This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft File: wkDtrImIu1blLeEopdZaj07z8Tg.mft (raw, json) Hash identifier: Qc1cVLXQpxY7mo8NKlArewU8IWnXQ20SMXu4pDeYw7w= Subject key identifier: 61:1C:3A:ED:B8:AF:47:25:C2:86:72:A2:72:5D:B1:A3:D8:73:99:50 Authority key identifier: C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38 Certificate issuer: /CN=c240edac8988bb56e52de128a5d65a8f4ef3f138 Certificate serial: 019B2FD5027420E4E772AE28B00914346C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft Manifest number: 0DEC Signing time: Thu 18 Dec 2025 05:00:47 +0000 Manifest this update: Thu 18 Dec 2025 05:00:47 +0000 Manifest next update: Fri 19 Dec 2025 05:00:47 +0000 Files and hashes: 1: wkDtrImIu1blLeEopdZaj07z8Tg.crl (hash: OTj03hwVwwUV6tqiXi+7DW6tcr1amHZ4BeikE7qkFKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:02:74:20:e4:e7:72:ae:28:b0:09:14:34:6c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c240edac8988bb56e52de128a5d65a8f4ef3f138 Validity Not Before: Dec 18 05:00:47 2025 GMT Not After : Dec 19 05:00:47 2025 GMT Subject: CN=611c3aedb8af4725c28672a2725db1a3d8739950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:bb:28:7d:a8:fa:ae:b9:fc:5e:87:72:21: 3f:76:54:39:9c:cd:f7:0c:d1:a2:18:3c:d5:8e:ef: e9:eb:1d:c9:b7:b3:a7:24:ba:c9:02:9e:9d:58:74: 1f:75:96:37:b1:97:47:25:7e:aa:52:b0:a9:c3:cd: 5c:79:f2:ee:01:9f:37:ec:20:e6:fa:a0:ae:87:d9: cd:c3:16:fc:60:7f:58:d6:1a:08:6a:06:fb:87:20: d6:86:86:56:3e:de:f6:fd:63:dd:9c:da:2b:2b:c3: 64:ac:b8:ed:ff:c8:d8:63:75:1f:d1:9b:75:7e:92: 95:f2:d5:58:37:59:80:b9:d9:bb:cb:76:ad:9b:3e: 2f:83:45:fb:a4:8e:30:eb:39:2b:f2:9d:a6:01:a2: d8:35:fe:06:3d:47:d1:70:8d:56:af:c7:07:c5:23: 20:78:47:d7:91:2c:73:d1:10:7b:ca:6d:d6:5c:3e: 87:84:c6:0a:84:11:f2:ad:7d:0b:92:14:a7:43:9f: 8b:73:45:c2:7e:22:a0:5d:ba:d9:19:9a:59:4e:02: 8e:34:16:f5:54:1c:5b:03:4e:74:f5:c8:0f:57:34: c0:c6:5b:b5:fc:b3:9f:1c:8b:03:08:5e:ec:c0:bd: 78:0a:10:df:5f:c9:35:8d:32:fa:3c:cc:3e:43:35: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:1C:3A:ED:B8:AF:47:25:C2:86:72:A2:72:5D:B1:A3:D8:73:99:50 X509v3 Authority Key Identifier: keyid:C2:40:ED:AC:89:88:BB:56:E5:2D:E1:28:A5:D6:5A:8F:4E:F3:F1:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wkDtrImIu1blLeEopdZaj07z8Tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e534b0-7023-4e71-a264-a71497f168e1/1/wkDtrImIu1blLeEopdZaj07z8Tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:1d:8a:24:d0:50:02:f4:ee:42:40:c8:6c:f1:8e:aa:18:bd: