This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft File: WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json) Hash identifier: q224VQwMD6YYPRU30Ih2OxLqjJqFHlugZuFJcqSU55s= Subject key identifier: 70:A5:94:EE:BC:91:B8:06:A1:17:A7:61:64:3E:1D:AE:02:77:8C:EF Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66 Certificate issuer: /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66 Certificate serial: 019AF20999D4CCDADEFF04493A7A8471B175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft Manifest number: 0FF0 Signing time: Sat 06 Dec 2025 05:01:46 +0000 Manifest this update: Sat 06 Dec 2025 05:01:46 +0000 Manifest next update: Sun 07 Dec 2025 05:01:46 +0000 Files and hashes: 1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: I8kGawwGjmXoeSD3O1wgg6lvHc8KYAF8IJ/9f93VDpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:99:d4:cc:da:de:ff:04:49:3a:7a:84:71:b1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66 Validity Not Before: Dec 6 05:01:46 2025 GMT Not After : Dec 7 05:01:46 2025 GMT Subject: CN=70a594eebc91b806a117a761643e1dae02778cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:7a:7e:46:85:d1:c4:1d:c3:6e:28:45:80: 27:67:99:a2:f1:28:93:69:b3:f4:6a:df:9e:58:54: c0:ad:4b:b1:c3:05:0d:71:76:36:88:02:37:b8:67: 98:e8:ae:b9:ec:e3:9b:c2:f5:87:4f:68:23:71:2f: 63:18:8e:3a:cd:30:00:8c:12:bd:3c:9f:5e:6e:b1: c3:23:6c:7d:0a:b7:b1:89:5e:6c:21:07:03:0a:18: 63:37:be:eb:a0:7a:11:dd:cc:f3:39:4c:21:f0:b5: 05:9b:50:fe:37:0a:64:80:3b:57:ad:8b:91:8a:0a: 22:a2:69:3e:69:c0:97:0d:31:83:d2:d5:a6:c9:39: 93:4e:49:4e:4c:5e:26:8f:11:3e:9f:21:bd:4a:97: 33:91:27:94:b7:85:78:98:05:90:76:9a:17:e4:31: 3d:6f:4a:be:3e:b7:e6:d7:78:1c:32:80:a7:3e:90: 5f:c1:69:d3:2c:9a:db:e2:5f:fb:54:91:aa:00:cf: b5:49:91:1b:0e:f2:ad:da:b5:ac:ba:bc:f5:a1:5f: 97:7a:46:16:c9:1f:34:b9:44:05:95:b3:d9:ee:fa: 68:06:2d:e7:9f:77:e1:6a:b4:81:c9:dd:13:60:59: 45:05:be:97:47:a8:2e:f8:78:06:29:f2:b0:86:1e: df:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A5:94:EE:BC:91:B8:06:A1:17:A7:61:64:3E:1D:AE:02:77:8C:EF X509v3 Authority Key Identifier: keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:5b:f3:8b:49:3f:72:f8:b8:51:92:32:0c:bb:e5:69:05:8b: c8:67:9e:a9:99:b4:41:83:54:16:0f:3d:97:61:f6:62:c8:8a: d9:88:be:2e:6d:bd:7e:2c:b1:3e:14:72:ba:38:e2:e2:66:8c: e8:42:9c:16:ef:9e:c3:59:de:89:4b:23:8b:d9:8b:5b:ff:07: cf:bb:9e:b6:2c:2d:4f:10:d9:7b:89:a1:31:96:f8:d6:ab:e2: 77:67:d9:e9:09:47:d2:bc:69:08:93:ad:f9:c6:73:2e:5e:81: 6b:78:db:fa:55:1f:16:a2:14:ff:e2:77:0f:f0:c8:b1:09:a1: 5f:ae:1b:0a:0f:42:69:7d:44:04:82:04:a8:e3:a8:32:20:48: d8:45:4c:2f:bf:4a:5e:f2:b3:cc:96:16:2e:6f:1a:7f:e7:ed: 3a:1c:3c:f9:0f:49:7c:34:68:c5:fb:c3:ba:d8:b8:6e:c1:10: cf:fb:5f:53:11:4c:a6:8e:98:5b:5c:33:a9:6b:9b:96:1d:b1: 21:41:1d:85:33:04:d4:8a:16:fd:8c:b6:21:7e:44:9f:d5:34: 19:2e:bb:a6:68:02:eb:f7:fe:35:6c:81:27:81:11:65:f0:3c: c1:0e:98:78:a6:22:fd:f2:b6:2f:6b:6d:bf:23:d9:5c:10:40: c8:f5:a1:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZnUzNre/wRJOnqEcbF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MTgxZWNjY2ZhM2E3ODEwYmFlZTBmMDViZjNhMDdiYjhm NzhkNjYwHhcNMjUxMjA2MDUwMTQ2WhcNMjUxMjA3MDUwMTQ2WjAzMTEwLwYDVQQD Eyg3MGE1OTRlZWJjOTFiODA2YTExN2E3NjE2NDNlMWRhZTAyNzc4Y2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwE96fkaF0cQdw24oRYAnZ5mi8SiT abP0at+eWFTArUuxwwUNcXY2iAI3uGeY6K657OObwvWHT2gjcS9jGI46zTAAjBK9 PJ9ebrHDI2x9CrexiV5sIQcDChhjN77roHoR3czzOUwh8LUFm1D+NwpkgDtXrYuR igoiomk+acCXDTGD0tWmyTmTTklOTF4mjxE+nyG9SpczkSeUt4V4mAWQdpoX5DE9 b0q+Prfm13gcMoCnPpBfwWnTLJrb4l/7VJGqAM+1SZEbDvKt2rWsurz1oV+XekYW yR80uUQFlbPZ7vpoBi3nn3fharSByd0TYFlFBb6XR6gu+HgGKfKwhh7fWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCllO68kbgGoRenYWQ+Ha4Cd4zvMB8GA1UdIwQY MBaAFFkYHszPo6eBC67g8FvzoHu4941mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84MzQ4NzUtYWFmYi00NWI0LWFiNTgt NTE5MzY4Yjc3YzVkLzEvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS84MzQ4NzUtYWFmYi00NWI0LWFiNTgtNTE5MzY4Yjc3YzVk LzEvV1JnZXpNLWpwNEVMcnVEd1dfT2dlN2ozaldZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATlvzi0k/ cvi4UZIyDLvlaQWLyGeeqZm0QYNUFg89l2H2YsiK2Yi+Lm29fiyxPhRyujji4maM 6EKcFu+ew1neiUsji9mLW/8Hz7uetiwtTxDZe4mhMZb41qvid2fZ6QlH0rxpCJOt +cZzLl6Ba3jb+lUfFqIU/+J3D/DIsQmhX64bCg9CaX1EBIIEqOOoMiBI2EVML79K XvKzzJYWLm8af+ftOhw8+Q9JfDRoxfvDuti4bsEQz/tfUxFMpo6YW1wzqWublh2x IUEdhTME1IoW/Yy2IX5En9U0GS67pmgC6/f+NWyBJ4ERZfA8wQ6YeKYi/fK2L2tt vyPZXBBAyPWh/w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:04:47 2025 by rpki-client