This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft File: wrQuSlwckevE7__xSLMS_nt-iXA.mft (raw, json) Hash identifier: pydw1wNie+//mcOmsGWFhWRWDxOpcLnwv7aivDH0oJ4= Subject key identifier: A2:12:19:DB:FF:7A:81:AF:E4:5D:16:E2:CA:C4:C2:76:69:F1:DD:C9 Authority key identifier: C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70 Certificate issuer: /CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970 Certificate serial: 019AF12CE60BD7F0B891C07F635D321223FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft Manifest number: 03B2 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: wrQuSlwckevE7__xSLMS_nt-iXA.crl (hash: D4FmGeianaTz9GrH6ftCyBvMdMDocuCQIBxBvtzzNac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e6:0b:d7:f0:b8:91:c0:7f:63:5d:32:12:23:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2b42e4a5c1c91ebc4effff148b312fe7b7e8970 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=a21219dbff7a81afe45d16e2cac4c27669f1ddc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:37:bc:9a:82:1f:ae:fe:70:1e:84:86:7b:fb: aa:b3:d5:28:cd:9c:60:db:d1:58:b7:05:05:9a:7d: 87:0a:d8:ac:dc:c6:3d:a8:e9:84:59:b8:74:85:f3: d3:c8:a9:74:3f:92:cd:4d:a3:9d:62:c4:d9:2f:c0: 26:99:57:28:77:b5:3b:31:2d:8d:bd:17:94:7f:3c: 10:9b:a0:17:47:e2:9c:aa:69:b8:83:fd:d9:61:80: 32:ae:aa:57:22:da:ce:35:a8:79:65:0e:90:c0:96: 6e:e2:0a:29:84:dd:e7:a8:3f:de:23:07:f1:05:0d: 65:01:8d:f2:27:f6:79:17:4f:d9:16:0f:2b:27:f7: 25:d6:f1:50:bc:2d:f3:3e:48:0b:27:5d:04:e3:dd: 07:c3:b7:0a:95:a9:fc:28:30:d5:81:c4:2c:a6:f1: 49:a8:8c:f0:13:58:b7:11:4e:26:e7:86:90:30:d2: 50:70:15:1c:51:2b:14:eb:60:49:c2:b8:7f:43:4f: c5:9b:4d:c3:7c:64:9b:e2:52:58:89:dc:9f:32:73: 40:d1:f8:16:aa:5e:63:96:a8:d5:1f:62:48:32:2d: 8a:d5:75:eb:80:58:4c:73:59:66:e2:ee:77:99:07: 51:f4:33:2f:fa:fe:b8:53:22:cf:08:45:73:8f:f6: 0e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:12:19:DB:FF:7A:81:AF:E4:5D:16:E2:CA:C4:C2:76:69:F1:DD:C9 X509v3 Authority Key Identifier: keyid:C2:B4:2E:4A:5C:1C:91:EB:C4:EF:FF:F1:48:B3:12:FE:7B:7E:89:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrQuSlwckevE7__xSLMS_nt-iXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/aa1797-4373-4a2f-a074-c73cbe70abb9/1/wrQuSlwckevE7__xSLMS_nt-iXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:67:43:4f:a6:c2:d4:44:fc:04:e9:89:4c:a9:c1:27:e2:12: 7e:e7:14:90:1a:12:9e:8f:a7:ab:5d:77:40:23:c5:75:b5:e8: 2b:e6:c5:a7:90:d6:af:62:bb:43:30:15:3d:e9:88:ee:26:3a: e5:74:5d:9a:7d:39:a7:db:c0:70:92:e1:53:42:4f:84:42:1f: 20:94:18:fa:6f:29:89:97:55:94:ca:c5:47:bb:9e:32:38:08: 2c:00:68:41:e5:9a:b6:0a:a9:36:33:d7:61:10:ad:f4:4f:be: d3:49:4f:1f:d7:02:52:08:39:6c:f6:ee:86:83:86:9b:72:52: c6:4f:79:45:1a:0f:dd:60:2b:d9:2e:62:30:8f:00:2a:46:fc: 68:f8:81:ed:26:98:06:92:d1:33:90:f9:3d:b8:db:c3:b2:71: c1:c3:cf:4b:b0:ef:d8:77:22:39:21:04:54:53:2f:e4:1e:ec: a7:88:f1:d2:77:e7:5b:6a:8e:e7:93:2c:b5:26:c5:0b:48:fc: fe:c7:67:45:a8:8f:be:0d:f0:e1:4e:16:b6:fa:95:9f:a5:a6: 7c:88:eb:ea:2a:d7:ac:0f:72:91:62:3f:f9:09:1c:58:1a:81: 4b:09:15:c4:9b:d7:75:6f:f0:11:7c:07:46:1e:99:74:b9:0b: c1:73:7d:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOYL1/C4kcB/Y10yEiP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYjQyZTRhNWMxYzkxZWJjNGVmZmZmMTQ4YjMxMmZlN2I3 ZTg5NzAwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD EyhhMjEyMTlkYmZmN2E4MWFmZTQ1ZDE2ZTJjYWM0YzI3NjY5ZjFkZGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuze8moIfrv5wHoSGe/uqs9UozZxg 29FYtwUFmn2HCtis3MY9qOmEWbh0hfPTyKl0P5LNTaOdYsTZL8AmmVcod7U7MS2N vReUfzwQm6AXR+Kcqmm4g/3ZYYAyrqpXItrONah5ZQ6QwJZu4gophN3nqD/eIwfx BQ1lAY3yJ/Z5F0/ZFg8rJ/cl1vFQvC3zPkgLJ10E490Hw7cKlan8KDDVgcQspvFJ qIzwE1i3EU4m54aQMNJQcBUcUSsU62BJwrh/Q0/Fm03DfGSb4lJYidyfMnNA0fgW ql5jlqjVH2JIMi2K1XXrgFhMc1lm4u53mQdR9DMv+v64UyLPCEVzj/YOqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKISGdv/eoGv5F0W4srEwnZp8d3JMB8GA1UdIwQY MBaAFMK0LkpcHJHrxO//8UizEv57folwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQt YzczY2JlNzBhYmI5LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9hYTE3OTctNDM3My00YTJmLWEwNzQtYzczY2JlNzBhYmI5 LzEvd3JRdVNsd2NrZXZFN19feFNMTVNfbnQtaVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGdDT6bC 1ET8BOmJTKnBJ+ISfucUkBoSno+nq113QCPFdbXoK+bFp5DWr2K7QzAVPemI7iY6 5XRdmn05p9vAcJLhU0JPhEIfIJQY+m8piZdVlMrFR7ueMjgILABoQeWatgqpNjPX YRCt9E++00lPH9cCUgg5bPbuhoOGm3JSxk95RRoP3WAr2S5iMI8AKkb8aPiB7SaY BpLRM5D5Pbjbw7JxwcPPS7Dv2HciOSEEVFMv5B7sp4jx0nfnW2qO55MstSbFC0j8 /sdnRaiPvg3w4U4WtvqVn6WmfIjr6irXrA9ykWI/+QkcWBqBSwkVxJvXdW/wEXwH Rh6ZdLkLwXN9xw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:50:09 2025 by rpki-client