This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft File: wOuGHF00WeA57O8QTP2T8ggnx0U.mft (raw, json) Hash identifier: ip5DKg0rlLMOhq2+ZD1vAMWrqAb2BACB3/Otaz3iSuw= Subject key identifier: CC:FF:93:97:97:73:AB:4B:DE:0F:2F:A2:1C:AE:4D:50:87:5E:E4:60 Authority key identifier: C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45 Certificate issuer: /CN=c0eb861c5d3459e039ecef104cfd93f20827c745 Certificate serial: 019B4F5FE180E550530EC4DEB5B983022B0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft Manifest number: 0332 Signing time: Wed 24 Dec 2025 08:00:42 +0000 Manifest this update: Wed 24 Dec 2025 08:00:42 +0000 Manifest next update: Thu 25 Dec 2025 08:00:42 +0000 Files and hashes: 1: wOuGHF00WeA57O8QTP2T8ggnx0U.crl (hash: /ZsopIA1vBgVVf6NLIqMAtZh9plJ3SWLzY4hWbSDn+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:e1:80:e5:50:53:0e:c4:de:b5:b9:83:02:2b:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0eb861c5d3459e039ecef104cfd93f20827c745 Validity Not Before: Dec 24 08:00:42 2025 GMT Not After : Dec 25 08:00:42 2025 GMT Subject: CN=ccff93979773ab4bde0f2fa21cae4d50875ee460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:4e:65:b4:41:9a:ce:1b:0a:70:03:9c:81: 56:0d:e5:ed:4d:93:fb:ac:72:8f:90:7a:5a:21:25: ee:7d:75:5b:0a:15:c7:e2:7d:28:a4:52:bf:38:28: 0e:29:41:17:a2:f0:66:b6:b8:b9:0f:1b:b4:15:d8: b5:67:f1:e3:e4:67:f3:7b:70:88:05:71:f3:50:39: d9:63:45:cb:8a:2b:5d:38:ba:bd:2e:47:48:f5:0d: cd:df:55:7e:eb:45:e0:46:8c:d0:1e:69:25:aa:bb: b8:c2:fc:2c:2c:a6:a6:99:75:e9:c6:73:20:a6:ee: 7d:39:9d:a1:22:47:2a:33:a3:f5:fa:50:62:85:04: f7:ad:ce:5d:ed:e7:cf:ab:2c:bd:51:69:23:98:66: 62:3c:86:14:52:c1:4b:6e:23:17:54:3b:99:03:df: 1f:40:96:bf:ca:ee:8e:16:47:6b:e0:02:a2:9b:1c: b3:d7:0d:a1:f2:54:51:68:59:93:6e:1d:e2:79:b1: d7:bb:37:0b:a7:e4:8e:41:2f:5a:8a:3a:7d:8f:88: 57:e0:f2:0a:10:a7:47:e0:a4:95:e6:2a:a7:85:01: 40:65:21:90:d9:fe:f8:f5:7a:21:bb:7f:32:66:8c: d0:ed:35:60:ae:c2:96:a6:dc:55:20:ac:ea:00:cb: 58:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:FF:93:97:97:73:AB:4B:DE:0F:2F:A2:1C:AE:4D:50:87:5E:E4:60 X509v3 Authority Key Identifier: keyid:C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:0b:a7:27:26:71:f7:00:4e:fd:7f:8b:89:94:46:08:a0:a4: d6:da:50:ca:55:0e:33:26:77:92:fe:25:64:be:c3:25:0e:40: e7:16:2c:94:c7:e6:19:de:07:1f:c6:f0:bf:cb:f0:82:a8:15: