This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft File: rwsdp573_B75WWLcigHyuNSzUr8.mft (raw, json) Hash identifier: l88RDJ4oZSxfQmpfW1CDCVdKXqac9nGJjkjm6B6Z1lg= Subject key identifier: D5:BD:6E:7B:9A:F9:57:ED:5D:05:B7:1D:08:B5:A8:4D:34:1C:D4:68 Authority key identifier: AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF Certificate issuer: /CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf Certificate serial: 019B5305CB7D321879C814C12393031A4030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft Manifest number: 1792 Signing time: Thu 25 Dec 2025 01:00:47 +0000 Manifest this update: Thu 25 Dec 2025 01:00:47 +0000 Manifest next update: Fri 26 Dec 2025 01:00:47 +0000 Files and hashes: 1: rwsdp573_B75WWLcigHyuNSzUr8.crl (hash: xTlebr8HK1LFYh4de7TVJPyMRM4H11cBPQK3lqgieqQ=) 2: vBhOSTDQ49TslR4g5aFAmSJtgZc.roa (hash: aLXO7nptimuP4wg3B24RL4qfzAQVY1HjgqZOXJ6H+xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:05:cb:7d:32:18:79:c8:14:c1:23:93:03:1a:40:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af0b1da79ef7fc1ef95962dc8a01f2b8d4b352bf Validity Not Before: Dec 25 01:00:47 2025 GMT Not After : Dec 26 01:00:47 2025 GMT Subject: CN=d5bd6e7b9af957ed5d05b71d08b5a84d341cd468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:13:21:4f:0e:9b:84:0c:f4:bf:50:df:2c:2d: c8:2d:aa:4a:9a:d6:c1:00:10:aa:7f:18:78:65:9f: 5a:98:c4:e6:a5:51:0e:ac:ad:5b:0f:b9:cf:91:02: c1:21:9a:46:27:65:a7:d3:8d:0e:95:17:4f:13:b6: de:ed:af:79:22:58:4b:2c:b5:94:d4:28:ed:60:1f: 3c:ac:ab:43:51:6f:cc:4a:12:39:60:d3:de:93:82: f5:30:e1:c7:2e:7a:9e:9b:73:f7:a3:68:d9:5e:03: 28:96:ae:e5:9f:0a:07:46:fe:da:cb:11:a3:47:2d: 5d:90:26:18:8b:f2:df:e3:8f:fc:37:2b:64:5a:4b: 32:26:cf:1e:35:42:20:9b:ba:3a:c0:32:13:e2:77: 9d:01:b3:eb:14:7c:8c:e6:0c:a6:8e:dc:52:61:92: c4:2c:c9:71:2e:e6:d1:0e:ea:13:f3:ef:85:10:37: bc:3c:03:e7:7c:09:c2:60:c5:8e:f4:11:d6:66:44: ea:39:76:4c:45:99:18:36:68:a9:bb:44:d6:00:4b: 12:54:66:3c:a1:da:5d:de:7b:91:b1:f4:50:df:8a: 1c:a9:31:34:ac:55:6f:c7:87:17:98:c3:4e:b5:54: 72:e4:b0:b3:7f:0a:2b:02:80:5c:05:84:a8:11:0d: 50:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BD:6E:7B:9A:F9:57:ED:5D:05:B7:1D:08:B5:A8:4D:34:1C:D4:68 X509v3 Authority Key Identifier: keyid:AF:0B:1D:A7:9E:F7:FC:1E:F9:59:62:DC:8A:01:F2:B8:D4:B3:52:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwsdp573_B75WWLcigHyuNSzUr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/00898a-e7c0-4836-a96b-92b2ea319bc1/1/rwsdp573_B75WWLcigHyuNSzUr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:11:b6:d8:07:58:5a:3f:43:96:60:8f:3e:8a:0c:8c:b7:63: