This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json) Hash identifier: yBHEubPviDmwzdkUr47TSys84HLgDwsxlm/eo7zbKzw= Subject key identifier: C7:44:93:34:83:B0:A2:B6:9F:89:F6:C2:42:3D:6E:41:BF:78:E7:41 Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Certificate serial: 019B2F307E72399E36B179D9FB5D7197FE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft Manifest number: 0302 Signing time: Thu 18 Dec 2025 02:01:05 +0000 Manifest this update: Thu 18 Dec 2025 02:01:05 +0000 Manifest next update: Fri 19 Dec 2025 02:01:05 +0000 Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: RJXiwgE6SN9Qb7ehaanh72467U5u8UPCOdzUf9k85CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:7e:72:39:9e:36:b1:79:d9:fb:5d:71:97:fe:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Validity Not Before: Dec 18 02:01:05 2025 GMT Not After : Dec 19 02:01:05 2025 GMT Subject: CN=c744933483b0a2b69f89f6c2423d6e41bf78e741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:ba:24:86:a3:4c:26:34:ae:50:f8:cb:3b: f8:97:38:89:27:ee:75:f1:03:92:66:5a:da:64:cd: 2b:ff:64:6b:97:6d:b8:9e:96:e6:10:6c:e5:0a:8a: 59:90:ac:77:59:ab:4c:e7:1e:f2:0d:43:bf:a1:f0: e9:a9:38:39:d2:d9:6b:3f:6d:33:cb:ca:03:98:2e: 3c:6a:1d:d8:d4:33:7a:09:c4:ff:2b:4a:a3:f1:15: cc:03:98:2a:b6:b0:e7:04:c4:36:4d:bf:82:70:49: 72:20:7d:38:c7:97:7d:13:f3:d7:16:70:b9:37:3b: 3a:29:df:ad:a8:95:e3:e1:4f:55:e7:b3:aa:97:d2: 59:91:d8:17:df:e1:dc:71:47:70:f7:75:f4:92:b0: ac:c0:3d:e7:83:6c:e8:bc:44:cd:0c:e0:22:97:89: 77:e1:e1:43:a7:f5:4f:e1:7c:0f:58:37:a2:4e:7e: b2:d4:21:8a:85:0c:c3:b1:54:9f:d7:9b:fb:6d:7c: cd:78:e1:1b:67:65:83:90:28:99:fb:12:0b:72:33: 79:4b:1f:75:ab:86:df:4c:89:57:f4:2e:47:9f:41: 54:1a:3a:cd:23:95:d9:77:48:e5:e3:8c:87:a7:3d: 9b:a3:8d:4e:ac:2d:e3:06:a2:0f:80:f2:f4:3f:d6: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:44:93:34:83:B0:A2:B6:9F:89:F6:C2:42:3D:6E:41:BF:78:E7:41 X509v3 Authority Key Identifier: keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:8e:84:9c:6e:77:4b:0c:62:0d:0a:b3:46:bf:7c:eb:d9:5f: 0b:7e:c5:d2:de:83:99:a4:1f:d8:71:29:65:8b:7c:36:9f:fc: a7:de:23:3d:c7:78:6b:92:c8:a2:65:c1:53:dd:21:7b:43:5c: b1:cb:e8:81:17:07:f8:57:a7:7e:1d:b6:1a:38:8e:62:c8:02: e5:6b:fc:ea:0d:7f:b1:55:f3:af:d0:6f:4e:a5:95:d2:40:46: 18:b3:32:f1:6b:d0:d3:5e:fe:23:0e:c1:f4:e1:b6:23:31:50: 0f:90:e8:98:11:8c:de:7b:cb:67:ff:d8:1b:50:cd:9c:bd:3b: 27:2c:e5:6c:cb:9f:6b:df:e6:cd:1b:8f:80:3d:70:1c:1d:41: ee:21:10:18:8a:3c:58:9a:3f:8b:ac:3a:38:fd:30:50:60:6a: ca:ac:73:db:68:8e:b3:2a:01:e5:db:27:9b:63:96:ed:90:b3: 90:48:4d:80:7f:8f:4b:10:0a:fa:a3:7b:5e:95:65:16:c2:84: dd:3b:af:d3:74:c6:c2:18:e1:1b:a0:bd:c6:71:11:27:01:39: 7a:db:86:6a:95:29:07:88:ef:61:9a:a7:0e:7a:a8:de:e6:de: 6e:11:0d:b7:20:02:f2:e3:6c:fa:6b:6f:1d:b2:a9:da:c6:30: f4:1e:e8:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMH5yOZ42sXnZ+11xl/5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2ZlOTRmZGVjMzA5YWM1NTMwNWFjOTBlN2MzZDYyOGRm ZDQwNmEwHhcNMjUxMjE4MDIwMTA1WhcNMjUxMjE5MDIwMTA1WjAzMTEwLwYDVQQD EyhjNzQ0OTMzNDgzYjBhMmI2OWY4OWY2YzI0MjNkNmU0MWJmNzhlNzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlee6JIajTCY0rlD4yzv4lziJJ+51 8QOSZlraZM0r/2Rrl224npbmEGzlCopZkKx3WatM5x7yDUO/ofDpqTg50tlrP20z y8oDmC48ah3Y1DN6CcT/K0qj8RXMA5gqtrDnBMQ2Tb+CcElyIH04x5d9E/PXFnC5 Nzs6Kd+tqJXj4U9V57Oql9JZkdgX3+HccUdw93X0krCswD3ng2zovETNDOAil4l3 4eFDp/VP4XwPWDeiTn6y1CGKhQzDsVSf15v7bXzNeOEbZ2WDkCiZ+xILcjN5Sx91 q4bfTIlX9C5Hn0FUGjrNI5XZd0jl44yHpz2bo41OrC3jBqIPgPL0P9ZxBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdEkzSDsKK2n4n2wkI9bkG/eOdBMB8GA1UdIwQY MBaAFMLP6U/ewwmsVTBayQ58PWKN/UBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjIt ZTBlMDk5NjQwZWFjLzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjItZTBlMDk5NjQwZWFj LzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIo6EnG53 SwxiDQqzRr9869lfC37F0t6DmaQf2HEpZYt8Np/8p94jPcd4a5LIomXBU90he0Nc scvogRcH+Fenfh22GjiOYsgC5Wv86g1/sVXzr9BvTqWV0kBGGLMy8WvQ017+Iw7B 9OG2IzFQD5DomBGM3nvLZ//YG1DNnL07JyzlbMufa9/mzRuPgD1wHB1B7iEQGIo8 WJo/i6w6OP0wUGBqyqxz22iOsyoB5dsnm2OW7ZCzkEhNgH+PSxAK+qN7XpVlFsKE 3Tuv03TGwhjhG6C9xnERJwE5etuGapUpB4jvYZqnDnqo3ubebhENtyAC8uNs+mtv HbKp2sYw9B7ogg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:34 2025 by rpki-client