This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft File: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft (raw, json) Hash identifier: j3MXbD3oLu1JK0zWcU4CvzHhyoV2uigGspG8iWRZnUM= Subject key identifier: 69:5B:3C:BE:2A:97:04:BA:C5:C5:31:E2:79:7A:5A:27:1B:4F:52:72 Authority key identifier: D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF Certificate issuer: /CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df Certificate serial: 019AF2095E10839BF5EBBBE7C06CDF5C6791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft Manifest number: 141F Signing time: Sat 06 Dec 2025 05:01:31 +0000 Manifest this update: Sat 06 Dec 2025 05:01:31 +0000 Manifest next update: Sun 07 Dec 2025 05:01:31 +0000 Files and hashes: 1: 0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl (hash: cRTvtxmdgMb9YpG8BR88p7H6QkIOu6Le3SHuHA/TgPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:5e:10:83:9b:f5:eb:bb:e7:c0:6c:df:5c:67:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d16bd0e8cb5498c7f9aca1bbfcf9db377565e8df Validity Not Before: Dec 6 05:01:31 2025 GMT Not After : Dec 7 05:01:31 2025 GMT Subject: CN=695b3cbe2a9704bac5c531e2797a5a271b4f5272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f6:be:cc:56:eb:22:bf:79:9d:a5:2a:35:ad: 23:6d:09:b6:1c:89:b0:cd:0c:8b:42:15:5d:13:ae: e8:dd:50:1e:5a:e1:ba:2e:e0:d8:ed:33:17:b1:f7: 7f:ad:ac:63:d0:17:cd:ec:b9:fb:b8:5e:36:5f:ce: 36:aa:ae:03:9e:0e:03:a3:cf:88:4c:e0:ac:6c:d0: d2:7d:51:8d:aa:fc:6f:a1:3c:65:40:62:f5:33:8d: a5:83:7b:fd:93:46:4c:ec:97:1e:0a:e1:38:cd:09: 9e:94:2c:bd:bb:d3:b6:13:fa:6d:f2:71:0c:6f:18: 64:42:bf:ca:72:7a:cd:f5:a5:ab:c9:b1:1d:73:a5: ef:44:6a:22:c5:1b:63:f5:d1:d7:d3:c3:74:c6:68: b6:3f:b4:8f:ec:f0:3f:b6:b7:43:f3:db:46:33:ff: 4c:a1:7b:f7:9c:25:1e:62:ba:cf:f2:14:a4:b5:97: 4c:e5:4f:77:7e:3c:16:68:d3:0c:2e:dd:c5:fe:ac: 4f:56:c0:79:67:d4:42:eb:de:ab:be:73:35:df:cd: 48:67:85:28:f9:ed:9d:93:ef:3f:7f:fc:b6:9e:f6: 52:d0:5d:3a:2b:b8:e9:e7:fd:f6:61:10:31:c2:84: ac:9d:61:8e:59:ef:7e:ee:8c:1e:d1:96:ec:4e:61: 4e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5B:3C:BE:2A:97:04:BA:C5:C5:31:E2:79:7A:5A:27:1B:4F:52:72 X509v3 Authority Key Identifier: keyid:D1:6B:D0:E8:CB:54:98:C7:F9:AC:A1:BB:FC:F9:DB:37:75:65:E8:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/b5e2cd-5fb0-49d5-bc65-89f2df80c345/1/0WvQ6MtUmMf5rKG7_PnbN3Vl6N8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:73:d6:b4:33:ba:89:39:b2:95:33:1b:1f:cf:17:00:74:f8: 