This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft File: ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json) Hash identifier: iwkVVl99I+AcNxTkFrvEv+g1MFMeTHOhv8AW4deYXL8= Subject key identifier: 92:AD:12:00:CA:BD:87:DE:3A:D6:65:B3:32:90:86:13:36:C0:EC:E9 Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A Certificate issuer: /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Certificate serial: 019AF164785798AD0D9C31687B03685867A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft Manifest number: 02E2 Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: bjzG4Qmapi8p80FXBF+UDDEA92PR6nZYWv+JC+Z3bwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:78:57:98:ad:0d:9c:31:68:7b:03:68:58:67:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=92ad1200cabd87de3ad665b33290861336c0ece9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cd:00:88:be:40:ed:9b:bb:08:cd:2b:15:42: 16:b1:a4:90:1c:23:b8:90:dd:2a:ad:53:8a:0d:48: d9:2f:6a:8b:a2:75:7a:9d:c2:c8:17:ff:fc:6c:79: 50:c5:60:46:a6:c8:fe:a0:0e:25:8f:21:ff:29:04: 28:63:dd:ff:91:c9:50:da:d5:be:e3:10:72:1d:72: 34:90:e7:45:d7:8c:cb:4a:c8:95:1b:70:27:4b:27: 45:51:e6:20:93:51:3a:14:ee:db:41:7b:81:03:64: 6a:df:3d:3c:5a:fe:4f:5e:55:2a:9f:ab:53:51:53: b1:29:41:b5:cb:eb:cd:d2:02:ca:09:8a:db:64:72: 6a:a2:0c:97:ab:38:be:b4:33:74:60:90:6c:c3:2d: 5e:02:f8:66:23:be:c4:dc:d6:f3:9e:e3:9b:bd:d3: 04:58:e7:7d:83:44:04:9b:5f:2e:93:9b:04:8c:59: 56:20:82:4b:31:6d:61:ce:aa:f5:f9:29:b3:e0:62: ab:82:09:e9:31:15:28:00:b1:1f:ae:cb:f9:af:28: ab:2a:8e:45:6f:af:49:31:2b:a1:6c:25:36:18:55: 72:34:c9:75:c0:68:31:54:b9:ea:ef:be:e9:20:9b: f7:f1:52:6d:91:e1:e5:a9:30:31:ef:46:54:83:86: 7d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AD:12:00:CA:BD:87:DE:3A:D6:65:B3:32:90:86:13:36:C0:EC:E9 X509v3 Authority Key Identifier: keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:4b:7d:60:f9:75:c1:62:c2:08:8c:d2:a8:c1:c0:3a:aa:05: 6c:a8:c3:47:6d:c4:74:2a:6f:68:28:e9:22:e3:af:d0:4b:49: d8:16:ea:5a:99:03:c6:91:ac:fd:ea:d7:b5:d7:06:9f:c2:48: 44:c9:c9:2b:21:c5:03:07:f2:6f:67:95:90:48:6f:33:b4:c2: a7:38:02:4e:fc:d5:03:13:5e:b7:6e:4b:ef:73:3c:50:e3:64: d8:8d:9c:10:f5:79:fd:39:14:15:c7:2f:9a:75:3e:e8:0d:e8: bb:1a:cf:fc:17:6f:82:28:f8:58:a9:4b:9b:50:5e:9c:81:96: 7b:eb:59:69:bd:9d:13:9b:e2:6c:e0:d6:9e:2c:6b:87:70:65: af:1f:f3:76:5a:b9:3a:c2:12:5f:cf:df:5d:99:f1:cd:90:85: 29:53:ec:06:e6:c4:38:be:49:4e:b5:f0:b1:4e:7f:47:a2:9a: 7d:65:38:01:e7:8b:a2:0b:9e:d3:5a:79:2e:4f:12:75:46:08: d2:6e:55:4c:ba:8a:d8:32:36:08:61:bb:b2:9f:74:d7:ec:6a: 02:dc:03:30:2f:87:b0:83:53:55:8d:89:22:bd:86:9b:26:48: cf:2d:29:d5:c3:c1:ed:bd:2c:22:16:b2:d4:b5:6a:88:6f:01: 30:9a:64:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHhXmK0NnDFoewNoWGeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyY2ZlOTRmZGVjMzA5YWM1NTMwNWFjOTBlN2MzZDYyOGRm ZDQwNmEwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD Eyg5MmFkMTIwMGNhYmQ4N2RlM2FkNjY1YjMzMjkwODYxMzM2YzBlY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq80AiL5A7Zu7CM0rFUIWsaSQHCO4 kN0qrVOKDUjZL2qLonV6ncLIF//8bHlQxWBGpsj+oA4ljyH/KQQoY93/kclQ2tW+ 4xByHXI0kOdF14zLSsiVG3AnSydFUeYgk1E6FO7bQXuBA2Rq3z08Wv5PXlUqn6tT UVOxKUG1y+vN0gLKCYrbZHJqogyXqzi+tDN0YJBswy1eAvhmI77E3NbznuObvdME WOd9g0QEm18uk5sEjFlWIIJLMW1hzqr1+Smz4GKrggnpMRUoALEfrsv5ryirKo5F b69JMSuhbCU2GFVyNMl1wGgxVLnq777pIJv38VJtkeHlqTAx70ZUg4Z9VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKtEgDKvYfeOtZlszKQhhM2wOzpMB8GA1UdIwQY MBaAFMLP6U/ewwmsVTBayQ58PWKN/UBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjIt ZTBlMDk5NjQwZWFjLzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zOTkwYzItNTFiZS00Yjg3LWFmNjItZTBlMDk5NjQwZWFj LzEvd3NfcFQ5N0RDYXhWTUZySkRudzlZbzM5UUdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokt9YPl1 wWLCCIzSqMHAOqoFbKjDR23EdCpvaCjpIuOv0EtJ2BbqWpkDxpGs/erXtdcGn8JI RMnJKyHFAwfyb2eVkEhvM7TCpzgCTvzVAxNet25L73M8UONk2I2cEPV5/TkUFccv mnU+6A3ouxrP/Bdvgij4WKlLm1BenIGWe+tZab2dE5vibODWnixrh3Blrx/zdlq5 OsISX8/fXZnxzZCFKVPsBubEOL5JTrXwsU5/R6KafWU4AeeLogue01p5Lk8SdUYI 0m5VTLqK2DI2CGG7sp901+xqAtwDMC+HsINTVY2JIr2GmyZIzy0p1cPB7b0sIhay 1LVqiG8BMJpkgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:29 2025 by rpki-client