This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft File: wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json) Hash identifier: rOXl1VPXJzu8yuLacA7wVYlM7CDepeYGW4vDZUi11go= Subject key identifier: 72:68:0D:FD:84:C1:7D:98:89:C4:87:A5:57:4C:0C:CC:8A:4E:5F:69 Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E Certificate issuer: /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e Certificate serial: 019AF209BA89690E6EEE683AEB7B49081851 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 05:01:55 +0000 Manifest this update: Sat 06 Dec 2025 05:01:55 +0000 Manifest next update: Sun 07 Dec 2025 05:01:55 +0000 Files and hashes: 1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: RnVvu4uQnm+SVnZr64krxoS4ZOm11jjSP2j8odnNqII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:ba:89:69:0e:6e:ee:68:3a:eb:7b:49:08:18:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e Validity Not Before: Dec 6 05:01:55 2025 GMT Not After : Dec 7 05:01:55 2025 GMT Subject: CN=72680dfd84c17d9889c487a5574c0ccc8a4e5f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:85:76:79:67:94:6c:7e:05:b5:59:4e:00: c1:99:1e:b2:3e:a2:62:a4:8d:12:f6:48:5a:5b:e9: db:f5:26:c3:e9:f5:ca:24:5e:a6:7a:77:d1:5a:26: bd:81:d2:21:46:c2:90:f2:21:a0:9a:cc:4a:1c:e8: ec:12:5b:98:c6:43:d0:fa:00:6c:ca:77:31:de:32: 8d:dc:24:22:33:ef:6e:3c:e8:79:54:70:9d:6a:0b: 05:be:48:54:29:3b:c8:e3:e1:b3:5a:02:3f:0d:de: cb:8b:78:d7:51:dc:da:8a:df:97:93:0a:e2:b0:55: e3:07:be:c7:af:68:d0:94:96:18:03:cd:ed:2f:ff: 43:70:cf:0a:1b:fe:65:e5:e4:80:7f:de:18:6f:c5: 75:be:40:d5:e5:73:ed:4f:d5:df:23:5a:d7:ec:9d: f9:00:21:d9:c7:15:d4:99:da:65:4d:27:99:0f:a9: e4:ef:85:ea:61:28:4d:62:8c:ae:33:67:34:24:a3: 07:1b:53:f5:6d:d7:bc:af:5b:b3:e2:c0:83:55:47: a5:6d:4b:f7:ba:2f:2a:00:59:28:85:26:83:4b:87: 02:b9:3c:07:d2:2a:0d:7a:f7:2e:d4:71:d3:cb:cc: 8d:bd:06:72:8a:6f:2d:c4:6d:d1:0c:de:51:b0:4f: 54:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:68:0D:FD:84:C1:7D:98:89:C4:87:A5:57:4C:0C:CC:8A:4E:5F:69 X509v3 Authority Key Identifier: keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:fd:36:ec:2c:64:73:aa:f1:43:d3:86:63:6e:73:7b:d3:04: ea:d4:22:6b:e3:f3:73:23:1e:16:73:c2:aa:9b:df:d4:4a:0c: 2e:94:36:65:57:e2:2c:c5:e5:13:7c:6d:fd:d7:51:d5:39:67: 46:e1:c4:53:dc:ad:38:f2:9c:03:ce:3a:cc:be:99:09:70:a0: 05:90:fd:cd:56:3a:2e:5f:28:d9:bd:f4:76:01:a9:7d:ef:b4: 17:a3:1d:0c:93:1f:81:fc:82:de:bb:61:e3:47:f4:75:e4:3d: fb:aa:8f:4f:86:32:66:0a:94:b5:85:96:ee:c2:49:55:ec:9a: cd:84:c1:cb:79:85:0a:9d:3c:3a:eb:3b:64:29:66:ad:6c:04: 93:a9:b0:30:0d:f8:ed:4d:0e:2f:7f:a7:36:84:02:b6:91:26: 06:00:86:64:65:42:9b:19:a3:e9:f4:fe:be:85:2c:31:d9:55: 6b:44:f5:03:04:c8:36:7d:82:06:2a:e5:81:1f:06:ed:ad:13: 53:3f:ba:9e:9f:11:a6:61:57:28:0c:9c:32:99:29:9b:e3:71: 59:ae:5b:cf:2a:e0:f3:ae:09:68:90:ff:ce:13:1f:dc:48:4e: 30:c8:a2:13:3c:51:1a:7a:6f:1a:44:f9:77:04:44:b9:01:b0: ab:19:ca:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCbqJaQ5u7mg663tJCBhRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMWZmOWQ5YmE1NWM3ZDk1MDhjNWE0ZGMxZWVjYzBlMjk1 NjFjMmUwHhcNMjUxMjA2MDUwMTU1WhcNMjUxMjA3MDUwMTU1WjAzMTEwLwYDVQQD Eyg3MjY4MGRmZDg0YzE3ZDk4ODljNDg3YTU1NzRjMGNjYzhhNGU1ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGFdnlnlGx+BbVZTgDBmR6yPqJi pI0S9khaW+nb9SbD6fXKJF6menfRWia9gdIhRsKQ8iGgmsxKHOjsEluYxkPQ+gBs yncx3jKN3CQiM+9uPOh5VHCdagsFvkhUKTvI4+GzWgI/Dd7Li3jXUdzait+Xkwri sFXjB77Hr2jQlJYYA83tL/9DcM8KG/5l5eSAf94Yb8V1vkDV5XPtT9XfI1rX7J35 ACHZxxXUmdplTSeZD6nk74XqYShNYoyuM2c0JKMHG1P1bde8r1uz4sCDVUelbUv3 ui8qAFkohSaDS4cCuTwH0ioNevcu1HHTy8yNvQZyim8txG3RDN5RsE9UrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJoDf2EwX2YicSHpVdMDMyKTl9pMB8GA1UdIwQY MBaAFMEf+dm6VcfZUIxaTcHuzA4pVhwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYt OWZiNmI0ZWEyNTBhLzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS84MDc5MGItODkxZi00ZTAzLWJkNTYtOWZiNmI0ZWEyNTBh LzEvd1JfNTJicFZ4OWxRakZwTndlN01EaWxXSEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmf027Cxk c6rxQ9OGY25ze9ME6tQia+PzcyMeFnPCqpvf1EoMLpQ2ZVfiLMXlE3xt/ddR1Tln RuHEU9ytOPKcA846zL6ZCXCgBZD9zVY6Ll8o2b30dgGpfe+0F6MdDJMfgfyC3rth 40f0deQ9+6qPT4YyZgqUtYWW7sJJVeyazYTBy3mFCp08Ous7ZClmrWwEk6mwMA34 7U0OL3+nNoQCtpEmBgCGZGVCmxmj6fT+voUsMdlVa0T1AwTINn2CBirlgR8G7a0T Uz+6np8RpmFXKAycMpkpm+NxWa5bzyrg864JaJD/zhMf3EhOMMiiEzxRGnpvGkT5 dwREuQGwqxnKQA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:48 2025 by rpki-client