This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json) Hash identifier: q77PA6KmQ39EZj9FJJ29hbr5+omxi32KN6yEqIHoLEA= Subject key identifier: 41:6C:BC:84:89:2D:69:E6:30:D6:14:4F:B7:E1:83:CE:65:F0:83:13 Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17 Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17 Certificate serial: 019AF12E7F7598E573FBFE4A5F5A616CFEEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft Manifest number: 069B Signing time: Sat 06 Dec 2025 01:02:27 +0000 Manifest this update: Sat 06 Dec 2025 01:02:27 +0000 Manifest next update: Sun 07 Dec 2025 01:02:27 +0000 Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: c1UoipeZJZ22ICyVzsDFVK6hhlEEpqL6ixp4cFiLnkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:7f:75:98:e5:73:fb:fe:4a:5f:5a:61:6c:fe:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17 Validity Not Before: Dec 6 01:02:27 2025 GMT Not After : Dec 7 01:02:27 2025 GMT Subject: CN=416cbc84892d69e630d6144fb7e183ce65f08313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:df:37:bf:f2:cd:5a:14:70:87:35:a4:00:7d: 07:21:ad:d1:59:53:0e:cb:7b:9f:f1:b6:fd:b6:e7: d9:97:b5:37:00:27:a9:af:10:f2:97:7d:62:68:e7: ac:41:09:a5:63:3b:fe:bd:92:37:9e:94:cc:89:80: 85:c2:49:3c:dc:dd:95:18:91:1b:7d:bc:e3:63:db: 3a:a8:e4:3b:61:e1:32:df:cf:18:c2:68:d2:e5:38: 5e:36:de:b2:f2:7d:a6:1e:89:ca:ab:20:83:18:27: 87:73:89:65:f8:f2:74:e4:af:28:95:73:a0:94:05: df:82:77:92:b4:bb:2a:c4:3c:92:54:c7:1e:e0:fa: 45:51:1d:87:29:50:19:e8:d8:4b:13:e4:22:34:11: ce:17:32:1b:86:d1:a5:57:d7:b0:6e:b9:d2:d6:08: db:da:1e:05:a2:2c:b5:e4:9b:5f:8c:5b:80:24:02: 63:29:24:4b:0a:82:01:63:21:4e:1b:cd:09:f9:0f: ff:d5:63:09:af:5c:de:81:b5:6b:3a:63:83:74:74: e9:6c:de:0f:80:24:85:6a:4f:7d:79:0b:0d:51:87: 8e:ce:a6:48:22:98:91:2e:c2:34:f9:3a:3e:27:21: 72:61:5e:83:06:3f:a5:a6:1c:3a:ff:d0:5d:c1:3b: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:6C:BC:84:89:2D:69:E6:30:D6:14:4F:B7:E1:83:CE:65:F0:83:13 X509v3 Authority Key Identifier: keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:7e:0d:5e:d2:96:93:ef:84:93:e4:f8:3e:71:31:7e:67:d4: a2:d5:43:f1:06:5b:48:d5:0d:08:a7:bf:af:8f:d0:f8:db:32: 21:5b:6b:cd:b4:3e:96:76:8f:40:9f:e4:5d:de:13:87:35:32: ba:cf:5d:d0:49:05:09:ad:df:ff:f7:9d:18:bb:28:17:f6:e5: 66:2a:4b:e6:ad:c2:6b:20:9b:2f:56:c6:de:7c:85:4d:ed:44: e0:ae:d8:a6:e1:30:6b:0e:0f:05:ae:73:86:4f:01:c1:b6:51: f9:50:47:57:a5:63:b2:72:9e:d2:66:94:03:06:22:db:9b:32: 3f:c3:aa:7b:88:20:75:b9:2a:8d:4e:33:23:cf:92:c2:82:8f: e0:5a:75:1d:80:36:35:cb:e2:17:87:6b:51:36:05:3b:3e:bb: dc:8d:c2:cf:df:e8:17:19:7b:04:1b:97:d5:52:62:f1:0c:33: c8:7d:cd:87:96:06:fe:ce:6f:1f:a1:87:c1:10:93:2b:df:c8: 2f:92:b9:7a:9c:27:19:8f:5d:ab:42:30:68:91:f6:99:29:67: 2c:92:3e:e1:af:59:c9:3d:e7:47:88:0b:3d:ad:be:e2:93:e6: 35:e3:01:bd:bf:d2:16:62:9c:20:f1:15:ad:8e:cd:e8:77:b6: ed:50:51:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLn91mOVz+/5KX1phbP7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWEyOTliMWU1ZmExZDUxMjZkZmFkNzVkZmQ0YTliYWU0 NDNhMTcwHhcNMjUxMjA2MDEwMjI3WhcNMjUxMjA3MDEwMjI3WjAzMTEwLwYDVQQD Eyg0MTZjYmM4NDg5MmQ2OWU2MzBkNjE0NGZiN2UxODNjZTY1ZjA4MzEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd83v/LNWhRwhzWkAH0HIa3RWVMO y3uf8bb9tufZl7U3ACeprxDyl31iaOesQQmlYzv+vZI3npTMiYCFwkk83N2VGJEb fbzjY9s6qOQ7YeEy388YwmjS5TheNt6y8n2mHonKqyCDGCeHc4ll+PJ05K8olXOg lAXfgneStLsqxDySVMce4PpFUR2HKVAZ6NhLE+QiNBHOFzIbhtGlV9ewbrnS1gjb 2h4Foiy15JtfjFuAJAJjKSRLCoIBYyFOG80J+Q//1WMJr1zegbVrOmODdHTpbN4P gCSFak99eQsNUYeOzqZIIpiRLsI0+To+JyFyYV6DBj+lphw6/9BdwTseVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEFsvISJLWnmMNYUT7fhg85l8IMTMB8GA1UdIwQY MBaAFMCqKZseX6HVEm361139SpuuRDoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzct NzA0YTk5NWUzZGI2LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzctNzA0YTk5NWUzZGI2 LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABn4NXtKW k++Ek+T4PnExfmfUotVD8QZbSNUNCKe/r4/Q+NsyIVtrzbQ+lnaPQJ/kXd4ThzUy us9d0EkFCa3f//edGLsoF/blZipL5q3CayCbL1bG3nyFTe1E4K7YpuEwaw4PBa5z hk8BwbZR+VBHV6VjsnKe0maUAwYi25syP8Oqe4ggdbkqjU4zI8+SwoKP4Fp1HYA2 NcviF4drUTYFOz673I3Cz9/oFxl7BBuX1VJi8QwzyH3Nh5YG/s5vH6GHwRCTK9/I L5K5epwnGY9dq0IwaJH2mSlnLJI+4a9ZyT3nR4gLPa2+4pPmNeMBvb/SFmKcIPEV rY7N6He27VBReQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:15 2025 by rpki-client