This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft File: w6PDZsu4xcf3NZGdFQovrwwI-F8.mft (raw, json) Hash identifier: 2cFH3Bul8KBCSGv0M6sZ37KD7QetjMP4+gSOTpn6nVQ= Subject key identifier: CB:33:1D:0F:E8:1B:E5:55:9F:3E:03:51:35:31:18:72:FA:66:00:68 Authority key identifier: C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F Certificate issuer: /CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f Certificate serial: 019B601C62E11ADAD36868DF172511D45158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft Manifest number: 0721 Signing time: Sat 27 Dec 2025 14:00:31 +0000 Manifest this update: Sat 27 Dec 2025 14:00:31 +0000 Manifest next update: Sun 28 Dec 2025 14:00:31 +0000 Files and hashes: 1: w6PDZsu4xcf3NZGdFQovrwwI-F8.crl (hash: zkhzaDaY5mXVPAe7CE5Uzx2JoMeZoYw7DKGYirOciok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1c:62:e1:1a:da:d3:68:68:df:17:25:11:d4:51:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a3c366cbb8c5c7f735919d150a2faf0c08f85f Validity Not Before: Dec 27 14:00:31 2025 GMT Not After : Dec 28 14:00:31 2025 GMT Subject: CN=cb331d0fe81be5559f3e035135311872fa660068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a8:a1:29:75:6d:3d:92:cc:5a:07:03:65:ed: dc:17:bd:cc:8a:cd:5c:0d:83:1b:66:04:5e:11:69: eb:16:0c:6a:95:45:22:95:b1:75:65:fa:2f:88:ec: c9:8e:66:8a:13:2b:e1:91:ca:ae:bd:cf:51:83:25: e7:99:10:34:83:7a:38:dc:8a:30:6d:6e:03:fe:e0: 12:f1:48:04:71:36:eb:a7:fe:93:88:4c:6b:7d:b4: f1:88:11:b1:55:8c:fa:6f:ae:06:ca:a1:4b:03:6e: b3:be:8b:01:7e:7a:c2:69:bb:7d:c3:ac:82:24:d0: 85:8e:20:2c:46:dc:1b:a9:5a:ac:17:94:26:a0:d0: 8b:dd:7d:ad:4b:48:6b:c5:c6:16:c9:3d:3e:55:21: 76:2e:21:49:ab:f3:89:0d:20:da:3e:54:7e:c7:fe: b9:09:8f:ff:be:0d:7f:c0:11:af:ed:a1:ea:b7:84: 0e:bf:4d:e1:d5:6f:6c:c6:6a:12:3d:b3:18:3d:15: ce:50:de:05:a1:06:90:13:a2:35:a9:51:9c:2e:1b: e7:9a:ba:3f:f5:fb:9b:6b:fc:0a:d1:a7:1c:bc:69: 01:d5:48:71:46:8b:1b:19:41:d8:2d:07:cf:12:ed: 3e:fd:08:4e:7a:74:9c:a2:a8:36:af:6d:0c:30:38: 28:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:33:1D:0F:E8:1B:E5:55:9F:3E:03:51:35:31:18:72:FA:66:00:68 X509v3 Authority Key Identifier: keyid:C3:A3:C3:66:CB:B8:C5:C7:F7:35:91:9D:15:0A:2F:AF:0C:08:F8:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6PDZsu4xcf3NZGdFQovrwwI-F8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/103e6b-1033-452e-82a4-9774bc226cce/1/w6PDZsu4xcf3NZGdFQovrwwI-F8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a1:05:00:1f:1a:ee:bf:b4:72:fe:16:87:07:fa:79:78:01: 