This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft File: wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json) Hash identifier: AzVTHh2td/JOwtgwOASLEBJORQ88NeODM7gX/TOSD4c= Subject key identifier: DF:08:15:EA:C1:4B:92:15:DE:27:E3:44:FE:72:76:9F:87:1E:9F:17 Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12 Certificate issuer: /CN=c081a22674dc25aaa5085367e20e078de9064f12 Certificate serial: 019AF12E94037C3E8E7E00CA9E9D7254F756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft Manifest number: 09D7 Signing time: Sat 06 Dec 2025 01:02:32 +0000 Manifest this update: Sat 06 Dec 2025 01:02:32 +0000 Manifest next update: Sun 07 Dec 2025 01:02:32 +0000 Files and hashes: 1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: y69mrHb18Rh8szuqPyafeJlOJCvOV2jJcA0EfMxuepA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:94:03:7c:3e:8e:7e:00:ca:9e:9d:72:54:f7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12 Validity Not Before: Dec 6 01:02:32 2025 GMT Not After : Dec 7 01:02:32 2025 GMT Subject: CN=df0815eac14b9215de27e344fe72769f871e9f17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:a5:09:2d:14:39:cf:79:14:39:7d:22:81: 33:70:1b:5b:74:f0:0d:36:5f:2a:46:11:5c:01:a0: c6:fa:66:00:10:04:87:78:dc:11:85:12:6e:41:d8: 01:fa:f8:9f:11:30:8d:0f:54:97:a1:b3:50:2f:42: fb:f1:cc:c9:ae:96:34:14:f6:79:2d:6a:b4:43:af: da:6a:d0:b5:1d:ea:f2:16:b8:31:76:8a:7b:01:43: c5:71:c5:4e:88:d6:61:7d:72:33:26:11:78:9c:0f: 87:80:b5:1a:cf:63:41:32:c8:7e:2f:9f:9b:3b:16: e2:85:ad:c7:f1:00:81:61:2a:80:39:35:68:8f:ef: d6:66:89:de:1d:85:5c:f9:98:38:c2:b8:9d:11:44: b3:30:46:f7:a8:c1:db:e7:e6:dc:b7:2b:62:fd:e4: 34:89:2c:fa:d7:31:bd:f6:5e:1a:3f:af:ed:97:36: 55:7c:95:a2:88:84:f8:91:a7:67:4e:2f:76:14:44: 9f:5e:a8:5e:c3:71:e9:e5:31:10:bf:cc:fc:6a:6a: 07:c3:85:9c:9f:76:97:2c:da:60:67:05:4b:f8:4d: 35:5f:ff:aa:ec:83:be:ef:78:da:b9:5d:6f:98:4c: 51:b1:75:c8:c5:34:d7:98:c9:44:5e:d1:e1:b1:a4: a0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:15:EA:C1:4B:92:15:DE:27:E3:44:FE:72:76:9F:87:1E:9F:17 X509v3 Authority Key Identifier: keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:de:90:8e:68:d2:71:5c:c5:3f:9e:a0:1c:7d:16:fc:07:f0: 66:4e:af:3a:62:2c:9b:74:a9:05:a8:92:37:b2:28:b2:ec:7e: a0:f2:3b:26:f8:0b:11:70:a2:05:9e:2f:35:d9:16:ff:b8:3c: de:b8:65:67:ac:fe:b9:43:35:e3:69:21:d4:55:85:bd:60:0c: 6a:13:fc:dc:0f:f8:52:ef:7f:af:41:07:97:ed:4e:ef:d5:20: 49:6a:87:a1:82:41:34:dd:e7:9a:c0:5d:51:79:51:93:c0:cb: aa:1b:a9:82:ee:f6:de:dd:11:13:07:1c:1e:48:b8:b7:40:e7: 56:50:af:49:84:9a:f8:28:bc:a9:1e:c9:d6:5f:53:15:da:1b: 35:53:6d:1e:a5:f1:40:1a:5e:44:b5:24:d0:2b:dd:6c:99:6a: 45:29:cc:4c:79:84:c4:f3:12:13:66:cd:cc:48:07:7d:6b:55: 50:37:78:53:44:cd:be:68:a3:e7:ca:8d:a3:02:ff:23:14:1f: 84:b5:ee:2c:dc:a0:af:80:24:96:43:59:db:a7:8b:cf:b0:72: 46:16:74:04:44:ac:67:c8:e3:54:0b:71:fd:a0:27:09:53:11: 9c:b8:04:05:46:09:34:e2:4d:8d:a8:f6:2f:c6:d0:06:78:00: d8:56:71:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLpQDfD6OfgDKnp1yVPdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODFhMjI2NzRkYzI1YWFhNTA4NTM2N2UyMGUwNzhkZTkw NjRmMTIwHhcNMjUxMjA2MDEwMjMyWhcNMjUxMjA3MDEwMjMyWjAzMTEwLwYDVQQD EyhkZjA4MTVlYWMxNGI5MjE1ZGUyN2UzNDRmZTcyNzY5Zjg3MWU5ZjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBmlCS0UOc95FDl9IoEzcBtbdPAN Nl8qRhFcAaDG+mYAEASHeNwRhRJuQdgB+vifETCND1SXobNQL0L78czJrpY0FPZ5 LWq0Q6/aatC1HeryFrgxdop7AUPFccVOiNZhfXIzJhF4nA+HgLUaz2NBMsh+L5+b Oxbiha3H8QCBYSqAOTVoj+/WZoneHYVc+Zg4wridEUSzMEb3qMHb5+bctyti/eQ0 iSz61zG99l4aP6/tlzZVfJWiiIT4kadnTi92FESfXqhew3Hp5TEQv8z8amoHw4Wc n3aXLNpgZwVL+E01X/+q7IO+73jauV1vmExRsXXIxTTXmMlEXtHhsaSgxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN8IFerBS5IV3ifjRP5ydp+HHp8XMB8GA1UdIwQY MBaAFMCBoiZ03CWqpQhTZ+IOB43pBk8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYt ZDczNjRkZDM1YjMxLzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lMTM5ZDgtNjhlMC00ZmZhLWI0ZWYtZDczNjRkZDM1YjMx LzEvd0lHaUpuVGNKYXFsQ0ZObjRnNEhqZWtHVHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKt6QjmjS cVzFP56gHH0W/AfwZk6vOmIsm3SpBaiSN7Iosux+oPI7JvgLEXCiBZ4vNdkW/7g8 3rhlZ6z+uUM142kh1FWFvWAMahP83A/4Uu9/r0EHl+1O79UgSWqHoYJBNN3nmsBd UXlRk8DLqhupgu723t0REwccHki4t0DnVlCvSYSa+Ci8qR7J1l9TFdobNVNtHqXx QBpeRLUk0CvdbJlqRSnMTHmExPMSE2bNzEgHfWtVUDd4U0TNvmij58qNowL/IxQf hLXuLNygr4AklkNZ26eLz7ByRhZ0BESsZ8jjVAtx/aAnCVMRnLgEBUYJNOJNjaj2 L8bQBngA2FZxpQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:22 2025 by rpki-client