This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft File: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft (raw, json) Hash identifier: FB3TflXIrQRecROwIezGQPBEFDbxiq8QV2Uhoy50kfw= Subject key identifier: 03:39:D9:8C:94:9D:61:1B:92:B7:EF:EC:F7:9E:BE:49:52:AB:AC:44 Authority key identifier: D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 Certificate issuer: /CN=d1608bf900c338661dff6337ab4c6af916f84172 Certificate serial: 019AF12E618E12F3B69523788C0D7EF26AF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft Manifest number: 0575 Signing time: Sat 06 Dec 2025 01:02:19 +0000 Manifest this update: Sat 06 Dec 2025 01:02:19 +0000 Manifest next update: Sun 07 Dec 2025 01:02:19 +0000 Files and hashes: 1: 0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl (hash: Ud8HwWSCyBkQWK1ijo2PgbN8BSjFZdqiVwOlb4yJ6lI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:61:8e:12:f3:b6:95:23:78:8c:0d:7e:f2:6a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1608bf900c338661dff6337ab4c6af916f84172 Validity Not Before: Dec 6 01:02:19 2025 GMT Not After : Dec 7 01:02:19 2025 GMT Subject: CN=0339d98c949d611b92b7efecf79ebe4952abac44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4a:8c:c4:fc:d3:67:a9:29:fd:4b:6f:1e:37: a4:49:32:a5:fa:8f:1a:87:36:05:e5:21:6f:34:f5: 8f:04:65:66:fd:12:30:58:ff:c6:f4:86:9d:5f:f4: 25:dd:fe:41:40:3e:47:36:1c:3a:8a:80:42:2a:84: 2b:8b:60:d4:79:4d:51:26:ea:66:1f:c7:04:07:73: 57:9b:fe:e8:1d:34:a3:da:c7:8a:4d:91:37:eb:30: 2b:b0:9b:41:ff:cf:23:5f:e4:5f:23:23:ad:65:20: e8:3f:de:ef:0f:3c:cc:be:fc:76:a5:23:ae:fb:4a: d7:c1:6b:77:3b:40:3c:37:f4:6f:89:2f:97:d0:10: 7b:de:f4:ed:dc:72:6a:1f:9e:65:8f:24:68:72:23: 08:26:47:c4:d3:b0:08:31:65:50:40:3c:c4:f4:24: 85:cf:5d:50:3a:da:3d:57:66:fd:d0:92:fd:39:8b: a7:d6:e0:51:6f:7f:7d:04:47:a3:f5:a2:27:73:38: 1e:ef:2a:2e:e6:ac:79:0d:cb:e9:a0:30:eb:57:20: 31:06:0a:4c:e5:2d:6f:05:b4:96:fd:42:c7:30:0f: 85:dc:7f:e0:a0:06:e2:17:5b:ca:a3:ed:01:22:e8: d7:70:a1:e9:09:fa:bd:36:db:d8:cf:37:c0:6f:5f: 5f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:39:D9:8C:94:9D:61:1B:92:B7:EF:EC:F7:9E:BE:49:52:AB:AC:44 X509v3 Authority Key Identifier: keyid:D1:60:8B:F9:00:C3:38:66:1D:FF:63:37:AB:4C:6A:F9:16:F8:41:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/681aea-ffc5-43ec-ab51-dbcce21419b7/1/0WCL-QDDOGYd_2M3q0xq-Rb4QXI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:00:a4:4f:c1:d9:98:b9:cc:ff:a6:e8:7d:a2:d1:bd:6c:49: 82:a4:1e:88:01:ee:db:15:0c:20:90:3a:71:d9:da:84:61:42: 98:21:74:9b:b0:12:96:16:86:f5:f5:81:a9:70:4d:4a:3b:ab: 1c:1e:80:5e:3d:47:3b:a0:86:fb:e8:2e:db:39:1e:76:98:1d: 73:ac:20:91:04:4d:92:c1:6e:6d:61:e9:19:11:c8:22:8c:98: ee:f3:36:23:9f:f7:e1:63:6b:36:89:dd:b7:bc:8a:6c:f4:70: 0c:4d:d9:b4:bc:37:14:aa:11:0d:78:13:1c:10:59:2d:f2:da: 2c:37:db:52:8d:f6:6f:1c:9e:85:11:34:ba:47:32:02:79:27: 3d:a8:e6:19:79:1c:c2:bd:27:a8:eb:9f:70:bf:9c:72:fa:72: a8:bb:54:dd:09:67:61:70:97:57:e3:94:33:43:35:aa:f0:2f: 24:19:f6:70:de:50:dc:9a:fc:eb:cd:9e:ad:26:20:36:71:f4: e6:85:c9:78:4f:e1:29:55:c1:5e:8e:bd:3c:31:19:d9:d0:f6: 1e:a7:61:c3:f1:4a:ff:75:62:f3:a1:b9:6b:c1:26:ea:85:21: 23:a6:61:05:3f:3e:00:ef:c6:30:2c:f5:80:9c:3c:7d:72:2a: a9:19:3a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmGOEvO2lSN4jA1+8mr1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjA4YmY5MDBjMzM4NjYxZGZmNjMzN2FiNGM2YWY5MTZm ODQxNzIwHhcNMjUxMjA2MDEwMjE5WhcNMjUxMjA3MDEwMjE5WjAzMTEwLwYDVQQD EygwMzM5ZDk4Yzk0OWQ2MTFiOTJiN2VmZWNmNzllYmU0OTUyYWJhYzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UqMxPzTZ6kp/UtvHjekSTKl+o8a hzYF5SFvNPWPBGVm/RIwWP/G9IadX/Ql3f5BQD5HNhw6ioBCKoQri2DUeU1RJupm H8cEB3NXm/7oHTSj2seKTZE36zArsJtB/88jX+RfIyOtZSDoP97vDzzMvvx2pSOu +0rXwWt3O0A8N/RviS+X0BB73vTt3HJqH55ljyRociMIJkfE07AIMWVQQDzE9CSF z11QOto9V2b90JL9OYun1uBRb399BEej9aInczge7you5qx5DcvpoDDrVyAxBgpM 5S1vBbSW/ULHMA+F3H/goAbiF1vKo+0BIujXcKHpCfq9NtvYzzfAb19fhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM52YyUnWEbkrfv7PeevklSq6xEMB8GA1UdIwQY MBaAFNFgi/kAwzhmHf9jN6tMavkW+EFyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEt ZGJjY2UyMTQxOWI3LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS82ODFhZWEtZmZjNS00M2VjLWFiNTEtZGJjY2UyMTQxOWI3 LzEvMFdDTC1RRERPR1lkXzJNM3EweHEtUmI0UVhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhACkT8HZ mLnM/6bofaLRvWxJgqQeiAHu2xUMIJA6cdnahGFCmCF0m7ASlhaG9fWBqXBNSjur HB6AXj1HO6CG++gu2zkedpgdc6wgkQRNksFubWHpGRHIIoyY7vM2I5/34WNrNond t7yKbPRwDE3ZtLw3FKoRDXgTHBBZLfLaLDfbUo32bxyehRE0ukcyAnknPajmGXkc wr0nqOufcL+ccvpyqLtU3QlnYXCXV+OUM0M1qvAvJBn2cN5Q3Jr8682erSYgNnH0 5oXJeE/hKVXBXo69PDEZ2dD2Hqdhw/FK/3Vi86G5a8Em6oUhI6ZhBT8+AO/GMCz1 gJw8fXIqqRk6pg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:32 2025 by rpki-client