This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft File: wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json) Hash identifier: 4hwmtwLrlIHbEG1rlLbB12BZxGwaTeGmBHUZN7cX2ec= Subject key identifier: 17:12:6B:59:EB:9D:88:66:00:A9:CA:CD:1E:17:C1:26:D0:C2:AB:66 Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED Certificate issuer: /CN=c2c56eb43f220eb5141ed861530aff2521b21eed Certificate serial: 019AF276D3B55DFCB5B7571B8C9D3328AA22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: fGUAp+wcJHDETY9FbfS3xxPyh0N19opJ7UqGsDul6cU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d3:b5:5d:fc:b5:b7:57:1b:8c:9d:33:28:aa:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=17126b59eb9d886600a9cacd1e17c126d0c2ab66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:fd:68:28:b6:76:de:c1:a3:36:3d:3e:cf: ba:b8:9f:dd:d8:cc:89:0b:ac:72:5a:06:79:39:14: 8a:2c:b6:78:28:01:24:bc:54:d5:fe:f6:e3:2a:ab: 7d:69:34:c7:f5:72:f9:2c:c4:3f:e1:95:55:0e:80: 0a:fe:01:54:9d:cc:ea:18:27:a0:e6:d0:7e:3f:7c: 2e:6d:e7:56:e7:a6:b4:37:7d:1c:44:d5:91:98:cc: c4:cf:41:20:26:41:ee:62:63:c3:63:ea:22:e8:6c: e9:01:93:32:30:a1:7e:5f:06:bd:79:b6:cb:81:6a: 0b:1f:0c:a7:ba:03:2d:54:77:50:83:ba:4a:12:7a: 08:3c:ff:a3:e1:f5:94:df:bc:86:0d:5b:35:91:88: ba:61:98:9d:a3:ac:20:25:16:4d:e3:c9:d8:d6:c9: 8d:93:d7:cb:6d:73:ca:31:9d:55:57:06:95:37:34: 7a:63:65:6d:59:d9:5f:da:76:84:6f:a6:f0:83:d5: 80:86:cb:0a:dc:60:24:9a:91:d9:47:80:7b:8c:35: 44:31:23:db:68:c4:7b:89:8d:a4:af:b5:e2:f1:89: b2:87:42:88:b9:49:6d:1d:69:a0:1b:e6:62:f6:69: c3:fd:4b:e8:84:cb:27:8b:cc:46:47:53:27:46:09: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:12:6B:59:EB:9D:88:66:00:A9:CA:CD:1E:17:C1:26:D0:C2:AB:66 X509v3 Authority Key Identifier: keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:60:1e:b3:d1:ac:bf:ff:79:4f:ff:d1:b4:1f:b2:41:ed:01: 9c:13:63:dc:ea:23:58:87:3a:d1:5b:e7:cc:9f:41:b0:51:f4: ae:2a:b0:c1:41:08:f2:2f:2c:89:c1:7c:fb:41:1d:c6:a9:78: 3e:02:45:3f:74:36:63:bd:50:02:bd:42:ad:49:d2:5e:d2:92: 6f:95:af:e1:ab:a8:2c:0d:41:c2:18:dc:0c:3d:34:3e:f6:18: a5:53:ca:32:1d:13:34:08:2e:9a:9b:1b:c3:72:38:9a:a7:d8: d6:b7:73:ac:af:39:f7:9f:d7:05:bd:cb:b7:62:6d:49:e7:68: 9a:58:30:39:c8:c3:78:13:74:76:bc:00:94:97:d8:20:bf:2a: d6:a5:d3:cc:d7:e8:b6:59:5c:8e:77:06:cd:ab:7d:6b:c4:26: 71:0e:3e:d9:26:b3:81:ac:d3:7f:0d:b4:ed:97:e5:e7:3f:95: 54:37:6f:5f:50:46:80:03:7d:c3:df:d2:97:8e:1b:72:32:bc: 4e:06:0f:ff:1d:e1:ca:06:dc:a6:00:b9:75:a7:4a:0d:b6:1b: a4:ae:bd:e4:42:95:5b:e9:99:df:d7:60:a7:e1:e7:e5:83:ee: 85:fc:a2:10:b6:29:d4:61:2d:73:c9:e1:05:3a:88:c1:89:5a: e4:65:a9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtO1Xfy1t1cbjJ0zKKoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzU2ZWI0M2YyMjBlYjUxNDFlZDg2MTUzMGFmZjI1MjFi MjFlZWQwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD EygxNzEyNmI1OWViOWQ4ODY2MDBhOWNhY2QxZTE3YzEyNmQwYzJhYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBP9aCi2dt7BozY9Ps+6uJ/d2MyJ C6xyWgZ5ORSKLLZ4KAEkvFTV/vbjKqt9aTTH9XL5LMQ/4ZVVDoAK/gFUnczqGCeg 5tB+P3wubedW56a0N30cRNWRmMzEz0EgJkHuYmPDY+oi6GzpAZMyMKF+Xwa9ebbL gWoLHwynugMtVHdQg7pKEnoIPP+j4fWU37yGDVs1kYi6YZido6wgJRZN48nY1smN k9fLbXPKMZ1VVwaVNzR6Y2VtWdlf2naEb6bwg9WAhssK3GAkmpHZR4B7jDVEMSPb aMR7iY2kr7Xi8Ymyh0KIuUltHWmgG+Zi9mnD/UvohMsni8xGR1MnRgkwzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcSa1nrnYhmAKnKzR4XwSbQwqtmMB8GA1UdIwQY MBaAFMLFbrQ/Ig61FB7YYVMK/yUhsh7tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEt MDk4MmJiZDMxZGQ0LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC83OTA1YWEtMzU0Ni00YzJkLTkwMzEtMDk4MmJiZDMxZGQ0 LzEvd3NWdXREOGlEclVVSHRoaFV3cl9KU0d5SHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2Aes9Gs v/95T//RtB+yQe0BnBNj3OojWIc60VvnzJ9BsFH0riqwwUEI8i8sicF8+0Edxql4 PgJFP3Q2Y71QAr1CrUnSXtKSb5Wv4auoLA1BwhjcDD00PvYYpVPKMh0TNAgumpsb w3I4mqfY1rdzrK8595/XBb3Lt2JtSedomlgwOcjDeBN0drwAlJfYIL8q1qXTzNfo tllcjncGzat9a8QmcQ4+2SazgazTfw207Zfl5z+VVDdvX1BGgAN9w9/Sl44bcjK8 TgYP/x3hygbcpgC5dadKDbYbpK695EKVW+mZ39dgp+Hn5YPuhfyiELYp1GEtc8nh BTqIwYla5GWprA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:28 2025 by rpki-client