This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json) Hash identifier: s5+Cv7P9Iy/U269TgJmslfwVxgRkubieThS3zAodGro= Subject key identifier: EA:4F:09:C9:E7:A6:25:A9:19:1E:37:72:3B:08:5C:4B:B7:94:83:12 Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172 Certificate serial: 019B3FED2A8374DBF5BC97CF8C1BA4F04DF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft Manifest number: 059E Signing time: Sun 21 Dec 2025 08:01:06 +0000 Manifest this update: Sun 21 Dec 2025 08:01:06 +0000 Manifest next update: Mon 22 Dec 2025 08:01:06 +0000 Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: Yhxa68cNIkCCirXyQ4cd34gLGTp9pGan2FwkPgzPnmk=) 2: tvVyRp4L9e3meI8HjNM8zokhY-g.asa (hash: olDJRhTYRvq4nKsZ0gccZ00xYdhkTFh1VWFFg4+4L98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:2a:83:74:db:f5:bc:97:cf:8c:1b:a4:f0:4d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172 Validity Not Before: Dec 21 08:01:06 2025 GMT Not After : Dec 22 08:01:06 2025 GMT Subject: CN=ea4f09c9e7a625a9191e37723b085c4bb7948312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:14:e5:fa:a4:11:8a:ca:29:49:b8:f3:15: cb:a6:c3:00:07:56:69:b6:33:a3:e5:b5:2c:0a:b7: 84:24:8d:5f:31:16:31:e5:c6:c8:78:34:5b:c9:17: 6b:35:55:6e:0a:4c:e9:90:8f:33:c7:16:a7:13:d3: b0:8c:30:c1:1c:6a:42:16:c7:dc:03:4a:82:3d:ba: e6:00:55:78:54:03:6a:be:c1:e6:75:d3:93:dd:20: 4f:07:1a:c9:15:2a:39:a5:dc:be:ca:34:85:ce:c6: ff:eb:6a:46:4a:f5:76:dd:01:e8:28:a6:d2:d0:bb: 27:ef:53:21:28:86:d8:bf:33:27:f2:26:b4:e0:85: 47:95:40:57:80:5e:01:98:df:cf:14:95:7f:10:d0: be:cc:39:4e:1f:94:49:7f:c6:dd:05:8b:4e:4a:be: b8:41:12:5f:8b:2e:21:ac:7f:f2:3d:bf:b2:c3:0c: 32:58:f3:8b:53:c0:e2:a2:5c:c7:4b:17:8a:74:c0: c0:2d:4e:c8:e7:b6:80:8d:83:5e:65:74:54:9f:55: 9e:8e:ad:0c:c6:3c:1b:38:1f:fd:3c:22:33:6e:68: 8a:ea:e4:c3:ad:8d:45:34:c5:32:99:eb:db:7f:6a: 8b:d8:b5:be:c5:0b:b3:b5:15:ca:fc:26:2c:a7:2e: 2a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:09:C9:E7:A6:25:A9:19:1E:37:72:3B:08:5C:4B:B7:94:83:12 X509v3 Authority Key Identifier: keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:44:51:e6:83:5f:e6:02:8b:50:f2:e8:c8:91:9a:8d:ba:93: e2:c5:6b:44:1a:de:66:d1:49:ff:b8:77:48:51:c3:84:2d:7a: 14:79:48:05:1a:88:78:75:36:61:f7:de:01:fd:9f:10:0c:58: 75:f2:e4:8e:32:b1:80:2a:41:e8:64:d1:da:23:f6:11:83:1e: 3c:39:6e:4c:d0:f9:f1:53:78:e1:6b:3a:f3:28:fb:22:a0:3e: 77:fc:5b:56:77:16:cf:33:0a:85:18:69:14:50:23:9b:71:02: d9:37:d6:62:b1:5b:5a:52:55:26:7c:27:7c:10:7a:41:9e:36: 68:11:80:04:22:a3:e7:01:44:d5:62:e0:93:01:f5:7c:99:20: 87:d2:5d:7e:8c:80:1e:ef:12:73:9b:67:8a:9c:2d:f2:42:d8: 66:5a:66:26:d7:4a:45:55:b5:06:63:45:bd:e1:b7:79:b5:0d: b0:1c:3d:5b:60:71:27:0f:95:bb:10:ee:25:2e:90:9b:8c:eb: f8:ee:9f:8b:76:a2:0a:72:19:cd:c5:97:b0:78:2e:26:0a:17: 1c:fd:7a:5e:65:c9:8c:c0:66:14:b5:d7:52:1e:3a:34:50:12: b3:c6:2e:24:90:4a:bd:11:dc:b5:77:c6:fb:a6:8e:ad:cf:e7: 73:4d:e9:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7SqDdNv1vJfPjBuk8E3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm ODQxNzIwHhcNMjUxMjIxMDgwMTA2WhcNMjUxMjIyMDgwMTA2WjAzMTEwLwYDVQQD EyhlYTRmMDljOWU3YTYyNWE5MTkxZTM3NzIzYjA4NWM0YmI3OTQ4MzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9IU5fqkEYrKKUm48xXLpsMAB1Zp tjOj5bUsCreEJI1fMRYx5cbIeDRbyRdrNVVuCkzpkI8zxxanE9OwjDDBHGpCFsfc A0qCPbrmAFV4VANqvsHmddOT3SBPBxrJFSo5pdy+yjSFzsb/62pGSvV23QHoKKbS 0Lsn71MhKIbYvzMn8ia04IVHlUBXgF4BmN/PFJV/ENC+zDlOH5RJf8bdBYtOSr64 QRJfiy4hrH/yPb+ywwwyWPOLU8DiolzHSxeKdMDALU7I57aAjYNeZXRUn1Wejq0M xjwbOB/9PCIzbmiK6uTDrY1FNMUymevbf2qL2LW+xQuztRXK/CYspy4qywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpPCcnnpiWpGR43cjsIXEu3lIMSMB8GA1UdIwQY MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3 LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0RR5oNf 5gKLUPLoyJGajbqT4sVrRBreZtFJ/7h3SFHDhC16FHlIBRqIeHU2YffeAf2fEAxY dfLkjjKxgCpB6GTR2iP2EYMePDluTND58VN44Ws68yj7IqA+d/xbVncWzzMKhRhp FFAjm3EC2TfWYrFbWlJVJnwnfBB6QZ42aBGABCKj5wFE1WLgkwH1fJkgh9JdfoyA Hu8Sc5tnipwt8kLYZlpmJtdKRVW1BmNFveG3ebUNsBw9W2BxJw+VuxDuJS6Qm4zr +O6fi3aiCnIZzcWXsHguJgoXHP16XmXJjMBmFLXXUh46NFASs8YuJJBKvRHctXfG +6aOrc/nc03plQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:49:25 2025 by rpki-client