This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft File: wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json) Hash identifier: nqgvseGl46TaO2ZN6HR0/7tBuW2LbX7KVuo8JMAn6C8= Subject key identifier: 84:8E:04:CD:56:1D:3C:6C:43:A8:EC:E8:0C:01:46:30:74:BB:E8:E3 Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1 Certificate issuer: /CN=c2b005411b8b32108342c9f7059502206b9824c1 Certificate serial: 019AF1640A3ED9E8558AD906490BBB2A1BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:00:56 +0000 Manifest this update: Sat 06 Dec 2025 02:00:56 +0000 Manifest next update: Sun 07 Dec 2025 02:00:56 +0000 Files and hashes: 1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: xH2EKAGd6KnyFWc1Vl4TU0HRIp7Vx9SAHMsxjABfwME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0a:3e:d9:e8:55:8a:d9:06:49:0b:bb:2a:1b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1 Validity Not Before: Dec 6 02:00:56 2025 GMT Not After : Dec 7 02:00:56 2025 GMT Subject: CN=848e04cd561d3c6c43a8ece80c01463074bbe8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:aa:01:4f:f7:89:cd:55:69:d8:1e:08:09: 01:95:76:97:55:ed:57:0a:1a:c5:ec:43:dd:85:f8: 51:b8:b9:a7:28:69:2b:e1:f2:4b:cf:9a:e5:91:d2: 43:7c:84:7e:66:bc:b8:50:63:f9:e7:a7:b4:99:77: 25:95:14:63:cf:8f:77:f3:44:f4:b1:37:03:22:8b: 40:2b:6a:ab:3c:4f:69:c0:28:d3:a1:01:c2:cd:4e: 88:1f:5e:4d:49:9a:09:17:22:f5:c4:86:89:f6:db: 3d:31:d6:17:17:4b:5d:df:f9:d3:a2:07:12:ad:a6: 3b:3b:d7:6a:28:40:b6:d3:e9:10:16:3a:8d:01:e6: e7:79:0a:2d:40:aa:e8:31:0f:59:01:f6:ae:5f:da: 3a:7f:cc:16:a7:b8:10:34:88:4e:d7:75:ee:a3:dd: c5:b8:cc:54:fb:d8:9e:9f:46:2f:22:fa:49:e2:33: 4e:f2:4d:1c:83:08:6a:5b:c5:38:99:4c:e2:d8:6a: 78:45:1f:38:6d:0e:a6:fd:e6:d4:92:a9:9e:79:61: bb:0b:21:01:06:53:56:7b:e0:34:e7:57:3b:36:e8: 6a:15:35:eb:0b:d8:fa:5e:c3:e5:cb:09:42:ef:8c: 48:03:ff:91:33:62:a5:bc:1b:09:5f:37:4b:6b:27: a1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8E:04:CD:56:1D:3C:6C:43:A8:EC:E8:0C:01:46:30:74:BB:E8:E3 X509v3 Authority Key Identifier: keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:90:14:83:4f:44:5c:b2:a7:c1:c6:c3:65:d8:93:b4:67:fe: 72:2d:58:ec:dd:b8:27:b0:0c:d6:b5:0f:bd:e4:29:18:b7:63: b8:1e:f0:bf:2d:00:ad:16:3b:69:3a:96:24:a4:b4:17:b3:0b: c4:00:0b:bb:4f:62:99:22:cd:44:00:26:1c:03:c3:f0:e4:70: c9:3f:31:8d:b9:ac:26:03:6a:c4:7d:14:35:c2:1c:49:f0:a7: 65:f7:8a:4f:be:96:b0:ce:5a:44:3a:ca:c4:ac:22:a1:e1:4b: 2b:c1:77:06:1f:7d:79:c5:b4:a5:b2:f2:1c:69:0d:1f:96:1a: 0e:43:d3:f1:31:dd:ba:78:02:ae:6b:65:fa:03:46:bd:f9:4a: 7f:ce:41:b4:5c:9d:aa:2e:af:69:28:4f:60:10:ae:4f:01:43: 05:4e:e3:fa:c9:86:03:44:d3:ba:76:e8:3a:0f:ff:a1:92:46: ec:76:f5:b3:9f:d0:85:52:9b:9c:88:74:bc:0a:0d:33:e6:0e: a0:02:8d:26:a8:9e:ee:08:b6:41:3a:91:cc:12:4d:05:94:ed: be:af:55:ad:e5:d3:de:2c:da:bb:19:ab:64:ea:05:41:e2:db: fe:3a:b9:cb:cd:00:b4:0b:91:45:82:59:97:79:d8:f0:a1:5d: 97:1e:c4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAo+2ehVitkGSQu7KhvjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjAwNTQxMWI4YjMyMTA4MzQyYzlmNzA1OTUwMjIwNmI5 ODI0YzEwHhcNMjUxMjA2MDIwMDU2WhcNMjUxMjA3MDIwMDU2WjAzMTEwLwYDVQQD Eyg4NDhlMDRjZDU2MWQzYzZjNDNhOGVjZTgwYzAxNDYzMDc0YmJlOGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+qqAU/3ic1VadgeCAkBlXaXVe1X ChrF7EPdhfhRuLmnKGkr4fJLz5rlkdJDfIR+Zry4UGP556e0mXcllRRjz49380T0 sTcDIotAK2qrPE9pwCjToQHCzU6IH15NSZoJFyL1xIaJ9ts9MdYXF0td3/nTogcS raY7O9dqKEC20+kQFjqNAebneQotQKroMQ9ZAfauX9o6f8wWp7gQNIhO13Xuo93F uMxU+9ien0YvIvpJ4jNO8k0cgwhqW8U4mUzi2Gp4RR84bQ6m/ebUkqmeeWG7CyEB BlNWe+A051c7NuhqFTXrC9j6XsPlywlC74xIA/+RM2KlvBsJXzdLayeh+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISOBM1WHTxsQ6js6AwBRjB0u+jjMB8GA1UdIwQY MBaAFMKwBUEbizIQg0LJ9wWVAiBrmCTBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JBRlFSdUxNaENEUXNuM0JaVUNJR3VZSk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8zZTUwZmYtYTU2Ni00Y2IxLWExMTAt M2E4YWYwMjk1MWVlLzEvd3JBRlFSdUxNaENEUXNuM0JaVUNJR3VZSk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8zZTUwZmYtYTU2Ni00Y2IxLWExMTAtM2E4YWYwMjk1MWVl LzEvd3JBRlFSdUxNaENEUXNuM0JaVUNJR3VZSk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJAUg09E XLKnwcbDZdiTtGf+ci1Y7N24J7AM1rUPveQpGLdjuB7wvy0ArRY7aTqWJKS0F7ML xAALu09imSLNRAAmHAPD8ORwyT8xjbmsJgNqxH0UNcIcSfCnZfeKT76WsM5aRDrK xKwioeFLK8F3Bh99ecW0pbLyHGkNH5YaDkPT8THdungCrmtl+gNGvflKf85BtFyd qi6vaShPYBCuTwFDBU7j+smGA0TTunboOg//oZJG7Hb1s5/QhVKbnIh0vAoNM+YO oAKNJqie7gi2QTqRzBJNBZTtvq9VreXT3izauxmrZOoFQeLb/jq5y80AtAuRRYJZ l3nY8KFdlx7EHw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:35 2025 by rpki-client