This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft File: wuLumMR1LMeKgj6b-aTsmt8cO80.mft (raw, json) Hash identifier: RxzNDHLeqYkvDryH2C49lqnvumEwmi5vAmVjHvYzNY4= Subject key identifier: 5D:59:67:62:97:DB:8C:21:98:05:1B:42:D2:F8:7F:EA:50:3C:79:85 Authority key identifier: C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD Certificate issuer: /CN=c2e2ee98c4752cc78a823e9bf9a4ec9adf1c3bcd Certificate serial: 019AF12EF43027133BC4AF3B9011FD97E60F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft Manifest number: 140B Signing time: Sat 06 Dec 2025 01:02:57 +0000 Manifest this update: Sat 06 Dec 2025 01:02:57 +0000 Manifest next update: Sun 07 Dec 2025 01:02:57 +0000 Files and hashes: 1: wuLumMR1LMeKgj6b-aTsmt8cO80.crl (hash: AmqnA6ktp8c4wZ0pO139zTKq6MrdMAHieKTt+e/s950=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f4:30:27:13:3b:c4:af:3b:90:11:fd:97:e6:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2e2ee98c4752cc78a823e9bf9a4ec9adf1c3bcd Validity Not Before: Dec 6 01:02:57 2025 GMT Not After : Dec 7 01:02:57 2025 GMT Subject: CN=5d59676297db8c2198051b42d2f87fea503c7985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:62:f3:16:97:40:5b:3b:6f:eb:03:4f:5c: 3f:f0:12:08:5c:66:61:e8:4f:fe:bc:6d:16:5b:2c: 96:fc:ae:84:e2:1b:10:f4:b6:b7:7b:ee:c3:01:62: 87:4f:6b:9c:b1:9d:50:6f:69:79:28:0a:3e:6c:65: e8:0c:c4:7b:a6:ae:90:33:80:c3:d8:43:37:a2:16: bc:1a:53:9b:ea:f7:70:92:ac:b4:41:ae:88:7f:fe: e0:a9:7b:f1:d3:c6:13:fa:02:13:9e:0a:8d:1d:8e: aa:76:ad:9d:44:ee:ed:45:d3:a4:67:59:58:14:45: e6:bb:00:4b:25:db:da:74:ac:a0:b0:45:9b:dd:ca: fa:c2:b3:2f:8b:2d:29:1a:a5:1c:9d:fe:d2:90:a4: c7:ff:78:1c:4d:94:46:40:ba:ea:cf:da:d0:bf:a4: a6:f4:ea:07:ef:3f:dc:02:21:84:ee:b8:58:81:02: 24:42:25:8b:18:03:9a:83:37:cf:2f:76:72:b8:40: 2c:9b:61:d9:64:d6:cc:10:c3:98:1d:eb:5f:0b:5b: 83:7d:b7:ec:39:d6:09:26:41:31:6e:f3:30:8c:0b: 7a:69:22:be:6f:cd:f3:48:eb:91:93:dd:d4:a3:ce: f1:29:86:1e:19:d6:c1:f5:55:e9:11:fa:ac:7b:a3: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:59:67:62:97:DB:8C:21:98:05:1B:42:D2:F8:7F:EA:50:3C:79:85 X509v3 Authority Key Identifier: keyid:C2:E2:EE:98:C4:75:2C:C7:8A:82:3E:9B:F9:A4:EC:9A:DF:1C:3B:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuLumMR1LMeKgj6b-aTsmt8cO80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/dd49b9-896a-4919-9930-24b4534ed86d/1/wuLumMR1LMeKgj6b-aTsmt8cO80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a4:d6:18:0d:21:48:a5:fb:0b:ea:ab:11:80:5e:5e:c1:d1: 