D:D7:D9:8D:A1:B5:88:B3:D3:10:44 Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7 Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7 Certificate serial: 019B747F06E47457D850EA292F06D79594E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft Manifest number: 0E0B Signing time: Wed 31 Dec 2025 13:00:40 +0000 Manifest this update: Wed 31 Dec 2025 13:00:40 +0000 Manifest next update: Thu 01 Jan 2026 13:00:40 +0000 Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: BxtG54iapXXeeFtHRSIBP3MxE8ud7TltJRsweIZ0wmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:7f:06:e4:74:57:d8:50:ea:29:2f:06:d7:95:94:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7 Validity Not Before: Dec 31 13:00:40 2025 GMT Not After : Jan 1 13:00:40 2026 GMT Subject: CN=6b3783c6ac4fd8e5424dd7d98da1b588b3d31044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:af:87:08:60:dd:3a:55:99:11:1c:df:c8: 42:10:88:47:8e:e5:72:8c:44:4c:41:82:8f:27:a4: 58:34:6d:ee:e2:48:2b:cd:f1:27:9c:f9:b6:8c:a1: 5e:3f:e8:0c:16:b2:01:26:3e:20:34:fc:6d:dc:e6: 1b:53:54:f8:30:83:77:a1:5b:c3:e9:2d:eb:a0:94: a5:2d:50:25:9b:12:fd:09:5b:d8:b7:78:a6:19:68: 44:bc:9c:57:c9:81:ca:6b:67:ee:d3:e2:c4:10:1c: f3:92:90:11:6e:41:fa:5c:7c:55:d3:7d:d4:20:2c: 6f:33:dd:dc:e5:51:9b:4a:98:ec:1f:93:db:c9:3e: 74:a4:a2:2f:1f:4b:3d:eb:74:b5:c6:9f:4a:c4:26: 94:46:91:bf:68:bd:f6:7a:c3:05:e3:5e:9b:fc:04: b4:39:f0:0a:de:64:de:98:b9:39:a8:d3:4d:c9:93: d9:c0:fe:e8:6a:2a:b0:5e:b6:f9:45:d3:33:2f:b5: a3:59:58:ec:f1:f1:49:f6:bf:f3:66:5b:d2:c2:11: 6c:6b:85:d4:b6:01:3b:1b:40:61:13:3b:14:84:6c: ec:e3:4e:04:ce:f5:a7:63:c9:df:0b:98:d1:5c:25: 0a:5c:d1:57:ea:b4:14:37:cc:58:86:fa:b1:a4:9b: 7e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:37:83:C6:AC:4F:D8:E5:42:4D:D7:D9:8D:A1:B5:88:B3:D3:10:44 X509v3 Authority Key Identifier: keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:e0:66:96:0f:32:70:bd:f1:8c:61:95:c4:7f:43:5b:c7:6a: 0e:fe:0a:9f:54:89:b3:a0:8d:df:dd:b0:00:3d:37:8f:6b:fd: 80:08:9c:90:3f:f5:ba:b4:30:15:4b:5e:51:90:96:79:76:68: f6:a5:20:b9:cd:62:3f:48:e9:20:81:cb:d6:4c:5f:82:1a:fc: da:80:ce:7d:db:26:e4:72:d7:51:11:a4:23:cb:38:c8:a2:f7: ab:d1:25:f3:c2:01:1f:c4:cb:3d:e8:f6:ab:75:0f:14:5f:80: 7b:01:cd:07:17:a5:21:fe:16:de:2e:42:ee:20:5c:f1:f4:ac: 56:fc:19:ab:49:5d:52:d5:58:3b:d3:b0:7e:eb:23:f0:b2:84: 86:96:40:7e:5f:8a:00:2d:8c:79:21:9a:21:f9:3b:95:12:6f: 15:04:b9:42:f6:fa:3e:dc:d2:0c:48:f9:4a:cc:90:a0:87:e0: 36:62:a3:8d:f4:63:af:49:35:54:81:26:1e:0f:5a:1c:48:6f: 54:f7:cd:13:b2:af:07:31:be:43:f7:81:5b:10:27:1c:b4:1a: 89:10:aa:45:f7:33:ce:d6:39:ed:d2:0e:7a:70:5b:cf:0e:94: ea:95:28:19:07:71:e2:35:be:de:be:a8:b6:25:34:b9:16:85: b0:a1:69:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt0fwbkdFfYUOopLwbXlZTgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmYyZGJmZGQzMDlmMjYwMzI0Y2FhN2UzZWRhNzc5M2Y4 NTQxYTcwHhcNMjUxMjMxMTMwMDQwWhcNMjYwMTAxMTMwMDQwWjAzMTEwLwYDVQQD Eyg2YjM3ODNjNmFjNGZkOGU1NDI0ZGQ3ZDk4ZGExYjU4OGIzZDMxMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOevhwhg3TpVmREc38hCEIhHjuVy jERMQYKPJ6RYNG3u4kgrzfEnnPm2jKFeP+gMFrIBJj4gNPxt3OYbU1T4MIN3oVvD 6S3roJSlLVAlmxL9CVvYt3imGWhEvJxXyYHKa2fu0+LEEBzzkpARbkH6XHxV033U ICxvM93c5VGbSpjsH5PbyT50pKIvH0s963S1xp9KxCaURpG/aL32esMF416b/AS0 OfAK3mTemLk5qNNNyZPZwP7oaiqwXrb5RdMzL7WjWVjs8fFJ9r/zZlvSwhFsa4XU tgE7G0BhEzsUhGzs404EzvWnY8nfC5jRXCUKXNFX6rQUN8xYhvqxpJt+CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGs3g8asT9jlQk3X2Y2htYiz0xBEMB8GA1UdIwQY MBaAFMEvLb/dMJ8mAyTKp+Ptp3k/hUGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQt MGZiZWFlY2Q5M2E0LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQtMGZiZWFlY2Q5M2E0 LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP+Bmlg8y cL3xjGGVxH9DW8dqDv4Kn1SJs6CN392wAD03j2v9gAickD/1urQwFUteUZCWeXZo 9qUguc1iP0jpIIHL1kxfghr82oDOfdsm5HLXURGkI8s4yKL3q9El88IBH8TLPej2 q3UPFF+AewHNBxelIf4W3i5C7iBc8fSsVvwZq0ldUtVYO9Owfusj8LKEhpZAfl+K AC2MeSGaIfk7lRJvFQS5Qvb6PtzSDEj5SsyQoIfgNmKjjfRjr0k1VIEmHg9aHEhv VPfNE7KvBzG+Q/eBWxAnHLQaiRCqRfczztY57dIOenBbzw6U6pUoGQdx4jW+3r6o tiU0uRaFsKFpcw== -----END CERTIFICATE-----Generated at Wed Dec 31 22:50:31 2025 by rpki-client