This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft File: wlZYX2ctCeHXfOXq9OPhUfhgroY.mft (raw, json) Hash identifier: w/CWKjHqHzXn+oat7+E7MrSffNfd4MwXOE57yIPhV58= Subject key identifier: 1D:52:2E:80:F0:BA:34:DC:03:BC:17:9A:52:9D:0F:BD:05:9A:77:E4 Authority key identifier: C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86 Certificate issuer: /CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86 Certificate serial: 019AF1D25AB1F5C3CBB5AF10D85F82887734 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft Manifest number: 1674 Signing time: Sat 06 Dec 2025 04:01:26 +0000 Manifest this update: Sat 06 Dec 2025 04:01:26 +0000 Manifest next update: Sun 07 Dec 2025 04:01:26 +0000 Files and hashes: 1: wlZYX2ctCeHXfOXq9OPhUfhgroY.crl (hash: BwYcnsh0QZ8rdjNFvpNYiq55EqcQSVJqztGcdP5lYEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:5a:b1:f5:c3:cb:b5:af:10:d8:5f:82:88:77:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c256585f672d09e1d77ce5eaf4e3e151f860ae86 Validity Not Before: Dec 6 04:01:26 2025 GMT Not After : Dec 7 04:01:26 2025 GMT Subject: CN=1d522e80f0ba34dc03bc179a529d0fbd059a77e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:30:9d:5a:80:84:46:75:55:22:ac:a3:6e:42: 32:47:8c:df:aa:26:01:1f:af:0a:69:98:aa:45:59: 8e:c5:23:ad:28:61:a1:e9:50:a8:9a:7b:70:91:7e: 06:07:41:3d:1a:fb:97:e0:c7:1d:1f:a9:60:93:f5: 7f:80:7a:b8:e0:a4:62:95:dc:3a:4b:30:90:70:a8: d4:1b:94:9e:18:d7:e7:ea:3f:30:32:9a:d3:50:1d: 1d:ce:ad:f2:21:60:c0:c9:2f:30:62:61:d3:6b:3f: 9a:64:e4:d7:82:02:74:d2:4e:35:10:11:f8:f5:15: 31:27:23:50:03:bf:db:74:ed:86:ff:7b:b9:90:f6: b5:30:04:c3:1b:64:5f:31:4e:f9:f2:51:a5:8a:16: 42:b2:48:4e:13:ae:f5:aa:ba:ed:ec:62:95:c2:4c: 22:a5:db:8b:0a:9a:58:d5:77:a0:22:82:72:22:f6: 8a:81:69:2c:87:9c:d9:36:31:63:3b:99:a4:3c:f1: c3:ae:a4:c1:b1:75:f3:eb:ab:be:c4:b0:ae:b7:05: dd:ec:3f:44:bf:77:df:79:48:22:59:a4:97:c0:2e: 85:bc:56:65:a2:74:f0:c8:36:37:ab:c7:32:e8:52: 5a:45:0e:50:e2:85:3e:fa:93:d2:0e:1d:2f:79:2b: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:52:2E:80:F0:BA:34:DC:03:BC:17:9A:52:9D:0F:BD:05:9A:77:E4 X509v3 Authority Key Identifier: keyid:C2:56:58:5F:67:2D:09:E1:D7:7C:E5:EA:F4:E3:E1:51:F8:60:AE:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlZYX2ctCeHXfOXq9OPhUfhgroY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/6c2545-df99-478c-8b76-c50a01b6ee06/1/wlZYX2ctCeHXfOXq9OPhUfhgroY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e8:55:67:e1:41:74:8e:05:49:96:e5:78:ca:e9:61:e6:dc: