This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft File: wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json) Hash identifier: qcAjiYlRj5KBLGbCyPtJBpZV+hnVvq+bsqYq+4kOSA0= Subject key identifier: AE:BA:CD:59:07:10:92:AD:23:96:8A:87:F6:2B:B0:F7:68:A3:FF:18 Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F Certificate issuer: /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f Certificate serial: 019AF087ED77E0BC929881B4B1E5E3A28E9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft Manifest number: 0170 Signing time: Fri 05 Dec 2025 22:00:31 +0000 Manifest this update: Fri 05 Dec 2025 22:00:31 +0000 Manifest next update: Sat 06 Dec 2025 22:00:31 +0000 Files and hashes: 1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: d++ssOAsN7TABgQMGFirpMl96lHHpzKHYKEVuYR4MKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:ed:77:e0:bc:92:98:81:b4:b1:e5:e3:a2:8e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f Validity Not Before: Dec 5 22:00:31 2025 GMT Not After : Dec 6 22:00:31 2025 GMT Subject: CN=aebacd59071092ad23968a87f62bb0f768a3ff18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:b3:d2:f1:d9:41:7b:e0:4a:de:dc:c6:56: 5b:c1:3e:89:e0:87:6f:ba:8b:7b:2a:07:d5:0e:64: 70:cf:03:d4:b0:d9:8b:85:cd:fc:90:93:4b:94:7b: ac:73:f3:09:1c:b4:b9:1f:47:f0:85:a4:fb:18:8c: ba:c0:03:45:7b:43:68:9b:d4:a9:57:34:b6:84:a8: 9c:8c:6e:e0:8b:b3:d3:6c:14:25:d3:c4:25:28:18: cd:df:80:86:5b:1a:a5:25:84:8d:68:79:9d:c7:c1: 45:19:25:0a:76:e9:41:78:28:6c:22:e6:53:ae:a1: 25:95:90:30:ae:7b:67:7c:ec:0c:4a:72:69:41:82: 2c:f0:ff:04:3b:2e:0f:2e:d2:21:a8:31:ef:03:bb: 14:41:b9:e9:08:9e:92:48:2f:dd:2f:d3:2f:a9:a2: 69:04:b8:57:76:9e:ba:57:0f:19:37:d1:93:66:9a: d4:17:b5:76:50:37:06:c3:3f:16:75:e3:8c:a9:5e: 9c:37:cb:eb:ee:44:fd:b7:de:6e:3e:f0:78:ba:09: 00:1e:2c:d4:88:44:5b:aa:79:76:c8:05:fc:e1:68: 09:9f:f5:5d:53:48:98:2d:72:f6:22:54:c5:6f:1a: cf:8c:72:bb:ed:1d:02:a2:aa:6d:a0:dc:dd:ab:d1: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:BA:CD:59:07:10:92:AD:23:96:8A:87:F6:2B:B0:F7:68:A3:FF:18 X509v3 Authority Key Identifier: keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:f9:e3:6a:d8:9e:46:10:55:72:5a:d0:39:17:c3:01:c2:88: 98:dd:ed:0f:e0:d1:3e:f9:cc:c4:cf:09:2f:6b:78:cf:d7:6f: 4a:32:da:12:97:65:fc:aa:77:31:2c:04:5e:c7:9b:7d:00:2d: cb:c7:fc:d4:25:35:5c:3a:c0:3f:a8:db:05:20:81:9a:62:10: ed:f4:49:b3:a5:dd:e3:04:f8:b0:69:3d:a5:3f:e6:0e:2f:5c: af:68:b3:8c:93:0e:ba:42:bd:0b:44:ed:fd:eb:3f:17:93:c6: 38:19:d8:9a:97:5e:cf:a2:89:9b:79:35:44:07:93:89:43:2d: a6:da:ea:75:5d:56:02:d8:ac:f2:f4:3a:df:9e:da:c9:fd:6b: 81:e5:98:31:07:89:14:a9:f5:2b:ac:cb:c1:61:ef:f4:7d:1a: f7:ce:dc:d5:b4:41:47:8a:f9:20:3c:18:78:95:d4:d1:e1:47: cb:68:e5:33:0d:d8:78:a1:15:ff:4c:50:91:9c:1c:26:ef:d9: 3b:f9:d3:b0:e5:e7:a1:53:06:62:50:cb:ac:76:f2:f1:ee:59: a5:43:49:60:37:c6:3f:c9:3f:db:7e:2f:7b:03:94:f8:c0:74: 2c:e5:45:12:41:fb:0b:1d:d8:21:4a:38:55:63:28:11:d0:97: 61:36:02:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+134LySmIG0seXjoo6fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMmVkNmNlOGZiNmM3OWRhZGQ3NjU4M2E1ZWEyZDNhYmI5 YTQzMmYwHhcNMjUxMjA1MjIwMDMxWhcNMjUxMjA2MjIwMDMxWjAzMTEwLwYDVQQD EyhhZWJhY2Q1OTA3MTA5MmFkMjM5NjhhODdmNjJiYjBmNzY4YTNmZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27uz0vHZQXvgSt7cxlZbwT6J4Idv uot7KgfVDmRwzwPUsNmLhc38kJNLlHusc/MJHLS5H0fwhaT7GIy6wANFe0Nom9Sp VzS2hKicjG7gi7PTbBQl08QlKBjN34CGWxqlJYSNaHmdx8FFGSUKdulBeChsIuZT rqEllZAwrntnfOwMSnJpQYIs8P8EOy4PLtIhqDHvA7sUQbnpCJ6SSC/dL9MvqaJp BLhXdp66Vw8ZN9GTZprUF7V2UDcGwz8WdeOMqV6cN8vr7kT9t95uPvB4ugkAHizU iERbqnl2yAX84WgJn/VdU0iYLXL2IlTFbxrPjHK77R0CoqptoNzdq9HEqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK66zVkHEJKtI5aKh/YrsPdoo/8YMB8GA1UdIwQY MBaAFMIu1s6Ptsedrddlg6XqLTq7mkMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2k3V3pvLTJ4NTJ0MTJXRHBlb3RPcnVhUXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8xNzMwMzUtODhiYS00NDUyLTkwM2Qt NGJhODVlZmRiMjY2LzEvd2k3V3pvLTJ4NTJ0MTJXRHBlb3RPcnVhUXk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8xNzMwMzUtODhiYS00NDUyLTkwM2QtNGJhODVlZmRiMjY2 LzEvd2k3V3pvLTJ4NTJ0MTJXRHBlb3RPcnVhUXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvnjatie RhBVclrQORfDAcKImN3tD+DRPvnMxM8JL2t4z9dvSjLaEpdl/Kp3MSwEXsebfQAt y8f81CU1XDrAP6jbBSCBmmIQ7fRJs6Xd4wT4sGk9pT/mDi9cr2izjJMOukK9C0Tt /es/F5PGOBnYmpdez6KJm3k1RAeTiUMtptrqdV1WAtis8vQ6357ayf1rgeWYMQeJ FKn1K6zLwWHv9H0a987c1bRBR4r5IDwYeJXU0eFHy2jlMw3YeKEV/0xQkZwcJu/Z O/nTsOXnoVMGYlDLrHby8e5ZpUNJYDfGP8k/234vewOU+MB0LOVFEkH7Cx3YIUo4 VWMoEdCXYTYCeQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:58 2025 by rpki-client