This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft File: WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json) Hash identifier: HGnLjXnVvKutpzaQkxIbtXIO3gpA3X5+WQNQJwFOXcw= Subject key identifier: DE:15:36:A6:25:5C:21:4D:82:9C:4C:7A:24:53:91:A8:49:5F:D8:AB Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90 Certificate issuer: /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90 Certificate serial: 019AF19BB02FCF306F7C86EEDB770A4B3012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft Manifest number: 0ABD Signing time: Sat 06 Dec 2025 03:01:43 +0000 Manifest this update: Sat 06 Dec 2025 03:01:43 +0000 Manifest next update: Sun 07 Dec 2025 03:01:43 +0000 Files and hashes: 1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: O7fhFOX7r6DaW1QK+nq0cnm3cSbd0ZNiboOJdXnvSIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b0:2f:cf:30:6f:7c:86:ee:db:77:0a:4b:30:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90 Validity Not Before: Dec 6 03:01:43 2025 GMT Not After : Dec 7 03:01:43 2025 GMT Subject: CN=de1536a6255c214d829c4c7a245391a8495fd8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9c:ec:b3:ef:30:86:ad:b6:80:fd:30:1b:ca: df:ab:fc:19:0f:46:b9:36:c0:a2:8e:51:0b:93:f7: 17:fe:34:62:5d:f2:fc:8e:9c:27:8c:6c:04:43:14: 9a:2c:f4:8a:39:cf:67:3f:b7:51:82:43:da:ef:3d: 95:29:a0:4b:d8:80:5c:40:ed:aa:01:f2:80:7c:10: 9d:35:6b:6d:fa:f8:28:fb:7d:e8:9a:f8:71:b9:b6: 9e:eb:4e:de:dc:b4:5b:12:ed:ad:8a:24:6a:8b:f0: d1:34:e8:3e:aa:cb:61:73:6a:38:48:3f:71:1d:fb: 13:c1:64:48:fa:cd:2c:10:5b:16:b1:40:a6:06:e2: 08:29:8d:2f:39:1b:e3:50:e5:11:4a:47:6e:7c:e9: 50:4b:7e:7f:12:ea:a5:6b:83:43:ae:a1:c7:0a:7f: 44:12:d5:7e:b3:1f:cb:df:77:63:b5:c2:74:bd:1f: 83:db:f3:21:d2:eb:b2:4b:11:2e:81:0b:dd:4e:c9: aa:8a:f8:ce:15:33:9c:c8:4f:6f:04:d5:da:4f:a8: fc:1a:8c:b5:40:b2:df:4c:82:db:d5:af:4d:89:b8: d8:a0:c9:14:e7:4e:5c:ec:74:8b:29:1c:88:6e:f1: f4:f6:59:a2:53:62:48:b9:d3:51:fd:e3:45:13:c9: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:15:36:A6:25:5C:21:4D:82:9C:4C:7A:24:53:91:A8:49:5F:D8:AB X509v3 Authority Key Identifier: keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:7d:63:38:91:b5:28:5b:e6:39:ee:8e:95:69:bf:32:db:f4: cf:09:94:cf:9f:32:71:b0:46:d2:86:ae:a1:9b:09:30:93:ed: 90:1f:0e:06:b3:69:59:35:66:65:57:4a:a5:64:48:c5:89:4a: 8e:c5:6e:5c:e0:07:a7:75:21:83:15:e1:d6:c4:39:cd:96:8e: 18:bf:be:2c:a2:0e:34:00:b0:f0:03:3b:7d:f8:f0:de:0f:8a: bb:e6:80:63:53:42:e2:c9:e2:ca:af:16:66:6d:63:62:62:86: fc:a8:72:6d:be:36:40:e1:a6:c9:04:c5:4f:0d:c1:ec:b9:58: 2c:dc:8f:bc:7f:07:ce:8e:d2:d9:5f:fc:69:f0:f6:63:f4:55: 6e:0a:ce:78:a2:ee:b7:71:53:e4:c8:1d:a1:f8:6a:09:be:3b: 52:aa:48:b9:20:9f:ff:e2:d4:cd:b2:1b:8d:0d:85:bf:68:df: 0d:94:62:8c:ff:17:d2:e4:4d:b1:1b:54:c4:4c:03:1b:8d:05: 79:ec:c4:15:c8:48:fd:1b:b9:2a:9b:3c:70:8f:d5:5f:f6:e2: 54:ad:f0:1c:fe:45:27:b5:63:01:42:49:3f:03:6b:65:6a:eb: bb:7f:fb:c2:85:ad:f9:39:31:e9:02:3f:97:9e:e5:a8:c9:8c: c8:79:4f:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7AvzzBvfIbu23cKSzASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMGFjMzhkZWE2YTcwNGFkYmFiYTkzODFjMWRjMDIzNTZk M2FhOTAwHhcNMjUxMjA2MDMwMTQzWhcNMjUxMjA3MDMwMTQzWjAzMTEwLwYDVQQD EyhkZTE1MzZhNjI1NWMyMTRkODI5YzRjN2EyNDUzOTFhODQ5NWZkOGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZzss+8whq22gP0wG8rfq/wZD0a5 NsCijlELk/cX/jRiXfL8jpwnjGwEQxSaLPSKOc9nP7dRgkPa7z2VKaBL2IBcQO2q AfKAfBCdNWtt+vgo+33omvhxubae607e3LRbEu2tiiRqi/DRNOg+qsthc2o4SD9x HfsTwWRI+s0sEFsWsUCmBuIIKY0vORvjUOURSkdufOlQS35/Euqla4NDrqHHCn9E EtV+sx/L33djtcJ0vR+D2/Mh0uuySxEugQvdTsmqivjOFTOcyE9vBNXaT6j8Goy1 QLLfTILb1a9NibjYoMkU505c7HSLKRyIbvH09lmiU2JIudNR/eNFE8mHWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4VNqYlXCFNgpxMeiRTkahJX9irMB8GA1UdIwQY MBaAFFsKw43qanBK26upOBwdwCNW06qQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEt OTQ4ZDg2OTEzNTM4LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy83MjJiZDYtYmNlZi00MzRmLWIwMTEtOTQ4ZDg2OTEzNTM4 LzEvV3dyRGplcHFjRXJicTZrNEhCM0FJMWJUcXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaH1jOJG1 KFvmOe6OlWm/Mtv0zwmUz58ycbBG0oauoZsJMJPtkB8OBrNpWTVmZVdKpWRIxYlK jsVuXOAHp3UhgxXh1sQ5zZaOGL++LKIONACw8AM7ffjw3g+Ku+aAY1NC4sniyq8W Zm1jYmKG/Khybb42QOGmyQTFTw3B7LlYLNyPvH8Hzo7S2V/8afD2Y/RVbgrOeKLu t3FT5MgdofhqCb47UqpIuSCf/+LUzbIbjQ2Fv2jfDZRijP8X0uRNsRtUxEwDG40F eezEFchI/Ru5Kps8cI/VX/biVK3wHP5FJ7VjAUJJPwNrZWrru3/7woWt+Tkx6QI/ l57lqMmMyHlPNg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:22 2025 by rpki-client