a7:cd:aa:d0:1f:8a:d0:8e:5d:a1:69:02:82:66:eb:6f:e8:32: 6c:bd:d6:db:7b:7f:37:46:e4:a0:00:d1:f9:b7:59:ba:74:24: b8:2d:89:4d:6f:5f:99:cc:8c:ca:85:39:16:b8:0c:f8:d0:02: d3:4c:b7:12:fb:82:37:27:f6:6c:4c:c8:eb:d0:7f:21:36:79: 81:ce:f1:8a:87:a0:f1:74:56:12:a9:6f:b0:d7:cd:df:e9:d7: 0f:04:cd:b6:40:d0:75:06:83:1d:b0:fe:58:40:1c:62:19:59: 60:00:5c:5d:dc:9f:73:9e:03:c0:cc:6c:f5:89:1e:73:ac:a9: 0e:4c:bf:f7:34:bd:a5:b3:4b:8d:61:e1:e6:ae:43:7a:c3:cc: d7:72:cd:24:53:e7:33:fd:6e:76:e0:a0:ba:64:c3:d4:6d:f8: 8c:cd:4a:af:1b:cb:a9:b2:66:85:a8:ea:39:11:7a:82:0f:0f: c1:30:fb:51:51:8c:03:0b:5a:ad:83:19:45:cd:47:76:73:ec: e0:d8:09:c0:41:75:ca:b2:1e:76:82:76:a4:a8:19:4f:bf:8f: 66:f5:7b:04:76:27:5a:1c:ac:7d:04:05:33:5f:e1:b7:eb:50: bc:f5:e8:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1QJ0IOTncq4osAkUNGxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNDBlZGFjODk4OGJiNTZlNTJkZTEyOGE1ZDY1YThmNGVm M2YxMzgwHhcNMjUxMjE4MDUwMDQ3WhcNMjUxMjE5MDUwMDQ3WjAzMTEwLwYDVQQD Eyg2MTFjM2FlZGI4YWY0NzI1YzI4NjcyYTI3MjVkYjFhM2Q4NzM5OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvq7KH2o+q65/F6HciE/dlQ5nM33 DNGiGDzVju/p6x3Jt7OnJLrJAp6dWHQfdZY3sZdHJX6qUrCpw81cefLuAZ837CDm +qCuh9nNwxb8YH9Y1hoIagb7hyDWhoZWPt72/WPdnNorK8NkrLjt/8jYY3Uf0Zt1 fpKV8tVYN1mAudm7y3atmz4vg0X7pI4w6zkr8p2mAaLYNf4GPUfRcI1Wr8cHxSMg eEfXkSxz0RB7ym3WXD6HhMYKhBHyrX0LkhSnQ5+Lc0XCfiKgXbrZGZpZTgKONBb1 VBxbA0509cgPVzTAxlu1/LOfHIsDCF7swL14ChDfX8k1jTL6PMw+QzXB4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEcOu24r0clwoZyonJdsaPYc5lQMB8GA1UdIwQY MBaAFMJA7ayJiLtW5S3hKKXWWo9O8/E4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQt YTcxNDk3ZjE2OGUxLzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9lNTM0YjAtNzAyMy00ZTcxLWEyNjQtYTcxNDk3ZjE2OGUx LzEvd2tEdHJJbUl1MWJsTGVFb3BkWmFqMDd6OFRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUh2KJNBQ AvTuQkDIbPGOqhi9p82q0B+K0I5doWkCgmbrb+gybL3W23t/N0bkoADR+bdZunQk uC2JTW9fmcyMyoU5FrgM+NAC00y3EvuCNyf2bEzI69B/ITZ5gc7xioeg8XRWEqlv sNfN3+nXDwTNtkDQdQaDHbD+WEAcYhlZYABcXdyfc54DwMxs9Ykec6ypDky/9zS9 pbNLjWHh5q5DesPM13LNJFPnM/1uduCgumTD1G34jM1KrxvLqbJmhajqORF6gg8P wTD7UVGMAwtarYMZRc1HdnPs4NgJwEF1yrIedoJ2pKgZT7+PZvV7BHYnWhysfQQF M1/ht+tQvPXosA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:49 2025 by rpki-client