This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json) Hash identifier: qZNIogj+frqIYNUrJ/A1VzZHg2CIc0K8mJGU2CWFEkY= Subject key identifier: 8E:73:68:90:7E:8B:1B:9A:39:0B:F8:A8:5C:21:F8:32:A9:E9:98:4F Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Certificate serial: 019AF19B2B2D83C672103B5B2734BCDE6B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft Manifest number: 128B Signing time: Sat 06 Dec 2025 03:01:09 +0000 Manifest this update: Sat 06 Dec 2025 03:01:09 +0000 Manifest next update: Sun 07 Dec 2025 03:01:09 +0000 Files and hashes: 1: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: 0ANTa1yr/tadptjR9pv8GeWrwk7lngrGaTG7oa0Xn3Y=) 2: mG96Y715wDIwvEKSq5Z-71rWs6M.roa (hash: Y3E3/3Utv7uEbR1MqLWFqsWoMU44kmtfUjplzEpgK2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:2b:2d:83:c6:72:10:3b:5b:27:34:bc:de:6b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Validity Not Before: Dec 6 03:01:09 2025 GMT Not After : Dec 7 03:01:09 2025 GMT Subject: CN=8e7368907e8b1b9a390bf8a85c21f832a9e9984f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:de:da:58:30:35:80:12:74:82:4c:0f:1c:10: a6:5f:d1:47:2a:77:a7:4f:d8:e7:a9:3a:82:9d:82: 2f:c5:74:81:12:1f:28:e7:2c:1f:0e:3a:97:82:be: e6:9d:3f:27:1f:67:75:bb:e5:3f:7a:b7:91:cb:89: 35:16:8d:99:0a:3a:2c:b3:35:8b:18:7f:2d:96:ed: d1:90:dc:d8:c0:73:e4:01:65:e8:aa:ac:59:f8:67: a8:e2:b8:a7:0e:46:ad:7a:1e:5e:38:3d:16:c0:26: f8:55:43:5e:9d:ac:00:6e:31:90:4b:ab:e5:fc:d2: da:5e:6b:c8:e6:54:d8:e0:74:41:3c:d2:d6:23:12: 31:87:86:fc:70:b3:a7:19:32:75:d4:ac:f5:a0:26: b7:21:54:e4:7a:28:a1:cd:fc:02:95:08:c9:32:7e: 4b:38:d1:dd:19:13:34:18:84:be:60:c9:4d:f0:51: bc:37:fe:1f:58:fd:4b:0f:0f:34:a6:a7:0f:3e:76: 49:e3:3c:50:9e:3d:16:e3:b1:1a:b0:e0:34:63:80: 21:a5:9f:fb:77:b8:0a:c8:bf:c4:ce:59:e6:ca:e8: a8:ec:1a:cf:cc:73:b9:d1:96:e4:e0:c1:f5:3c:0e: fd:fa:37:15:f5:51:e9:df:46:26:c4:6b:55:a6:ec: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:73:68:90:7E:8B:1B:9A:39:0B:F8:A8:5C:21:F8:32:A9:E9:98:4F X509v3 Authority Key Identifier: keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:5b:e4:a9:b8:0c:3a:a3:a2:a0:39:e0:cd:ac:c0:17:b9:f6: 16:6b:43:35:d0:a5:1d:ac:02:9a:df:67:b7:b2:1e:8c:7a:15: 36:ef:79:98:24:26:2c:b9:b5:3d:d6:a6:1a:04:25:b7:f1:f2: 14:cb:33:f2:62:7a:c9:1c:e7:bb:ad:bb:82:9f:db:92:c2:28: d0:6a:c3:53:6d:1a:bb:6c:4c:fd:0b:44:03:71:dd:58:e1:59: f4:1f:0e:e0:e0:c4:da:68:33:7f:c7:8b:cb:a3:fa:62:cd:9c: 52:e4:7f:53:47:d4:36:63:cc:d0:e1:6a:5f:0c:7e:60:c8:b9: 62:11:6c:80:5c:10:18:47:71:b2:fd:99:45:0c:a2:e4:a8:6f: 01:69:cc:6f:d5:79:31:42:ca:3f:95:37:40:53:03:99:d3:e1: 4f:31:70:55:39:b1:2c:b2:66:92:80:5c:a4:b0:73:3a:1e:63: c8:a1:22:36:79:9a:60:a2:38:66:31:75:2f:c3:c3:3c:bc:50: 5b:2f:95:b6:47:64:3b:2a:3e:af:f2:bc:f8:da:be:93:a9:67: ce:a2:f0:6a:5a:67:b1:a2:8b:d7:fb:82:a2:a4:6c:59:3c:b7: 1b:14:08:02:e6:f3:dd:c8:a7:84:68:2d:15:80:8d:a8:e1:a4: 60:96:e8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmystg8ZyEDtbJzS83muHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOWY5NmMyMGUxMGY3NmYwM2VkNDc4MTViN2E2YTVlZmRi ZTAzZDUwHhcNMjUxMjA2MDMwMTA5WhcNMjUxMjA3MDMwMTA5WjAzMTEwLwYDVQQD Eyg4ZTczNjg5MDdlOGIxYjlhMzkwYmY4YTg1YzIxZjgzMmE5ZTk5ODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq97aWDA1gBJ0gkwPHBCmX9FHKnen T9jnqTqCnYIvxXSBEh8o5ywfDjqXgr7mnT8nH2d1u+U/ereRy4k1Fo2ZCjosszWL GH8tlu3RkNzYwHPkAWXoqqxZ+Geo4rinDkateh5eOD0WwCb4VUNenawAbjGQS6vl /NLaXmvI5lTY4HRBPNLWIxIxh4b8cLOnGTJ11Kz1oCa3IVTkeiihzfwClQjJMn5L ONHdGRM0GIS+YMlN8FG8N/4fWP1LDw80pqcPPnZJ4zxQnj0W47EasOA0Y4AhpZ/7 d7gKyL/Ezlnmyuio7BrPzHO50Zbk4MH1PA79+jcV9VHp30YmxGtVpuyDSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5zaJB+ixuaOQv4qFwh+DKp6ZhPMB8GA1UdIwQY MBaAFPOflsIOEPdvA+1HgVt6al79vgPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjkt ZmI5MDgxYTE2MTM5LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjktZmI5MDgxYTE2MTM5 LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVvkqbgM OqOioDngzazAF7n2FmtDNdClHawCmt9nt7IejHoVNu95mCQmLLm1PdamGgQlt/Hy FMsz8mJ6yRznu627gp/bksIo0GrDU20au2xM/QtEA3HdWOFZ9B8O4ODE2mgzf8eL y6P6Ys2cUuR/U0fUNmPM0OFqXwx+YMi5YhFsgFwQGEdxsv2ZRQyi5KhvAWnMb9V5 MULKP5U3QFMDmdPhTzFwVTmxLLJmkoBcpLBzOh5jyKEiNnmaYKI4ZjF1L8PDPLxQ Wy+VtkdkOyo+r/K8+Nq+k6lnzqLwalpnsaKL1/uCoqRsWTy3GxQIAubz3cinhGgt FYCNqOGkYJbohw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:33 2025 by rpki-client