This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft File: Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json) Hash identifier: mIGkUgpVjHp857TCErm6F0K2+M3s/vjFw+lFEsyUypQ= Subject key identifier: DE:B0:EF:24:A2:09:39:47:82:27:9D:5D:53:B1:A2:FA:B9:89:5A:2C Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A Certificate issuer: /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a Certificate serial: 019AF12D013D85B59BFF005BD31E0E921656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft Manifest number: 11E6 Signing time: Sat 06 Dec 2025 01:00:49 +0000 Manifest this update: Sat 06 Dec 2025 01:00:49 +0000 Manifest next update: Sun 07 Dec 2025 01:00:49 +0000 Files and hashes: 1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: 6TnLkbVaQuxq4xgFEDJ6dpOOyDyulWKsJacWtIVgcEQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:01:3d:85:b5:9b:ff:00:5b:d3:1e:0e:92:16:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a Validity Not Before: Dec 6 01:00:49 2025 GMT Not After : Dec 7 01:00:49 2025 GMT Subject: CN=deb0ef24a209394782279d5d53b1a2fab9895a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6b:01:d6:f7:ea:e9:45:c3:9d:26:c3:e8:00: b7:50:21:1f:5a:04:9e:d0:c0:35:25:c0:51:9c:31: d1:48:a3:5b:9c:1d:af:d0:72:f4:27:d5:18:4f:96: 0a:88:ea:51:69:c3:b6:ff:b9:e9:b1:f3:cd:5a:7c: 0c:0d:6d:e2:82:f8:fa:07:8f:d6:21:b8:ae:64:f9: 65:b7:59:15:64:dd:4b:ea:65:f7:3f:c0:16:e7:ae: b8:ea:a7:d1:cf:80:45:14:f2:33:ed:f7:1f:60:ee: ce:19:f4:e2:01:c2:2e:68:61:8b:c0:b2:39:d3:bb: 26:01:77:c7:e2:6e:49:4d:9a:c5:81:f0:e0:e5:4e: b8:cd:25:3f:4f:11:5f:ff:29:23:64:96:1b:e6:1b: 43:7e:d8:37:39:e3:5c:54:6a:89:99:18:e5:07:6a: 6f:74:5a:04:20:0b:44:e8:fe:71:1b:53:e3:81:c0: 4e:29:b8:0c:eb:46:19:4f:c0:8d:f2:52:6f:a9:73: 6e:d7:47:30:d8:b2:91:b7:46:bf:a8:4f:5d:7b:39: 01:96:36:40:83:d2:f8:f2:dc:3a:70:c7:2e:39:0b: 61:4d:ac:7b:36:88:16:c3:90:a7:9e:0a:6d:62:a9: 71:14:3f:82:23:fd:54:a5:b5:ad:8f:d3:36:a7:78: 46:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B0:EF:24:A2:09:39:47:82:27:9D:5D:53:B1:A2:FA:B9:89:5A:2C X509v3 Authority Key Identifier: keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:97:4c:ee:45:b6:f9:d2:3c:ae:cb:59:0a:33:a5:9d:45:61: 77:64:36:02:45:82:ff:07:28:87:1f:90:04:9b:ab:14:53:9e: ab:67:f0:cf:f5:c8:60:00:c5:8a:8e:55:a9:a9:43:38:86:2f: cc:7b:51:7a:d1:42:3c:b5:69:4e:c6:9c:5e:a4:44:dc:f8:20: 5a:96:eb:c5:d0:8e:39:0e:14:bc:1a:99:a5:a0:c7:7c:2c:a5: ff:65:7d:2f:54:99:52:6f:68:43:d2:07:21:69:9b:ee:e4:15: 04:d0:d6:d2:e7:3d:8e:55:a9:b7:64:94:32:da:7a:02:88:f4: 1c:b9:ea:ae:59:b7:7e:7c:86:5e:f6:f9:86:51:43:da:b3:ff: b4:65:83:b0:a9:f9:bf:02:66:42:51:34:77:09:8e:58:9b:f4: 03:b4:b0:de:53:a3:c0:23:c2:92:11:ae:66:94:ce:1a:ca:6e: 60:5b:dd:bf:49:78:b1:ae:1a:f3:b8:7c:ab:64:42:97:28:c7: 49:18:42:36:b6:9b:21:7e:e7:20:ae:70:30:5b:52:b9:df:26: a9:f5:a6:da:ac:45:e7:bb:ed:5b:bd:60:d9:93:71:d2:b9:ef: 2d:79:c0:c3:85:c0:b3:28:09:31:97:63:55:f9:2e:f2:96:b9: 63:e4:77:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQE9hbWb/wBb0x4OkhZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWZhNTJmMWU5ZjM1MTBjMmNkMmFlMjQ2MTU1MmExYWQy ZTNkM2EwHhcNMjUxMjA2MDEwMDQ5WhcNMjUxMjA3MDEwMDQ5WjAzMTEwLwYDVQQD EyhkZWIwZWYyNGEyMDkzOTQ3ODIyNzlkNWQ1M2IxYTJmYWI5ODk1YTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWsB1vfq6UXDnSbD6AC3UCEfWgSe 0MA1JcBRnDHRSKNbnB2v0HL0J9UYT5YKiOpRacO2/7npsfPNWnwMDW3igvj6B4/W IbiuZPllt1kVZN1L6mX3P8AW56646qfRz4BFFPIz7fcfYO7OGfTiAcIuaGGLwLI5 07smAXfH4m5JTZrFgfDg5U64zSU/TxFf/ykjZJYb5htDftg3OeNcVGqJmRjlB2pv dFoEIAtE6P5xG1PjgcBOKbgM60YZT8CN8lJvqXNu10cw2LKRt0a/qE9dezkBljZA g9L48tw6cMcuOQthTax7NogWw5CnngptYqlxFD+CI/1UpbWtj9M2p3hGAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6w7ySiCTlHgiedXVOxovq5iVosMB8GA1UdIwQY MBaAFFsfpS8enzUQws0q4kYVUqGtLj06MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3gtbEx4NmZOUkRDelNyaVJoVlNvYTB1UFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNmNhY2ItOWU5MS00OTExLTg0NTYt NWRlZDc2NmE1NTA2LzEvV3gtbEx4NmZOUkRDelNyaVJoVlNvYTB1UFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNmNhY2ItOWU5MS00OTExLTg0NTYtNWRlZDc2NmE1NTA2 LzEvV3gtbEx4NmZOUkRDelNyaVJoVlNvYTB1UFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJdM7kW2 +dI8rstZCjOlnUVhd2Q2AkWC/wcohx+QBJurFFOeq2fwz/XIYADFio5VqalDOIYv zHtRetFCPLVpTsacXqRE3PggWpbrxdCOOQ4UvBqZpaDHfCyl/2V9L1SZUm9oQ9IH IWmb7uQVBNDW0uc9jlWpt2SUMtp6Aoj0HLnqrlm3fnyGXvb5hlFD2rP/tGWDsKn5 vwJmQlE0dwmOWJv0A7Sw3lOjwCPCkhGuZpTOGspuYFvdv0l4sa4a87h8q2RClyjH SRhCNrabIX7nIK5wMFtSud8mqfWm2qxF57vtW71g2ZNx0rnvLXnAw4XAsygJMZdj Vfku8pa5Y+R3DQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:51 2025 by rpki-client