This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft File: wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft (raw, json) Hash identifier: eOGLhwNlKphx3BepcfH98OcoJxrVPIyKIYB9JrHDYJM= Subject key identifier: A4:D9:F6:10:C4:9F:22:CE:0F:01:69:AB:A4:2F:57:84:FC:F3:8E:1A Authority key identifier: C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45 Certificate issuer: /CN=c14d724ca59addd0f7f8108b01059795f34d3345 Certificate serial: 019AF50A2DA716A3F3898EDFDC3839C38781 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft Manifest number: 077D Signing time: Sat 06 Dec 2025 19:01:16 +0000 Manifest this update: Sat 06 Dec 2025 19:01:16 +0000 Manifest next update: Sun 07 Dec 2025 19:01:16 +0000 Files and hashes: 1: wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl (hash: Qh8TKrUDMGujudz2Tf/isb9uXO+bAyMbCOrQh6JPaIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:2d:a7:16:a3:f3:89:8e:df:dc:38:39:c3:87:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c14d724ca59addd0f7f8108b01059795f34d3345 Validity Not Before: Dec 6 19:01:16 2025 GMT Not After : Dec 7 19:01:16 2025 GMT Subject: CN=a4d9f610c49f22ce0f0169aba42f5784fcf38e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:22:58:1b:0b:83:36:51:00:fa:42:ce:61: 89:94:9e:30:7e:37:8e:f0:18:a2:ce:28:9f:5f:06: 82:ae:f2:bb:a1:33:13:39:7d:e8:4b:ac:1d:5e:ba: f5:c9:a5:1c:c4:b9:c2:cf:0f:a1:ae:6c:1e:ab:d6: b0:be:c0:e8:22:77:a8:eb:17:67:8a:74:48:42:ea: 73:bc:1c:d7:9e:5e:00:7b:c6:12:ad:ee:58:fb:41: 7a:39:b7:63:6b:55:69:e4:2c:f7:ce:25:4d:5d:89: 2e:05:38:eb:54:61:18:d2:ee:80:f0:08:6d:6c:17: 8c:c8:74:df:ec:25:e1:12:d2:80:04:7c:a9:56:58: 39:05:b4:5f:14:cc:e9:97:9f:d5:ce:b9:bd:72:93: f3:74:b3:6d:23:81:24:81:16:5a:9b:bf:b4:48:6c: 20:db:f8:04:d6:ed:61:94:b7:a3:a0:a8:8c:77:38: a8:52:fc:45:1d:00:ca:c5:37:66:b7:18:93:14:c4: 2f:1e:f0:63:2c:b1:ec:82:6a:b2:ad:59:aa:29:c2: 3b:31:4b:1d:37:d5:eb:a0:cf:6c:bf:48:9e:d6:4d: 78:aa:c8:91:47:76:2c:cf:48:64:7b:62:30:10:25: 21:b9:a2:b3:ca:f3:fe:e9:fb:27:eb:0b:32:a8:85: 8f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D9:F6:10:C4:9F:22:CE:0F:01:69:AB:A4:2F:57:84:FC:F3:8E:1A X509v3 Authority Key Identifier: keyid:C1:4D:72:4C:A5:9A:DD:D0:F7:F8:10:8B:01:05:97:95:F3:4D:33:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU1yTKWa3dD3-BCLAQWXlfNNM0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b4ddd7-cd41-46b5-ac38-4f564ce07126/1/wU1yTKWa3dD3-BCLAQWXlfNNM0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:7a:f8:f3:33:db:06:6b:7e:96:5c:00:fb:ae:08:43:7b:f5: 