This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft File: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json) Hash identifier: VxeootbvLJqguKRUrPVQGbV/LyMXcFBtkietR4XpKpk= Subject key identifier: C1:D5:5B:10:B5:E9:A3:B7:20:30:65:72:12:ED:C4:B1:F0:60:53:96 Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E Certificate issuer: /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e Certificate serial: 019AF31CB93FCA80135A9F88D70D8B05BA6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft Manifest number: 1552 Signing time: Sat 06 Dec 2025 10:02:17 +0000 Manifest this update: Sat 06 Dec 2025 10:02:17 +0000 Manifest next update: Sun 07 Dec 2025 10:02:17 +0000 Files and hashes: 1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: sZgmip22ntbJ7ugyFGDvZ8WbOr6HMH0ZbJ7VO4G0cIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:b9:3f:ca:80:13:5a:9f:88:d7:0d:8b:05:ba:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e Validity Not Before: Dec 6 10:02:17 2025 GMT Not After : Dec 7 10:02:17 2025 GMT Subject: CN=c1d55b10b5e9a3b72030657212edc4b1f0605396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d4:32:58:16:48:69:b7:f2:07:2a:ea:dc:5b: b6:c2:dc:b5:0b:21:5b:93:3e:6e:c4:2d:e5:ff:84: 88:5f:d1:58:43:2e:9d:83:cd:7e:a4:a6:11:4e:c2: 1c:ca:26:2b:2e:60:70:58:31:db:15:38:45:25:04: 58:8e:5e:a4:3e:23:75:5a:76:66:80:d2:39:41:47: 0c:10:cd:6a:7d:1f:8c:6c:c3:12:26:aa:a1:dc:25: 86:cb:73:50:74:2d:80:db:e5:80:bf:f0:85:0c:ee: 4f:85:e9:11:90:3c:23:c0:86:26:5c:17:76:3b:e1: 04:7c:4d:c6:ca:00:01:7c:0a:60:25:49:24:d0:54: 24:3f:7a:c4:5f:cc:a6:04:fc:63:e5:5c:da:d7:17: b5:6c:f1:b4:42:36:b8:72:34:51:22:1b:91:c4:ba: 40:92:20:b9:f8:5f:b5:74:c2:8c:9c:69:9e:e2:02: d7:ef:5e:78:c8:de:86:4f:ef:b3:13:99:9d:49:6b: 5e:9d:5d:1f:67:83:68:4b:12:a2:0b:b1:f5:40:45: d5:10:5f:2f:48:63:04:9a:d5:e1:f9:46:91:20:f5: de:86:1e:f5:73:6d:5e:e9:d8:22:68:c3:39:a0:6a: 06:c7:bd:51:59:f9:0f:cf:e3:6e:19:a1:ba:16:8b: a0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:D5:5B:10:B5:E9:A3:B7:20:30:65:72:12:ED:C4:B1:F0:60:53:96 X509v3 Authority Key Identifier: keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:21:7f:c1:0a:1b:4b:35:01:3b:f1:76:ba:0e:71:2a:51:16: d3:af:43:de:57:c8:12:06:51:d7:ce:f8:d2:34:aa:d5:40:e7: 97:f5:0c:29:ea:54:12:ca:29:76:8d:cb:b9:33:52:1f:57:e1: 31:35:2c:68:b5:ff:56:94:aa:1f:08:02:96:42:f7:40:54:77: d2:f0:d1:68:c5:be:dd:3e:28:14:d3:9f:68:1e:24:6c:a8:81: 27:6e:6e:41:76:55:77:d1:fc:4f:38:31:6c:03:27:d5:da:44: 34:6e:72:d9:84:c5:f0:f0:33:18:56:17:bd:a0:42:cf:62:e7: 4e:f4:da:bc:f7:01:a9:e8:10:13:64:05:2a:4c:04:65:03:eb: a1:16:42:ae:b3:ce:39:27:37:02:6c:31:29:37:1b:a9:2e:aa: 63:bf:32:6b:8f:c4:9c:94:c7:c3:54:5b:49:32:9e:1c:5c:ce: 2a:14:3d:92:b6:9a:e1:bb:7e:0b:dc:35:05:c4:ed:7d:bc:31: eb:c1:4f:4f:b1:ea:48:90:15:2a:7a:f7:ff:22:73:54:60:8e: d2:ce:7a:29:80:f2:63:1d:ad:37:c8:6e:e6:1d:3e:17:15:5e: 93:3b:dd:e6:48:51:56:1d:97:77:1d:3a:50:74:64:e2:02:1f: 6f:8b:8a:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHLk/yoATWp+I1w2LBbpqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMzdmNjM4YzBiZTQ2MDBiNDY2ZGU4ZTMzMGQ0Y2Y2YTdm ZjNiM2UwHhcNMjUxMjA2MTAwMjE3WhcNMjUxMjA3MTAwMjE3WjAzMTEwLwYDVQQD EyhjMWQ1NWIxMGI1ZTlhM2I3MjAzMDY1NzIxMmVkYzRiMWYwNjA1Mzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdQyWBZIabfyByrq3Fu2wty1CyFb kz5uxC3l/4SIX9FYQy6dg81+pKYRTsIcyiYrLmBwWDHbFThFJQRYjl6kPiN1WnZm gNI5QUcMEM1qfR+MbMMSJqqh3CWGy3NQdC2A2+WAv/CFDO5PhekRkDwjwIYmXBd2 O+EEfE3GygABfApgJUkk0FQkP3rEX8ymBPxj5Vza1xe1bPG0Qja4cjRRIhuRxLpA kiC5+F+1dMKMnGme4gLX7154yN6GT++zE5mdSWtenV0fZ4NoSxKiC7H1QEXVEF8v SGMEmtXh+UaRIPXehh71c21e6dgiaMM5oGoGx71RWfkPz+NuGaG6Foug0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMHVWxC16aO3IDBlchLtxLHwYFOWMB8GA1UdIwQY MBaAFME39jjAvkYAtGbejjMNTPan/zs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQt MTU0NmJiNmQzNmJiLzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny80OTFhODktNTg1MC00MGI2LTg1ZjQtMTU0NmJiNmQzNmJi LzEvd1RmMk9NQy1SZ0MwWnQ2T013MU05cWZfT3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCF/wQob SzUBO/F2ug5xKlEW069D3lfIEgZR18740jSq1UDnl/UMKepUEsopdo3LuTNSH1fh MTUsaLX/VpSqHwgClkL3QFR30vDRaMW+3T4oFNOfaB4kbKiBJ25uQXZVd9H8Tzgx bAMn1dpENG5y2YTF8PAzGFYXvaBCz2LnTvTavPcBqegQE2QFKkwEZQProRZCrrPO OSc3AmwxKTcbqS6qY78ya4/EnJTHw1RbSTKeHFzOKhQ9kraa4bt+C9w1BcTtfbwx 68FPT7HqSJAVKnr3/yJzVGCO0s56KYDyYx2tN8hu5h0+FxVekzvd5khRVh2Xdx06 UHRk4gIfb4uKaw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:34:26 2025 by rpki-client