This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft File: Wx2S_lASvWW-DDKw7jkXGciClCw.mft (raw, json) Hash identifier: FmJZrJAZu8aPOk11PHXt/vQEpEGRQdA78wmtdaAwylg= Subject key identifier: B2:FF:8D:10:85:FB:3F:E4:42:ED:A7:F1:91:0D:F4:F3:ED:54:75:1F Authority key identifier: 5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C Certificate issuer: /CN=5b1d92fe5012bd65be0c32b0ee391719c882942c Certificate serial: 019AF31CA6FD8A0BE7D915BFE1CC9FF5117B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft Manifest number: 0BD8 Signing time: Sat 06 Dec 2025 10:02:12 +0000 Manifest this update: Sat 06 Dec 2025 10:02:12 +0000 Manifest next update: Sun 07 Dec 2025 10:02:12 +0000 Files and hashes: 1: Wx2S_lASvWW-DDKw7jkXGciClCw.crl (hash: sSJCHSrr2syEwKHiaiiXH/lo/9wlqMEBF9awPpLHIks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a6:fd:8a:0b:e7:d9:15:bf:e1:cc:9f:f5:11:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b1d92fe5012bd65be0c32b0ee391719c882942c Validity Not Before: Dec 6 10:02:12 2025 GMT Not After : Dec 7 10:02:12 2025 GMT Subject: CN=b2ff8d1085fb3fe442eda7f1910df4f3ed54751f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:b9:11:c7:57:6d:ab:2d:77:6d:d0:31:a2: ed:6f:c0:74:d0:f8:07:00:a9:f3:e9:aa:ed:d3:d5: 58:3a:65:84:69:74:69:3d:a7:0b:27:1f:e4:e2:e3: 7a:ba:90:78:09:80:0f:ac:6f:5d:58:01:54:a0:e3: eb:4f:54:e0:dd:f6:48:a3:f3:cc:2b:1d:11:2d:c5: ad:bc:50:b7:be:4f:77:ad:df:41:ed:bc:cc:1a:c5: 29:a6:9a:00:80:9c:95:a5:6b:6a:39:2e:fa:5b:5a: 3e:41:ed:e0:7d:7a:90:47:e7:6f:39:61:05:e4:72: 3e:f4:2e:6c:a5:7d:2e:d1:44:fd:f8:46:ed:2e:2d: 09:fa:79:53:ab:5a:83:7d:77:41:a4:4f:66:51:73: e3:18:bc:83:aa:a0:49:76:d8:3c:16:cf:4a:2c:22: 95:74:02:47:90:45:47:96:0f:8e:24:0c:d7:28:88: f4:22:d1:2e:e2:ed:8c:bb:51:aa:74:e9:c7:e7:32: bc:2b:99:f0:a6:fb:23:56:28:e4:80:08:7d:ff:dd: d4:cf:6f:18:85:48:54:e8:45:f2:b0:e2:4a:f2:8e: b9:9b:55:11:34:53:ea:90:56:7d:74:2a:1e:12:06: 72:61:c9:c6:a5:6b:4e:c5:9c:a5:8c:cc:9c:a6:1f: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FF:8D:10:85:FB:3F:E4:42:ED:A7:F1:91:0D:F4:F3:ED:54:75:1F X509v3 Authority Key Identifier: keyid:5B:1D:92:FE:50:12:BD:65:BE:0C:32:B0:EE:39:17:19:C8:82:94:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx2S_lASvWW-DDKw7jkXGciClCw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6597cc-8b03-49b8-a761-887015b396f1/1/Wx2S_lASvWW-DDKw7jkXGciClCw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4d:20:74:26:73:1c:3e:2b:1a:6f:74:39:df:cf:72:04:07: 