This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft File: _WjZ9SvHlS3fCn34GhHuFD8zJwo.mft (raw, json) Hash identifier: SsUJzAD0nC55dhsbjFIykYziH8beBYYuFheBFJW3KG4= Subject key identifier: 49:41:E8:02:81:1E:21:C4:A2:C7:95:3A:05:C7:8E:6B:DF:2C:3F:11 Authority key identifier: FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A Certificate issuer: /CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a Certificate serial: 019AF276886BC786CFFBE04C5BC103A67421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft Manifest number: 0D8E Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: _WjZ9SvHlS3fCn34GhHuFD8zJwo.crl (hash: n8QHiX28ylAoXLy3UuF0qp7b4z4HyTn792/fjE62934=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:88:6b:c7:86:cf:fb:e0:4c:5b:c1:03:a6:74:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd68d9f52bc7952ddf0a7df81a11ee143f33270a Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=4941e802811e21c4a2c7953a05c78e6bdf2c3f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b8:3c:67:67:52:f2:b3:d4:d7:e4:83:9d:f7: ff:b7:d7:a6:91:7c:d4:6b:fa:b9:7e:f5:52:fc:23: f9:df:a2:73:25:0b:b6:d5:e5:67:35:d4:5a:b6:ec: b6:ac:87:fc:d0:40:a9:db:b7:05:7e:77:97:5c:9d: 94:91:e7:50:e7:29:1b:36:38:a7:98:8d:d3:5f:0d: c4:a9:0e:b5:14:db:f1:42:20:a9:60:1d:50:2f:e9: dd:6e:9a:43:87:b7:5c:d8:63:fa:ae:3c:c5:4e:ec: 0f:a5:cd:9c:80:54:78:f3:80:18:ff:9d:68:09:ee: be:4c:4b:11:fd:b8:6b:47:cc:3a:ae:cc:53:58:9a: 49:cc:71:86:a0:ba:c2:e3:1e:36:29:32:66:5d:7a: 63:04:ac:6d:37:d4:7a:80:b3:63:88:b1:62:75:b0: a1:c5:76:b1:f6:a4:a0:b7:2e:63:bf:cd:ba:52:e8: f1:35:25:2d:0b:ce:23:2b:98:e1:9e:02:b8:c3:46: ab:8f:98:ac:29:44:76:2e:fd:b2:48:a4:ba:ae:48: aa:7e:39:54:bc:b5:a2:6f:48:6b:08:d6:e4:e6:93: 41:81:d6:b8:50:4a:ef:2c:6b:cd:3d:69:2b:a2:04: 23:0d:92:ea:ff:b5:e4:07:47:84:82:a4:ba:0d:35: 94:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:41:E8:02:81:1E:21:C4:A2:C7:95:3A:05:C7:8E:6B:DF:2C:3F:11 X509v3 Authority Key Identifier: keyid:FD:68:D9:F5:2B:C7:95:2D:DF:0A:7D:F8:1A:11:EE:14:3F:33:27:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WjZ9SvHlS3fCn34GhHuFD8zJwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/e2b709-b843-4205-ba31-d5045c501707/1/_WjZ9SvHlS3fCn34GhHuFD8zJwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:cd:75:ce:cb:2e:11:27:08:20:89:de:f3:f1:52:85:c5:1c: e7:fd:86:16:d4:50:b5:d6:86:31:03:80:f3:83:b3:c4:cd:33: 72:7c:20:fd:8c:0d:0f:47:a4:62:51:86:78:5c:c3:76:3b:cc: 10:b1:37:2c:50:da:8f:22:bd:a4:66:3f:49:ad:e5:bc:65:e8: 5b:26:01:38:1a:8b:c7:cf:45:35:50:b5:96:f7:d8:63:2a:6d: 36:1a:6f:cf:87:0f:50:13:a6:76:61:19:9d:ab:40:ea:95:0e: 3a:a9:20:88:73:a8:30:d0:f4:87:9c:d9:80:03:2d:c6:04:95: 20:ae:00:a0:85:7b:f0:9d:ea:98:3e:08:64:0b:f8:cd:cf:c1: 54:e9:74:2c:e1:d3:62:b7:95:cf:d0:cf:7f:d6:8a:d0:9b:1a: 75:ac:ac:98:b6:53:b4:71:99:39:e6:99:0a:b3:a6:92:e1:dd: 9d:79:b3:8f:d8:a1:de:b0:ea:07:fd:2e:9a:6f:58:fa:00:1a: 9d:03:0f:a1:7e:32:4f:af:1c:14:cc:f8:ae:f7:85:bd:bd:b5: b4:2d:eb:4a:5d:a2:e8:b5:92:48:c6:5d:7d:d7:c7:ff:bf:cf: 88:4d:11:9d:03:fd:ba:71:78:c6:e5:fd:48:9a:9f:96:14:64: a1:7a:c3:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydohrx4bP++BMW8EDpnQhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkNjhkOWY1MmJjNzk1MmRkZjBhN2RmODFhMTFlZTE0M2Yz MzI3MGEwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD Eyg0OTQxZTgwMjgxMWUyMWM0YTJjNzk1M2EwNWM3OGU2YmRmMmMzZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07g8Z2dS8rPU1+SDnff/t9emkXzU a/q5fvVS/CP536JzJQu21eVnNdRatuy2rIf80ECp27cFfneXXJ2UkedQ5ykbNjin mI3TXw3EqQ61FNvxQiCpYB1QL+ndbppDh7dc2GP6rjzFTuwPpc2cgFR484AY/51o Ce6+TEsR/bhrR8w6rsxTWJpJzHGGoLrC4x42KTJmXXpjBKxtN9R6gLNjiLFidbCh xXax9qSgty5jv826UujxNSUtC84jK5jhngK4w0arj5isKUR2Lv2ySKS6rkiqfjlU vLWib0hrCNbk5pNBgda4UErvLGvNPWkrogQjDZLq/7XkB0eEgqS6DTWUTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElB6AKBHiHEoseVOgXHjmvfLD8RMB8GA1UdIwQY MBaAFP1o2fUrx5Ut3wp9+BoR7hQ/MycKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEt ZDUwNDVjNTAxNzA3LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lMmI3MDktYjg0My00MjA1LWJhMzEtZDUwNDVjNTAxNzA3 LzEvX1dqWjlTdkhsUzNmQ24zNEdoSHVGRDh6SndvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZs11zssu EScIIIne8/FShcUc5/2GFtRQtdaGMQOA84OzxM0zcnwg/YwND0ekYlGGeFzDdjvM ELE3LFDajyK9pGY/Sa3lvGXoWyYBOBqLx89FNVC1lvfYYyptNhpvz4cPUBOmdmEZ natA6pUOOqkgiHOoMND0h5zZgAMtxgSVIK4AoIV78J3qmD4IZAv4zc/BVOl0LOHT YreVz9DPf9aK0JsadaysmLZTtHGZOeaZCrOmkuHdnXmzj9ih3rDqB/0umm9Y+gAa nQMPoX4yT68cFMz4rveFvb21tC3rSl2i6LWSSMZdfdfH/7/PiE0RnQP9unF4xuX9 SJqflhRkoXrDsA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:52:39 2025 by rpki-client