This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft File: wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json) Hash identifier: RRtwDun51BOwcy+/Q52oHrYulh0gBet7iRn3o65hrMw= Subject key identifier: 53:13:94:DA:E6:33:4C:B1:D4:3C:E4:B1:5C:A1:7E:DC:1F:82:3E:77 Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E Certificate issuer: /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e Certificate serial: 019B2FD55E62AFA07CE11B414E02BE180150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft Manifest number: 177F Signing time: Thu 18 Dec 2025 05:01:10 +0000 Manifest this update: Thu 18 Dec 2025 05:01:10 +0000 Manifest next update: Fri 19 Dec 2025 05:01:10 +0000 Files and hashes: 1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: xgJEJ7CE9e6I4JPF1oQ2E9ZbRUapKoLPTAJOB+7LqqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:5e:62:af:a0:7c:e1:1b:41:4e:02:be:18:01:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e Validity Not Before: Dec 18 05:01:10 2025 GMT Not After : Dec 19 05:01:10 2025 GMT Subject: CN=531394dae6334cb1d43ce4b15ca17edc1f823e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:54:ea:67:ca:fa:63:d1:79:0c:69:77:e6:55: f8:7f:3a:79:d5:83:7a:82:c7:fb:94:01:a3:ab:08: f6:c9:d8:85:4b:43:b4:4b:16:e9:d1:00:8f:0a:1e: 91:f0:a4:98:7f:e0:51:c7:65:87:c0:9d:47:15:a2: c0:12:07:f2:2a:f1:6c:d3:77:67:eb:26:25:8e:9a: f9:46:68:60:45:69:46:0e:14:3b:52:4a:a3:1b:af: dc:fd:c9:b0:e7:0c:9e:e6:ff:3e:9c:bd:de:99:05: d3:e9:f3:ca:ff:c3:5d:ec:90:a7:bc:61:58:3f:e8: 60:6d:e0:c9:aa:19:4b:3f:ba:5e:8b:12:a7:7a:c5: 54:74:05:dd:9d:9a:08:c8:d1:76:31:62:20:17:b8: ae:02:5d:0d:1e:d2:11:4f:99:ea:0c:81:98:88:31: 28:d5:6c:60:38:06:cf:aa:b6:97:f7:3a:20:44:69: 82:70:59:4a:5f:35:ae:d5:ee:a1:70:23:34:82:55: 6f:f4:4e:8a:63:f2:23:c0:e2:86:83:09:85:e5:ea: 50:c6:3e:9d:52:f3:41:e7:72:d1:49:0a:3e:07:ca: 21:7d:3e:0c:13:74:50:8a:0d:64:2f:80:aa:51:4d: e4:e8:f8:b7:cc:e0:76:00:94:87:54:b2:78:ad:9b: e6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:94:DA:E6:33:4C:B1:D4:3C:E4:B1:5C:A1:7E:DC:1F:82:3E:77 X509v3 Authority Key Identifier: keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:30:76:03:a9:dd:cf:0a:15:71:36:70:57:37:77:1c:3b:23: 72:12:1d:a4:c0:c8:b1:22:d1:4a:85:91:48:07:22:9e:23:70: 5d:48:bc:9b:ac:10:bc:2b:63:eb:9d:42:39:01:e3:bf:b0:88: 6e:43:d0:33:1b:b1:b7:d2:da:63:1a:20:c0:e5:46:30:b4:6c: 74:9e:05:77:89:ea:88:5d:4e:39:82:77:51:c3:63:72:49:0a: f8:ad:04:20:8f:0f:e0:2a:91:74:16:9b:fb:e7:cf:62:62:bc: cc:4d:a0:94:26:67:4c:67:cd:2a:80:6e:e9:08:25:4c:45:21: 38:75:1c:6b:26:e3:8a:df:d0:10:28:a0:d4:30:68:85:61:58: 2a:5c:93:8f:6d:74:12:07:7d:a7:fa:6e:0a:6a:6f:b5:a6:d0: 8b:4d:c7:e3:73:54:3c:56:be:59:06:34:de:70:76:0b:a7:4d: b9:9b:2b:b8:29:c7:71:65:e5:b0:e8:1e:8c:0c:2d:cc:69:cc: 83:c0:4e:72:20:d4:2b:ff:42:2c:4f:e7:21:01:f2:f8:19:a9: 53:cd:b3:a8:22:c1:b1:39:2b:91:ec:b8:fe:e9:96:a0:4a:d0: ac:d9:50:5e:a0:80:11:d6:ba:ac:25:6b:42:0e:3f:8c:e3:80: b3:36:3e:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1V5ir6B84RtBTgK+GAFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWZmOWQ5YmE1NWM3ZDk1MDhjNWE0ZGMxZWVjYzBlMjk1 NjFjMmUwHhcNMjUxMjE4MDUwMTEwWhcNMjUxMjE5MDUwMTEwWjAzMTEwLwYDVQQD Eyg1MzEzOTRkYWU2MzM0Y2IxZDQzY2U0YjE1Y2ExN2VkYzFmODIzZTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/FTqZ8r6Y9F5DGl35lX4fzp51YN6 gsf7lAGjqwj2ydiFS0O0Sxbp0QCPCh6R8KSYf+BRx2WHwJ1HFaLAEgfyKvFs03dn 6yYljpr5RmhgRWlGDhQ7UkqjG6/c/cmw5wye5v8+nL3emQXT6fPK/8Nd7JCnvGFY P+hgbeDJqhlLP7peixKnesVUdAXdnZoIyNF2MWIgF7iuAl0NHtIRT5nqDIGYiDEo 1WxgOAbPqraX9zogRGmCcFlKXzWu1e6hcCM0glVv9E6KY/IjwOKGgwmF5epQxj6d UvNB53LRSQo+B8ohfT4ME3RQig1kL4CqUU3k6Pi3zOB2AJSHVLJ4rZvm2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMTlNrmM0yx1DzksVyhftwfgj53MB8GA1UdIwQY MBaAFMEf+dm6VcfZUIxaTcHuzA4pVhwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYt OWZiNmI0ZWEyNTBhLzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYtOWZiNmI0ZWEyNTBh LzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTB2A6nd zwoVcTZwVzd3HDsjchIdpMDIsSLRSoWRSAciniNwXUi8m6wQvCtj651COQHjv7CI bkPQMxuxt9LaYxogwOVGMLRsdJ4Fd4nqiF1OOYJ3UcNjckkK+K0EII8P4CqRdBab ++fPYmK8zE2glCZnTGfNKoBu6QglTEUhOHUcaybjit/QECig1DBohWFYKlyTj210 Egd9p/puCmpvtabQi03H43NUPFa+WQY03nB2C6dNuZsruCnHcWXlsOgejAwtzGnM g8BOciDUK/9CLE/nIQHy+BmpU82zqCLBsTkrkey4/umWoErQrNlQXqCAEda6rCVr Qg4/jOOAszY+rQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:23:19 2025 by rpki-client