This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft File: wwOJmXRU-gA-H_yM0ui35l2T9OI.mft (raw, json) Hash identifier: y1AM1SFCGZ0tk7By8AyMX8JNP5M8G5YtLia4uWvKxKE= Subject key identifier: BC:A6:C7:9A:D3:DA:8A:21:E3:99:49:DE:E4:9F:44:7E:43:30:E3:A2 Authority key identifier: C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2 Certificate issuer: /CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2 Certificate serial: 019AF0F5DC770B665C01ED36F0C0252F3468 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft Manifest number: 0B6D Signing time: Sat 06 Dec 2025 00:00:35 +0000 Manifest this update: Sat 06 Dec 2025 00:00:35 +0000 Manifest next update: Sun 07 Dec 2025 00:00:35 +0000 Files and hashes: 1: wwOJmXRU-gA-H_yM0ui35l2T9OI.crl (hash: zcLvdqS7FLT9YcvrZ3iZjkBADnjWBJOydsUmLpp5FaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:dc:77:0b:66:5c:01:ed:36:f0:c0:25:2f:34:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2 Validity Not Before: Dec 6 00:00:35 2025 GMT Not After : Dec 7 00:00:35 2025 GMT Subject: CN=bca6c79ad3da8a21e39949dee49f447e4330e3a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6d:a6:ed:cc:74:d8:2e:db:a3:5d:50:fc:67: f6:d3:0b:a5:c5:e7:53:bf:6b:63:eb:fd:65:45:f2: 73:b2:5d:ca:fd:b7:cb:1d:7d:57:48:51:7e:fa:c5: d4:2b:cf:f0:db:42:e6:fc:9c:30:5d:34:db:72:04: e7:bd:ed:d6:b4:3f:d6:86:01:eb:81:be:f0:3e:f5: 24:61:61:c3:ea:8c:c1:6c:0e:b8:02:11:ac:5c:3b: 0f:d3:33:50:fa:d8:77:39:f2:96:a4:19:5a:ab:cb: 77:08:1c:20:d5:c7:a3:8d:6a:14:3a:5d:4e:7b:06: 38:cb:ac:86:e6:ea:6c:26:c0:9d:62:45:f0:5e:c9: 5d:59:73:d8:de:27:fc:13:cd:58:7c:55:4d:46:19: e1:c4:64:9f:2c:57:27:0d:8a:91:05:d5:b5:f2:68: 48:ed:44:e0:1f:5f:7a:66:66:e0:f5:5d:a9:aa:6c: 74:dd:0f:43:22:bd:e5:9b:d7:5d:44:0f:b5:d0:79: c1:f1:3f:7c:3f:5c:5e:c5:30:40:47:64:26:4d:1f: a7:15:e9:04:a7:75:16:42:81:24:84:d0:2f:39:f0: 2a:b1:89:58:d5:ef:6e:e3:b1:ec:b3:ac:97:ab:07: 9b:f4:b1:1b:39:e9:a8:bf:46:1f:5d:31:59:69:80: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A6:C7:9A:D3:DA:8A:21:E3:99:49:DE:E4:9F:44:7E:43:30:E3:A2 X509v3 Authority Key Identifier: keyid:C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:fb:bd:d4:39:8a:e2:e6:2f:dd:4f:48:58:67:67:45:f7:e9: eb:a1:56:a8:13:c9:72:5e:14:30:72:4d:38:50:58:db:ca:86: 9c:fa:f3:5f:18:8b:a6:28:f9:7f:56:88:ab:22:c2:bb:ea:0c: 8d:c1:5d:fd:08:62:0a:1d:82:41:5c:71:42:10:61:4c:0f:33: 4e:49:92:0b:ad:83:e1:a3:c6:fd:0c:aa:e7:89:b3:cd:60:20: c8:06:c8:2e:9b:3b:df:ad:e3:0a:97:2a:bd:c4:b0:96:e5:05: 45:9c:7a:f2:95:b9:58:bc:10:86:66:bf:d2:09:12:2c:0c:54: 3d:5e:7c:3d:99:8a:00:c7:52:7a:f2:9e:35:74:e6:fe:91:98: df:68:c0:ef:de:f4:93:cf:c9:1b:91:fa:37:17:5c:76:1a:2f: e9:28:01:2b:d4:98:dc:e0:92:47:e7:9a:1d:56:b6:67:49:6a: f8:53:04:5a:f2:dc:52:d7:c2:05:86:91:af:4a:01:54:57:bb: 5b:87:ee:ff:b7:5e:5d:dd:18:20:35:69:ed:9f:61:16:b2:91: 91:02:6f:8d:27:55:6a:9d:19:eb:9b:3b:b4:75:70:8a:8c:da: aa:ac:cb:10:5a:2f:24:d3:68:7f:ce:e4:e3:71:db:f8:37:71: 1b:b7:6a:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dx3C2ZcAe028MAlLzRoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMDM4OTk5NzQ1NGZhMDAzZTFmZmM4Y2QyZThiN2U2NWQ5 M2Y0ZTIwHhcNMjUxMjA2MDAwMDM1WhcNMjUxMjA3MDAwMDM1WjAzMTEwLwYDVQQD EyhiY2E2Yzc5YWQzZGE4YTIxZTM5OTQ5ZGVlNDlmNDQ3ZTQzMzBlM2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsW2m7cx02C7bo11Q/Gf20wulxedT v2tj6/1lRfJzsl3K/bfLHX1XSFF++sXUK8/w20Lm/JwwXTTbcgTnve3WtD/WhgHr gb7wPvUkYWHD6ozBbA64AhGsXDsP0zNQ+th3OfKWpBlaq8t3CBwg1cejjWoUOl1O ewY4y6yG5upsJsCdYkXwXsldWXPY3if8E81YfFVNRhnhxGSfLFcnDYqRBdW18mhI 7UTgH196Zmbg9V2pqmx03Q9DIr3lm9ddRA+10HnB8T98P1xexTBAR2QmTR+nFekE p3UWQoEkhNAvOfAqsYlY1e9u47Hss6yXqweb9LEbOemov0YfXTFZaYBfPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLymx5rT2ooh45lJ3uSfRH5DMOOiMB8GA1UdIwQY MBaAFMMDiZl0VPoAPh/8jNLot+Zdk/TiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3dPSm1YUlUtZ0EtSF95TTB1aTM1bDJUOU9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82M2RiOTMtNjA3Ny00OTUzLWE2ZDEt M2JmYTU4M2U3N2RiLzEvd3dPSm1YUlUtZ0EtSF95TTB1aTM1bDJUOU9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82M2RiOTMtNjA3Ny00OTUzLWE2ZDEtM2JmYTU4M2U3N2Ri LzEvd3dPSm1YUlUtZ0EtSF95TTB1aTM1bDJUOU9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/u91DmK 4uYv3U9IWGdnRffp66FWqBPJcl4UMHJNOFBY28qGnPrzXxiLpij5f1aIqyLCu+oM jcFd/QhiCh2CQVxxQhBhTA8zTkmSC62D4aPG/Qyq54mzzWAgyAbILps7363jCpcq vcSwluUFRZx68pW5WLwQhma/0gkSLAxUPV58PZmKAMdSevKeNXTm/pGY32jA7970 k8/JG5H6Nxdcdhov6SgBK9SY3OCSR+eaHVa2Z0lq+FMEWvLcUtfCBYaRr0oBVFe7 W4fu/7deXd0YIDVp7Z9hFrKRkQJvjSdVap0Z65s7tHVwiozaqqzLEFovJNNof87k 43Hb+DdxG7dqvg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:34:20 2025 by rpki-client