57:1e:b5:06:8b:6b:26:83:bd:fb:73:5e:c4:5e:cd:04:66:31: 6f:2c:0a:a0:94:88:61:e8:aa:03:53:d6:9a:72:d8:a0:53:83: 9b:ad:05:c1:cf:83:d4:44:76:91:2f:28:80:91:5c:62:11:73: 0a:b0:7c:04:9d:de:70:bc:e0:40:34:3f:5e:02:a4:33:81:62: 65:c4:17:db:34:81:44:bc:4c:b1:9c:ca:07:02:29:57:e2:93: bf:20:a6:1e:d2:5e:6b:50:92:18:87:7e:1e:64:0f:45:07:9c: 4d:44:6a:90:dc:a8:9e:f1:fa:24:76:02:83:d6:5f:b7:1c:4b: a3:80:89:cc:d7:2e:47:12:e6:fa:a7:fa:03:71:6c:79:37:29: b1:7e:6a:fb:40:93:ee:92:34:96:18:5b:37:17:90:b1:7e:56: 80:59:a0:ac:0c:25:19:9a:5f:ee:68:14:92:08:55:b1:18:be: e2:41:d8:cb:8a:b0:98:6d:e2:46:0b:e1:51:48:fa:49:82:97: 54:39:53:70:a8:bd:0c:7f:c5:ab:6c:be:f3:00:c3:ed:fa:b8: 53:c9:01:32:f8:96:0f:30:a2:6f:cc:a4:c2:27:7e:59:97:4d: ba:9d:f3:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCV4Qg5v167vnwGzfXGeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNmJkMGU4Y2I1NDk4YzdmOWFjYTFiYmZjZjlkYjM3NzU2 NWU4ZGYwHhcNMjUxMjA2MDUwMTMxWhcNMjUxMjA3MDUwMTMxWjAzMTEwLwYDVQQD Eyg2OTViM2NiZTJhOTcwNGJhYzVjNTMxZTI3OTdhNWEyNzFiNGY1MjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnva+zFbrIr95naUqNa0jbQm2HImw zQyLQhVdE67o3VAeWuG6LuDY7TMXsfd/raxj0BfN7Ln7uF42X842qq4Dng4Do8+I TOCsbNDSfVGNqvxvoTxlQGL1M42lg3v9k0ZM7JceCuE4zQmelCy9u9O2E/pt8nEM bxhkQr/KcnrN9aWrybEdc6XvRGoixRtj9dHX08N0xmi2P7SP7PA/trdD89tGM/9M oXv3nCUeYrrP8hSktZdM5U93fjwWaNMMLt3F/qxPVsB5Z9RC696rvnM1381IZ4Uo +e2dk+8/f/y2nvZS0F06K7jp5/32YRAxwoSsnWGOWe9+7owe0ZbsTmFOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlbPL4qlwS6xcUx4nl6WicbT1JyMB8GA1UdIwQY MBaAFNFr0OjLVJjH+ayhu/z52zd1ZejfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iNWUyY2QtNWZiMC00OWQ1LWJjNjUt ODlmMmRmODBjMzQ1LzEvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9iNWUyY2QtNWZiMC00OWQ1LWJjNjUtODlmMmRmODBjMzQ1 LzEvMFd2UTZNdFVtTWY1cktHN19QbmJOM1ZsNk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHPWtDO6 iTmylTMbH88XAHT4Vx61BotrJoO9+3NexF7NBGYxbywKoJSIYeiqA1PWmnLYoFOD m60Fwc+D1ER2kS8ogJFcYhFzCrB8BJ3ecLzgQDQ/XgKkM4FiZcQX2zSBRLxMsZzK BwIpV+KTvyCmHtJea1CSGId+HmQPRQecTURqkNyonvH6JHYCg9ZftxxLo4CJzNcu RxLm+qf6A3FseTcpsX5q+0CT7pI0lhhbNxeQsX5WgFmgrAwlGZpf7mgUkghVsRi+ 4kHYy4qwmG3iRgvhUUj6SYKXVDlTcKi9DH/Fq2y+8wDD7fq4U8kBMviWDzCib8yk wid+WZdNup3z9A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:19:29 2025 by rpki-client