This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft File: w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json) Hash identifier: MPzPRRP/hQ49PoYRkvk0XA22UFyeGUmnk58iUX1Mj1I= Subject key identifier: D3:C8:3E:84:55:B0:0F:38:8B:A4:C2:0A:A0:0C:66:49:86:E5:86:AA Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05 Certificate issuer: /CN=c3dd57e32bd76db77bedfc5211363c48080f0605 Certificate serial: 019AF19AD0AF728814BC75A8189848BFC9E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft Manifest number: 0DCC Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: udoHweuj/xvLnC1KtH87TncXv+NWN3ejz+Si+Uwz58o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d0:af:72:88:14:bc:75:a8:18:98:48:bf:c9:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=d3c83e8455b00f388ba4c20aa00c664986e586aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:e5:be:9b:cd:87:fe:8c:54:26:97:70:7b: 4c:cc:55:7e:ab:09:f4:21:e8:9c:6a:18:d2:48:e3: df:7c:9f:d4:68:bb:5a:87:a2:16:83:ec:1e:06:b1: f3:c8:10:f2:f9:4c:f0:c5:a7:5e:8b:e6:c1:30:3f: e6:f6:1a:40:c8:98:74:7c:68:e6:a7:b3:84:6c:a4: b0:7e:41:a8:c3:21:a3:c0:7b:8e:25:ef:78:ab:9c: 6b:f1:a6:e9:8c:22:85:14:94:b3:43:38:e8:e7:db: da:45:43:e0:00:96:bc:18:45:0d:f3:9b:75:37:31: a4:19:c4:64:83:c8:ae:04:27:43:12:3b:3e:58:27: 76:99:5f:1d:49:82:77:14:57:c7:8a:5a:b8:22:cb: 3a:72:eb:69:06:0a:1e:ac:9f:7a:63:57:41:af:6d: 21:25:4c:f6:19:e5:5c:e5:fa:1c:05:3a:c7:8c:83: a1:a6:6d:30:79:26:4f:56:68:30:b5:69:32:46:73: c3:5e:42:9c:ab:8b:46:68:50:c7:1f:ee:87:26:88: ae:af:e1:6a:69:1b:5c:7b:4c:54:87:01:4c:00:a3: 86:12:7c:84:e2:14:89:4e:9f:ef:9f:9e:63:a5:30: 65:3a:75:a2:8f:6a:49:a7:c3:bc:fc:c8:e5:c2:20: 02:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C8:3E:84:55:B0:0F:38:8B:A4:C2:0A:A0:0C:66:49:86:E5:86:AA X509v3 Authority Key Identifier: keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:60:78:a6:74:d9:c1:97:d4:9b:49:59:4e:52:eb:fd:8f:bf: a4:51:90:e8:d0:08:e5:b8:e3:be:9b:53:26:0e:03:92:47:d2: d1:c9:55:f2:40:60:cf:66:33:1b:da:55:d9:ea:fa:d6:06:14: a3:fc:e2:a1:6f:e7:bb:f3:a7:a8:77:c7:7e:bb:1c:b9:9f:a4: 99:77:01:e2:c4:b2:3e:72:6f:12:e1:74:07:55:bf:59:ad:98: 8f:f9:a8:46:4d:cd:e5:58:0a:0c:73:f6:9e:16:ed:4e:50:0b: 8c:b2:02:cb:85:8a:60:e2:c6:b8:60:71:94:12:84:8a:ed:f7: 6f:6d:02:ca:17:21:17:93:8a:ff:9b:3e:7e:83:16:b9:df:c8: dd:f2:48:d8:8f:98:b0:55:a7:d6:c8:95:63:b0:7f:1b:6d:00: e2:21:88:54:f3:b4:45:c6:30:28:c9:22:c6:8b:e3:5c:2a:bf: b5:ba:9c:a9:91:d9:db:7b:97:63:aa:47:fd:8a:bd:c3:14:f2: 51:53:23:99:15:b5:08:3e:04:a8:56:76:aa:f5:44:7b:92:e7: d9:a4:31:7a:95:94:7b:97:f7:63:a2:35:ae:f3:c2:0e:c5:8f: 32:fe:97:4f:3a:7f:dc:29:0f:20:38:7e:7a:6c:9e:98:cb:70: 67:eb:a1:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtCvcogUvHWoGJhIv8nnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZGQ1N2UzMmJkNzZkYjc3YmVkZmM1MjExMzYzYzQ4MDgw ZjA2MDUwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EyhkM2M4M2U4NDU1YjAwZjM4OGJhNGMyMGFhMDBjNjY0OTg2ZTU4NmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzovlvpvNh/6MVCaXcHtMzFV+qwn0 IeicahjSSOPffJ/UaLtah6IWg+weBrHzyBDy+Uzwxadei+bBMD/m9hpAyJh0fGjm p7OEbKSwfkGowyGjwHuOJe94q5xr8abpjCKFFJSzQzjo59vaRUPgAJa8GEUN85t1 NzGkGcRkg8iuBCdDEjs+WCd2mV8dSYJ3FFfHilq4Iss6cutpBgoerJ96Y1dBr20h JUz2GeVc5focBTrHjIOhpm0weSZPVmgwtWkyRnPDXkKcq4tGaFDHH+6HJoiur+Fq aRtce0xUhwFMAKOGEnyE4hSJTp/vn55jpTBlOnWij2pJp8O8/MjlwiACPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPIPoRVsA84i6TCCqAMZkmG5YaqMB8GA1UdIwQY MBaAFMPdV+Mr1223e+38UhE2PEgIDwYFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzkxWDR5dlhiYmQ3N2Z4U0VUWThTQWdQQmdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi85ZTM4OGQtMzk5MC00ZmQ4LTgyYjMt ZDc3NTExN2FmMTJmLzEvdzkxWDR5dlhiYmQ3N2Z4U0VUWThTQWdQQmdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi85ZTM4OGQtMzk5MC00ZmQ4LTgyYjMtZDc3NTExN2FmMTJm LzEvdzkxWDR5dlhiYmQ3N2Z4U0VUWThTQWdQQmdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWB4pnTZ wZfUm0lZTlLr/Y+/pFGQ6NAI5bjjvptTJg4DkkfS0clV8kBgz2YzG9pV2er61gYU o/zioW/nu/OnqHfHfrscuZ+kmXcB4sSyPnJvEuF0B1W/Wa2Yj/moRk3N5VgKDHP2 nhbtTlALjLICy4WKYOLGuGBxlBKEiu33b20CyhchF5OK/5s+foMWud/I3fJI2I+Y sFWn1siVY7B/G20A4iGIVPO0RcYwKMkixovjXCq/tbqcqZHZ23uXY6pH/Yq9wxTy UVMjmRW1CD4EqFZ2qvVEe5Ln2aQxepWUe5f3Y6I1rvPCDsWPMv6XTzp/3CkPIDh+ emyemMtwZ+uhtw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:10 2025 by rpki-client