d0:55:8b:35:97:4b:31:4c:f8:85:6e:f8:d4:9f:a9:8f:1a:fd: 57:23:0d:4f:8b:60:67:84:7a:56:8e:37:c3:84:6b:87:0c:23: 26:5b:41:a1:75:86:de:a2:88:e2:5c:2f:93:14:50:45:db:d1: 29:88:43:1f:a5:e8:3e:5d:08:74:af:51:e7:5b:44:60:2f:a6: cb:48:b0:ba:f3:04:42:b4:26:7a:ee:49:2e:ba:08:04:9a:c8: de:f2:fb:71:77:15:ed:e6:79:38:18:07:a9:37:b6:c6:f7:cc: f0:c6:44:fe:7a:c3:80:cf:8e:e4:3e:a9:0b:8d:ab:ed:59:39: 00:65:cf:e5:8e:7b:c4:03:65:f5:45:12:90:2d:fa:7b:cf:63: cb:46:dd:cc:53:9e:2a:7a:67:23:9d:77:50:ef:1b:ab:b1:bd: 60:26:4d:31:b9:53:db:41:0a:8f:0b:ec:81:f0:8d:1a:a2:f4: 19:99:e7:68:6d:1b:84:f6:9f:7f:54:da:e7:54:09:26:ca:c7: 8b:6a:8e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX+GA5VBTDsTetbmDAisMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWI4NjFjNWQzNDU5ZTAzOWVjZWYxMDRjZmQ5M2YyMDgy N2M3NDUwHhcNMjUxMjI0MDgwMDQyWhcNMjUxMjI1MDgwMDQyWjAzMTEwLwYDVQQD EyhjY2ZmOTM5Nzk3NzNhYjRiZGUwZjJmYTIxY2FlNGQ1MDg3NWVlNDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq79OZbRBms4bCnADnIFWDeXtTZP7 rHKPkHpaISXufXVbChXH4n0opFK/OCgOKUEXovBmtri5Dxu0Fdi1Z/Hj5Gfze3CI BXHzUDnZY0XLiitdOLq9LkdI9Q3N31V+60XgRozQHmklqru4wvwsLKammXXpxnMg pu59OZ2hIkcqM6P1+lBihQT3rc5d7efPqyy9UWkjmGZiPIYUUsFLbiMXVDuZA98f QJa/yu6OFkdr4AKimxyz1w2h8lRRaFmTbh3iebHXuzcLp+SOQS9aijp9j4hX4PIK EKdH4KSV5iqnhQFAZSGQ2f749Xohu38yZozQ7TVgrsKWptxVIKzqAMtYlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMz/k5eXc6tL3g8vohyuTVCHXuRgMB8GA1UdIwQY MBaAFMDrhhxdNFngOezvEEz9k/IIJ8dFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd091R0hGMDBXZUE1N084UVRQMlQ4Z2dueDBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZWU2OTItNmQ2NC00NzNhLWEwNjMt MmNmZTgzNjY2NjBmLzEvd091R0hGMDBXZUE1N084UVRQMlQ4Z2dueDBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC8wZWU2OTItNmQ2NC00NzNhLWEwNjMtMmNmZTgzNjY2NjBm LzEvd091R0hGMDBXZUE1N084UVRQMlQ4Z2dueDBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwunJyZx 9wBO/X+LiZRGCKCk1tpQylUOMyZ3kv4lZL7DJQ5A5xYslMfmGd4HH8bwv8vwgqgV 0FWLNZdLMUz4hW741J+pjxr9VyMNT4tgZ4R6Vo43w4RrhwwjJltBoXWG3qKI4lwv kxRQRdvRKYhDH6XoPl0IdK9R51tEYC+my0iwuvMEQrQmeu5JLroIBJrI3vL7cXcV 7eZ5OBgHqTe2xvfM8MZE/nrDgM+O5D6pC42r7Vk5AGXP5Y57xANl9UUSkC36e89j y0bdzFOeKnpnI513UO8bq7G9YCZNMblT20EKjwvsgfCNGqL0GZnnaG0bhPaff1Ta 51QJJsrHi2qOAQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:07:02 2025 by rpki-client