This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft File: wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json) Hash identifier: ZWfWIMb3Lq3keajX+fue4XA3CdkTMKEAq62zq2oNPls= Subject key identifier: C5:78:6A:05:0B:F3:13:96:2D:88:DA:98:9A:92:84:BA:BE:ED:6A:1B Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9 Certificate issuer: /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9 Certificate serial: 019AF12D93DCBCDEFEFB44F175035A45301A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft Manifest number: 027D Signing time: Sat 06 Dec 2025 01:01:27 +0000 Manifest this update: Sat 06 Dec 2025 01:01:27 +0000 Manifest next update: Sun 07 Dec 2025 01:01:27 +0000 Files and hashes: 1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: ckpRhIp3m9G6eMjE1MZYjEMulRhDkhVUfNn+2epXP7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:93:dc:bc:de:fe:fb:44:f1:75:03:5a:45:30:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9 Validity Not Before: Dec 6 01:01:27 2025 GMT Not After : Dec 7 01:01:27 2025 GMT Subject: CN=c5786a050bf313962d88da989a9284babeed6a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5f:f9:a8:79:fb:bc:4b:12:bc:03:ad:21:cf: 6c:15:09:24:e4:22:44:f8:d2:ec:5f:8f:a4:74:c2: 49:7c:17:72:64:3a:0d:7b:97:19:e7:e2:a8:66:0a: 59:2d:4e:43:8c:e8:8c:f9:a1:4e:43:20:50:0f:c6: ce:50:14:34:3c:82:c9:8c:bd:b8:38:38:6d:9f:5a: b8:18:98:0e:f4:89:22:a6:e0:b3:4b:75:9c:5c:2c: 01:08:a1:05:5d:25:91:89:03:0a:9b:c5:b2:bb:f3: 46:ef:6d:6f:ca:f0:c9:36:85:95:06:57:5d:67:5d: a5:c1:d4:db:43:3e:5d:39:cf:1c:38:9f:c8:a7:9c: d3:08:e5:b7:44:7a:da:e8:1e:ee:f9:7a:b9:ea:48: fe:00:b1:51:0d:90:3c:e1:41:f0:fb:26:a2:19:b6: 39:ea:8d:6d:1b:df:0e:2c:08:13:11:2a:70:ae:07: 27:0b:73:d7:b9:7e:5d:bc:60:d8:99:56:11:3a:32: 89:9d:28:31:f2:6a:0b:72:06:d7:23:31:90:54:05: 0b:51:a6:94:fe:bd:1e:8f:59:1c:db:a5:1e:a0:f3: 99:d2:6b:9a:1e:13:46:b9:77:97:7d:60:fa:bd:a7: 39:2f:b3:6f:57:8b:01:b8:4f:f8:41:c3:18:a6:ee: ab:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:78:6A:05:0B:F3:13:96:2D:88:DA:98:9A:92:84:BA:BE:ED:6A:1B X509v3 Authority Key Identifier: keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:b7:a5:65:a0:a7:2a:54:d1:a9:2c:9a:f7:d0:b1:9b:11:07: a4:7c:40:b0:13:50:68:af:9c:be:1f:e8:96:91:c7:8a:18:86: 55:7a:7c:e1:c0:fa:4c:b1:42:fe:7d:f2:8b:60:81:e6:ca:e0: 1c:22:c6:db:be:5b:f6:09:f6:c0:b8:aa:01:3a:72:b4:22:5e: 4e:5f:43:ee:3b:a0:6d:d0:fd:f5:40:90:02:65:66:92:a1:ea: 9d:f3:6f:04:b7:60:62:6d:46:62:e5:33:71:f2:7f:c6:88:3d: 65:0f:7e:5a:e2:e7:e2:69:25:d7:66:ca:1b:a6:c0:46:46:65: 7a:a3:f7:16:ad:9c:82:bf:b4:c3:2e:3b:b2:f4:76:ef:4e:7f: 0d:ae:fb:1c:b4:03:a4:37:c5:51:2f:42:90:bc:f8:b0:89:01: 05:b0:49:4b:03:c3:f7:4e:4a:32:05:e0:5a:8d:80:a9:61:c2: 17:f6:f4:24:cf:d0:60:6b:28:22:68:fa:1b:70:06:e8:4b:f0: e4:47:aa:c3:64:1d:33:97:0f:0a:81:55:58:ce:2e:ff:2d:b7: 9d:b3:bd:d6:b3:54:a8:dc:17:09:2f:3b:10:ea:55:e6:aa:d6: 4e:11:11:1f:5a:cc:c0:62:1d:e6:e8:ac:97:31:71:c4:bd:b4: 9c:7d:7f:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZPcvN7++0TxdQNaRTAaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxOTVjOTBiYTI1ZDBkZTgxOTU3NTc4Yzc4Y2I3YjI0ZThj OTNlYzkwHhcNMjUxMjA2MDEwMTI3WhcNMjUxMjA3MDEwMTI3WjAzMTEwLwYDVQQD EyhjNTc4NmEwNTBiZjMxMzk2MmQ4OGRhOTg5YTkyODRiYWJlZWQ2YTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1/5qHn7vEsSvAOtIc9sFQkk5CJE +NLsX4+kdMJJfBdyZDoNe5cZ5+KoZgpZLU5DjOiM+aFOQyBQD8bOUBQ0PILJjL24 ODhtn1q4GJgO9IkipuCzS3WcXCwBCKEFXSWRiQMKm8Wyu/NG721vyvDJNoWVBldd Z12lwdTbQz5dOc8cOJ/Ip5zTCOW3RHra6B7u+Xq56kj+ALFRDZA84UHw+yaiGbY5 6o1tG98OLAgTESpwrgcnC3PXuX5dvGDYmVYROjKJnSgx8moLcgbXIzGQVAULUaaU /r0ej1kc26UeoPOZ0muaHhNGuXeXfWD6vac5L7NvV4sBuE/4QcMYpu6r0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMV4agUL8xOWLYjamJqShLq+7WobMB8GA1UdIwQY MBaAFMGVyQuiXQ3oGVdXjHjLeyToyT7JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQt MTBiOTA3ZmZkMDhmLzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85YzY0ZTItNGI2NC00M2RhLWI5MDQtMTBiOTA3ZmZkMDhm LzEvd1pYSkM2SmREZWdaVjFlTWVNdDdKT2pKUHNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl7elZaCn KlTRqSya99CxmxEHpHxAsBNQaK+cvh/olpHHihiGVXp84cD6TLFC/n3yi2CB5srg HCLG275b9gn2wLiqATpytCJeTl9D7jugbdD99UCQAmVmkqHqnfNvBLdgYm1GYuUz cfJ/xog9ZQ9+WuLn4mkl12bKG6bARkZleqP3Fq2cgr+0wy47svR2705/Da77HLQD pDfFUS9CkLz4sIkBBbBJSwPD905KMgXgWo2AqWHCF/b0JM/QYGsoImj6G3AG6Evw 5Eeqw2QdM5cPCoFVWM4u/y23nbO91rNUqNwXCS87EOpV5qrWThERH1rMwGId5uis lzFxxL20nH1/uA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:31 2025 by rpki-client