This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft File: w9bWn9WH0FQXblPRknJoI2GxZzY.mft (raw, json) Hash identifier: 151r3WdkCkh6rCVt+x+aqwEMelDLZXytB0DGPvGch4k= Subject key identifier: B3:07:7F:0F:7E:1A:7D:BF:E6:6A:13:5D:CD:3B:F2:7D:DD:0F:A9:00 Authority key identifier: C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36 Certificate issuer: /CN=c3d6d69fd587d054176e53d19272682361b16736 Certificate serial: 019AFCC3DA29F26E95E92C9103DD9D1EFF94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft Manifest number: 1763 Signing time: Mon 08 Dec 2025 07:01:25 +0000 Manifest this update: Mon 08 Dec 2025 07:01:25 +0000 Manifest next update: Tue 09 Dec 2025 07:01:25 +0000 Files and hashes: 1: w9bWn9WH0FQXblPRknJoI2GxZzY.crl (hash: 57fLwyMfsJ+yGAXZQW6cBFH32DA66rTZIjs4aVoVFWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:c3:da:29:f2:6e:95:e9:2c:91:03:dd:9d:1e:ff:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3d6d69fd587d054176e53d19272682361b16736 Validity Not Before: Dec 8 07:01:25 2025 GMT Not After : Dec 9 07:01:25 2025 GMT Subject: CN=b3077f0f7e1a7dbfe66a135dcd3bf27ddd0fa900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f0:de:56:db:08:9d:41:16:a2:ca:68:48:7b: 46:fc:59:3c:8a:3e:8a:fe:70:49:dd:93:d9:05:53: d8:8a:dc:d4:6d:59:fc:a1:ae:4c:45:11:6a:1f:d0: 11:a4:6a:ab:a6:1b:c8:b0:00:43:d9:f4:c3:c9:6d: b7:77:80:52:1c:98:ed:75:f9:ee:30:1f:f5:75:24: e9:3d:25:9b:44:58:9b:81:98:cd:de:c0:1e:61:54: 93:9f:a7:8a:76:99:73:01:39:3d:07:4c:52:2c:99: 60:ae:55:f2:92:8e:bb:52:cd:fc:dc:02:53:d8:65: 3c:51:f6:a1:73:97:8d:d8:65:53:0f:b2:98:61:2e: 87:47:a8:6c:0d:11:d7:72:20:81:92:95:bb:56:39: 07:9c:ac:40:83:fb:9d:9d:d8:44:5a:31:af:9d:0a: d8:51:61:e0:9f:03:75:53:ae:83:a2:5b:a5:4d:a5: 3b:b7:46:c1:cf:e2:7c:78:4b:7f:5f:06:76:4a:88: 49:7e:26:f3:bd:4c:80:da:45:fa:52:93:d8:b7:b9: 92:f0:b6:35:71:b5:2d:23:a4:76:c0:b3:1f:b2:d1: 18:40:fb:05:7c:9c:13:dc:34:4a:f2:ab:37:fb:b7: 57:99:c3:68:a5:0b:ec:4a:a8:a3:a4:4a:14:80:79: cc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:07:7F:0F:7E:1A:7D:BF:E6:6A:13:5D:CD:3B:F2:7D:DD:0F:A9:00 X509v3 Authority Key Identifier: keyid:C3:D6:D6:9F:D5:87:D0:54:17:6E:53:D1:92:72:68:23:61:B1:67:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w9bWn9WH0FQXblPRknJoI2GxZzY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/d774bf-00fe-4379-ad24-ca0836318995/1/w9bWn9WH0FQXblPRknJoI2GxZzY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:64:f8:ef:31:e0:0d:17:f9:7a:8f:f2:86:3c:ac:ca:96:93: 