This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft File: wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json) Hash identifier: CNsdVXvtS7Qt0yS1QrK9ugtFrRy1JdnFwWNffmMvqjw= Subject key identifier: 62:1D:15:70:8B:B7:72:D9:A5:44:B4:67:51:60:64:79:4B:9B:BE:71 Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0 Certificate issuer: /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0 Certificate serial: 019B60C134B72D0E4524E903659E7D812349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft Manifest number: 032D Signing time: Sat 27 Dec 2025 17:00:33 +0000 Manifest this update: Sat 27 Dec 2025 17:00:33 +0000 Manifest next update: Sun 28 Dec 2025 17:00:33 +0000 Files and hashes: 1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: rYMXszVRsov3+Ep+HWYUwiibf/6cMVNBGDsJSJ3y4mc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:c1:34:b7:2d:0e:45:24:e9:03:65:9e:7d:81:23:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0 Validity Not Before: Dec 27 17:00:33 2025 GMT Not After : Dec 28 17:00:33 2025 GMT Subject: CN=621d15708bb772d9a544b467516064794b9bbe71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1a:3e:b8:18:b0:a3:6a:08:3c:98:0c:4b:d6: 50:e5:94:ca:3a:c0:3c:c5:b2:f6:c1:c0:f9:c0:15: e6:a2:d1:77:c8:c3:e0:c8:6f:2f:e3:ca:59:9e:2e: f2:fe:58:30:f7:fe:49:81:1b:99:d4:77:75:3d:60: 21:7b:97:42:f1:50:db:26:30:67:4c:29:df:67:b9: de:d3:5e:ca:3b:9c:57:f1:4a:49:43:03:d5:f5:59: 9c:d1:34:a9:f7:f8:71:60:b0:71:c7:15:83:bc:21: c7:dd:f5:d3:b6:87:6c:47:23:d9:1c:d6:72:5b:0c: 93:e8:bc:ab:ec:25:68:ce:2b:39:a5:c6:51:24:dc: 07:4c:c1:51:85:b6:d9:53:57:a6:05:80:6b:74:8e: 4b:db:32:9c:95:4f:de:23:e6:65:84:8a:c3:4f:53: e1:f5:f1:d3:a7:90:20:69:7f:19:77:66:75:93:de: b0:7d:a4:cf:1a:6f:19:aa:a7:98:30:7a:a2:ae:ae: 2f:59:c4:1b:d4:b6:fb:3e:ad:af:62:80:51:f8:e5: 8a:c2:4c:c8:09:46:8f:f9:22:6b:18:cd:82:0b:50: 4f:e2:e0:0c:80:49:18:f6:14:8c:f5:0e:68:c4:b1: dc:8d:53:71:2b:1e:31:dd:bd:0c:7c:56:ce:35:09: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1D:15:70:8B:B7:72:D9:A5:44:B4:67:51:60:64:79:4B:9B:BE:71 X509v3 Authority Key Identifier: keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:03:fa:0b:0e:75:f6:e8:68:cb:48:0f:98:a0:93:5b:7e:23: 13:4c:fe:97:a9:a3:62:ca:95:1d:e9:6f:f0:93:0e:99:38:13: 5f:70:d4:55:a2:13:91:0b:8a:0e:f9:6f:a6:6c:ab:73:eb:01: e8:75:dd:1a:d2:96:5e:a4:75:13:a9:a5:53:36:f8:bd:f0:d2: 09:7d:ad:fc:b1:54:f9:c5:19:a1:83:3f:7d:45:cb:9e:e2:7c: d3:9b:de:61:36:8c:d0:b2:16:99:9e:11:d9:d8:c6:7e:e9:86: 10:fa:27:d5:f1:11:96:b6:e3:af:43:6f:a2:37:e9:b4:2c:15: 17:dd:11:fa:71:de:29:25:e6:9c:83:4e:00:8d:cd:9f:7c:ac: 5c:f7:12:e2:f1:14:ef:36:48:17:fa:2e:08:36:59:c2:01:6b: 85:c7:bb:e5:35:bf:94:60:0a:06:80:c0:a8:cd:76:94:0c:28: 5a:a4:27:ba:f8:2a:bc:30:47:2d:ab:26:f8:31:60:6c:fd:61: 80:a9:b4:8f:40:15:ed:33:b7:da:b7:cc:15:a0:b7:a4:74:0c: 98:be:47:8b:c3:d8:63:a6:40:07:63:1f:cf:33:81:e3:8a:46: 2f:9f:36:81:10:29:41:fd:5f:8d:21:89:b1:91:dd:84:5e:bb: 64:c8:ee:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgwTS3LQ5FJOkDZZ59gSNJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWQ0OTdiODA0MTYzOWM0YjNkMjIxMDc4MmNiNWQxOTgx NGM0ZTAwHhcNMjUxMjI3MTcwMDMzWhcNMjUxMjI4MTcwMDMzWjAzMTEwLwYDVQQD Eyg2MjFkMTU3MDhiYjc3MmQ5YTU0NGI0Njc1MTYwNjQ3OTRiOWJiZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxo+uBiwo2oIPJgMS9ZQ5ZTKOsA8 xbL2wcD5wBXmotF3yMPgyG8v48pZni7y/lgw9/5JgRuZ1Hd1PWAhe5dC8VDbJjBn TCnfZ7ne017KO5xX8UpJQwPV9Vmc0TSp9/hxYLBxxxWDvCHH3fXTtodsRyPZHNZy WwyT6Lyr7CVozis5pcZRJNwHTMFRhbbZU1emBYBrdI5L2zKclU/eI+ZlhIrDT1Ph 9fHTp5AgaX8Zd2Z1k96wfaTPGm8ZqqeYMHqirq4vWcQb1Lb7Pq2vYoBR+OWKwkzI CUaP+SJrGM2CC1BP4uAMgEkY9hSM9Q5oxLHcjVNxKx4x3b0MfFbONQnS6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGIdFXCLt3LZpUS0Z1FgZHlLm75xMB8GA1UdIwQY MBaAFMCtSXuAQWOcSz0iEHgstdGYFMTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4Yzgt ZWRjMzI1YWU3YjE4LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lYWUxZjMtODg0Zi00OGY5LTg4YzgtZWRjMzI1YWU3YjE4 LzEvd0sxSmU0QkJZNXhMUFNJUWVDeTEwWmdVeE9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgP6Cw51 9uhoy0gPmKCTW34jE0z+l6mjYsqVHelv8JMOmTgTX3DUVaITkQuKDvlvpmyrc+sB 6HXdGtKWXqR1E6mlUzb4vfDSCX2t/LFU+cUZoYM/fUXLnuJ805veYTaM0LIWmZ4R 2djGfumGEPon1fERlrbjr0NvojfptCwVF90R+nHeKSXmnINOAI3Nn3ysXPcS4vEU 7zZIF/ouCDZZwgFrhce75TW/lGAKBoDAqM12lAwoWqQnuvgqvDBHLasm+DFgbP1h gKm0j0AV7TO32rfMFaC3pHQMmL5Hi8PYY6ZAB2MfzzOB44pGL582gRApQf1fjSGJ sZHdhF67ZMjuZw== -----END CERTIFICATE-----Generated at Sat Dec 27 19:23:32 2025 by rpki-client