This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft File: wfxZzHwlBRzVo-8-tcocUVA_HdI.mft (raw, json) Hash identifier: QAYYOLu+KQuCIxR87BxAzk+hRuNnCVpQhIpdtI2VYgI= Subject key identifier: FD:01:C6:6D:FC:76:6B:39:B0:F3:EC:DA:D8:C1:C6:F2:B9:04:AE:44 Authority key identifier: C1:FC:59:CC:7C:25:05:1C:D5:A3:EF:3E:B5:CA:1C:51:50:3F:1D:D2 Certificate issuer: /CN=c1fc59cc7c25051cd5a3ef3eb5ca1c51503f1dd2 Certificate serial: 019AF0F5C8A90D2F25357D4856F764B3A795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wfxZzHwlBRzVo-8-tcocUVA_HdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft Manifest number: 65 Signing time: Sat 06 Dec 2025 00:00:30 +0000 Manifest this update: Sat 06 Dec 2025 00:00:30 +0000 Manifest next update: Sun 07 Dec 2025 00:00:30 +0000 Files and hashes: 1: wfxZzHwlBRzVo-8-tcocUVA_HdI.crl (hash: tSkQ3tIErvl2PcUk4UwXNnAYLOFA0gD6jiTbb6+I1AE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft rsync://rpki.ripe.net/repository/DEFAULT/wfxZzHwlBRzVo-8-tcocUVA_HdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:c8:a9:0d:2f:25:35:7d:48:56:f7:64:b3:a7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1fc59cc7c25051cd5a3ef3eb5ca1c51503f1dd2 Validity Not Before: Dec 6 00:00:30 2025 GMT Not After : Dec 7 00:00:30 2025 GMT Subject: CN=fd01c66dfc766b39b0f3ecdad8c1c6f2b904ae44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c3:df:ac:3c:b2:f9:17:f6:72:b3:2b:92:45: 55:b3:44:3b:1b:2e:07:fa:34:99:f1:4f:95:62:26: b9:b7:5f:fd:e4:1a:34:08:b1:62:2d:de:2f:8e:37: 00:0b:e9:e1:77:e8:97:0e:77:80:78:35:98:60:3c: 0a:96:1f:eb:2e:6c:0c:41:ea:ed:af:ec:48:50:c1: 61:0a:d1:e9:24:ba:4b:45:c3:1c:ae:e9:db:9b:30: ec:dc:c7:74:c5:d2:b4:89:9e:d3:e1:38:8b:86:3b: 6e:98:68:25:ae:41:25:49:7f:ef:55:d9:62:42:41: be:a9:09:00:1a:da:8e:19:d0:e4:f6:02:15:74:20: 09:de:db:d8:28:7a:dd:42:0f:9e:59:c7:38:0b:ff: 06:84:1c:42:24:6f:3d:a2:db:3e:4b:0a:da:78:9f: fd:4c:d3:84:b2:70:13:00:f3:e8:f6:81:c6:73:5b: 7e:ca:33:62:50:15:db:78:2c:96:9a:ba:d4:ac:88: 0a:0e:e0:68:c9:94:c0:34:38:fd:e0:93:50:84:64: da:f3:ff:da:db:43:b1:80:dd:71:62:50:4e:46:48: 74:ab:e8:70:dc:ba:30:cc:90:5f:f7:19:c9:53:81: 97:1b:d5:8f:32:29:30:f2:f9:8a:7d:ab:6d:57:d8: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:01:C6:6D:FC:76:6B:39:B0:F3:EC:DA:D8:C1:C6:F2:B9:04:AE:44 X509v3 Authority Key Identifier: keyid:C1:FC:59:CC:7C:25:05:1C:D5:A3:EF:3E:B5:CA:1C:51:50:3F:1D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wfxZzHwlBRzVo-8-tcocUVA_HdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/cda59d-8d0e-4d8c-8d45-c524110fa8a0/1/wfxZzHwlBRzVo-8-tcocUVA_HdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:62:1d:07:af:7a:56:14:4f:14:1f:46:25:da:e7:cb:ef:d1: 