This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft File: wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json) Hash identifier: Ci6T/3WH7m5Kii2JzIm7924ae6fUS5k9aEF0Xc6gzE4= Subject key identifier: FB:D4:C4:D7:A0:7C:00:D9:37:A3:80:76:DD:2A:74:28:C0:90:5A:67 Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D Certificate issuer: /CN=c12c072c35909d525322b027586bacfad119f17d Certificate serial: 019AF16445F6DE6AC7B836E719DFA1D48E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft Manifest number: 0583 Signing time: Sat 06 Dec 2025 02:01:11 +0000 Manifest this update: Sat 06 Dec 2025 02:01:11 +0000 Manifest next update: Sun 07 Dec 2025 02:01:11 +0000 Files and hashes: 1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: 0Cxv1wqJZBmd3WtMMbcVWoxgfr5IbQp9JVKO4XcE6IQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:45:f6:de:6a:c7:b8:36:e7:19:df:a1:d4:8e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12c072c35909d525322b027586bacfad119f17d Validity Not Before: Dec 6 02:01:11 2025 GMT Not After : Dec 7 02:01:11 2025 GMT Subject: CN=fbd4c4d7a07c00d937a38076dd2a7428c0905a67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:69:bb:57:26:bb:04:0f:8f:5c:9a:85:cb:76: c7:d9:b8:68:3c:aa:aa:ab:c7:70:ff:54:b3:b0:86: be:b4:ee:25:7f:8f:8d:1d:9b:c0:a9:9e:92:3b:f0: 65:b3:7a:d4:4e:08:6c:ca:0f:a3:28:94:c8:50:98: 21:4c:cd:42:72:6d:1f:86:3b:a4:f9:56:82:d7:57: 64:b2:00:20:0b:78:6f:de:8c:4f:70:54:15:4b:16: 75:41:7b:8a:0b:50:bb:55:5c:b9:19:a2:d7:55:66: 56:94:0c:a6:e2:87:78:6f:39:d1:e3:db:5c:fb:bf: 91:c0:5d:b5:30:5f:97:50:9a:3a:85:42:c8:5e:f9: 9e:a9:a9:fa:08:5c:24:f8:3d:51:51:3c:00:da:10: 58:32:0d:35:38:e1:f4:9d:34:1a:da:e8:54:8b:34: b6:1f:c5:2e:d5:50:0a:c9:c5:ca:31:ab:33:7e:c9: 2d:97:9d:26:05:92:5f:ba:2f:13:23:f8:3b:1d:9f: fc:d0:d7:43:82:03:f6:31:6b:47:84:bb:f2:07:6c: 38:b7:df:67:a1:2f:6a:5e:d1:15:33:b0:4c:bf:e9: b2:4f:75:4a:20:89:74:de:71:40:7f:e6:37:9e:ef: 93:4f:5c:a5:41:22:e4:e7:c6:39:78:65:11:52:74: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D4:C4:D7:A0:7C:00:D9:37:A3:80:76:DD:2A:74:28:C0:90:5A:67 X509v3 Authority Key Identifier: keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7c:fa:c4:99:1e:f6:3a:39:02:e7:a6:90:ab:52:4b:25:6e: 3f:a3:37:87:fa:5d:89:7a:06:05:50:35:74:47:23:bb:2d:06: ab:3b:b6:3c:80:6b:1a:1d:5b:e0:2c:f5:ba:96:5a:48:0d:76: 5e:ca:fb:9b:9f:54:a8:45:b6:fd:e2:40:2b:ba:25:c6:39:37: 34:75:ed:52:71:20:7a:97:fd:69:aa:e3:50:24:67:cb:83:ff: 0f:cc:53:38:57:72:96:78:70:a1:cd:62:df:8d:94:6c:f1:e0: a1:b2:35:43:b8:08:bb:7e:d2:f1:ef:57:74:72:70:6f:5a:21: 10:29:45:94:e6:39:ef:b2:5f:02:9c:b2:1b:d1:37:d7:54:26: 47:d3:3c:a2:b4:06:ac:2d:9e:0e:bc:e7:1f:f0:09:0d:15:d6: e6:84:c2:fd:ef:c7:82:83:42:2c:90:bd:75:c1:71:09:9d:4c: 4d:e7:21:d3:26:84:0f:db:97:1b:fe:ac:05:10:48:5c:54:0e: b0:b5:05:d2:00:ab:c3:2b:70:e1:e0:64:87:48:8a:d8:10:98: 5c:b1:9f:d2:fd:57:b0:ac:16:0c:a2:a3:1d:bf:3d:48:21:15: 92:27:0e:2f:de:2a:16:a4:cf:37:fc:15:51:5c:0d:fb:f5:e3: 1e:5d:78:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEX23mrHuDbnGd+h1I5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmMwNzJjMzU5MDlkNTI1MzIyYjAyNzU4NmJhY2ZhZDEx OWYxN2QwHhcNMjUxMjA2MDIwMTExWhcNMjUxMjA3MDIwMTExWjAzMTEwLwYDVQQD EyhmYmQ0YzRkN2EwN2MwMGQ5MzdhMzgwNzZkZDJhNzQyOGMwOTA1YTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2m7Vya7BA+PXJqFy3bH2bhoPKqq q8dw/1SzsIa+tO4lf4+NHZvAqZ6SO/Bls3rUTghsyg+jKJTIUJghTM1Ccm0fhjuk +VaC11dksgAgC3hv3oxPcFQVSxZ1QXuKC1C7VVy5GaLXVWZWlAym4od4bznR49tc +7+RwF21MF+XUJo6hULIXvmeqan6CFwk+D1RUTwA2hBYMg01OOH0nTQa2uhUizS2 H8Uu1VAKycXKMaszfsktl50mBZJfui8TI/g7HZ/80NdDggP2MWtHhLvyB2w4t99n oS9qXtEVM7BMv+myT3VKIIl03nFAf+Y3nu+TT1ylQSLk58Y5eGURUnTQjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvUxNegfADZN6OAdt0qdCjAkFpnMB8GA1UdIwQY MBaAFMEsByw1kJ1SUyKwJ1hrrPrRGfF9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEt ZjZiNTQ3ZmVlOGUwLzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9lZWM1MjgtZjJmZi00Y2I1LTljZGEtZjZiNTQ3ZmVlOGUw LzEvd1N3SExEV1FuVkpUSXJBbldHdXMtdEVaOFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3z6xJke 9jo5AuemkKtSSyVuP6M3h/pdiXoGBVA1dEcjuy0Gqzu2PIBrGh1b4Cz1upZaSA12 Xsr7m59UqEW2/eJAK7olxjk3NHXtUnEgepf9aarjUCRny4P/D8xTOFdylnhwoc1i 342UbPHgobI1Q7gIu37S8e9XdHJwb1ohEClFlOY577JfApyyG9E311QmR9M8orQG rC2eDrznH/AJDRXW5oTC/e/HgoNCLJC9dcFxCZ1MTech0yaED9uXG/6sBRBIXFQO sLUF0gCrwytw4eBkh0iK2BCYXLGf0v1XsKwWDKKjHb89SCEVkicOL94qFqTPN/wV UVwN+/XjHl14aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:46 2025 by rpki-client