This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft File: _-W67rcNfV5-7SxR09WEe7NhtFU.mft (raw, json) Hash identifier: tZqpsnh7rrnexs4oMvqiJjeqWZFcBWkTgHsYzxUtcB4= Subject key identifier: 6E:A0:58:BD:BD:B8:FB:FF:D1:C9:C0:06:AB:6F:35:3B:7C:B6:66:B4 Authority key identifier: FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55 Certificate issuer: /CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455 Certificate serial: 019B2BF8769B434AF1F6EFA3EDE568FDD1DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft Manifest number: 02FE Signing time: Wed 17 Dec 2025 11:01:02 +0000 Manifest this update: Wed 17 Dec 2025 11:01:02 +0000 Manifest next update: Thu 18 Dec 2025 11:01:02 +0000 Files and hashes: 1: _-W67rcNfV5-7SxR09WEe7NhtFU.crl (hash: RLrZmcILKiKHt82QzFMpIdOcWJMPYfF0KPOw1qffih0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:76:9b:43:4a:f1:f6:ef:a3:ed:e5:68:fd:d1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffe5baeeb70d7d5e7eed2c51d3d5847bb361b455 Validity Not Before: Dec 17 11:01:02 2025 GMT Not After : Dec 18 11:01:02 2025 GMT Subject: CN=6ea058bdbdb8fbffd1c9c006ab6f353b7cb666b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:de:92:83:01:16:d7:a2:00:08:50:75:a6:98: ec:26:6e:85:33:b5:1b:11:de:73:ad:92:97:02:11: 2e:6f:7c:eb:43:8e:b7:39:cf:7c:2d:8b:f4:07:d1: 0d:47:e0:2c:de:a3:e4:e4:a1:b3:5c:ca:45:10:c2: 0f:99:e3:54:07:b8:14:18:7d:05:7b:eb:c7:41:6e: 98:43:3c:47:4f:86:10:18:b5:03:97:c5:58:50:01: b6:35:5a:3e:58:8e:e6:2f:ea:92:30:1f:f6:1c:34: e3:9c:69:73:62:d2:c8:96:ce:0d:46:7c:56:1f:1f: 64:a9:af:c3:5e:a8:a2:4f:57:06:bc:48:af:e5:b7: e6:65:f8:ea:e4:60:51:a0:3f:2c:3d:10:2d:18:9f: fc:57:6e:06:2b:d3:c5:0d:49:09:c0:7d:7c:49:f7: e1:55:3a:6d:f9:23:72:17:de:29:00:c9:29:19:58: ea:93:3c:38:6e:25:cf:cf:8c:e1:81:7d:22:70:ff: c6:9e:a5:77:5f:4c:a0:f7:bc:e6:37:f9:e9:91:4a: d9:2f:75:11:2f:3f:90:f9:29:dc:4c:eb:3c:87:19: ad:15:27:42:b2:4c:ca:33:d7:eb:1d:1b:17:42:7b: e7:19:bf:25:71:1a:91:4d:95:23:34:b5:42:41:1e: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A0:58:BD:BD:B8:FB:FF:D1:C9:C0:06:AB:6F:35:3B:7C:B6:66:B4 X509v3 Authority Key Identifier: keyid:FF:E5:BA:EE:B7:0D:7D:5E:7E:ED:2C:51:D3:D5:84:7B:B3:61:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-W67rcNfV5-7SxR09WEe7NhtFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d2b23b-63e2-4cc0-a87e-cd0b26b4ecb8/1/_-W67rcNfV5-7SxR09WEe7NhtFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:28:31:36:23:56:ba:7e:22:62:40:1c:70:84:40:91:66:56: 