This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json) Hash identifier: 267D91Jk5N5q3AS7Vz4qAXPQGI+qGCeLRdrKp15/J5Q= Subject key identifier: 4B:2D:8B:99:32:E3:B8:83:A0:15:05:96:70:3F:DB:02:70:A2:0F:07 Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46 Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46 Certificate serial: 019AF1D1E8A3E940ECAB378E5350D2AEC4AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft Manifest number: 1498 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: /FE3tnLyrAaNrZqikipGGESLpIrJB4Tuz4+AG6gYTDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e8:a3:e9:40:ec:ab:37:8e:53:50:d2:ae:c4:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=4b2d8b9932e3b883a0150596703fdb0270a20f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:36:35:15:56:62:ac:1b:dd:ff:61:1a:1d:ff: 83:0d:cb:94:a3:02:5f:6e:62:41:77:d8:bb:48:e7: 53:00:0d:a4:4e:99:86:0c:2e:50:52:d2:b0:63:b6: 51:ea:bc:1a:34:e8:73:20:cb:08:43:23:c6:03:3b: dc:d8:9d:87:cb:16:e0:fe:3c:72:20:7e:9c:d4:a6: 95:2a:b1:f5:02:07:57:7a:c6:ba:b5:d9:75:e9:c6: 71:c8:e1:34:e9:25:4d:15:4e:dc:ad:69:07:83:07: 3c:ab:da:aa:65:eb:53:60:72:8b:fa:43:4d:7c:4d: 8b:21:38:27:d5:66:e8:c0:bf:22:c7:e7:0a:0f:e9: 85:35:cd:b8:13:51:4b:ba:9e:f5:63:77:6a:81:25: 4f:7f:3e:0a:9f:ee:e0:cc:bf:ec:00:be:bb:95:72: 01:cb:67:e8:17:d5:bd:dc:e5:42:00:1e:9a:d2:d5: 5b:e5:c6:b9:27:e7:db:f2:00:f7:b2:1e:2f:6d:d7: 15:e3:02:d3:10:f7:98:2d:b9:50:2a:45:0c:1b:46: 01:e6:7e:64:19:c7:e2:df:16:d1:2b:11:53:ca:ab: e2:f6:7d:9e:23:ba:1f:3c:bf:8e:f9:98:36:e8:58: 06:d6:cb:8d:a0:04:b2:0f:f2:98:d7:2f:9d:b2:61: 95:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2D:8B:99:32:E3:B8:83:A0:15:05:96:70:3F:DB:02:70:A2:0F:07 X509v3 Authority Key Identifier: keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:cb:cf:7b:6a:82:f7:b1:b5:00:d3:f3:75:7e:23:3f:29:02: 89:f8:1d:60:12:3a:6b:6a:0b:3d:93:08:aa:4f:fa:d2:03:4f: 1d:08:be:57:17:8a:95:fc:3c:7e:48:c7:95:e9:62:b0:8e:19: 94:af:34:98:58:23:ed:ee:98:f1:6d:99:f0:c9:22:30:c2:ad: 46:ac:26:64:28:97:8a:6f:5e:07:b1:7e:92:97:e3:60:d5:c2: ea:35:9f:b6:cc:07:bc:06:c6:b8:9e:10:8a:96:45:9b:67:16: f1:f4:40:04:ea:72:65:ec:cc:4f:b6:ff:49:8b:fe:42:85:4d: ca:a9:40:c3:43:50:93:e7:cb:9d:49:54:38:9e:50:73:ed:a2: 3f:64:f1:c0:c6:17:23:bb:66:0c:30:2c:7a:9c:ba:70:c6:39: f1:4e:bb:f2:67:de:fb:2c:82:93:ff:0d:7c:3b:80:00:76:f7: c8:10:84:a4:0e:7c:16:a4:8a:2d:e0:00:71:27:62:76:95:97: 74:e5:7b:a2:c6:3c:00:29:9b:c6:2c:f2:3e:68:02:1a:06:34: d9:7d:32:ac:71:c5:bd:dd:14:cb:4d:75:db:7b:76:17:01:3d: f5:86:f0:c9:4d:09:ba:02:3d:da:e0:ca:7c:e6:49:d2:ae:57: 7e:e1:b7:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eij6UDsqzeOU1DSrsStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjI5YWI3MmNkYjkwMzNlZTU1NmUzOTliZjUyMjYzZDVh YTVhNDYwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg0YjJkOGI5OTMyZTNiODgzYTAxNTA1OTY3MDNmZGIwMjcwYTIwZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TY1FVZirBvd/2EaHf+DDcuUowJf bmJBd9i7SOdTAA2kTpmGDC5QUtKwY7ZR6rwaNOhzIMsIQyPGAzvc2J2Hyxbg/jxy IH6c1KaVKrH1AgdXesa6tdl16cZxyOE06SVNFU7crWkHgwc8q9qqZetTYHKL+kNN fE2LITgn1WbowL8ix+cKD+mFNc24E1FLup71Y3dqgSVPfz4Kn+7gzL/sAL67lXIB y2foF9W93OVCAB6a0tVb5ca5J+fb8gD3sh4vbdcV4wLTEPeYLblQKkUMG0YB5n5k Gcfi3xbRKxFTyqvi9n2eI7ofPL+O+Zg26FgG1suNoASyD/KY1y+dsmGVTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsti5ky47iDoBUFlnA/2wJwog8HMB8GA1UdIwQY MBaAFNFimrcs25Az7lVuOZv1ImPVqlpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgt ZDFhODRiNDE0ZWY4LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgtZDFhODRiNDE0ZWY4 LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB8vPe2qC 97G1ANPzdX4jPykCifgdYBI6a2oLPZMIqk/60gNPHQi+VxeKlfw8fkjHlelisI4Z lK80mFgj7e6Y8W2Z8MkiMMKtRqwmZCiXim9eB7F+kpfjYNXC6jWftswHvAbGuJ4Q ipZFm2cW8fRABOpyZezMT7b/SYv+QoVNyqlAw0NQk+fLnUlUOJ5Qc+2iP2TxwMYX I7tmDDAsepy6cMY58U678mfe+yyCk/8NfDuAAHb3yBCEpA58FqSKLeAAcSdidpWX dOV7osY8ACmbxizyPmgCGgY02X0yrHHFvd0Uy01123t2FwE99YbwyU0JugI92uDK fOZJ0q5XfuG33Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:42 2025 by rpki-client