f1:30:97:48:14:14:e8:c7:66:dc:3e:cb:a1:ac:8e:70:1b:31: 05:a9:31:a4:78:07:c4:88:f3:03:f1:2f:12:30:c7:c6:58:25: ca:b4:5b:fb:37:94:0b:bf:b8:e9:c7:7e:ab:ef:93:e8:2a:0d: a1:99:3d:b3:40:3b:f5:9f:88:61:8b:83:0d:16:3c:5c:e7:dc: 79:f8:a7:04:de:52:ab:ba:31:44:ea:93:11:57:ae:48:2b:db: 4c:f7:77:a4:91:2a:80:d7:b4:da:6f:17:7f:a9:1b:b2:1c:96: 52:95:e7:18:0b:9c:d3:a9:55:1a:09:5f:cb:f7:cd:b8:20:cf: ff:73:66:03:98:14:48:d9:8a:87:69:9b:39:12:79:34:53:fd: 71:d1:04:59:08:e3:ca:71:39:08:7c:38:a6:27:0e:51:b9:d5: 3b:a5:87:e1:cd:ef:af:f9:76:2a:6e:40:fd:60:bf:14:f9:94: 5f:25:e1:da:4f:ca:a6:05:37:16:be:f3:ac:94:f5:bd:1f:20: 0b:a9:20:9f:5b:a5:b5:d5:cd:d1:1a:74:a6:08:c3:7b:78:33: 3e:bd:cc:f5:5e:e7:a9:ec:7f:72:89:46:8f:bd:a2:94:6a:8a: 44:be:c3:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBct9Mhh5yBTBI5MDGkAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMGIxZGE3OWVmN2ZjMWVmOTU5NjJkYzhhMDFmMmI4ZDRi MzUyYmYwHhcNMjUxMjI1MDEwMDQ3WhcNMjUxMjI2MDEwMDQ3WjAzMTEwLwYDVQQD EyhkNWJkNmU3YjlhZjk1N2VkNWQwNWI3MWQwOGI1YTg0ZDM0MWNkNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RMhTw6bhAz0v1DfLC3ILapKmtbB ABCqfxh4ZZ9amMTmpVEOrK1bD7nPkQLBIZpGJ2Wn040OlRdPE7be7a95IlhLLLWU 1CjtYB88rKtDUW/MShI5YNPek4L1MOHHLnqem3P3o2jZXgMolq7lnwoHRv7ayxGj Ry1dkCYYi/Lf44/8NytkWksyJs8eNUIgm7o6wDIT4nedAbPrFHyM5gymjtxSYZLE LMlxLubRDuoT8++FEDe8PAPnfAnCYMWO9BHWZkTqOXZMRZkYNmipu0TWAEsSVGY8 odpd3nuRsfRQ34ocqTE0rFVvx4cXmMNOtVRy5LCzfworAoBcBYSoEQ1QMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW9bnua+VftXQW3HQi1qE00HNRoMB8GA1UdIwQY MBaAFK8LHaee9/we+Vli3IoB8rjUs1K/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8wMDg5OGEtZTdjMC00ODM2LWE5NmIt OTJiMmVhMzE5YmMxLzEvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8wMDg5OGEtZTdjMC00ODM2LWE5NmItOTJiMmVhMzE5YmMx LzEvcndzZHA1NzNfQjc1V1dMY2lnSHl1TlN6VXI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRG22AdY Wj9DlmCPPooMjLdj8TCXSBQU6Mdm3D7LoayOcBsxBakxpHgHxIjzA/EvEjDHxlgl yrRb+zeUC7+46cd+q++T6CoNoZk9s0A79Z+IYYuDDRY8XOfcefinBN5Sq7oxROqT EVeuSCvbTPd3pJEqgNe02m8Xf6kbshyWUpXnGAuc06lVGglfy/fNuCDP/3NmA5gU SNmKh2mbORJ5NFP9cdEEWQjjynE5CHw4picOUbnVO6WH4c3vr/l2Km5A/WC/FPmU XyXh2k/KpgU3Fr7zrJT1vR8gC6kgn1ultdXN0Rp0pgjDe3gzPr3M9V7nqex/colG j72ilGqKRL7D3g== -----END CERTIFICATE-----Generated at Thu Dec 25 02:40:28 2025 by rpki-client