5a:1b:71:e4:1a:7d:07:df:ab:3c:66:ab:c0:49:3b:6c:a5:2e: e1:74:2a:e6:05:43:56:93:30:81:91:b8:bf:52:7b:42:75:df: d9:b4:d5:77:57:7b:11:2d:8b:13:eb:88:52:2d:f3:99:36:f4: f5:00:8a:7e:ca:54:a8:83:89:d0:15:7a:16:4f:c2:3c:ef:e3: d3:e7:74:db:9e:ec:bf:fd:6a:a7:01:b6:98:b2:e0:d7:c1:40: d4:71:b7:be:51:db:19:56:a1:04:aa:ce:f3:0e:fa:4d:70:36: b2:7d:ea:73:5e:06:09:90:d4:93:92:bf:d2:bc:48:5a:dd:bf: 36:12:73:00:84:f0:45:82:76:43:ae:b6:e5:c3:95:a7:d9:e0: b1:5a:33:a3:73:77:c8:c3:f7:4a:3c:a8:96:b3:86:3c:a4:16: 6d:17:77:fe:78:fb:e2:d2:b6:d7:2a:d2:22:51:39:e3:27:71: 0b:cd:10:9f:96:19:a7:fa:c0:37:cd:c5:e6:d1:67:e5:cd:69: 1f:0e:49:84:e0:3e:83:da:52:89:35:f2:d8:a7:61:ad:08:e2: f8:87:5f:3c:84:08:bf:ee:59:5e:0c:13:ba:16:6a:2c:b1:b8: 24:c2:bf:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHGLhGtrTaGjfFyUR1FFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYTNjMzY2Y2JiOGM1YzdmNzM1OTE5ZDE1MGEyZmFmMGMw OGY4NWYwHhcNMjUxMjI3MTQwMDMxWhcNMjUxMjI4MTQwMDMxWjAzMTEwLwYDVQQD EyhjYjMzMWQwZmU4MWJlNTU1OWYzZTAzNTEzNTMxMTg3MmZhNjYwMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qihKXVtPZLMWgcDZe3cF73Mis1c DYMbZgReEWnrFgxqlUUilbF1ZfoviOzJjmaKEyvhkcquvc9RgyXnmRA0g3o43Iow bW4D/uAS8UgEcTbrp/6TiExrfbTxiBGxVYz6b64GyqFLA26zvosBfnrCabt9w6yC JNCFjiAsRtwbqVqsF5QmoNCL3X2tS0hrxcYWyT0+VSF2LiFJq/OJDSDaPlR+x/65 CY//vg1/wBGv7aHqt4QOv03h1W9sxmoSPbMYPRXOUN4FoQaQE6I1qVGcLhvnmro/ 9fuba/wK0accvGkB1UhxRosbGUHYLQfPEu0+/QhOenScoqg2r20MMDgoPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMszHQ/oG+VVnz4DUTUxGHL6ZgBoMB8GA1UdIwQY MBaAFMOjw2bLuMXH9zWRnRUKL68MCPhfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQt OTc3NGJjMjI2Y2NlLzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8xMDNlNmItMTAzMy00NTJlLTgyYTQtOTc3NGJjMjI2Y2Nl LzEvdzZQRFpzdTR4Y2YzTlpHZEZRb3Zyd3dJLUY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKEFAB8a 7r+0cv4Whwf6eXgBWhtx5Bp9B9+rPGarwEk7bKUu4XQq5gVDVpMwgZG4v1J7QnXf 2bTVd1d7ES2LE+uIUi3zmTb09QCKfspUqIOJ0BV6Fk/CPO/j0+d0257sv/1qpwG2 mLLg18FA1HG3vlHbGVahBKrO8w76TXA2sn3qc14GCZDUk5K/0rxIWt2/NhJzAITw RYJ2Q6625cOVp9ngsVozo3N3yMP3SjyolrOGPKQWbRd3/nj74tK21yrSIlE54ydx C80Qn5YZp/rAN83F5tFn5c1pHw5JhOA+g9pSiTXy2KdhrQji+IdfPIQIv+5ZXgwT uhZqLLG4JMK/ag== -----END CERTIFICATE-----Generated at Sat Dec 27 17:46:04 2025 by rpki-client