This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft File: wTyftZyZzftKbYQpzYNwWQYBKxE.mft (raw, json) Hash identifier: hjl3HhUSa+dQje5Euemi7qJ8hxh8riHGPT1YGiBR1jM= Subject key identifier: 4A:6F:1F:12:C4:D0:B2:8F:EB:89:46:82:FC:E9:83:6A:42:B4:88:57 Authority key identifier: C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11 Certificate issuer: /CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11 Certificate serial: 019AF19B36C328EDAC6B0AF2C0A7B15E7878 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft Manifest number: 14D6 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: wTyftZyZzftKbYQpzYNwWQYBKxE.crl (hash: f3oH2gB8BupR2UA7bg5RjhG6Qz03bUp0d1vEzwrIZig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:36:c3:28:ed:ac:6b:0a:f2:c0:a7:b1:5e:78:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13c9fb59c99cdfb4a6d8429cd83705906012b11 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=4a6f1f12c4d0b28feb894682fce9836a42b48857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:24:a4:bd:3e:16:bc:6f:21:55:1a:01:6e: fe:2f:8d:41:09:5f:5d:c4:27:57:6d:b7:1f:63:fc: f7:24:80:12:f8:c4:b2:97:7f:ed:6f:2f:7e:db:09: 41:4a:77:d2:5a:1c:53:2f:c1:9f:61:ff:e8:75:6d: 6f:9f:26:29:9b:b2:99:b4:3b:bf:8a:03:bf:db:a6: 79:ad:9b:8b:bb:cd:40:62:5f:fa:2c:6e:44:a4:f7: 2f:10:c4:2e:5e:86:6a:74:ef:9d:46:f5:e4:6f:9b: 7a:0e:c3:00:1f:c6:1f:b8:e1:21:bf:08:d2:6f:26: 1d:18:88:4a:7f:1f:5b:ec:ad:02:62:bc:7f:30:bc: 64:48:fd:f1:53:43:6f:48:37:04:df:ab:02:e2:72: 30:4f:94:14:3d:c4:d1:54:49:d3:56:98:a3:ef:c1: f3:2d:98:4d:9c:85:ef:68:26:be:13:4b:b6:15:43: 84:b6:13:4e:a1:b6:b9:91:7c:49:b5:a7:81:ed:52: 94:37:2e:a0:fd:b3:e5:b5:57:00:4a:ad:3e:d0:04: 73:6d:a9:b0:f6:84:9b:75:af:22:d7:08:11:34:8c: 4b:40:52:89:16:63:b4:69:42:40:9f:61:19:f4:35: 88:03:4c:17:86:ce:4a:69:75:d7:a0:7f:30:4f:9f: 9f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:6F:1F:12:C4:D0:B2:8F:EB:89:46:82:FC:E9:83:6A:42:B4:88:57 X509v3 Authority Key Identifier: keyid:C1:3C:9F:B5:9C:99:CD:FB:4A:6D:84:29:CD:83:70:59:06:01:2B:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTyftZyZzftKbYQpzYNwWQYBKxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a71d06-b140-4695-891c-adec07d22f46/1/wTyftZyZzftKbYQpzYNwWQYBKxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:9e:64:a9:66:63:5d:0f:a0:cf:48:0f:1a:18:2d:2f:9b:04: 55:f8:f1:71:52:f1:1d:71:1c:17:7c:b7:29:03:da:1e:07:6e: ff:4f:7f:d5:f1:13:96:69:bd:e7:3d:8f:9c:59:87:97:56:78: 69:ce:f9:eb:4a:90:dd:49:d6:6b:83:2a:ab:13:b7:6b:58:82: a7:6c:65:ee:14:10:b8:1d:5f:cc:5f:1d:4b:1a:d8:00:8f:eb: 9e:ba:99:93:1b:37:a5:d5:a3:ff:59:5f:d2:0d:4b:38:63:f9: de:72:fd:48:8c:3d:11:f7:58:34:3a:54:02:27:b2:cc:5d:10: 66:2a:1f:8c:e3:9a:58:0c:67:de:38:d3:d1:6c:54:0e:1e:ae: 82:6f:00:65:3f:08:98:0d:80:b2:ef:0e:83:8d:7a:36:34:ed: 26:aa:5c:a8:65:4b:68:2c:15:cb:6c:50:52:1f:03:02:a6:e6: 01:4e:02:d0:2a:87:0d:fa:c5:8f:03:c6:c2:ff:b2:e0:00:2a: 87:7f:b0:26:73:fa:d3:6f:df:09:72:19:cd:9b:91:e9:bb:70: 08:5e:b1:9d:51:39:2b:31:3d:f5:4d:91:9d:f3:0f:66:ab:f5: be:28:1b:06:cd:36:11:94:e9:bb:0a:28:30:db:5e:35:ad:fd: 94:c0:bd:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzbDKO2sawrywKexXnh4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2M5ZmI1OWM5OWNkZmI0YTZkODQyOWNkODM3MDU5MDYw MTJiMTEwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD Eyg0YTZmMWYxMmM0ZDBiMjhmZWI4OTQ2ODJmY2U5ODM2YTQyYjQ4ODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApookpL0+FrxvIVUaAW7+L41BCV9d xCdXbbcfY/z3JIAS+MSyl3/tby9+2wlBSnfSWhxTL8GfYf/odW1vnyYpm7KZtDu/ igO/26Z5rZuLu81AYl/6LG5EpPcvEMQuXoZqdO+dRvXkb5t6DsMAH8YfuOEhvwjS byYdGIhKfx9b7K0CYrx/MLxkSP3xU0NvSDcE36sC4nIwT5QUPcTRVEnTVpij78Hz LZhNnIXvaCa+E0u2FUOEthNOoba5kXxJtaeB7VKUNy6g/bPltVcASq0+0ARzbamw 9oSbda8i1wgRNIxLQFKJFmO0aUJAn2EZ9DWIA0wXhs5KaXXXoH8wT5+fNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEpvHxLE0LKP64lGgvzpg2pCtIhXMB8GA1UdIwQY MBaAFME8n7Wcmc37Sm2EKc2DcFkGASsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMt YWRlYzA3ZDIyZjQ2LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9hNzFkMDYtYjE0MC00Njk1LTg5MWMtYWRlYzA3ZDIyZjQ2 LzEvd1R5ZnRaeVp6ZnRLYllRcHpZTndXUVlCS3hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJ5kqWZj XQ+gz0gPGhgtL5sEVfjxcVLxHXEcF3y3KQPaHgdu/09/1fETlmm95z2PnFmHl1Z4 ac7560qQ3UnWa4MqqxO3a1iCp2xl7hQQuB1fzF8dSxrYAI/rnrqZkxs3pdWj/1lf 0g1LOGP53nL9SIw9EfdYNDpUAieyzF0QZiofjOOaWAxn3jjT0WxUDh6ugm8AZT8I mA2Asu8Og416NjTtJqpcqGVLaCwVy2xQUh8DAqbmAU4C0CqHDfrFjwPGwv+y4AAq h3+wJnP602/fCXIZzZuR6btwCF6xnVE5KzE99U2RnfMPZqv1vigbBs02EZTpuwoo MNteNa39lMC94Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:42 2025 by rpki-client