72:7c:1b:08:43:a0:ad:3f:ba:34:ab:83:e9:95:ea:bb:59:e2: 7a:fc:b9:d0:40:9d:d8:bd:ef:f3:1c:08:3b:e5:ad:ab:34:2b: fb:af:fa:71:6a:fc:b7:9f:b5:d2:4b:13:92:5e:75:26:df:22: 06:ca:90:aa:95:18:7e:9f:35:bc:4a:31:b3:7d:84:2e:28:3d: f3:b5:a3:32:be:8e:70:1f:5a:cf:3e:3d:a3:ae:c1:ad:03:09: e4:80:1d:8f:31:ce:82:81:12:cf:2d:48:0f:31:70:08:a1:de: cf:81:c0:3a:56:30:14:09:82:dc:b0:da:68:de:70:6e:1d:4b: fb:63:4c:bb:66:ef:12:0f:d0:bf:bc:bd:0f:59:d8:0f:9b:0d: 82:fc:04:5c:2d:b1:96:17:6f:e9:04:be:fd:75:5d:2f:5a:63: 20:61:73:59:e1:bc:3b:84:2a:47:5f:c0:42:34:6a:d8:43:89: 65:2d:d0:f8:fe:42:81:2f:cc:22:29:b2:e3:b9:7d:2a:cd:7d: fe:66:a6:db:a3:cb:fb:7c:d4:30:9f:3e:41:ab:4f:3f:0d:c2: 61:6e:cf:04:d5:ca:76:78:5c:27:8f:18:36:4b:4a:dd:2d:3b: 4d:08:98:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvQwJxM7xK87kBH9l+YPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZTJlZTk4YzQ3NTJjYzc4YTgyM2U5YmY5YTRlYzlhZGYx YzNiY2QwHhcNMjUxMjA2MDEwMjU3WhcNMjUxMjA3MDEwMjU3WjAzMTEwLwYDVQQD Eyg1ZDU5Njc2Mjk3ZGI4YzIxOTgwNTFiNDJkMmY4N2ZlYTUwM2M3OTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySpi8xaXQFs7b+sDT1w/8BIIXGZh 6E/+vG0WWyyW/K6E4hsQ9La3e+7DAWKHT2ucsZ1Qb2l5KAo+bGXoDMR7pq6QM4DD 2EM3oha8GlOb6vdwkqy0Qa6If/7gqXvx08YT+gITngqNHY6qdq2dRO7tRdOkZ1lY FEXmuwBLJdvadKygsEWb3cr6wrMviy0pGqUcnf7SkKTH/3gcTZRGQLrqz9rQv6Sm 9OoH7z/cAiGE7rhYgQIkQiWLGAOagzfPL3ZyuEAsm2HZZNbMEMOYHetfC1uDfbfs OdYJJkExbvMwjAt6aSK+b83zSOuRk93Uo87xKYYeGdbB9VXpEfqse6O+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1ZZ2KX24whmAUbQtL4f+pQPHmFMB8GA1UdIwQY MBaAFMLi7pjEdSzHioI+m/mk7JrfHDvNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3VMdW1NUjFMTWVLZ2o2Yi1hVHNtdDhjTzgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9kZDQ5YjktODk2YS00OTE5LTk5MzAt MjRiNDUzNGVkODZkLzEvd3VMdW1NUjFMTWVLZ2o2Yi1hVHNtdDhjTzgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9kZDQ5YjktODk2YS00OTE5LTk5MzAtMjRiNDUzNGVkODZk LzEvd3VMdW1NUjFMTWVLZ2o2Yi1hVHNtdDhjTzgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKTWGA0h SKX7C+qrEYBeXsHRcnwbCEOgrT+6NKuD6ZXqu1nievy50ECd2L3v8xwIO+WtqzQr +6/6cWr8t5+10ksTkl51Jt8iBsqQqpUYfp81vEoxs32ELig987WjMr6OcB9azz49 o67BrQMJ5IAdjzHOgoESzy1IDzFwCKHez4HAOlYwFAmC3LDaaN5wbh1L+2NMu2bv Eg/Qv7y9D1nYD5sNgvwEXC2xlhdv6QS+/XVdL1pjIGFzWeG8O4QqR1/AQjRq2EOJ ZS3Q+P5CgS/MIimy47l9Ks19/mam26PL+3zUMJ8+QatPPw3CYW7PBNXKdnhcJ48Y NktK3S07TQiYOw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:49 2025 by rpki-client