This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json) Hash identifier: v36A8dle0yInUbFFXQjmcLJJRzFtPtCb8jSQBLR1KpA= Subject key identifier: 9A:3B:1F:56:FC:B9:A3:04:44:EC:FA:36:25:68:57:6D:23:07:15:2F Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1 Certificate serial: 019AF276BC4B573FE532B1452C2E9C4047AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft Manifest number: 1232 Signing time: Sat 06 Dec 2025 07:00:58 +0000 Manifest this update: Sat 06 Dec 2025 07:00:58 +0000 Manifest next update: Sun 07 Dec 2025 07:00:58 +0000 Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: ti5CZDwdLVkvxbVaay9LT6vgMvqobQdLt0Wt1tVjnTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:bc:4b:57:3f:e5:32:b1:45:2c:2e:9c:40:47:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1 Validity Not Before: Dec 6 07:00:58 2025 GMT Not After : Dec 7 07:00:58 2025 GMT Subject: CN=9a3b1f56fcb9a30444ecfa362568576d2307152f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:91:bf:a1:eb:3e:8b:e7:49:95:3f:c0:3a:6c: 40:c0:99:ee:a9:63:d0:0a:40:0c:6d:a7:35:4b:75: 5d:3c:28:51:fb:84:11:d8:a2:da:84:9b:a1:f2:fa: ec:10:01:39:80:83:20:be:f9:a4:e2:66:a1:e7:a9: f6:57:38:c8:6a:73:3d:cb:f9:a7:9d:a9:d8:e7:71: ef:a9:2d:ea:ba:e3:3f:5b:27:94:86:30:ad:2c:2d: 43:30:85:5a:19:02:f8:41:3f:3f:24:dd:78:68:8e: ed:a8:94:70:c1:d5:2c:5e:7e:6c:8e:8d:0a:e7:7c: e4:0f:28:29:29:84:88:b7:36:7b:00:41:ce:17:a1: ed:ed:20:42:1f:28:68:41:b7:8d:c4:12:45:c0:fb: a3:ab:da:e5:4e:2e:c6:42:5c:7e:9b:d0:76:a7:73: b6:b1:19:8c:99:fe:18:38:cb:6d:2a:4f:a9:0e:5d: a3:1a:c7:26:f5:75:92:52:12:07:31:30:38:60:4b: fa:60:2a:0c:39:8f:e0:50:75:59:9e:22:6c:d4:91: 45:8a:dc:1b:4f:83:6d:80:2f:ed:7b:cc:51:85:00: cb:14:93:dc:02:f8:62:63:0e:38:88:2c:e3:dd:f2: d2:64:26:01:aa:a7:3f:0d:7d:8b:d5:73:a1:1e:6b: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3B:1F:56:FC:B9:A3:04:44:EC:FA:36:25:68:57:6D:23:07:15:2F X509v3 Authority Key Identifier: keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:87:5a:f9:31:71:5d:36:3e:3d:29:7c:e3:0a:25:7a:e6:fb: 33:da:f4:fc:23:10:39:19:b0:be:51:d2:97:93:e7:15:5b:eb: 32:6d:a8:e7:8d:12:6c:6b:31:72:1c:26:f1:ab:77:63:89:08: 63:94:3b:9a:61:8b:54:da:49:73:65:6f:ae:48:a0:73:fa:11: 3e:be:5a:a2:b1:ae:02:fe:03:c6:86:0c:50:5b:a9:08:af:a0: 31:91:c9:f2:e6:67:b9:c7:d4:10:a6:5e:73:93:e2:e4:f8:4d: 30:70:dd:fd:2d:71:d3:0a:ff:ea:ee:b1:7a:6a:1f:fd:f6:04: 92:db:03:e1:3f:69:36:d4:32:a7:92:1a:68:e6:12:39:38:d3: 45:20:0f:75:f3:71:fe:57:18:7c:23:ee:24:4c:e7:19:06:3a: 4b:47:c1:73:2b:00:05:81:aa:68:47:82:85:38:79:54:98:f9: 3d:df:8a:f9:b8:07:65:80:3e:d3:6b:5c:c9:be:b9:ae:7a:f0: 37:ec:17:f2:d5:0b:90:69:c1:04:8f:be:0e:ff:1b:3c:38:0b: d6:3e:58:2e:b1:f9:05:c0:3c:ea:eb:4e:7f:68:01:0c:14:46: 5b:40:60:14:61:f3:d2:43:02:f7:d8:ac:21:cf:1a:a9:93:99: e5:98:17:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrxLVz/lMrFFLC6cQEetMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTU4ZTczMmEwZjcxZjRmMDEzMDJkNjIxNjcxNzNiZDli MTdjYzEwHhcNMjUxMjA2MDcwMDU4WhcNMjUxMjA3MDcwMDU4WjAzMTEwLwYDVQQD Eyg5YTNiMWY1NmZjYjlhMzA0NDRlY2ZhMzYyNTY4NTc2ZDIzMDcxNTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJG/oes+i+dJlT/AOmxAwJnuqWPQ CkAMbac1S3VdPChR+4QR2KLahJuh8vrsEAE5gIMgvvmk4mah56n2VzjIanM9y/mn nanY53HvqS3quuM/WyeUhjCtLC1DMIVaGQL4QT8/JN14aI7tqJRwwdUsXn5sjo0K 53zkDygpKYSItzZ7AEHOF6Ht7SBCHyhoQbeNxBJFwPujq9rlTi7GQlx+m9B2p3O2 sRmMmf4YOMttKk+pDl2jGscm9XWSUhIHMTA4YEv6YCoMOY/gUHVZniJs1JFFitwb T4NtgC/te8xRhQDLFJPcAvhiYw44iCzj3fLSZCYBqqc/DX2L1XOhHmuGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo7H1b8uaMEROz6NiVoV20jBxUvMB8GA1UdIwQY MBaAFF/ljnMqD3H08BMC1iFnFzvZsXzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMt YjZlNThmOWM4MmUxLzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMtYjZlNThmOWM4MmUx LzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYda+TFx XTY+PSl84woleub7M9r0/CMQORmwvlHSl5PnFVvrMm2o540SbGsxchwm8at3Y4kI Y5Q7mmGLVNpJc2Vvrkigc/oRPr5aorGuAv4DxoYMUFupCK+gMZHJ8uZnucfUEKZe c5Pi5PhNMHDd/S1x0wr/6u6xemof/fYEktsD4T9pNtQyp5IaaOYSOTjTRSAPdfNx /lcYfCPuJEznGQY6S0fBcysABYGqaEeChTh5VJj5Pd+K+bgHZYA+02tcyb65rnrw N+wX8tULkGnBBI++Dv8bPDgL1j5YLrH5BcA86utOf2gBDBRGW0BgFGHz0kMC99is Ic8aqZOZ5ZgXzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:01 2025 by rpki-client