This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft File: wWorxbJu0grF0v3qnayGffkjIFo.mft (raw, json) Hash identifier: J3MFFwVbB38wk+8M31cCnFDJRtieBf26h7CZoTS07XM= Subject key identifier: 50:DC:00:7A:43:3B:A7:49:6C:A7:5D:D0:47:70:90:F7:69:59:87:4D Authority key identifier: C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A Certificate issuer: /CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a Certificate serial: 019AF352C8EE364251E3CEF505B83402CD8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft Manifest number: 0738 Signing time: Sat 06 Dec 2025 11:01:20 +0000 Manifest this update: Sat 06 Dec 2025 11:01:20 +0000 Manifest next update: Sun 07 Dec 2025 11:01:20 +0000 Files and hashes: 1: wWorxbJu0grF0v3qnayGffkjIFo.crl (hash: QQL9Tx+UPdr4YkyvUbsjboIUhIw6tKak3xTQii+PAH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c8:ee:36:42:51:e3:ce:f5:05:b8:34:02:cd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a Validity Not Before: Dec 6 11:01:20 2025 GMT Not After : Dec 7 11:01:20 2025 GMT Subject: CN=50dc007a433ba7496ca75dd0477090f76959874d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cb:0d:50:ce:2d:9d:2b:c1:4c:c6:ba:52:e3: 6e:70:a1:ae:12:48:db:19:22:81:89:df:19:56:d1: 6c:42:e4:55:aa:27:d1:ce:c3:53:cc:0f:dd:47:29: 19:96:c3:87:3c:93:51:ec:66:59:36:43:c3:f3:a9: 2c:f3:f4:eb:53:48:79:94:8e:81:af:90:32:a3:ad: ce:50:01:5b:fb:e7:91:78:bc:40:58:a2:b7:79:aa: 2e:af:57:94:50:93:11:fd:90:59:05:7e:92:be:3a: 3b:1f:e3:48:3c:c1:b8:9f:b2:eb:b0:00:67:2f:b8: 21:0c:c7:17:5d:d4:5e:30:83:83:39:d6:11:79:c7: 64:c0:8c:c6:80:44:49:80:ad:9d:b0:ca:63:2a:85: d6:91:f8:63:d2:31:30:76:85:ff:4c:c1:a8:06:bc: 67:ea:21:4a:8f:b6:96:08:27:61:df:69:6e:e0:35: 7f:22:bf:ca:ae:e8:26:72:6e:98:fc:4e:94:a3:8e: 2b:35:ae:e0:34:4c:2b:8d:3a:e3:b1:53:28:c0:21: 31:59:ef:57:fe:09:8c:8f:a0:52:ff:88:e2:fd:7e: 23:b1:05:3d:09:72:4b:56:fa:f0:99:44:2d:94:4d: fb:24:4d:67:d2:1b:02:97:1b:9d:14:cf:e3:90:50: e1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:00:7A:43:3B:A7:49:6C:A7:5D:D0:47:70:90:F7:69:59:87:4D X509v3 Authority Key Identifier: keyid:C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:76:20:b6:bd:1f:6f:e7:b2:57:ec:1a:2e:c6:d6:5b:89:35: 2c:a7:e8:bf:69:45:1e:fc:39:ff:87:87:97:e9:f3:ad:4e:e6: 1e:32:4f:d0:cb:c4:0f:3b:1f:ec:bd:4d:e4:8d:2f:25:80:18: 6d:a1:59:d4:73:49:fe:c9:d9:80:bb:ce:16:9a:34:e7:54:cb: c4:58:43:5a:7f:75:a2:84:2f:ae:1d:d5:09:a4:0d:e0:97:30: 21:da:d6:6b:81:0e:7a:24:b2:de:5a:80:38:cf:97:8c:fc:a3: f0:e9:6d:46:23:a6:de:45:5f:71:36:38:01:a7:b6:10:38:42: 68:80:1e:ff:92:07:24:85:0a:35:3b:6a:44:47:e6:13:44:04: 2a:ef:e5:a1:35:8e:9a:03:8d:5f:54:38:26:1a:fb:86:af:7e: a6:65:48:9f:b0:75:97:5f:e7:42:2e:e8:a1:33:6f:7c:64:ae: a7:0c:f3:96:dd:11:42:64:71:d0:cb:8c:fa:ce:f3:4f:d0:1b: a8:93:d5:45:df:da:cb:a2:9c:b4:dd:60:25:c9:a5:15:eb:80: 0e:a4:90:c3:04:56:88:74:ca:ae:4e:95:67:38:3f:25:24:4e: ea:57:9f:8f:c7:d6:d8:47:8d:60:e8:c7:b3:db:dc:43:24:0f: 5c:07:f8:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsjuNkJR4871Bbg0As2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNmEyYmM1YjI2ZWQyMGFjNWQyZmRlYTlkYWM4NjdkZjky MzIwNWEwHhcNMjUxMjA2MTEwMTIwWhcNMjUxMjA3MTEwMTIwWjAzMTEwLwYDVQQD Eyg1MGRjMDA3YTQzM2JhNzQ5NmNhNzVkZDA0NzcwOTBmNzY5NTk4NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhssNUM4tnSvBTMa6UuNucKGuEkjb GSKBid8ZVtFsQuRVqifRzsNTzA/dRykZlsOHPJNR7GZZNkPD86ks8/TrU0h5lI6B r5Ayo63OUAFb++eReLxAWKK3eaour1eUUJMR/ZBZBX6Svjo7H+NIPMG4n7LrsABn L7ghDMcXXdReMIODOdYRecdkwIzGgERJgK2dsMpjKoXWkfhj0jEwdoX/TMGoBrxn 6iFKj7aWCCdh32lu4DV/Ir/Krugmcm6Y/E6Uo44rNa7gNEwrjTrjsVMowCExWe9X /gmMj6BS/4ji/X4jsQU9CXJLVvrwmUQtlE37JE1n0hsClxudFM/jkFDhUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDcAHpDO6dJbKdd0EdwkPdpWYdNMB8GA1UdIwQY MBaAFMFqK8WybtIKxdL96p2shn35IyBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny81YjNhODktNjJhOC00MjFjLWI3NGUt OTU3N2ZmNWRkMzM4LzEvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny81YjNhODktNjJhOC00MjFjLWI3NGUtOTU3N2ZmNWRkMzM4 LzEvd1dvcnhiSnUwZ3JGMHYzcW5heUdmZmtqSUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABHYgtr0f b+eyV+waLsbWW4k1LKfov2lFHvw5/4eHl+nzrU7mHjJP0MvEDzsf7L1N5I0vJYAY baFZ1HNJ/snZgLvOFpo051TLxFhDWn91ooQvrh3VCaQN4JcwIdrWa4EOeiSy3lqA OM+XjPyj8OltRiOm3kVfcTY4Aae2EDhCaIAe/5IHJIUKNTtqREfmE0QEKu/loTWO mgONX1Q4Jhr7hq9+pmVIn7B1l1/nQi7ooTNvfGSupwzzlt0RQmRx0MuM+s7zT9Ab qJPVRd/ay6KctN1gJcmlFeuADqSQwwRWiHTKrk6VZzg/JSRO6lefj8fW2EeNYOjH s9vcQyQPXAf4bg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:17 2025 by rpki-client