This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft File: wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft (raw, json) Hash identifier: 0ZSksW+hnWwGqW4TUYFiQQHxderOqMjRozfKEydwzBs= Subject key identifier: 80:50:29:7C:14:82:EB:30:98:86:F7:3B:A7:F0:F2:89:C4:A4:E4:50 Authority key identifier: C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05 Certificate issuer: /CN=c2ded250e3baf21d8e0a259a799f90adae9be305 Certificate serial: 019AF2772BF2E009A730C17E3232695C580F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft Manifest number: 0D82 Signing time: Sat 06 Dec 2025 07:01:27 +0000 Manifest this update: Sat 06 Dec 2025 07:01:27 +0000 Manifest next update: Sun 07 Dec 2025 07:01:27 +0000 Files and hashes: 1: wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl (hash: 2YJyakXGV+8dRQMbnnkRy9AztI4tsN6MJNgNsaRmWiU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:2b:f2:e0:09:a7:30:c1:7e:32:32:69:5c:58:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2ded250e3baf21d8e0a259a799f90adae9be305 Validity Not Before: Dec 6 07:01:27 2025 GMT Not After : Dec 7 07:01:27 2025 GMT Subject: CN=8050297c1482eb309886f73ba7f0f289c4a4e450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8b:a8:8c:a2:f6:73:be:50:81:45:90:1a:d0: bf:e6:99:9a:2a:19:9e:7c:9d:96:79:03:34:b0:eb: 35:99:ab:cd:9d:7e:98:5f:0a:2d:e6:aa:6f:62:1d: ab:ff:68:45:dc:34:ec:8c:60:ec:72:54:74:b3:e8: b6:a0:5a:61:73:ab:c9:75:72:22:78:5d:20:6a:b6: 10:a6:8f:4b:b7:d7:bd:fa:a5:d3:9b:13:76:b5:0c: 4f:6b:c9:55:10:91:9e:74:09:ee:e8:b5:ce:e4:1f: 21:0a:34:26:79:e6:dd:b8:1d:da:2c:63:f7:3b:d2: 34:6b:3b:d3:c3:13:02:2e:1d:9a:e5:a4:cb:1e:75: a4:c4:db:45:46:d6:f0:c2:3c:4a:42:46:60:a1:99: c0:17:5d:22:02:9a:84:c8:92:9c:b1:b2:4d:b5:9a: 35:6d:98:17:21:e4:b4:02:54:d2:44:09:9e:72:f3: dd:51:17:10:69:db:2a:7d:90:94:23:14:5c:13:1c: a6:7a:8b:d5:f9:4b:f9:03:3d:6b:e1:67:96:b7:cf: 29:36:21:2f:98:c9:89:bf:67:e1:2c:ce:24:29:92: ce:5a:03:08:61:72:28:0a:08:1c:98:09:b4:da:e4: cb:24:80:e4:53:fd:57:63:b7:0b:5d:96:84:76:7a: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:50:29:7C:14:82:EB:30:98:86:F7:3B:A7:F0:F2:89:C4:A4:E4:50 X509v3 Authority Key Identifier: keyid:C2:DE:D2:50:E3:BA:F2:1D:8E:0A:25:9A:79:9F:90:AD:AE:9B:E3:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt7SUOO68h2OCiWaeZ-Qra6b4wU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6de939-2713-486f-92fa-1eba8e80d747/1/wt7SUOO68h2OCiWaeZ-Qra6b4wU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:62:a9:91:49:c4:1b:1f:6d:84:d0:9e:eb:a2:a5:c6:45:57: 