This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft File: wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft (raw, json) Hash identifier: cR841Lz4OgK1PoWqtuXvb0EWZzXkLh5nZOoJBOoxYb8= Subject key identifier: 41:3E:E9:5F:A4:82:C2:76:37:89:04:AA:3C:C1:39:99:15:87:5F:E3 Authority key identifier: C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48 Certificate issuer: /CN=c2476c8db549f7b588a902b0f4ce80beb6d25748 Certificate serial: 019B4E4E02816EF7FF43BAD944ECB71C5BD5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft Manifest number: 0E1C Signing time: Wed 24 Dec 2025 03:01:33 +0000 Manifest this update: Wed 24 Dec 2025 03:01:33 +0000 Manifest next update: Thu 25 Dec 2025 03:01:33 +0000 Files and hashes: 1: wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl (hash: tgaqqpPiY82cohw8GWbOp/BctVg17DmOLLH0vOJ2FBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4e:02:81:6e:f7:ff:43:ba:d9:44:ec:b7:1c:5b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2476c8db549f7b588a902b0f4ce80beb6d25748 Validity Not Before: Dec 24 03:01:33 2025 GMT Not After : Dec 25 03:01:33 2025 GMT Subject: CN=413ee95fa482c276378904aa3cc1399915875fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e6:c3:93:ed:d7:f6:fe:7d:c3:b0:98:d5:b0: 7d:c6:2a:d9:f6:94:5e:4a:ed:68:8d:a0:aa:35:1d: 78:1f:48:56:50:98:80:11:e4:8f:0b:df:46:96:e9: e6:38:0d:7c:16:a2:e7:cf:af:1c:eb:bb:64:10:fc: 89:92:98:5f:95:0e:e7:af:a0:94:7e:9a:2f:dd:e8: d9:b8:c1:b8:2b:8c:b4:b9:49:77:53:4d:db:61:71: f6:6a:60:2d:e1:bb:93:8a:8f:d1:a3:8c:5b:60:e3: c4:fb:df:64:5f:50:7d:d7:aa:09:60:03:2f:64:b9: 20:9c:99:0a:98:22:26:2e:c7:19:3b:e6:54:b1:e3: 9a:99:4e:8a:65:ab:4f:60:44:be:e9:70:c7:2a:d3: 1a:78:61:c9:86:95:6d:36:eb:a7:fe:90:2a:ba:9d: 88:45:26:0d:1b:f2:86:36:62:30:43:a7:f3:94:ef: 5f:04:11:a9:e6:ea:ca:0a:39:95:6a:dc:1e:35:1e: 9d:f6:3d:58:a4:10:27:3c:60:28:80:19:c3:bd:50: 30:99:03:d9:f8:a0:3c:aa:94:5b:56:fb:42:a9:ab: 78:5e:30:90:ca:5f:50:93:1a:67:f9:cb:48:bc:c1: a0:b1:b6:ac:cc:97:87:aa:74:96:82:56:7a:df:f2: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3E:E9:5F:A4:82:C2:76:37:89:04:AA:3C:C1:39:99:15:87:5F:E3 X509v3 Authority Key Identifier: keyid:C2:47:6C:8D:B5:49:F7:B5:88:A9:02:B0:F4:CE:80:BE:B6:D2:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkdsjbVJ97WIqQKw9M6AvrbSV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/14eb92-33f3-4ece-aecb-1f0bf0d8cb36/1/wkdsjbVJ97WIqQKw9M6AvrbSV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f2:5b:2f:eb:1d:a0:ec:b1:58:39:f1:b2:63:8d:31:d3:58: 