This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft File: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json) Hash identifier: jeIbWYxRJF/Vwdh/MZQEnVU136lKRBfeTlZb6eiItfY= Subject key identifier: B3:4D:FE:79:B5:6A:13:DB:53:FC:24:70:1D:C5:A2:83:74:44:6F:FC Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C Certificate issuer: /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c Certificate serial: 019AF12DFC7102A3991FA06A398E5A9CCB4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft Manifest number: 03AD Signing time: Sat 06 Dec 2025 01:01:53 +0000 Manifest this update: Sat 06 Dec 2025 01:01:53 +0000 Manifest next update: Sun 07 Dec 2025 01:01:53 +0000 Files and hashes: 1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: 6WXYDTGW5taOxScQg7X9zyAXtfni0XpXlycSQCxpYfc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:fc:71:02:a3:99:1f:a0:6a:39:8e:5a:9c:cb:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c Validity Not Before: Dec 6 01:01:53 2025 GMT Not After : Dec 7 01:01:53 2025 GMT Subject: CN=b34dfe79b56a13db53fc24701dc5a28374446ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:81:8a:4b:4d:61:52:b5:57:85:65:0d:39:26: b4:f5:22:5d:8c:b8:f9:e9:d1:4f:c8:6b:01:1a:39: 4b:09:96:62:c7:34:47:8d:0f:ad:c9:62:6b:8d:11: 01:ca:b6:1f:3a:f1:e4:b9:25:de:32:7e:00:f9:75: 78:5b:8f:16:0e:07:e2:13:91:a8:84:89:35:73:80: f0:4b:bd:ae:09:96:8d:7e:e4:77:5b:72:88:2b:1d: 3e:a4:bd:71:87:89:d7:d1:2c:69:dd:d2:44:e6:83: a0:d6:4e:be:a9:7c:e7:d9:60:a6:65:74:52:a2:fa: 3d:0d:0b:48:39:a2:70:8f:9b:1c:5f:ce:da:02:ab: 39:20:ee:53:db:b3:76:89:ef:ed:60:32:23:9b:30: df:fe:33:b2:78:e9:55:53:5b:b6:ff:65:f4:4d:87: 11:ac:ea:a8:26:48:88:58:b3:d4:a8:5a:31:3b:1e: 50:44:bf:ef:f6:28:b0:10:5f:75:85:6d:6c:0a:6a: d6:45:11:d8:84:1b:33:97:f4:7b:a8:72:47:31:82: 75:83:74:44:f8:a7:dc:6b:a0:47:d3:f8:3e:f6:2b: fc:45:8e:cd:99:38:ef:31:cd:73:7a:2c:19:94:7a: 44:ab:56:89:b7:a1:17:8e:29:29:39:70:7a:16:2a: 27:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4D:FE:79:B5:6A:13:DB:53:FC:24:70:1D:C5:A2:83:74:44:6F:FC X509v3 Authority Key Identifier: keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:9c:ee:f7:65:5b:84:f0:fc:40:0c:e6:24:58:a2:eb:1b:41: b0:96:7e:9a:6e:f8:01:2a:ba:24:fc:49:5c:5f:86:15:c1:a5: ca:66:30:88:fe:1a:34:24:50:d6:05:a5:76:5f:9d:60:0f:ff: 79:15:43:6d:35:32:88:0a:da:16:83:6b:83:2c:26:67:4a:20: dc:97:f1:64:62:48:27:a1:a4:cc:60:35:ab:87:24:d3:48:ff: ce:73:12:1d:5d:2b:e9:13:73:12:f4:d7:8e:b7:a6:c7:c3:80: b3:0b:52:79:aa:69:eb:32:56:43:71:20:5c:ca:e4:b8:9b:29: fa:5d:c0:fc:76:a4:91:18:38:25:a8:d8:ab:0b:32:0c:f7:ad: a6:09:1f:e7:b3:c2:ce:d2:44:52:e7:2a:49:d7:c3:53:66:d6: fd:35:02:c5:a2:c7:7d:24:c6:8b:b9:93:c4:ec:17:b3:8e:8f: aa:2a:31:bb:2f:df:f4:e9:5c:3c:1d:d5:5e:62:96:f7:38:9b: be:4b:89:cf:d7:dd:b1:0a:2b:9a:89:4b:ea:f5:7b:0a:9d:54: 76:dd:21:94:63:1f:6c:2e:78:ba:06:45:53:27:0e:71:ca:0c: a1:fd:51:a5:51:bb:ff:fc:d4:e5:4c:c2:71:5a:5d:89:ed:8a: 42:ae:c1:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfxxAqOZH6BqOY5anMtOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODBjOWQwOTI0NDcwZTFjMWUzMGJjNGVlZmYxOTkwOTBh NzAzNWMwHhcNMjUxMjA2MDEwMTUzWhcNMjUxMjA3MDEwMTUzWjAzMTEwLwYDVQQD EyhiMzRkZmU3OWI1NmExM2RiNTNmYzI0NzAxZGM1YTI4Mzc0NDQ2ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYGKS01hUrVXhWUNOSa09SJdjLj5 6dFPyGsBGjlLCZZixzRHjQ+tyWJrjREByrYfOvHkuSXeMn4A+XV4W48WDgfiE5Go hIk1c4DwS72uCZaNfuR3W3KIKx0+pL1xh4nX0Sxp3dJE5oOg1k6+qXzn2WCmZXRS ovo9DQtIOaJwj5scX87aAqs5IO5T27N2ie/tYDIjmzDf/jOyeOlVU1u2/2X0TYcR rOqoJkiIWLPUqFoxOx5QRL/v9iiwEF91hW1sCmrWRRHYhBszl/R7qHJHMYJ1g3RE +Kfca6BH0/g+9iv8RY7NmTjvMc1zeiwZlHpEq1aJt6EXjikpOXB6FionYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLNN/nm1ahPbU/wkcB3FooN0RG/8MB8GA1UdIwQY MBaAFFuAydCSRHDhweMLxO7/GZCQpwNcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yY2I3M2ItZGU2Ni00YjQxLWJmODMt ZjIxZjdlOGVhZDVjLzEvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yY2I3M2ItZGU2Ni00YjQxLWJmODMtZjIxZjdlOGVhZDVj LzEvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJzu92Vb hPD8QAzmJFii6xtBsJZ+mm74ASq6JPxJXF+GFcGlymYwiP4aNCRQ1gWldl+dYA// eRVDbTUyiAraFoNrgywmZ0og3JfxZGJIJ6GkzGA1q4ck00j/znMSHV0r6RNzEvTX jremx8OAswtSeapp6zJWQ3EgXMrkuJsp+l3A/HakkRg4JajYqwsyDPetpgkf57PC ztJEUucqSdfDU2bW/TUCxaLHfSTGi7mTxOwXs46Pqioxuy/f9OlcPB3VXmKW9zib vkuJz9fdsQormolL6vV7Cp1Udt0hlGMfbC54ugZFUycOccoMof1RpVG7//zU5UzC cVpdie2KQq7Btg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:06 2025 by rpki-client