This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json) Hash identifier: kMnyrQJPGUXpaIS9BPqTUr9rvVRqE7ibSIylC781K8w= Subject key identifier: 5B:5F:8E:A6:D3:7E:1E:BF:E7:2F:56:88:49:05:82:BA:D6:C1:8B:B8 Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172 Certificate serial: 019B2E8BE69611FE519E5366AB497D621B11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft Manifest number: 0595 Signing time: Wed 17 Dec 2025 23:01:18 +0000 Manifest this update: Wed 17 Dec 2025 23:01:18 +0000 Manifest next update: Thu 18 Dec 2025 23:01:18 +0000 Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: DKrVKf5Fc8QKkLRBBZbK1ls3CTbrrHnOHktFOeFbZNc=) 2: tvVyRp4L9e3meI8HjNM8zokhY-g.asa (hash: olDJRhTYRvq4nKsZ0gccZ00xYdhkTFh1VWFFg4+4L98=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:e6:96:11:fe:51:9e:53:66:ab:49:7d:62:1b:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172 Validity Not Before: Dec 17 23:01:18 2025 GMT Not After : Dec 18 23:01:18 2025 GMT Subject: CN=5b5f8ea6d37e1ebfe72f5688490582bad6c18bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:f1:cd:5c:f9:5f:4c:f0:2f:8d:9e:9a:ff: af:0d:20:53:91:41:06:37:c5:fc:1b:c0:41:3d:b0: dc:a1:f7:4c:9d:11:fe:8e:ba:2b:71:d3:18:15:85: b0:66:48:b8:b0:d0:0b:43:8d:d5:ab:bf:50:42:28: df:f9:a5:ad:6b:89:7f:bb:05:6c:f1:b8:39:bb:75: 7d:ab:a7:e9:f2:85:fe:55:56:48:55:8f:2a:97:2a: db:13:aa:e3:1a:73:c0:67:9e:93:a2:b6:36:b5:ca: e5:f7:a6:32:75:55:bb:81:59:5c:4f:df:e8:ee:49: ad:37:01:a1:64:4b:5f:f8:b9:9e:3b:18:41:e2:ca: a7:0f:c2:8e:70:c0:e1:fe:44:4a:0d:9a:28:80:41: 71:ea:fc:78:2c:dc:41:60:c5:55:01:f9:3a:49:66: a9:77:8c:a6:af:6c:6f:94:54:0d:25:91:c1:de:cf: 91:0a:11:53:cd:dc:77:f7:39:a3:e6:1e:a9:4d:70: 53:0d:bf:ce:ea:ad:51:4f:30:ff:39:16:e9:25:15: 48:fa:57:02:5e:55:0f:17:27:d3:fe:35:42:d2:fb: bc:a2:ce:cf:45:7a:8e:17:6f:96:a8:e0:8d:cc:2d: 47:72:e2:94:96:64:15:b4:f9:4b:0b:ed:ef:62:71: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5F:8E:A6:D3:7E:1E:BF:E7:2F:56:88:49:05:82:BA:D6:C1:8B:B8 X509v3 Authority Key Identifier: keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:59:be:34:5a:c2:fe:5a:b1:56:a0:37:0e:16:ca:fb:0c:cb: ad:2e:31:67:ca:f3:d7:eb:8d:fe:8c:82:7b:d2:39:15:33:e8: bc:3d:14:76:77:05:6a:46:e6:9c:81:fc:c9:20:12:83:78:6e: e9:f0:96:2e:dc:6a:e6:0e:25:da:07:c3:29:ba:b1:fc:dc:6e: d5:c1:26:0c:61:5b:d1:be:b7:97:38:01:65:5b:23:db:62:cd: 81:8f:c3:81:e4:4e:c4:45:19:95:2b:cb:d0:4f:4d:2d:0b:9c: 37:35:00:16:4e:21:39:c3:d4:b6:b9:cd:ba:24:c0:3e:dd:24: b2:ab:ab:55:0a:45:94:4c:a6:11:8f:f9:4d:8e:e4:b4:8c:f9: d7:0f:d7:06:ba:a1:dc:55:4b:9e:e4:cc:da:3a:5a:e0:b9:66: 24:a5:8c:59:14:fa:4e:1c:27:37:79:a6:47:33:90:7d:cb:ea: 95:a4:e3:19:bc:3f:9e:36:49:d1:be:b2:b9:7d:6e:89:07:f1: e9:da:ce:ca:04:06:f1:05:7b:f0:21:b9:fb:7e:4d:91:b8:04: e5:ad:2a:f2:fc:d5:17:c2:b6:54:b6:26:e3:6e:00:bd:b2:20: ed:4c:ef:bd:03:35:12:0b:ee:e6:d7:38:f7:70:47:a4:dc:c0: f6:aa:15:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui+aWEf5RnlNmq0l9YhsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm ODQxNzIwHhcNMjUxMjE3MjMwMTE4WhcNMjUxMjE4MjMwMTE4WjAzMTEwLwYDVQQD Eyg1YjVmOGVhNmQzN2UxZWJmZTcyZjU2ODg0OTA1ODJiYWQ2YzE4YmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SDxzVz5X0zwL42emv+vDSBTkUEG N8X8G8BBPbDcofdMnRH+jrorcdMYFYWwZki4sNALQ43Vq79QQijf+aWta4l/uwVs 8bg5u3V9q6fp8oX+VVZIVY8qlyrbE6rjGnPAZ56TorY2tcrl96YydVW7gVlcT9/o 7kmtNwGhZEtf+LmeOxhB4sqnD8KOcMDh/kRKDZoogEFx6vx4LNxBYMVVAfk6SWap d4ymr2xvlFQNJZHB3s+RChFTzdx39zmj5h6pTXBTDb/O6q1RTzD/ORbpJRVI+lcC XlUPFyfT/jVC0vu8os7PRXqOF2+WqOCNzC1HcuKUlmQVtPlLC+3vYnFnoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtfjqbTfh6/5y9WiEkFgrrWwYu4MB8GA1UdIwQY MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3 LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVm+NFrC /lqxVqA3DhbK+wzLrS4xZ8rz1+uN/oyCe9I5FTPovD0UdncFakbmnIH8ySASg3hu 6fCWLtxq5g4l2gfDKbqx/Nxu1cEmDGFb0b63lzgBZVsj22LNgY/DgeROxEUZlSvL 0E9NLQucNzUAFk4hOcPUtrnNuiTAPt0ksqurVQpFlEymEY/5TY7ktIz51w/XBrqh 3FVLnuTM2jpa4LlmJKWMWRT6ThwnN3mmRzOQfcvqlaTjGbw/njZJ0b6yuX1uiQfx 6drOygQG8QV78CG5+35NkbgE5a0q8vzVF8K2VLYm424AvbIg7UzvvQM1Egvu5tc4 93BHpNzA9qoVpg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:43:44 2025 by rpki-client