This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json) Hash identifier: /lM0HJJcWOSEDrNe3oYsqokagdlGt1P4Gdv+hvgDNck= Subject key identifier: E0:29:42:B7:D2:B2:E7:FB:16:E3:F3:A0:6F:13:4A:D0:61:88:31:74 Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1 Certificate serial: 019B22BEA5A6272E068463545AFA1EB28885 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft Manifest number: 124B Signing time: Mon 15 Dec 2025 16:01:17 +0000 Manifest this update: Mon 15 Dec 2025 16:01:17 +0000 Manifest next update: Tue 16 Dec 2025 16:01:17 +0000 Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: aLz+yf4rjCZ4mHTSQdvpTvUaZ7cQE/0lU/D/EAPK2HM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:be:a5:a6:27:2e:06:84:63:54:5a:fa:1e:b2:88:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1 Validity Not Before: Dec 15 16:01:17 2025 GMT Not After : Dec 16 16:01:17 2025 GMT Subject: CN=e02942b7d2b2e7fb16e3f3a06f134ad061883174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:62:cf:8e:15:c0:7c:3a:83:48:7b:7c:8a: 8b:f3:c0:d6:76:ea:c0:d2:4b:25:69:d2:1f:94:59: 20:65:3b:78:a3:43:19:32:aa:c5:e5:7a:c6:78:dd: 16:e6:66:ec:15:b3:77:74:6c:c2:0e:18:db:8c:0b: f8:c7:46:4c:11:98:2a:0b:4d:4d:0a:12:77:26:a7: 98:dc:01:1b:73:6c:01:07:42:63:07:49:d2:cf:59: 71:e6:cb:69:54:62:06:fd:2a:bd:f4:1a:88:67:d8: 87:13:d5:cb:d0:4d:13:59:0a:32:c8:e3:00:72:91: 27:db:04:6e:28:5a:08:8a:d4:d4:0d:25:b2:bd:aa: ad:11:1a:78:ea:35:fe:d0:59:13:e2:24:c3:b2:bd: b9:e8:0c:74:50:99:fb:64:1a:b6:96:3b:26:f6:45: 50:c8:72:4d:a1:0a:1a:3d:cf:a0:51:e3:ab:16:75: c0:3a:14:40:5e:8d:66:be:99:04:6a:e2:34:3a:6a: 15:94:19:e6:b3:be:7d:49:0e:e0:f5:03:95:b6:67: 68:39:e6:68:6e:62:d9:c2:06:a5:ea:22:e6:22:2a: d4:a8:86:d1:a9:62:3f:ed:46:1e:34:ff:ed:78:6b: fb:22:6b:88:5b:3e:b8:a5:bf:ae:7a:28:88:0d:9f: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:29:42:B7:D2:B2:E7:FB:16:E3:F3:A0:6F:13:4A:D0:61:88:31:74 X509v3 Authority Key Identifier: keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:52:ea:5c:60:15:5c:b0:88:b6:f8:38:c9:2c:6a:9e:41:e2: 89:1d:26:70:fc:de:94:51:e8:c2:6d:a2:21:5c:31:bf:56:db: 5d:c9:cf:2a:25:1d:7d:2d:29:88:88:f0:3b:01:5d:2d:08:bd: ef:c8:13:21:b1:1d:5e:1d:08:04:f8:19:55:d2:9a:67:e4:65: 06:c8:cb:9f:85:d1:16:b1:fa:6f:ba:30:63:59:17:41:5b:02: 2d:f7:14:a8:af:c4:0a:37:1a:2e:b5:dd:ee:b8:c5:d1:a3:f0: 1e:07:d3:d7:6e:07:cc:8d:83:9f:5f:9a:51:17:42:0b:d9:52: f2:cb:ac:17:6a:70:7e:ca:2e:76:20:4f:a6:5c:72:dc:90:e9: 52:58:ba:09:c5:de:0a:84:c6:86:c5:69:1b:2f:98:f1:76:d0: c4:24:ee:84:36:6c:e0:0a:d3:52:8d:94:89:1e:81:a2:3e:84: 87:7b:93:69:95:ee:54:1b:99:1a:83:97:fb:aa:7e:3d:29:eb: 39:a0:08:34:40:bd:f9:83:d6:65:20:c8:24:88:7e:e3:0d:d6: 21:57:51:9b:0e:ba:b0:8c:5d:79:26:d4:13:95:23:4c:ec:6c: 8e:73:0f:42:2a:65:89:1b:b6:d5:1d:73:b3:a5:bc:95:da:85: 5e:05:a3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsivqWmJy4GhGNUWvoesoiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTU4ZTczMmEwZjcxZjRmMDEzMDJkNjIxNjcxNzNiZDli MTdjYzEwHhcNMjUxMjE1MTYwMTE3WhcNMjUxMjE2MTYwMTE3WjAzMTEwLwYDVQQD EyhlMDI5NDJiN2QyYjJlN2ZiMTZlM2YzYTA2ZjEzNGFkMDYxODgzMTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKViz44VwHw6g0h7fIqL88DWdurA 0ksladIflFkgZTt4o0MZMqrF5XrGeN0W5mbsFbN3dGzCDhjbjAv4x0ZMEZgqC01N ChJ3JqeY3AEbc2wBB0JjB0nSz1lx5stpVGIG/Sq99BqIZ9iHE9XL0E0TWQoyyOMA cpEn2wRuKFoIitTUDSWyvaqtERp46jX+0FkT4iTDsr256Ax0UJn7ZBq2ljsm9kVQ yHJNoQoaPc+gUeOrFnXAOhRAXo1mvpkEauI0OmoVlBnms759SQ7g9QOVtmdoOeZo bmLZwgal6iLmIirUqIbRqWI/7UYeNP/teGv7ImuIWz64pb+ueiiIDZ/pcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOApQrfSsuf7FuPzoG8TStBhiDF0MB8GA1UdIwQY MBaAFF/ljnMqD3H08BMC1iFnFzvZsXzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMt YjZlNThmOWM4MmUxLzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMtYjZlNThmOWM4MmUx LzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlLqXGAV XLCItvg4ySxqnkHiiR0mcPzelFHowm2iIVwxv1bbXcnPKiUdfS0piIjwOwFdLQi9 78gTIbEdXh0IBPgZVdKaZ+RlBsjLn4XRFrH6b7owY1kXQVsCLfcUqK/ECjcaLrXd 7rjF0aPwHgfT124HzI2Dn1+aURdCC9lS8susF2pwfsoudiBPplxy3JDpUli6CcXe CoTGhsVpGy+Y8XbQxCTuhDZs4ArTUo2UiR6Boj6Eh3uTaZXuVBuZGoOX+6p+PSnr OaAINEC9+YPWZSDIJIh+4w3WIVdRmw66sIxdeSbUE5UjTOxsjnMPQipliRu21R1z s6W8ldqFXgWjfw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:21:30 2025 by rpki-client