This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json) Hash identifier: k5u/YbYO8kA4egVdU7F5Km1WFUBmeeL62x1DKYid1hY= Subject key identifier: EC:8D:89:E6:A8:C4:C9:AE:35:FB:82:F5:F3:4B:59:58:E4:B2:36:7B Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23 Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23 Certificate serial: 019B273FB4DC02E9F0995BBEBE2743E87679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft Manifest number: 0AAF Signing time: Tue 16 Dec 2025 13:00:45 +0000 Manifest this update: Tue 16 Dec 2025 13:00:45 +0000 Manifest next update: Wed 17 Dec 2025 13:00:45 +0000 Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: Es3UNt3ky1Y+/UBDRB2YZ2o98G70dRDal0VCpF6LusU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:b4:dc:02:e9:f0:99:5b:be:be:27:43:e8:76:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23 Validity Not Before: Dec 16 13:00:45 2025 GMT Not After : Dec 17 13:00:45 2025 GMT Subject: CN=ec8d89e6a8c4c9ae35fb82f5f34b5958e4b2367b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:be:ec:ff:b3:2d:52:ee:0c:42:e0:e8:58:70: 47:e4:ee:ee:2c:6c:d7:50:28:f9:99:41:0f:fc:6c: ce:74:86:a7:f9:88:19:f2:16:20:55:57:8d:df:7a: 76:fe:16:65:22:14:84:1d:10:0c:8d:cf:d0:71:89: 3d:0d:bd:2c:44:85:68:36:3a:0b:b7:49:44:d0:1b: 32:64:cd:08:f6:e4:6f:c8:c9:d2:ff:4e:0a:8f:39: 23:a1:05:cb:e6:05:3a:43:89:4a:d6:14:b9:0f:a7: b0:7e:bc:ad:c9:d4:c2:ec:c9:f8:81:33:23:a4:b9: 86:27:e6:a5:05:a7:69:06:e7:fd:67:61:23:ae:fb: 67:dd:8f:22:77:44:f3:57:de:2d:de:b4:9b:75:b9: 46:20:f4:06:b1:ac:4c:fa:cd:f7:fb:8a:39:7b:99: 74:43:5f:64:05:85:2f:4f:d2:99:0f:a0:5a:65:83: 11:10:43:1f:ee:b4:24:95:ad:43:05:4b:7f:f9:30: 45:d3:f7:72:50:df:39:95:2e:50:5a:d0:26:65:03: 0c:2e:72:3d:f5:81:f9:44:85:2e:4b:b8:11:cf:16: cc:5e:25:c1:0d:44:4b:44:27:75:68:fc:ed:f0:14: 2b:cc:c8:d1:7f:81:10:a8:08:ff:37:76:61:c7:4a: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:8D:89:E6:A8:C4:C9:AE:35:FB:82:F5:F3:4B:59:58:E4:B2:36:7B X509v3 Authority Key Identifier: keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ab:24:69:77:a7:e0:26:29:4c:d4:8a:8e:91:3d:53:38:6a: e7:f9:79:8a:f2:35:47:17:c0:65:d8:fa:5f:f3:00:40:c3:cb: d4:0f:94:ce:8e:26:6f:ab:37:78:be:14:c7:9b:4b:26:b5:a0: dd:be:c2:2d:0d:7e:32:ff:f4:87:0b:18:42:b8:84:3a:f1:b2: 5c:0c:4b:a7:b2:ff:14:8b:21:14:32:3b:23:95:02:7d:6e:84: 58:89:76:33:e9:30:41:8e:1d:83:48:d0:26:9a:da:d3:b5:0a: c3:3c:f7:1f:72:a3:6e:fd:a5:c6:13:5d:93:41:c3:7d:a1:f1: 0a:d9:a9:8e:60:ef:1a:87:99:83:c1:ba:1b:d2:dd:b5:b3:88: 75:e5:a4:e6:b9:f1:f0:de:f3:ad:1b:92:40:77:cb:17:dc:bf: 66:29:4d:92:fe:ff:74:e2:4b:96:38:c4:3a:27:97:41:41:00: ae:63:3b:73:20:5f:e1:ad:5a:d7:5c:4e:8d:83:c1:25:b7:0d: d6:f3:2b:d7:28:b6:13:11:55:e2:78:80:56:23:88:2f:a3:28: cd:d4:53:f4:08:12:13:55:a1:bc:6f:06:ff:4b:91:a3:5f:57: ba:6c:12:56:4f:00:0c:b8:6c:4d:e5:15:06:79:8a:dd:45:9e: 4e:83:bc:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP7TcAunwmVu+vidD6HZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNGRkNjVhYzFkNmRhODRiYTliODFjMjA5ZTBhNzYxNzM0 NWVhMjMwHhcNMjUxMjE2MTMwMDQ1WhcNMjUxMjE3MTMwMDQ1WjAzMTEwLwYDVQQD EyhlYzhkODllNmE4YzRjOWFlMzVmYjgyZjVmMzRiNTk1OGU0YjIzNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9r7s/7MtUu4MQuDoWHBH5O7uLGzX UCj5mUEP/GzOdIan+YgZ8hYgVVeN33p2/hZlIhSEHRAMjc/QcYk9Db0sRIVoNjoL t0lE0BsyZM0I9uRvyMnS/04KjzkjoQXL5gU6Q4lK1hS5D6ewfrytydTC7Mn4gTMj pLmGJ+alBadpBuf9Z2Ejrvtn3Y8id0TzV94t3rSbdblGIPQGsaxM+s33+4o5e5l0 Q19kBYUvT9KZD6BaZYMREEMf7rQkla1DBUt/+TBF0/dyUN85lS5QWtAmZQMMLnI9 9YH5RIUuS7gRzxbMXiXBDURLRCd1aPzt8BQrzMjRf4EQqAj/N3Zhx0rLtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyNieaoxMmuNfuC9fNLWVjksjZ7MB8GA1UdIwQY MBaAFK9N1lrB1tqEupuBwgngp2FzReojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUt OGY5NmQ3MjlmMDg0LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS85YWJkZTAtZGI1Yi00NTY0LWJkODUtOGY5NmQ3MjlmMDg0 LzEvcjAzV1dzSFcyb1M2bTRIQ0NlQ25ZWE5GNmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraskaXen 4CYpTNSKjpE9Uzhq5/l5ivI1RxfAZdj6X/MAQMPL1A+Uzo4mb6s3eL4Ux5tLJrWg 3b7CLQ1+Mv/0hwsYQriEOvGyXAxLp7L/FIshFDI7I5UCfW6EWIl2M+kwQY4dg0jQ Jpra07UKwzz3H3Kjbv2lxhNdk0HDfaHxCtmpjmDvGoeZg8G6G9LdtbOIdeWk5rnx 8N7zrRuSQHfLF9y/ZilNkv7/dOJLljjEOieXQUEArmM7cyBf4a1a11xOjYPBJbcN 1vMr1yi2ExFV4niAViOIL6MozdRT9AgSE1WhvG8G/0uRo19XumwSVk8ADLhsTeUV BnmK3UWeToO83w== -----END CERTIFICATE-----Generated at Tue Dec 16 19:32:01 2025 by rpki-client