c8:e9:63:7c:ec:63:64:8b:47:42:cf:b2:8b:f9:a0:cf:bc:7d: 66:3e:26:49:7d:41:26:54:6c:14:0b:54:b5:3f:e3:f7:65:6f: 94:58:63:b7:6f:61:1b:3e:d7:80:8c:36:fa:63:bd:6a:84:0f: bb:23:5c:9d:da:b1:0d:58:94:f2:33:39:42:ad:df:e5:e6:85: 84:18:6f:45:83:3a:f4:61:d5:9e:6e:b2:36:48:d7:8e:cd:55: 36:a2:9a:43:bb:2f:e8:13:10:d9:90:3c:fc:bd:65:47:c1:c2: b6:98:d7:fe:8b:94:2d:89:2b:88:23:f5:ab:7b:36:10:dc:b1: 8b:cc:73:c8:45:7f:26:af:9b:6e:ee:86:ff:26:96:b0:89:dc: 83:aa:dd:c1:91:fe:48:b3:5f:e5:38:d7:57:59:89:a0:4c:ae: 44:61:aa:6d:ca:be:79:fe:91:bb:88:d5:6b:94:7b:45:0b:4c: 18:85:95:59:11:37:8b:c4:73:1f:7b:28:ac:5a:0e:0e:da:d0: 64:29:47:3a:91:5a:3d:46:b6:a2:29:03:56:29:61:de:79:d4: 4b:31:7d:7d:45:dc:dd:40:ac:64:ce:54:fd:9d:08:fc:fd:a2: a9:7a:83:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lqx9cPLta8Q2F+CiHc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNTY1ODVmNjcyZDA5ZTFkNzdjZTVlYWY0ZTNlMTUxZjg2 MGFlODYwHhcNMjUxMjA2MDQwMTI2WhcNMjUxMjA3MDQwMTI2WjAzMTEwLwYDVQQD EygxZDUyMmU4MGYwYmEzNGRjMDNiYzE3OWE1MjlkMGZiZDA1OWE3N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jCdWoCERnVVIqyjbkIyR4zfqiYB H68KaZiqRVmOxSOtKGGh6VComntwkX4GB0E9GvuX4McdH6lgk/V/gHq44KRildw6 SzCQcKjUG5SeGNfn6j8wMprTUB0dzq3yIWDAyS8wYmHTaz+aZOTXggJ00k41EBH4 9RUxJyNQA7/bdO2G/3u5kPa1MATDG2RfMU758lGlihZCskhOE671qrrt7GKVwkwi pduLCppY1XegIoJyIvaKgWksh5zZNjFjO5mkPPHDrqTBsXXz66u+xLCutwXd7D9E v3ffeUgiWaSXwC6FvFZlonTwyDY3q8cy6FJaRQ5Q4oU++pPSDh0veSsHcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1SLoDwujTcA7wXmlKdD70FmnfkMB8GA1UdIwQY MBaAFMJWWF9nLQnh13zl6vTj4VH4YK6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2xaWVgyY3RDZUhYZk9YcTlPUGhVZmhncm9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy82YzI1NDUtZGY5OS00NzhjLThiNzYt YzUwYTAxYjZlZTA2LzEvd2xaWVgyY3RDZUhYZk9YcTlPUGhVZmhncm9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy82YzI1NDUtZGY5OS00NzhjLThiNzYtYzUwYTAxYjZlZTA2 LzEvd2xaWVgyY3RDZUhYZk9YcTlPUGhVZmhncm9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANehVZ+FB dI4FSZbleMrpYebcyOljfOxjZItHQs+yi/mgz7x9Zj4mSX1BJlRsFAtUtT/j92Vv lFhjt29hGz7XgIw2+mO9aoQPuyNcndqxDViU8jM5Qq3f5eaFhBhvRYM69GHVnm6y NkjXjs1VNqKaQ7sv6BMQ2ZA8/L1lR8HCtpjX/ouULYkriCP1q3s2ENyxi8xzyEV/ Jq+bbu6G/yaWsIncg6rdwZH+SLNf5TjXV1mJoEyuRGGqbcq+ef6Ru4jVa5R7RQtM GIWVWRE3i8RzH3sorFoODtrQZClHOpFaPUa2oikDVilh3nnUSzF9fUXc3UCsZM5U /Z0I/P2iqXqDVg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:39 2025 by rpki-client