This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft File: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft (raw, json) Hash identifier: UAGzu9roBBuV493WBCkVxPfdcT0LQVn0zbvkL7ytzh4= Subject key identifier: 4A:2E:CD:95:F8:71:97:53:FE:64:A6:B7:EB:E4:AD:5B:AB:14:18:02 Authority key identifier: C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6 Certificate issuer: /CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6 Certificate serial: 019AF1D18E635863AC2F884779D15AF26873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft Manifest number: 1217 Signing time: Sat 06 Dec 2025 04:00:33 +0000 Manifest this update: Sat 06 Dec 2025 04:00:33 +0000 Manifest next update: Sun 07 Dec 2025 04:00:33 +0000 Files and hashes: 1: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl (hash: j+4PYw4bTsS1TqitezCvBTNJusIp2Ykd1i9OBEOS4TI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:8e:63:58:63:ac:2f:88:47:79:d1:5a:f2:68:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6 Validity Not Before: Dec 6 04:00:33 2025 GMT Not After : Dec 7 04:00:33 2025 GMT Subject: CN=4a2ecd95f8719753fe64a6b7ebe4ad5bab141802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:b4:c5:98:2d:1d:0c:4a:38:c8:72:67:96: 72:7f:da:7a:9b:93:d3:e7:b3:a6:35:74:3b:33:b7: 09:bf:11:e2:2f:24:01:50:7d:9b:45:d8:f8:05:07: ed:cb:f2:b6:0d:2e:ce:fa:75:da:5b:22:48:54:5b: 3b:a9:0a:99:46:13:ee:42:a7:9a:59:66:a3:b3:69: c1:f8:66:2b:75:4c:6f:d3:93:24:15:26:ec:b7:8c: 8f:2c:97:f5:16:52:5a:6f:5d:a8:7b:70:25:40:68: 07:a2:e5:3f:ca:24:de:53:d3:f0:d0:ae:66:26:8f: 10:b4:b2:9f:80:52:dd:19:e1:2b:d9:2b:a3:72:21: 30:e5:37:2c:70:df:c8:59:71:5b:2a:61:1f:59:72: c2:49:4c:c3:1b:59:16:1d:2f:de:bc:05:ea:31:b5: e0:1e:dc:59:b6:70:97:b1:ff:16:88:2b:83:5b:2c: a1:25:4f:d8:d7:cf:90:cc:16:2a:4f:fe:46:77:fa: c8:20:48:8b:6c:ae:66:f3:55:11:df:e3:70:02:97: da:d1:dd:4a:09:36:d3:b6:7a:8f:d7:2f:e1:b2:da: c8:70:b5:22:42:d2:3b:19:aa:f6:51:3c:86:4a:b2: f2:9b:c3:65:18:3f:50:43:a8:b1:6f:68:0b:5a:9f: 3b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2E:CD:95:F8:71:97:53:FE:64:A6:B7:EB:E4:AD:5B:AB:14:18:02 X509v3 Authority Key Identifier: keyid:C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3e:bc:63:37:e1:fe:3e:c3:7d:82:de:c4:09:32:db:ab:e5: df:3f:72:5f:9c:d0:a9:b9:51:5b:1f:43:b9:5e:5d:be:da:ea: bf:8d:5a:2e:97:ca:f2:e7:83:58:6e:b2:0b:a4:6e:4e:4b:23: 82:17:ca:7b:1c:e6:0b:00:d1:8d:26:3c:64:55:0e:9b:83:e9: ad:b8:36:20:f9:56:bf:3d:9c:e1:2c:73:a0:b0:df:56:5b:68: 19:61:e0:1c:5f:f6:e3:01:be:b8:94:6e:2c:5d:98:7d:f1:a5: e8:47:3f:8c:5b:94:1f:47:cd:00:b6:70:3b:c8:21:20:06:3c: 8a:93:eb:2a:d4:e5:ed:f5:d1:c4:fc:b8:5d:52:f2:f0:df:7e: 14:d3:65:aa:d4:e7:b3:75:75:f9:f3:42:63:2c:90:b0:0e:62: 9e:6f:00:8f:64:38:b7:10:c0:f4:7f:4b:cc:aa:a0:19:06:46: 81:5b:c7:45:cd:5f:dc:36:b0:3f:c3:5d:a2:81:83:2f:c5:e7: 42:2f:b9:8b:23:27:9e:7d:af:6a:f8:09:a4:b2:f4:8b:c3:a4: 15:b5:c7:9a:48:4d:26:6f:27:64:2b:d1:b3:2d:dc:96:ae:23: ee:be:fd:21:67:7f:aa:5d:fa:b5:0f:db:89:ba:ad:ca:a6:07: 78:74:dd:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0Y5jWGOsL4hHedFa8mhzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzU0ODZmMzliZjI1ZTExNGZkNzI4OGUwZGJiNmJmYzdk ZGYxYzYwHhcNMjUxMjA2MDQwMDMzWhcNMjUxMjA3MDQwMDMzWjAzMTEwLwYDVQQD Eyg0YTJlY2Q5NWY4NzE5NzUzZmU2NGE2YjdlYmU0YWQ1YmFiMTQxODAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeq0xZgtHQxKOMhyZ5Zyf9p6m5PT 57OmNXQ7M7cJvxHiLyQBUH2bRdj4BQfty/K2DS7O+nXaWyJIVFs7qQqZRhPuQqea WWajs2nB+GYrdUxv05MkFSbst4yPLJf1FlJab12oe3AlQGgHouU/yiTeU9Pw0K5m Jo8QtLKfgFLdGeEr2SujciEw5TcscN/IWXFbKmEfWXLCSUzDG1kWHS/evAXqMbXg HtxZtnCXsf8WiCuDWyyhJU/Y18+QzBYqT/5Gd/rIIEiLbK5m81UR3+NwApfa0d1K CTbTtnqP1y/hstrIcLUiQtI7Gar2UTyGSrLym8NlGD9QQ6ixb2gLWp87zQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEouzZX4cZdT/mSmt+vkrVurFBgCMB8GA1UdIwQY MBaAFMF1SG85vyXhFP1yiODbtr/H3fHGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hWSWJ6bV9KZUVVX1hLSTROdTJ2OGZkOGNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny81YTAwOTUtNWY1ZS00ZWU2LWFjMDIt MTY1NWFjYTc4Y2YyLzEvd1hWSWJ6bV9KZUVVX1hLSTROdTJ2OGZkOGNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny81YTAwOTUtNWY1ZS00ZWU2LWFjMDItMTY1NWFjYTc4Y2Yy LzEvd1hWSWJ6bV9KZUVVX1hLSTROdTJ2OGZkOGNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj68Yzfh /j7DfYLexAky26vl3z9yX5zQqblRWx9DuV5dvtrqv41aLpfK8ueDWG6yC6RuTksj ghfKexzmCwDRjSY8ZFUOm4Pprbg2IPlWvz2c4SxzoLDfVltoGWHgHF/24wG+uJRu LF2YffGl6Ec/jFuUH0fNALZwO8ghIAY8ipPrKtTl7fXRxPy4XVLy8N9+FNNlqtTn s3V1+fNCYyyQsA5inm8Aj2Q4txDA9H9LzKqgGQZGgVvHRc1f3DawP8NdooGDL8Xn Qi+5iyMnnn2vavgJpLL0i8OkFbXHmkhNJm8nZCvRsy3clq4j7r79IWd/ql36tQ/b ibqtyqYHeHTd3g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:11:14 2025 by rpki-client