17:13:67:10:df:8a:fe:37:c5:1d:c2:32:20:d2:12:7a:13:1b: 79:cb:14:3b:7e:58:b6:31:09:45:3c:ad:19:2c:de:30:23:ad: 2d:ee:93:60:9f:02:d6:0c:4c:d3:ca:b6:f8:2c:84:1d:49:97: 52:49:ad:cd:fb:73:60:8a:9d:c1:de:ff:8b:9c:42:11:30:82: 55:32:3b:f4:7e:81:1d:b5:31:15:b7:0e:fb:b7:78:19:8d:6b: c3:19:37:9e:72:84:87:39:b8:c6:e8:40:a8:38:ad:ab:30:ee: 61:25:62:3e:bf:6b:60:0d:5f:09:bc:7c:60:e0:61:a1:02:3b: 69:52:2d:2e:98:60:21:e0:91:88:6d:b4:98:df:e9:fd:e3:e2: 79:d5:24:f3:9c:de:6a:e4:e4:e4:63:da:9f:f8:a5:a0:62:36: 59:b0:af:7a:a8:f8:d4:f3:a1:33:79:97:d6:ca:bd:a9:70:16: 6b:f1:8e:ed:ad:9f:eb:d9:c7:b6:2e:a6:3a:aa:93:c7:e6:c6: 8b:88:fd:af:33:2d:32:19:01:d4:a1:af:75:68:4c:22:7e:cf: bc:aa:61:84:73:62:2d:33:ca:cc:11:98:06:26:d5:d3:22:31: 80:15:4e:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8w9op8m6V6SyRA92dHv+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZDZkNjlmZDU4N2QwNTQxNzZlNTNkMTkyNzI2ODIzNjFi MTY3MzYwHhcNMjUxMjA4MDcwMTI1WhcNMjUxMjA5MDcwMTI1WjAzMTEwLwYDVQQD EyhiMzA3N2YwZjdlMWE3ZGJmZTY2YTEzNWRjZDNiZjI3ZGRkMGZhOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvDeVtsInUEWospoSHtG/Fk8ij6K /nBJ3ZPZBVPYitzUbVn8oa5MRRFqH9ARpGqrphvIsABD2fTDyW23d4BSHJjtdfnu MB/1dSTpPSWbRFibgZjN3sAeYVSTn6eKdplzATk9B0xSLJlgrlXyko67Us383AJT 2GU8Ufahc5eN2GVTD7KYYS6HR6hsDRHXciCBkpW7VjkHnKxAg/udndhEWjGvnQrY UWHgnwN1U66DolulTaU7t0bBz+J8eEt/XwZ2SohJfibzvUyA2kX6UpPYt7mS8LY1 cbUtI6R2wLMfstEYQPsFfJwT3DRK8qs3+7dXmcNopQvsSqijpEoUgHnM5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLMHfw9+Gn2/5moTXc078n3dD6kAMB8GA1UdIwQY MBaAFMPW1p/Vh9BUF25T0ZJyaCNhsWc2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQt Y2EwODM2MzE4OTk1LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9kNzc0YmYtMDBmZS00Mzc5LWFkMjQtY2EwODM2MzE4OTk1 LzEvdzliV245V0gwRlFYYmxQUmtuSm9JMkd4WnpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgGT47zHg DRf5eo/yhjysypaTFxNnEN+K/jfFHcIyINISehMbecsUO35YtjEJRTytGSzeMCOt Le6TYJ8C1gxM08q2+CyEHUmXUkmtzftzYIqdwd7/i5xCETCCVTI79H6BHbUxFbcO +7d4GY1rwxk3nnKEhzm4xuhAqDitqzDuYSViPr9rYA1fCbx8YOBhoQI7aVItLphg IeCRiG20mN/p/ePiedUk85zeauTk5GPan/iloGI2WbCveqj41POhM3mX1sq9qXAW a/GO7a2f69nHti6mOqqTx+bGi4j9rzMtMhkB1KGvdWhMIn7PvKphhHNiLTPKzBGY BibV0yIxgBVOuQ== -----END CERTIFICATE-----Generated at Mon Dec 8 10:27:28 2025 by rpki-client