This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json) Hash identifier: 5wfPsyXuZbqz/U4MkEpv7aU8h3IkHgBcddk8ibSqPTk= Subject key identifier: 9A:71:1E:09:9B:CE:4D:31:3A:E1:40:86:97:51:14:E7:ED:DB:54:E7 Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d Certificate serial: 019AF50B2EFF1856D02E1E5AE0E402DEF955 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:02:22 +0000 Manifest this update: Sat 06 Dec 2025 19:02:22 +0000 Manifest next update: Sun 07 Dec 2025 19:02:22 +0000 Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: oD966WzX1bV3V3s9JyOXrj61v9Jf/1gQvvWCj8ylLhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:2e:ff:18:56:d0:2e:1e:5a:e0:e4:02:de:f9:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d Validity Not Before: Dec 6 19:02:22 2025 GMT Not After : Dec 7 19:02:22 2025 GMT Subject: CN=9a711e099bce4d313ae14086975114e7eddb54e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:99:37:51:d9:8f:9d:a3:5c:f9:23:4c:84:92: 37:2c:4d:a4:07:aa:98:55:77:4a:6b:06:fc:23:02: d5:e3:0e:ee:1a:7d:a6:56:69:15:d5:10:64:03:48: 33:3a:be:7c:5d:60:1c:12:e7:92:97:af:0b:bd:a5: 2f:08:37:b4:d9:cb:60:d7:41:8d:a0:99:5d:b6:29: d8:f3:42:40:db:59:73:be:b1:03:6d:49:15:0c:67: 2d:c5:78:e8:9c:32:a3:2e:10:d2:cf:42:90:e5:7b: 4c:ee:0f:2b:e8:10:aa:af:9b:8e:83:3a:33:2a:55: 77:db:a8:c2:47:e2:3c:6e:d8:b4:28:ef:2b:fe:a5: 4f:8c:21:86:c3:0c:49:61:8f:c6:5d:3d:56:b6:01: d1:18:31:40:3d:16:02:88:b2:62:b6:67:36:95:1f: f8:40:48:db:cc:e4:2f:4a:0d:a5:22:83:f9:aa:42: 68:b2:93:11:5f:84:9e:ee:6b:4e:23:90:d2:66:b8: ec:00:97:fb:32:50:bc:08:24:05:2d:44:cb:68:20: 45:ad:13:71:7b:51:39:3b:1d:0f:64:dc:91:c5:7c: 02:68:da:65:5d:36:85:33:10:cf:4c:5c:b0:b0:a8: 47:a6:bd:81:f1:ab:c6:49:3d:af:ad:aa:8e:73:d3: 30:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:71:1E:09:9B:CE:4D:31:3A:E1:40:86:97:51:14:E7:ED:DB:54:E7 X509v3 Authority Key Identifier: keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a2:05:94:e8:4c:4b:71:f2:9c:d7:ee:46:b5:8d:09:e9:66: e6:e2:e8:87:35:5e:50:53:ba:de:e2:39:56:51:c8:b0:bc:ae: bf:11:4f:f7:27:a9:20:e6:96:76:0d:bd:e8:e8:78:2b:52:88: 62:51:33:b4:a4:3e:31:80:47:41:33:5d:08:20:7e:6d:6b:8e: 73:28:2f:3b:b8:4e:e8:49:28:e4:a2:f1:89:04:aa:70:01:72: e6:5c:b4:6d:38:d2:01:45:c6:5b:40:89:52:68:e7:ed:b5:38: d2:70:75:1d:92:e4:40:af:bf:b6:83:49:58:7c:00:ba:18:e8: 8f:3a:0c:cd:29:f3:3f:a2:3a:1f:56:43:03:0f:fc:9b:87:a0: 97:11:c3:21:20:5f:91:28:ca:96:c8:79:bc:19:68:7a:ea:b9: 29:1d:1d:90:a9:bb:b6:2b:1d:2d:4b:4d:43:11:ab:54:8d:ed: 6e:3b:ab:92:97:23:9d:9d:c7:d7:29:0f:89:14:ba:f9:e5:83: 7f:10:54:ef:ac:ab:06:bd:98:0c:c6:01:8d:c1:be:02:1a:f8: ed:81:ba:05:9f:36:e7:1c:b2:51:7c:43:02:af:81:90:85:90: 21:f8:fa:2f:87:44:7a:a2:42:d9:1c:ca:56:79:16:61:ba:b4: 0a:9c:f3:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cy7/GFbQLh5a4OQC3vlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYmQ2OWQ5OTg0ODRjMTM5ZmFjMTI2NWE2NDU3NDVmMzMz M2NmMWQwHhcNMjUxMjA2MTkwMjIyWhcNMjUxMjA3MTkwMjIyWjAzMTEwLwYDVQQD Eyg5YTcxMWUwOTliY2U0ZDMxM2FlMTQwODY5NzUxMTRlN2VkZGI1NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Jk3UdmPnaNc+SNMhJI3LE2kB6qY VXdKawb8IwLV4w7uGn2mVmkV1RBkA0gzOr58XWAcEueSl68LvaUvCDe02ctg10GN oJldtinY80JA21lzvrEDbUkVDGctxXjonDKjLhDSz0KQ5XtM7g8r6BCqr5uOgzoz KlV326jCR+I8bti0KO8r/qVPjCGGwwxJYY/GXT1WtgHRGDFAPRYCiLJitmc2lR/4 QEjbzOQvSg2lIoP5qkJospMRX4Se7mtOI5DSZrjsAJf7MlC8CCQFLUTLaCBFrRNx e1E5Ox0PZNyRxXwCaNplXTaFMxDPTFywsKhHpr2B8avGST2vraqOc9MwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpxHgmbzk0xOuFAhpdRFOft21TnMB8GA1UdIwQY MBaAFFu9admYSEwTn6wSZaZFdF8zM88dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAt Y2ZhOTczODRiYzlhLzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAtY2ZhOTczODRiYzlh LzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6IFlOhM S3HynNfuRrWNCelm5uLohzVeUFO63uI5VlHIsLyuvxFP9yepIOaWdg296Oh4K1KI YlEztKQ+MYBHQTNdCCB+bWuOcygvO7hO6Eko5KLxiQSqcAFy5ly0bTjSAUXGW0CJ Umjn7bU40nB1HZLkQK+/toNJWHwAuhjojzoMzSnzP6I6H1ZDAw/8m4eglxHDISBf kSjKlsh5vBloeuq5KR0dkKm7tisdLUtNQxGrVI3tbjurkpcjnZ3H1ykPiRS6+eWD fxBU76yrBr2YDMYBjcG+Ahr47YG6BZ825xyyUXxDAq+BkIWQIfj6L4dEeqJC2RzK VnkWYbq0Cpzz+A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:35:29 2025 by rpki-client