3d:bf:c3:cf:11:f7:6d:27:05:ec:0a:b1:89:fa:b7:69:98:45: 8d:0d:f0:06:67:11:b9:fb:be:83:45:27:a9:ca:78:fa:5c:d5: de:32:b5:ba:e1:b4:45:72:aa:35:c2:47:dd:1a:71:89:b4:55: b8:85:cf:58:6b:f3:c8:fb:55:69:f6:6a:cd:86:e3:ed:94:6b: 49:da:d6:9b:27:27:c5:47:86:19:05:73:c7:b4:d2:25:e9:10: f9:79:91:42:3b:61:b3:c2:65:6d:39:49:f8:20:3b:49:f9:b4: a5:7f:70:5a:e4:f8:1a:6c:b9:a3:2b:9c:88:01:d2:8b:20:a8: 76:c7:da:0e:c6:d2:29:0c:c4:7f:01:f7:f1:c8:7e:2a:83:5c: 47:27:94:98:ce:7f:03:db:d7:2b:71:c2:4c:0f:2a:8b:3d:57: fb:03:34:97:20:7d:47:6d:23:a5:03:c4:8c:37:75:a5:51:09: 15:87:59:c8:8a:c4:84:19:1c:85:fa:7d:69:a4:64:6d:35:ec: b9:0c:f4:fc:14:a8:1e:1b:7b:ab:3b:88:41:f7:c1:32:48:6a: 7d:de:6f:3c:2b:46:80:5a:4d:c5:59:a7:d5:a7:e2:7f:23:6f: 9a:d7:a3:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydyvy4AmnMMF+MjJpXFgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZGVkMjUwZTNiYWYyMWQ4ZTBhMjU5YTc5OWY5MGFkYWU5 YmUzMDUwHhcNMjUxMjA2MDcwMTI3WhcNMjUxMjA3MDcwMTI3WjAzMTEwLwYDVQQD Eyg4MDUwMjk3YzE0ODJlYjMwOTg4NmY3M2JhN2YwZjI4OWM0YTRlNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YuojKL2c75QgUWQGtC/5pmaKhme fJ2WeQM0sOs1mavNnX6YXwot5qpvYh2r/2hF3DTsjGDsclR0s+i2oFphc6vJdXIi eF0garYQpo9Lt9e9+qXTmxN2tQxPa8lVEJGedAnu6LXO5B8hCjQmeebduB3aLGP3 O9I0azvTwxMCLh2a5aTLHnWkxNtFRtbwwjxKQkZgoZnAF10iApqEyJKcsbJNtZo1 bZgXIeS0AlTSRAmecvPdURcQadsqfZCUIxRcExymeovV+Uv5Az1r4WeWt88pNiEv mMmJv2fhLM4kKZLOWgMIYXIoCggcmAm02uTLJIDkU/1XY7cLXZaEdnqRDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBQKXwUguswmIb3O6fw8onEpORQMB8GA1UdIwQY MBaAFMLe0lDjuvIdjgolmnmfkK2um+MFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Q3U1VPTzY4aDJPQ2lXYWVaLVFyYTZiNHdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82ZGU5MzktMjcxMy00ODZmLTkyZmEt MWViYThlODBkNzQ3LzEvd3Q3U1VPTzY4aDJPQ2lXYWVaLVFyYTZiNHdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS82ZGU5MzktMjcxMy00ODZmLTkyZmEtMWViYThlODBkNzQ3 LzEvd3Q3U1VPTzY4aDJPQ2lXYWVaLVFyYTZiNHdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJWKpkUnE Gx9thNCe66KlxkVXPb/DzxH3bScF7Aqxifq3aZhFjQ3wBmcRufu+g0Unqcp4+lzV 3jK1uuG0RXKqNcJH3RpxibRVuIXPWGvzyPtVafZqzYbj7ZRrSdrWmycnxUeGGQVz x7TSJekQ+XmRQjths8JlbTlJ+CA7Sfm0pX9wWuT4Gmy5oyuciAHSiyCodsfaDsbS KQzEfwH38ch+KoNcRyeUmM5/A9vXK3HCTA8qiz1X+wM0lyB9R20jpQPEjDd1pVEJ FYdZyIrEhBkchfp9aaRkbTXsuQz0/BSoHht7qzuIQffBMkhqfd5vPCtGgFpNxVmn 1afifyNvmtejpg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:03:18 2025 by rpki-client