This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft File: wzdo22Ch8ho07lwqNDVFYXvvi0A.mft (raw, json) Hash identifier: XuW1+BjW2gJczqZ+b2aLo/+bFs6AY8Luhf4x2ia3sYE= Subject key identifier: A9:E9:78:6B:C7:35:F3:4F:7A:49:0E:C3:4B:41:9A:8D:21:AA:95:44 Authority key identifier: C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40 Certificate issuer: /CN=c33768db60a1f21a34ee5c2a343545617bef8b40 Certificate serial: 019AF27718322C5D796426BA701778125DB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 07:01:22 +0000 Manifest this update: Sat 06 Dec 2025 07:01:22 +0000 Manifest next update: Sun 07 Dec 2025 07:01:22 +0000 Files and hashes: 1: wzdo22Ch8ho07lwqNDVFYXvvi0A.crl (hash: U2Ev9gR3oosmpsHPDkIzCvbqoDZi18ZakBwA5tHN5lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:18:32:2c:5d:79:64:26:ba:70:17:78:12:5d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33768db60a1f21a34ee5c2a343545617bef8b40 Validity Not Before: Dec 6 07:01:22 2025 GMT Not After : Dec 7 07:01:22 2025 GMT Subject: CN=a9e9786bc735f34f7a490ec34b419a8d21aa9544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:bf:40:d2:a3:1f:8e:e6:5d:b7:1e:ba:45: 09:f0:41:0a:b2:84:03:7f:77:33:c9:62:bd:f4:b2: b5:40:a9:56:6d:fa:21:5b:9b:43:b0:77:95:c6:26: be:a6:6e:a0:87:5b:b0:03:e8:81:1a:1f:2d:51:cb: c8:8c:d4:55:13:ad:c0:d2:87:36:c9:e7:a6:61:39: cf:c6:e3:10:15:59:a3:72:1a:15:0b:4b:fa:6d:7b: 00:2a:a8:1a:1c:fd:9d:40:df:d7:77:e3:fe:ee:82: 00:43:79:87:6d:4a:0e:fd:32:ee:5d:2c:41:5e:8b: bf:25:cd:59:95:14:d4:7d:e9:3f:b7:52:5d:f4:6d: dc:d5:21:f7:1d:c9:13:e3:2f:cb:f1:3e:ad:93:70: 42:5b:10:24:75:52:59:96:0e:30:53:70:6e:43:ec: 72:44:e2:89:d5:2e:02:cc:51:85:a8:f2:b4:be:a8: 83:6a:06:5b:82:90:8f:12:37:15:7d:57:39:d6:17: 3b:3c:22:bf:ce:55:cd:5f:4e:9a:21:96:96:7c:88: b3:88:41:97:cc:b1:d6:1b:22:44:49:14:3f:dd:08: ae:c9:80:6c:7e:0a:09:81:86:be:8a:01:14:fc:b2: 8e:8c:e3:ba:40:9a:18:0b:e2:c9:bf:6f:b8:5d:e1: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:78:6B:C7:35:F3:4F:7A:49:0E:C3:4B:41:9A:8D:21:AA:95:44 X509v3 Authority Key Identifier: keyid:C3:37:68:DB:60:A1:F2:1A:34:EE:5C:2A:34:35:45:61:7B:EF:8B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzdo22Ch8ho07lwqNDVFYXvvi0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/b1ec5c-1770-4b1a-894b-c2611b7420f2/1/wzdo22Ch8ho07lwqNDVFYXvvi0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5e:0a:b4:32:8a:66:e9:33:e3:a7:f9:6f:8c:79:59:cf:04: f0:19:54:7b:68:67:c0:74:d0:7e:17:68:53:9d:38:52:48:96: b4:44:1f:c8:5d:31:39:64:1d:9f:da:ee:b3:69:fa:ba:d0:67: 06:89:91:94:41:ff:e0:5d:e1:98:b5:8d:3f:3a:25:be:5b:72: 87:32:e8:38:21:6f:06:4c:7c:ee:79:64:8f:27:f6:99:f9:f7: cb:6b:91:c6:9f:ff:d0:31:36:db:de:ea:45:1c:51:09:d3:12: 00:51:c7:7c:da:fe:00:a5:0c:d1:10:05:21:35:94:82:e5:93: 2c:9c:90:8f:a8:ba:b2:da:6a:b8:ea:b2:01:89:09:54:8b:dc: b4:ca:4e:b7:d2:af:ab:f5:54:1d:62:8d:c3:e1:05:1d:cb:56: ba:36:00:69:22:0f:f4:0a:53:f0:00:81:ea:5e:b7:67:9e:ea: 4e:d4:6e:7b:73:73:06:78:82:4a:c2:58:8c:1e:c9:05:4b:52: 3f:a9:27:2d:4a:b5:fb:13:f7:c3:e1:d5:19:32:13:8a:19:20: 25:e6:a2:89:b0:cf:9e:c4:71:33:e9:3d:0c:d0:a4:b7:ce:64: 46:c8:c7:34:4f:1e:bd:70:4a:a9:7a:89:e9:dd:94:03:e9:67: 57:c7:2a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxgyLF15ZCa6cBd4El20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzc2OGRiNjBhMWYyMWEzNGVlNWMyYTM0MzU0NTYxN2Jl ZjhiNDAwHhcNMjUxMjA2MDcwMTIyWhcNMjUxMjA3MDcwMTIyWjAzMTEwLwYDVQQD EyhhOWU5Nzg2YmM3MzVmMzRmN2E0OTBlYzM0YjQxOWE4ZDIxYWE5NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK+/QNKjH47mXbceukUJ8EEKsoQD f3czyWK99LK1QKlWbfohW5tDsHeVxia+pm6gh1uwA+iBGh8tUcvIjNRVE63A0oc2 yeemYTnPxuMQFVmjchoVC0v6bXsAKqgaHP2dQN/Xd+P+7oIAQ3mHbUoO/TLuXSxB Xou/Jc1ZlRTUfek/t1Jd9G3c1SH3HckT4y/L8T6tk3BCWxAkdVJZlg4wU3BuQ+xy ROKJ1S4CzFGFqPK0vqiDagZbgpCPEjcVfVc51hc7PCK/zlXNX06aIZaWfIiziEGX zLHWGyJESRQ/3QiuyYBsfgoJgYa+igEU/LKOjOO6QJoYC+LJv2+4XeEJiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnpeGvHNfNPekkOw0tBmo0hqpVEMB8GA1UdIwQY MBaAFMM3aNtgofIaNO5cKjQ1RWF774tAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGIt YzI2MTFiNzQyMGYyLzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9iMWVjNWMtMTc3MC00YjFhLTg5NGItYzI2MTFiNzQyMGYy LzEvd3pkbzIyQ2g4aG8wN2x3cU5EVkZZWHZ2aTBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF4KtDKK Zukz46f5b4x5Wc8E8BlUe2hnwHTQfhdoU504UkiWtEQfyF0xOWQdn9rus2n6utBn BomRlEH/4F3hmLWNPzolvltyhzLoOCFvBkx87nlkjyf2mfn3y2uRxp//0DE2297q RRxRCdMSAFHHfNr+AKUM0RAFITWUguWTLJyQj6i6stpquOqyAYkJVIvctMpOt9Kv q/VUHWKNw+EFHctWujYAaSIP9ApT8ACB6l63Z57qTtRue3NzBniCSsJYjB7JBUtS P6knLUq1+xP3w+HVGTITihkgJeaiibDPnsRxM+k9DNCkt85kRsjHNE8evXBKqXqJ 6d2UA+lnV8cqew== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:50 2025 by rpki-client