1a:fd:95:3b:59:41:8a:3a:34:ea:12:87:ec:a7:9f:0c:a3:f0: d8:58:1b:c0:d8:e4:e4:da:69:71:f8:64:11:f5:39:f2:bc:ac: 87:b7:79:ce:e5:4d:ca:ac:7a:81:1d:18:96:8e:0e:61:c7:b3: e2:f7:84:ab:47:12:44:e6:b0:70:ef:b6:97:c8:33:b5:85:c5: 0f:97:ae:4e:d9:fa:5c:33:89:5c:c2:e3:91:23:c7:0c:1d:46: fa:d2:cd:0b:18:83:08:f7:32:04:47:6d:4d:e7:45:b2:ca:90: dd:f2:a4:e6:c4:1e:fe:c1:6f:05:35:c7:72:ae:fc:65:26:2b: 6e:66:95:dd:69:cd:51:92:86:84:e5:34:22:bd:4b:d7:86:be: ac:f1:f6:46:a6:15:08:bf:33:53:91:73:86:14:eb:d7:59:5a: c3:d1:1e:f8:18:d8:09:f5:f2:fe:a7:9f:3a:84:ff:d8:55:df: 6c:bf:20:62:b6:10:73:ac:6a:d3:03:f8:c9:f6:c6:87:bb:81: ef:26:14:eb:27:f0:00:20:a0:91:a6:b4:a5:c7:54:b4:10:3e: cc:14:81:76:4e:3d:1c:b6:b5:f0:90:69:91:5e:32:5d:7a:9f: 0d:e2:19:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKb9igvn2RW/4cyf9RF7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViMWQ5MmZlNTAxMmJkNjViZTBjMzJiMGVlMzkxNzE5Yzg4 Mjk0MmMwHhcNMjUxMjA2MTAwMjEyWhcNMjUxMjA3MTAwMjEyWjAzMTEwLwYDVQQD EyhiMmZmOGQxMDg1ZmIzZmU0NDJlZGE3ZjE5MTBkZjRmM2VkNTQ3NTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNy5EcdXbastd23QMaLtb8B00PgH AKnz6art09VYOmWEaXRpPacLJx/k4uN6upB4CYAPrG9dWAFUoOPrT1Tg3fZIo/PM Kx0RLcWtvFC3vk93rd9B7bzMGsUpppoAgJyVpWtqOS76W1o+Qe3gfXqQR+dvOWEF 5HI+9C5spX0u0UT9+EbtLi0J+nlTq1qDfXdBpE9mUXPjGLyDqqBJdtg8Fs9KLCKV dAJHkEVHlg+OJAzXKIj0ItEu4u2Mu1GqdOnH5zK8K5nwpvsjVijkgAh9/93Uz28Y hUhU6EXysOJK8o65m1URNFPqkFZ9dCoeEgZyYcnGpWtOxZyljMycph+wfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLL/jRCF+z/kQu2n8ZEN9PPtVHUfMB8GA1UdIwQY MBaAFFsdkv5QEr1lvgwysO45FxnIgpQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEt ODg3MDE1YjM5NmYxLzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82NTk3Y2MtOGIwMy00OWI4LWE3NjEtODg3MDE1YjM5NmYx LzEvV3gyU19sQVN2V1ctRERLdzdqa1hHY2lDbEN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoE0gdCZz HD4rGm90Od/PcgQHGv2VO1lBijo06hKH7KefDKPw2FgbwNjk5NppcfhkEfU58rys h7d5zuVNyqx6gR0Ylo4OYcez4veEq0cSROawcO+2l8gztYXFD5euTtn6XDOJXMLj kSPHDB1G+tLNCxiDCPcyBEdtTedFssqQ3fKk5sQe/sFvBTXHcq78ZSYrbmaV3WnN UZKGhOU0Ir1L14a+rPH2RqYVCL8zU5FzhhTr11law9Ee+BjYCfXy/qefOoT/2FXf bL8gYrYQc6xq0wP4yfbGh7uB7yYU6yfwACCgkaa0pcdUtBA+zBSBdk49HLa18JBp kV4yXXqfDeIZ0A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:04:06 2025 by rpki-client