59:47:e6:89:ae:03:7d:ca:42:7e:f5:38:a3:eb:6f:02:cc:9c: 62:62:7f:66:3b:19:c4:d0:91:ee:a9:df:cb:c0:7f:5e:85:c1: ad:d7:fd:31:75:ba:5d:e6:82:1f:ff:4b:4b:3a:ab:c6:eb:e2: 16:87:34:af:22:e5:8b:bf:85:e8:dc:c7:45:8f:a7:50:02:51: 66:f9:28:f1:27:a3:62:50:6b:82:a3:ac:65:a2:f1:c1:a1:ae: ba:91:02:28:54:89:2e:c1:b8:8a:33:ff:f8:b7:94:27:0a:70: 29:87:8c:90:4c:af:b5:7c:dd:50:b3:47:07:8f:6b:ba:b4:4c: 49:b9:a0:3a:36:64:66:f5:11:30:db:c3:ba:c8:81:0a:03:23: 2a:47:dc:9c:3f:02:3f:14:5c:b0:ca:dc:b2:9e:c5:e7:c4:c6: cb:bc:7f:9b:2e:ce:a2:30:12:9c:94:67:20:ce:bd:07:9d:a0: e2:24:f0:ad:8a:1d:33:88:45:80:6f:bd:cd:b1:89:cb:cf:4e: b0:c6:b0:3b:c1:71:5e:7a:af:35:1d:8b:17:b4:e7:2c:91:0b: 41:da:28:b2:51:92:36:0f:13:1a:d1:cb:a4:36:37:5f:b8:90: bd:c3:f1:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+HabQ0rx9u+j7eVo/dHfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZTViYWVlYjcwZDdkNWU3ZWVkMmM1MWQzZDU4NDdiYjM2 MWI0NTUwHhcNMjUxMjE3MTEwMTAyWhcNMjUxMjE4MTEwMTAyWjAzMTEwLwYDVQQD Eyg2ZWEwNThiZGJkYjhmYmZmZDFjOWMwMDZhYjZmMzUzYjdjYjY2NmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t6SgwEW16IACFB1ppjsJm6FM7Ub Ed5zrZKXAhEub3zrQ463Oc98LYv0B9ENR+As3qPk5KGzXMpFEMIPmeNUB7gUGH0F e+vHQW6YQzxHT4YQGLUDl8VYUAG2NVo+WI7mL+qSMB/2HDTjnGlzYtLIls4NRnxW Hx9kqa/DXqiiT1cGvEiv5bfmZfjq5GBRoD8sPRAtGJ/8V24GK9PFDUkJwH18Sffh VTpt+SNyF94pAMkpGVjqkzw4biXPz4zhgX0icP/GnqV3X0yg97zmN/npkUrZL3UR Lz+Q+SncTOs8hxmtFSdCskzKM9frHRsXQnvnGb8lcRqRTZUjNLVCQR7C9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6gWL29uPv/0cnABqtvNTt8tma0MB8GA1UdIwQY MBaAFP/luu63DX1efu0sUdPVhHuzYbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXy1XNjdyY05mVjUtN1N4UjA5V0VlN05odEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kMmIyM2ItNjNlMi00Y2MwLWE4N2Ut Y2QwYjI2YjRlY2I4LzEvXy1XNjdyY05mVjUtN1N4UjA5V0VlN05odEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9kMmIyM2ItNjNlMi00Y2MwLWE4N2UtY2QwYjI2YjRlY2I4 LzEvXy1XNjdyY05mVjUtN1N4UjA5V0VlN05odEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiSgxNiNW un4iYkAccIRAkWZWWUfmia4DfcpCfvU4o+tvAsycYmJ/ZjsZxNCR7qnfy8B/XoXB rdf9MXW6XeaCH/9LSzqrxuviFoc0ryLli7+F6NzHRY+nUAJRZvko8SejYlBrgqOs ZaLxwaGuupECKFSJLsG4ijP/+LeUJwpwKYeMkEyvtXzdULNHB49rurRMSbmgOjZk ZvURMNvDusiBCgMjKkfcnD8CPxRcsMrcsp7F58TGy7x/my7OojASnJRnIM69B52g 4iTwrYodM4hFgG+9zbGJy89OsMawO8FxXnqvNR2LF7TnLJELQdooslGSNg8TGtHL pDY3X7iQvcPxlQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:21:41 2025 by rpki-client