This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft File: wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json) Hash identifier: 96d57Rh48tL6iXfFEsabbboHVsIIGjFeWvVuz4oB7dg= Subject key identifier: 37:75:D5:87:0D:3C:7E:B9:51:1D:B6:29:05:16:20:DB:11:5B:90:B4 Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B Certificate issuer: /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b Certificate serial: 019AF1D1F0512473A24088E5DFA279BAD018 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: G1JD2EaUtFRCYEWOL8qa1h32jXoYuvBTUGNZYpXqVZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f0:51:24:73:a2:40:88:e5:df:a2:79:ba:d0:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=3775d5870d3c7eb9511db629051620db115b90b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:96:9c:be:75:bc:8f:a7:a7:30:c0:e3:5f: e7:ef:08:08:3a:93:02:89:08:a2:3a:7d:3d:a8:22: 1d:d9:7c:f4:49:4c:09:09:cf:6e:21:8b:25:9d:34: 0c:a1:65:b5:ae:27:60:9f:ac:0b:a1:d4:5f:e6:85: 77:4e:a2:43:40:1b:54:c2:f2:48:c3:0e:96:d3:45: 30:a4:9e:e3:cb:b5:76:64:8b:dc:be:ed:76:ee:9a: 46:0c:09:f2:4c:54:28:8b:f7:cc:42:db:61:21:88: 12:02:2b:72:fe:f9:bf:de:73:cb:7f:6b:83:1e:1b: c4:5b:54:ad:43:69:f5:da:d2:49:48:99:58:66:85: 2b:8f:53:b2:60:3e:22:d3:33:df:cc:7c:9d:4d:e3: 67:41:e9:d0:fc:03:92:21:ac:27:e8:96:eb:a3:96: 45:d5:3d:2a:6c:a6:a4:92:1d:c7:2d:3a:03:31:6a: 46:90:18:af:52:09:5e:63:5c:d6:eb:4f:08:ef:72: ac:47:57:78:0c:03:75:e3:4f:51:1e:10:5b:0f:c4: 80:4c:5e:30:33:d5:97:56:e9:21:98:2f:ce:4b:d8: 54:76:4a:99:da:4d:3f:97:2d:f5:b6:97:d8:53:5f: fe:5e:c8:28:ef:a5:05:3c:2b:e4:aa:bf:8e:34:43: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:75:D5:87:0D:3C:7E:B9:51:1D:B6:29:05:16:20:DB:11:5B:90:B4 X509v3 Authority Key Identifier: keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:d9:fd:77:34:87:96:3c:41:58:0b:5e:42:a1:a5:20:16: 8d:01:cc:83:98:7d:e6:26:12:e4:0b:10:fc:64:fd:41:01:b7: 5e:37:b3:9e:0f:7a:4a:2e:fd:df:c4:69:86:71:c0:d1:03:1c: 1f:5a:f0:bd:3f:e5:0e:a0:b8:07:f1:78:56:f1:14:b1:6f:99: ff:2b:ad:a4:03:95:65:14:a4:ac:56:9b:82:50:5d:98:64:f0: cc:ee:f4:ac:8e:d7:7a:cf:eb:a3:c1:99:20:db:ab:19:58:37: 55:30:be:92:77:ce:5b:44:50:c8:0a:bf:40:12:0c:66:10:0b: bc:cc:26:50:31:dd:5d:3c:8c:96:fb:94:6f:ab:e3:0a:0e:bc: bd:cd:58:f5:31:cf:9d:aa:4c:6b:c4:88:43:b6:fb:a3:b5:90: 4f:e6:0b:d5:a3:3d:c0:0e:83:91:01:d7:ee:8e:87:2f:47:3a: 97:d2:96:c9:28:ce:41:2f:c1:53:2a:ad:10:e6:26:3a:94:ff: 31:4c:aa:69:a4:fa:8b:f1:8a:fb:3e:60:6f:23:ed:70:20:6f: 06:b6:fc:3a:62:fa:54:91:87:d1:7d:63:b1:50:dd:0d:d2:fc: 69:dd:2b:84:3c:af:8a:77:68:89:df:e3:98:7c:8c:24:0e:31: 90:e9:c3:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fBRJHOiQIjl36J5utAYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNmZlMTAwOWZiZTY0OTFmN2IxNWNkZWYxOGVmOTZjMGVi ZDQ1OWIwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD EygzNzc1ZDU4NzBkM2M3ZWI5NTExZGI2MjkwNTE2MjBkYjExNWI5MGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5+WnL51vI+npzDA41/n7wgIOpMC iQiiOn09qCId2Xz0SUwJCc9uIYslnTQMoWW1ridgn6wLodRf5oV3TqJDQBtUwvJI ww6W00UwpJ7jy7V2ZIvcvu127ppGDAnyTFQoi/fMQtthIYgSAity/vm/3nPLf2uD HhvEW1StQ2n12tJJSJlYZoUrj1OyYD4i0zPfzHydTeNnQenQ/AOSIawn6Jbro5ZF 1T0qbKakkh3HLToDMWpGkBivUgleY1zW608I73KsR1d4DAN1409RHhBbD8SATF4w M9WXVukhmC/OS9hUdkqZ2k0/ly31tpfYU1/+Xsgo76UFPCvkqr+ONEPLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDd11YcNPH65UR22KQUWINsRW5C0MB8GA1UdIwQY MBaAFMFv4QCfvmSR97Fc3vGO+WwOvUWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYt Njc2ZDM3ZjNhMjlhLzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYtNjc2ZDM3ZjNhMjlh LzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVlfZ/Xc0 h5Y8QVgLXkKhpSAWjQHMg5h95iYS5AsQ/GT9QQG3Xjezng96Si7938RphnHA0QMc H1rwvT/lDqC4B/F4VvEUsW+Z/yutpAOVZRSkrFabglBdmGTwzO70rI7Xes/ro8GZ INurGVg3VTC+knfOW0RQyAq/QBIMZhALvMwmUDHdXTyMlvuUb6vjCg68vc1Y9THP napMa8SIQ7b7o7WQT+YL1aM9wA6DkQHX7o6HL0c6l9KWySjOQS/BUyqtEOYmOpT/ MUyqaaT6i/GK+z5gbyPtcCBvBrb8OmL6VJGH0X1jsVDdDdL8ad0rhDyvindoid/j mHyMJA4xkOnDzA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:15 2025 by rpki-client