This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft File: wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json) Hash identifier: vQ2jxeoRComruB6Pdq75xMCeMt1Dn2MR6awHYNc7Z8w= Subject key identifier: B1:1D:40:D8:AB:F1:DC:73:90:F3:3A:41:3A:FB:77:15:7F:1B:19:8F Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36 Certificate issuer: /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536 Certificate serial: 019B530644A068C11D8EDF44E547518E20D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft Manifest number: 0A99 Signing time: Thu 25 Dec 2025 01:01:18 +0000 Manifest this update: Thu 25 Dec 2025 01:01:18 +0000 Manifest next update: Fri 26 Dec 2025 01:01:18 +0000 Files and hashes: 1: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: ztv1IjbSqshrnYlEz23XqxZ+4YjgTmIOx//zTwNgIgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:44:a0:68:c1:1d:8e:df:44:e5:47:51:8e:20:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536 Validity Not Before: Dec 25 01:01:18 2025 GMT Not After : Dec 26 01:01:18 2025 GMT Subject: CN=b11d40d8abf1dc7390f33a413afb77157f1b198f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:70:b1:bb:34:45:f4:dd:88:d8:c7:b7:e4: 0e:ca:90:38:36:bc:8e:35:cf:d4:af:40:07:6d:62: 81:c7:7d:46:cb:30:b3:04:0e:f7:d8:25:41:41:46: ad:c3:c1:6e:4e:87:4d:24:38:d5:5e:70:b6:67:d4: 13:69:10:7e:e5:4d:2d:88:2e:a8:33:1e:1d:21:5c: db:46:fd:a5:bc:38:70:85:3e:7f:89:91:64:6e:c6: 88:5f:5c:76:ba:f6:fc:b1:34:ae:98:4e:2b:38:7f: 34:6d:fb:69:35:7f:02:66:1a:cc:1c:ae:d3:fd:f1: 61:5b:aa:86:d9:65:b5:5f:b7:4c:03:44:7f:9e:32: c9:38:d1:4d:a9:0d:e6:4e:ae:28:d3:c4:65:1e:ba: 04:0c:a2:98:9d:01:34:f1:a2:04:bf:0b:b2:8a:06: 14:2d:96:c0:13:6a:ae:84:ab:ad:1e:ff:a3:d4:be: 21:5d:79:73:91:66:cb:82:be:6c:50:44:b2:46:9a: 7d:e4:17:7b:ee:3e:46:6d:fc:8b:f1:96:17:4f:cc: 91:a5:6a:e5:ae:3f:94:d3:b2:91:02:6e:6c:62:0e: 1b:8a:5a:92:66:7d:73:d8:52:e7:6c:47:be:5a:b2: 05:d3:00:bf:de:0a:1d:82:0a:b8:50:cf:0b:c5:fb: 3d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1D:40:D8:AB:F1:DC:73:90:F3:3A:41:3A:FB:77:15:7F:1B:19:8F X509v3 Authority Key Identifier: keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7e:b1:28:e4:f9:2d:0b:21:dd:41:d3:ea:6e:4d:15:75:04: 64:98:17:6a:4f:5c:74:01:bf:9a:8e:5e:62:26:25:a1:65:63: 35:d5:3c:df:3c:47:48:51:06:48:b2:44:b2:e7:56:76:45:c8: 6c:b0:aa:69:39:44:d0:69:14:4c:73:df:41:b9:75:1f:2c:67: 2e:19:37:69:4a:63:a3:4d:6d:d3:e2:d5:f9:5a:4b:79:be:79: 1c:fa:1d:21:7b:24:e9:1a:cd:80:7e:fa:63:ca:89:33:89:76: 42:06:69:da:8b:a6:62:ee:7d:5a:d1:d8:e8:ef:33:43:ae:d3: f9:6a:82:1d:ba:3d:d3:1c:bd:99:3c:92:b0:57:0e:c4:a9:b4: 9b:c1:7a:ff:3d:34:6a:88:c8:9f:ff:e7:aa:65:48:06:8a:f6: b2:48:f9:4c:d6:dd:8a:c7:dd:c1:fc:94:9a:d9:a9:92:9d:d0: 55:88:27:ed:81:a1:4a:10:38:d4:18:60:bf:bf:cb:56:35:52: 25:fe:c0:0e:51:72:44:d2:de:85:e7:86:81:87:d9:58:c3:20: 6e:95:fe:29:20:94:47:11:66:bc:73:44:0a:f8:61:22:b7:c3: 6b:1a:de:c0:6d:a4:91:ef:7b:76:80:c1:1b:db:2b:1a:76:04: fe:e1:72:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBkSgaMEdjt9E5UdRjiDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZGQ0NzUyZDc5ZDQzODhjMWY2YjI4NTYwM2Q0MGI1YTRi Njk1MzYwHhcNMjUxMjI1MDEwMTE4WhcNMjUxMjI2MDEwMTE4WjAzMTEwLwYDVQQD EyhiMTFkNDBkOGFiZjFkYzczOTBmMzNhNDEzYWZiNzcxNTdmMWIxOThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gZwsbs0RfTdiNjHt+QOypA4NryO Nc/Ur0AHbWKBx31GyzCzBA732CVBQUatw8FuTodNJDjVXnC2Z9QTaRB+5U0tiC6o Mx4dIVzbRv2lvDhwhT5/iZFkbsaIX1x2uvb8sTSumE4rOH80bftpNX8CZhrMHK7T /fFhW6qG2WW1X7dMA0R/njLJONFNqQ3mTq4o08RlHroEDKKYnQE08aIEvwuyigYU LZbAE2quhKutHv+j1L4hXXlzkWbLgr5sUESyRpp95Bd77j5GbfyL8ZYXT8yRpWrl rj+U07KRAm5sYg4bilqSZn1z2FLnbEe+WrIF0wC/3godggq4UM8Lxfs9SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEdQNir8dxzkPM6QTr7dxV/GxmPMB8GA1UdIwQY MBaAFMLdR1LXnUOIwfayhWA9QLWktpU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAt NGE1NzU2NjQ5ZTAxLzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAtNGE1NzU2NjQ5ZTAx LzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL36xKOT5 LQsh3UHT6m5NFXUEZJgXak9cdAG/mo5eYiYloWVjNdU83zxHSFEGSLJEsudWdkXI bLCqaTlE0GkUTHPfQbl1HyxnLhk3aUpjo01t0+LV+VpLeb55HPodIXsk6RrNgH76 Y8qJM4l2QgZp2oumYu59WtHY6O8zQ67T+WqCHbo90xy9mTySsFcOxKm0m8F6/z00 aojIn//nqmVIBor2skj5TNbdisfdwfyUmtmpkp3QVYgn7YGhShA41Bhgv7/LVjVS Jf7ADlFyRNLeheeGgYfZWMMgbpX+KSCURxFmvHNECvhhIrfDaxrewG2kke97doDB G9srGnYE/uFyjg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:31:32 2025 by rpki-client