9b:45:5c:a6:52:46:b5:3d:63:56:da:b3:cc:85:46:41:9f:49: c2:2f:46:08:6d:2d:e5:06:12:fe:91:28:e2:df:b1:00:fb:35: fa:90:6e:6c:f5:d7:34:80:fc:02:df:c4:94:9e:b5:69:b8:5d: 36:cf:b5:5a:73:4b:52:4c:0c:0e:73:fd:4c:d9:45:ba:f7:ec: 8b:cb:bc:96:bd:0d:e5:ab:3f:49:b7:58:82:f1:bb:8d:c1:44: ea:67:cd:13:f4:78:03:06:61:6a:9e:7c:dc:b7:da:df:d8:c7: 3f:c6:be:62:39:34:c9:b1:cb:a7:a8:39:5c:e0:5e:e0:7d:4a: 3f:23:2a:97:fb:1c:d6:a1:b9:3f:14:e5:31:33:08:a1:f8:9f: f7:fa:3c:c6:ee:1a:24:61:9b:a0:3b:1d:07:4f:e4:b1:88:8d: 27:b2:47:b0:31:58:a8:73:38:1c:dd:86:9e:45:4e:e6:d3:5d: cb:79:80:62:c1:d4:30:14:5d:49:c1:cb:a0:2a:0d:1f:dc:69: db:f2:8b:24:31:b9:54:56:91:4e:90:6b:eb:46:7e:d5:55:62: fc:ad:36:11:4a:59:9a:dd:90:06:bd:97:38:d5:fe:66:78:4d: 01:36:ae:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ci2nFqPziY7f3Dg5w4eBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNGQ3MjRjYTU5YWRkZDBmN2Y4MTA4YjAxMDU5Nzk1ZjM0 ZDMzNDUwHhcNMjUxMjA2MTkwMTE2WhcNMjUxMjA3MTkwMTE2WjAzMTEwLwYDVQQD EyhhNGQ5ZjYxMGM0OWYyMmNlMGYwMTY5YWJhNDJmNTc4NGZjZjM4ZTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0ciWBsLgzZRAPpCzmGJlJ4wfjeO 8BiiziifXwaCrvK7oTMTOX3oS6wdXrr1yaUcxLnCzw+hrmweq9awvsDoIneo6xdn inRIQupzvBzXnl4Ae8YSre5Y+0F6Obdja1Vp5Cz3ziVNXYkuBTjrVGEY0u6A8Aht bBeMyHTf7CXhEtKABHypVlg5BbRfFMzpl5/Vzrm9cpPzdLNtI4EkgRZam7+0SGwg 2/gE1u1hlLejoKiMdzioUvxFHQDKxTdmtxiTFMQvHvBjLLHsgmqyrVmqKcI7MUsd N9XroM9sv0ie1k14qsiRR3Ysz0hke2IwECUhuaKzyvP+6fsn6wsyqIWPWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTZ9hDEnyLODwFpq6QvV4T8844aMB8GA1UdIwQY MBaAFMFNckylmt3Q9/gQiwEFl5XzTTNFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgt NGY1NjRjZTA3MTI2LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iNGRkZDctY2Q0MS00NmI1LWFjMzgtNGY1NjRjZTA3MTI2 LzEvd1UxeVRLV2EzZEQzLUJDTEFRV1hsZk5OTTBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXr48zPb Bmt+llwA+64IQ3v1m0VcplJGtT1jVtqzzIVGQZ9Jwi9GCG0t5QYS/pEo4t+xAPs1 +pBubPXXNID8At/ElJ61abhdNs+1WnNLUkwMDnP9TNlFuvfsi8u8lr0N5as/SbdY gvG7jcFE6mfNE/R4AwZhap583Lfa39jHP8a+Yjk0ybHLp6g5XOBe4H1KPyMql/sc 1qG5PxTlMTMIofif9/o8xu4aJGGboDsdB0/ksYiNJ7JHsDFYqHM4HN2GnkVO5tNd y3mAYsHUMBRdScHLoCoNH9xp2/KLJDG5VFaRTpBr60Z+1VVi/K02EUpZmt2QBr2X ONX+ZnhNATauGw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:24:35 2025 by rpki-client