This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft File: wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json) Hash identifier: ul9ijddbQIMSdl4hkgK4P90P+bj/ieKkT0ZPaWxzDDY= Subject key identifier: 82:D8:6E:11:6E:5D:3D:6B:27:92:73:31:C0:3B:4F:19:7C:C6:8B:41 Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF Certificate issuer: /CN=c2d573b1677071f2fd6d44b8401b612120598ccf Certificate serial: 019AF31BB257B20B16A8649F1E6BFCAE2D26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 10:01:09 +0000 Manifest this update: Sat 06 Dec 2025 10:01:09 +0000 Manifest next update: Sun 07 Dec 2025 10:01:09 +0000 Files and hashes: 1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: PYtQKJNYoJVyRIKFkNgz2tuy6ibntosh4zLVCp/uvi0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b2:57:b2:0b:16:a8:64:9f:1e:6b:fc:ae:2d:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf Validity Not Before: Dec 6 10:01:09 2025 GMT Not After : Dec 7 10:01:09 2025 GMT Subject: CN=82d86e116e5d3d6b27927331c03b4f197cc68b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5b:52:3f:e9:4c:de:07:df:cc:fd:c4:a5:35: 49:bd:52:4f:cf:2c:19:8f:b9:f1:91:0a:67:2f:14: 5d:6d:d1:f6:51:1e:50:0e:35:08:f1:6e:39:97:c7: 00:bf:37:53:6e:d8:99:fb:f3:4a:7d:3a:a2:95:f8: 76:b6:c1:8c:29:e8:23:25:91:b9:9d:4a:44:f6:06: d2:c3:64:46:5e:42:95:94:a4:d7:be:41:f5:ee:81: 89:f0:f9:68:a3:9f:29:a7:64:33:f3:bf:c4:69:62: a3:2d:81:d1:05:54:bc:99:01:19:ac:12:94:3c:3f: 44:25:6b:c6:fb:e6:32:bc:fa:e3:b2:7c:3d:e0:5d: 4d:ed:87:36:f0:11:cb:54:5f:da:67:36:32:c6:b9: d7:44:13:e0:f7:77:d5:a6:35:55:dc:7d:dc:89:72: 4a:f1:7d:b8:39:92:33:83:6e:80:66:6e:e9:ba:a2: 30:6f:b0:6d:53:40:87:a8:0b:1f:e4:8b:01:4c:0f: f3:a9:3e:da:8f:fc:6a:07:61:eb:0c:15:45:d8:dd: a1:02:ed:9f:12:6c:87:3b:ef:87:d1:68:c3:9d:8a: 81:ae:b7:30:d4:31:88:d7:a1:14:fd:c0:e4:98:95: 6a:f1:de:c1:63:d8:b0:69:79:72:65:0e:47:3c:d1: f4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D8:6E:11:6E:5D:3D:6B:27:92:73:31:C0:3B:4F:19:7C:C6:8B:41 X509v3 Authority Key Identifier: keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:b7:2b:f1:52:6a:33:8b:61:7c:df:f6:40:a0:d0:40:74:c9: cb:7b:8c:5f:c1:f0:ec:87:40:3c:ea:be:06:4e:48:43:1c:70: d8:11:05:50:63:51:92:f0:62:f3:39:c4:f9:c0:15:d8:4b:e9: eb:74:20:46:31:19:8d:44:d5:60:42:5b:6c:80:de:03:5e:f4: b7:8e:b4:96:7d:b2:5a:08:0e:7b:5c:a3:3b:e1:d0:26:e9:74: 40:6e:b3:98:63:bd:b4:52:dd:39:8d:d6:b9:69:bc:6d:a6:88: 31:dc:12:ec:8f:2b:16:67:3a:aa:78:c6:db:49:a3:ed:51:d4: b9:a5:2d:1a:77:d9:ca:79:e5:fc:fb:2d:20:ae:d2:70:77:4a: 12:f9:82:ca:4d:b7:3c:42:8d:9a:61:06:33:21:5e:7a:9c:d8: fa:23:48:de:0f:03:f9:fd:ee:41:ef:36:7f:bf:81:84:0f:f6: d3:95:e1:9e:1e:4c:47:51:53:1b:7b:58:63:aa:4f:ea:96:6d: f9:66:d1:e5:57:d2:08:f2:e7:1b:19:80:f9:ab:9e:3f:00:2c: 45:47:eb:9c:7b:a0:d2:c1:6e:04:22:c7:66:9d:c0:84:e9:55: e2:a8:75:d4:e5:d4:d0:c1:05:6b:cc:6e:f0:99:e4:41:aa:e1: 9d:66:14:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7JXsgsWqGSfHmv8ri0mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDU3M2IxNjc3MDcxZjJmZDZkNDRiODQwMWI2MTIxMjA1 OThjY2YwHhcNMjUxMjA2MTAwMTA5WhcNMjUxMjA3MTAwMTA5WjAzMTEwLwYDVQQD Eyg4MmQ4NmUxMTZlNWQzZDZiMjc5MjczMzFjMDNiNGYxOTdjYzY4YjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6VtSP+lM3gffzP3EpTVJvVJPzywZ j7nxkQpnLxRdbdH2UR5QDjUI8W45l8cAvzdTbtiZ+/NKfTqilfh2tsGMKegjJZG5 nUpE9gbSw2RGXkKVlKTXvkH17oGJ8Ploo58pp2Qz87/EaWKjLYHRBVS8mQEZrBKU PD9EJWvG++YyvPrjsnw94F1N7Yc28BHLVF/aZzYyxrnXRBPg93fVpjVV3H3ciXJK 8X24OZIzg26AZm7puqIwb7BtU0CHqAsf5IsBTA/zqT7aj/xqB2HrDBVF2N2hAu2f EmyHO++H0WjDnYqBrrcw1DGI16EU/cDkmJVq8d7BY9iwaXlyZQ5HPNH0MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILYbhFuXT1rJ5JzMcA7Txl8xotBMB8GA1UdIwQY MBaAFMLVc7FncHHy/W1EuEAbYSEgWYzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjkt MDRkMTJmMmQwNzBhLzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjktMDRkMTJmMmQwNzBh LzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA17cr8VJq M4thfN/2QKDQQHTJy3uMX8Hw7IdAPOq+Bk5IQxxw2BEFUGNRkvBi8znE+cAV2Evp 63QgRjEZjUTVYEJbbIDeA170t460ln2yWggOe1yjO+HQJul0QG6zmGO9tFLdOY3W uWm8baaIMdwS7I8rFmc6qnjG20mj7VHUuaUtGnfZynnl/PstIK7ScHdKEvmCyk23 PEKNmmEGMyFeepzY+iNI3g8D+f3uQe82f7+BhA/205Xhnh5MR1FTG3tYY6pP6pZt +WbR5VfSCPLnGxmA+auePwAsRUfrnHug0sFuBCLHZp3AhOlV4qh11OXU0MEFa8xu 8JnkQarhnWYUOw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:37:40 2025 by rpki-client