This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft File: wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json) Hash identifier: +i3ofojM8hAoIyZ9lCqXJOYn4SGMpTK9pWR/wpXprco= Subject key identifier: CA:15:02:73:CA:A6:E7:44:64:39:5A:D3:EB:83:A9:56:F8:B8:86:2E Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5 Certificate issuer: /CN=c2c140c8218970ef60e689354f16b63af4900ad5 Certificate serial: 019AF19B78885CE55D5E3406932022E7E49D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft Manifest number: 0BE0 Signing time: Sat 06 Dec 2025 03:01:29 +0000 Manifest this update: Sat 06 Dec 2025 03:01:29 +0000 Manifest next update: Sun 07 Dec 2025 03:01:29 +0000 Files and hashes: 1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: raPFJcCpzzXR/5Xko2sJgsaV7ZEuZctGgfO5tNDkpso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:78:88:5c:e5:5d:5e:34:06:93:20:22:e7:e4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5 Validity Not Before: Dec 6 03:01:29 2025 GMT Not After : Dec 7 03:01:29 2025 GMT Subject: CN=ca150273caa6e74464395ad3eb83a956f8b8862e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:59:90:b7:27:00:32:b3:6c:bc:34:cb:e1:5b: 7c:bb:b7:cf:5c:31:53:ac:68:18:f3:c4:6f:cc:dc: 50:f4:7d:77:3f:fa:af:2e:82:88:41:d6:da:be:8e: e7:80:8c:36:07:1f:83:96:64:ab:b6:38:a6:50:95: bc:44:d3:72:5e:30:14:7d:39:73:b4:53:88:a2:3a: cd:4a:47:34:35:51:db:35:0d:5d:55:cf:2a:7f:99: 43:be:3d:a3:30:ea:4d:80:00:ea:2a:d6:94:9e:54: 1b:69:6b:ab:0d:49:cb:85:75:d5:f7:f5:19:b0:79: c3:00:d8:b4:c9:05:5c:c7:25:00:b9:96:83:59:46: af:21:e5:b2:37:e9:a0:5b:cd:59:4b:24:d7:51:11: 40:0f:3a:79:aa:8d:58:cd:81:61:a9:91:ff:7a:20: 5f:a7:74:7b:1a:a3:b4:45:20:4c:15:b3:bb:08:b4: 5c:8d:ec:62:5a:83:59:9e:01:3d:0c:27:31:4c:b9: 54:80:2e:8a:b0:78:e5:7d:75:9c:88:b8:58:3e:c4: f9:a9:d1:0b:52:43:35:8e:05:1f:54:53:db:c5:cd: c1:25:74:2b:aa:70:9e:c0:0e:90:c2:f8:38:d1:89: 37:ae:36:28:0b:77:4f:7a:f5:7d:c1:09:dc:b3:4e: 79:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:15:02:73:CA:A6:E7:44:64:39:5A:D3:EB:83:A9:56:F8:B8:86:2E X509v3 Authority Key Identifier: keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e1:de:4a:96:ee:d2:22:5c:9f:47:06:d8:4a:e1:13:b7:e7: 0b:12:cd:7e:83:13:c1:8e:46:f8:08:0a:a2:b4:24:df:d1:45: 47:74:66:c3:45:54:60:67:89:9f:aa:e2:1a:28:be:bc:80:ef: 37:ff:73:db:57:6b:77:00:48:aa:7e:5f:8a:76:96:e7:0f:70: 01:84:42:8c:a5:2e:8f:4f:7d:07:ca:cc:af:b4:82:84:c3:be: 0b:8c:fe:40:3e:25:3e:29:36:80:f3:3e:94:4e:ae:ea:91:e9: af:0b:23:f4:41:c5:29:d5:e7:75:0d:04:f6:ec:00:cb:31:3d: 12:17:ba:a4:c4:c9:74:d6:81:e9:f3:e1:13:fe:4d:3b:45:63: 14:2a:59:c4:91:67:a7:14:22:43:34:14:7c:97:11:f7:7e:4c: c3:6f:b0:73:e4:97:d3:00:b1:61:cc:85:18:73:41:9b:94:94: da:9e:2b:e6:83:c7:e9:fd:c4:1a:aa:c0:c9:82:f9:d1:d5:f4: 7b:f8:ae:3f:11:14:de:92:62:9c:b1:12:0b:21:02:32:1b:37: 74:42:af:de:ea:7b:8e:11:2b:58:01:a7:da:e7:75:71:46:b1: 12:a7:9b:15:70:3e:3b:aa:a6:55:26:b2:b3:c9:89:33:ad:59: e4:8b:d2:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm3iIXOVdXjQGkyAi5+SdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzE0MGM4MjE4OTcwZWY2MGU2ODkzNTRmMTZiNjNhZjQ5 MDBhZDUwHhcNMjUxMjA2MDMwMTI5WhcNMjUxMjA3MDMwMTI5WjAzMTEwLwYDVQQD EyhjYTE1MDI3M2NhYTZlNzQ0NjQzOTVhZDNlYjgzYTk1NmY4Yjg4NjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlmQtycAMrNsvDTL4Vt8u7fPXDFT rGgY88RvzNxQ9H13P/qvLoKIQdbavo7ngIw2Bx+DlmSrtjimUJW8RNNyXjAUfTlz tFOIojrNSkc0NVHbNQ1dVc8qf5lDvj2jMOpNgADqKtaUnlQbaWurDUnLhXXV9/UZ sHnDANi0yQVcxyUAuZaDWUavIeWyN+mgW81ZSyTXURFADzp5qo1YzYFhqZH/eiBf p3R7GqO0RSBMFbO7CLRcjexiWoNZngE9DCcxTLlUgC6KsHjlfXWciLhYPsT5qdEL UkM1jgUfVFPbxc3BJXQrqnCewA6Qwvg40Yk3rjYoC3dPevV9wQncs055KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoVAnPKpudEZDla0+uDqVb4uIYuMB8GA1UdIwQY MBaAFMLBQMghiXDvYOaJNU8Wtjr0kArVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2Qt YWQ1ODY4ODI1YzM2LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2QtYWQ1ODY4ODI1YzM2 LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeHeSpbu 0iJcn0cG2ErhE7fnCxLNfoMTwY5G+AgKorQk39FFR3Rmw0VUYGeJn6riGii+vIDv N/9z21drdwBIqn5finaW5w9wAYRCjKUuj099B8rMr7SChMO+C4z+QD4lPik2gPM+ lE6u6pHprwsj9EHFKdXndQ0E9uwAyzE9Ehe6pMTJdNaB6fPhE/5NO0VjFCpZxJFn pxQiQzQUfJcR935Mw2+wc+SX0wCxYcyFGHNBm5SU2p4r5oPH6f3EGqrAyYL50dX0 e/iuPxEU3pJinLESCyECMhs3dEKv3up7jhErWAGn2ud1cUaxEqebFXA+O6qmVSay s8mJM61Z5IvSqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:16:27 2025 by rpki-client