9e:3c:50:2d:31:f3:44:8f:97:75:f7:00:93:84:78:a1:c7:af: 41:44:42:30:8c:1b:7e:8c:b7:48:9d:e9:23:0e:e5:e6:30:d5: cc:1c:93:d3:53:74:1d:6e:dc:62:21:2b:05:6f:e4:19:a5:16: 1d:7c:a8:f4:97:83:ed:80:40:20:4b:b8:f6:9a:a5:e4:92:e0: 4b:87:51:f0:aa:9d:59:cf:ad:4e:0e:58:bc:69:31:a5:13:a2: 78:54:78:f7:50:32:d1:d4:94:12:d5:06:51:b4:cf:c1:97:74: d6:29:6b:1f:eb:61:f9:97:5d:bf:30:3e:1b:0b:19:d1:4e:32: e1:46:e1:2b:62:1c:d2:f1:55:45:60:26:8e:f4:1d:34:40:16: ff:87:70:c1:33:91:1d:6f:42:d2:5a:b9:37:db:a6:c6:c5:a2: 5e:ef:f1:94:1c:2e:30:a9:d5:ff:3d:2f:18:b1:d6:d5:35:8d: d7:55:5e:e7:8b:9a:a1:4c:83:ce:67:10:d1:c2:88:2d:2e:3c: 7e:06:44:2b:d3:d6:bb:0e:97:44:ef:57:9c:65:7c:49:30:5d: 02:73:33:d9:3a:4c:42:c9:2b:d6:ed:e8:0a:a9:ed:58:fa:9c: d6:b6:41:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9cipDS8lNX1IVvdks6eVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxZmM1OWNjN2MyNTA1MWNkNWEzZWYzZWI1Y2ExYzUxNTAz ZjFkZDIwHhcNMjUxMjA2MDAwMDMwWhcNMjUxMjA3MDAwMDMwWjAzMTEwLwYDVQQD EyhmZDAxYzY2ZGZjNzY2YjM5YjBmM2VjZGFkOGMxYzZmMmI5MDRhZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcPfrDyy+Rf2crMrkkVVs0Q7Gy4H +jSZ8U+VYia5t1/95Bo0CLFiLd4vjjcAC+nhd+iXDneAeDWYYDwKlh/rLmwMQert r+xIUMFhCtHpJLpLRcMcrunbmzDs3Md0xdK0iZ7T4TiLhjtumGglrkElSX/vVdli QkG+qQkAGtqOGdDk9gIVdCAJ3tvYKHrdQg+eWcc4C/8GhBxCJG89ots+SwraeJ/9 TNOEsnATAPPo9oHGc1t+yjNiUBXbeCyWmrrUrIgKDuBoyZTANDj94JNQhGTa8//a 20OxgN1xYlBORkh0q+hw3LowzJBf9xnJU4GXG9WPMikw8vmKfattV9jNHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0Bxm38dms5sPPs2tjBxvK5BK5EMB8GA1UdIwQY MBaAFMH8Wcx8JQUc1aPvPrXKHFFQPx3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Z4WnpId2xCUnpWby04LXRjb2NVVkFfSGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZGE1OWQtOGQwZS00ZDhjLThkNDUt YzUyNDExMGZhOGEwLzEvd2Z4WnpId2xCUnpWby04LXRjb2NVVkFfSGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZGE1OWQtOGQwZS00ZDhjLThkNDUtYzUyNDExMGZhOGEw LzEvd2Z4WnpId2xCUnpWby04LXRjb2NVVkFfSGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnmIdB696 VhRPFB9GJdrny+/RnjxQLTHzRI+XdfcAk4R4ocevQURCMIwbfoy3SJ3pIw7l5jDV zByT01N0HW7cYiErBW/kGaUWHXyo9JeD7YBAIEu49pql5JLgS4dR8KqdWc+tTg5Y vGkxpROieFR491Ay0dSUEtUGUbTPwZd01ilrH+th+ZddvzA+GwsZ0U4y4UbhK2Ic 0vFVRWAmjvQdNEAW/4dwwTORHW9C0lq5N9umxsWiXu/xlBwuMKnV/z0vGLHW1TWN 11Ve54uaoUyDzmcQ0cKILS48fgZEK9PWuw6XRO9XnGV8STBdAnMz2TpMQskr1u3o CqntWPqc1rZBcg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:00 2025 by rpki-client