2c:05:76:23:73:ff:cb:2a:0d:9d:37:e7:cf:58:41:50:26:8d: 91:30:e8:0b:71:19:c3:26:6d:f9:6f:0c:2e:bf:37:6d:65:fd: 65:cf:0e:7d:d8:34:2a:73:ad:af:e0:eb:78:cb:94:18:7a:be: 6c:02:f9:af:f5:8e:31:c1:d0:f4:9f:ce:80:28:ce:c7:51:dc: d3:94:da:13:9f:7e:a8:5e:22:7d:01:c0:3c:cd:b5:71:41:9a: 16:f1:0f:87:4a:c7:fa:43:11:60:06:22:f5:42:32:c4:8c:d2: a8:65:c8:3a:8e:fb:fe:65:9e:c5:a4:c5:44:5c:5a:4d:2e:9b: 40:6a:7b:b9:1a:bb:eb:d1:bc:54:66:de:7b:de:a3:0c:fe:ec: e2:18:99:44:36:24:e2:e1:38:2b:90:4f:a9:a1:d7:65:e6:99: a2:e7:14:ff:38:3f:26:3b:4e:78:82:e8:d0:a4:16:08:c5:85: 7d:12:ae:51:a7:fd:b6:f0:d2:7c:ae:b6:b1:28:ca:9f:8f:0e: 4a:ee:d3:4a:3c:f4:da:84:5b:88:69:a8:8d:d7:1b:53:cc:da: b6:86:cc:79:d5:9a:04:28:4a:6d:80:28:b8:79:66:41:2e:f7: 90:04:0c:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTgKBbvf/Q7rZROy3HFvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNDc2YzhkYjU0OWY3YjU4OGE5MDJiMGY0Y2U4MGJlYjZk MjU3NDgwHhcNMjUxMjI0MDMwMTMzWhcNMjUxMjI1MDMwMTMzWjAzMTEwLwYDVQQD Eyg0MTNlZTk1ZmE0ODJjMjc2Mzc4OTA0YWEzY2MxMzk5OTE1ODc1ZmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuebDk+3X9v59w7CY1bB9xirZ9pRe Su1ojaCqNR14H0hWUJiAEeSPC99GlunmOA18FqLnz68c67tkEPyJkphflQ7nr6CU fpov3ejZuMG4K4y0uUl3U03bYXH2amAt4buTio/Ro4xbYOPE+99kX1B916oJYAMv ZLkgnJkKmCImLscZO+ZUseOamU6KZatPYES+6XDHKtMaeGHJhpVtNuun/pAqup2I RSYNG/KGNmIwQ6fzlO9fBBGp5urKCjmVatweNR6d9j1YpBAnPGAogBnDvVAwmQPZ +KA8qpRbVvtCqat4XjCQyl9Qkxpn+ctIvMGgsbaszJeHqnSWglZ63/IozQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE+6V+kgsJ2N4kEqjzBOZkVh1/jMB8GA1UdIwQY MBaAFMJHbI21Sfe1iKkCsPTOgL620ldIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2It MWYwYmYwZDhjYjM2LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8xNGViOTItMzNmMy00ZWNlLWFlY2ItMWYwYmYwZDhjYjM2 LzEvd2tkc2piVko5N1dJcVFLdzlNNkF2cmJTVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/JbL+sd oOyxWDnxsmONMdNYLAV2I3P/yyoNnTfnz1hBUCaNkTDoC3EZwyZt+W8MLr83bWX9 Zc8Ofdg0KnOtr+DreMuUGHq+bAL5r/WOMcHQ9J/OgCjOx1Hc05TaE59+qF4ifQHA PM21cUGaFvEPh0rH+kMRYAYi9UIyxIzSqGXIOo77/mWexaTFRFxaTS6bQGp7uRq7 69G8VGbee96jDP7s4hiZRDYk4uE4K5BPqaHXZeaZoucU/zg/JjtOeILo0KQWCMWF fRKuUaf9tvDSfK62sSjKn48OSu7TSjz02oRbiGmojdcbU8zatobMedWaBChKbYAo uHlmQS73kAQMBg== -----END CERTIFICATE-----Generated at Wed Dec 24 09:22:22 2025 by rpki-client