This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft File: WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json) Hash identifier: pOHGd7bYNPno5SrVLVLTtGonqQIpn3H503e8QeuM38s= Subject key identifier: 34:40:E2:59:9C:1D:09:CD:3C:14:AB:BD:2D:26:31:56:3F:26:9D:CD Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34 Certificate issuer: /CN=582043c01d7adeadd96f56bdbbef2748e0080234 Certificate serial: 019AF208E0F3E2783516ADD632E912589CC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft Manifest number: 03D9 Signing time: Sat 06 Dec 2025 05:00:59 +0000 Manifest this update: Sat 06 Dec 2025 05:00:59 +0000 Manifest next update: Sun 07 Dec 2025 05:00:59 +0000 Files and hashes: 1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: kk3HhOWn8QrH9RCR0Rir16SowTo1LLty+/zCAC8aux8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e0:f3:e2:78:35:16:ad:d6:32:e9:12:58:9c:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234 Validity Not Before: Dec 6 05:00:59 2025 GMT Not After : Dec 7 05:00:59 2025 GMT Subject: CN=3440e2599c1d09cd3c14abbd2d2631563f269dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c6:88:31:98:f3:74:45:16:b8:f2:70:70:83: 5f:8b:98:c5:0d:84:7f:24:2b:2c:33:ae:86:3a:72: bc:57:cf:93:cf:53:18:cf:86:2c:86:99:ca:77:ba: 60:3b:07:14:da:23:9b:34:0a:dc:fe:10:0a:26:78: 1b:60:f0:3a:25:d7:28:bc:5c:8e:98:6e:19:2c:18: 0b:07:e5:93:c1:c6:ab:f1:b2:f5:1a:78:1e:8e:ef: b0:e2:66:a9:ef:22:c6:5a:64:7f:42:65:0a:82:be: 0c:45:6d:42:98:77:fd:05:d2:d0:1a:42:2d:b6:62: b7:5e:74:cc:a2:04:28:e9:4d:36:0f:be:52:5d:b3: e3:7a:bb:f3:15:ca:61:0e:6e:d9:a4:bd:5b:7b:bb: 2e:d6:eb:e0:91:05:24:88:aa:e7:c8:67:15:80:88: 0f:25:fd:77:78:44:2d:c9:b2:7e:70:16:77:df:44: 05:5a:90:fc:57:51:6e:8a:08:e1:c2:a3:5b:ff:10: cb:05:5b:f3:48:2c:51:0f:d0:dd:22:65:12:a2:38: 23:f6:7e:18:fa:5c:e5:93:3c:44:29:4f:af:41:bc: 10:41:1b:f0:06:e4:af:73:10:72:c8:02:15:6b:e2: 30:92:ca:fb:3e:52:d6:87:0c:62:b1:d1:30:2f:ec: 1c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:40:E2:59:9C:1D:09:CD:3C:14:AB:BD:2D:26:31:56:3F:26:9D:CD X509v3 Authority Key Identifier: keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:47:aa:3b:b4:8a:86:a1:45:0e:e2:61:f6:71:f6:29:4d:2c: a3:45:9c:a4:1d:0c:45:63:0e:84:d4:d6:06:9e:d5:50:14:8d: 44:d6:52:d2:b2:00:f9:2a:5a:9a:cd:02:1e:11:c9:e6:66:f4: c8:12:d9:18:7c:89:69:c6:45:d6:8d:95:c3:96:2f:0d:8e:1f: 73:47:73:2c:cb:6b:d2:96:95:f4:7c:a0:8d:3d:d8:2d:bd:7b: 8a:f2:a6:ae:a8:ec:1b:c3:80:0a:2b:65:7e:83:fb:ac:cd:92: ee:18:c5:2a:5d:7c:fb:30:15:f5:a0:ad:f8:d5:c3:dd:2c:84: a0:e5:80:bd:12:cd:03:65:7c:e4:fe:60:48:c1:04:e2:9a:c5: 87:4f:d1:19:04:c4:f3:3b:76:24:f7:3e:d2:6e:fc:0c:95:01: 4a:df:25:94:c7:f4:1a:9e:99:72:ef:df:97:9e:31:71:76:07: 4b:bd:e1:33:f1:3c:21:d5:a5:ad:aa:7d:1d:5a:14:08:a6:f7: 5e:6a:f0:f5:55:cb:4e:5b:c2:75:95:e6:eb:e5:57:b5:19:6c: b2:4f:bf:85:e3:39:05:d4:06:ea:3a:a9:80:4e:ed:93:a6:99: b6:d3:3a:ef:89:b4:06:ea:73:f8:25:fa:c0:1a:47:a7:34:d6: 9e:62:f9:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCODz4ng1Fq3WMukSWJzIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MjA0M2MwMWQ3YWRlYWRkOTZmNTZiZGJiZWYyNzQ4ZTAw ODAyMzQwHhcNMjUxMjA2MDUwMDU5WhcNMjUxMjA3MDUwMDU5WjAzMTEwLwYDVQQD EygzNDQwZTI1OTljMWQwOWNkM2MxNGFiYmQyZDI2MzE1NjNmMjY5ZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMaIMZjzdEUWuPJwcINfi5jFDYR/ JCssM66GOnK8V8+Tz1MYz4YshpnKd7pgOwcU2iObNArc/hAKJngbYPA6JdcovFyO mG4ZLBgLB+WTwcar8bL1Gngeju+w4map7yLGWmR/QmUKgr4MRW1CmHf9BdLQGkIt tmK3XnTMogQo6U02D75SXbPjervzFcphDm7ZpL1be7su1uvgkQUkiKrnyGcVgIgP Jf13eEQtybJ+cBZ330QFWpD8V1FuigjhwqNb/xDLBVvzSCxRD9DdImUSojgj9n4Y +lzlkzxEKU+vQbwQQRvwBuSvcxByyAIVa+Iwksr7PlLWhwxisdEwL+wclQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRA4lmcHQnNPBSrvS0mMVY/Jp3NMB8GA1UdIwQY MBaAFFggQ8Adet6t2W9WvbvvJ0jgCAI0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYt NjA3MzY4NTljMGM0LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hNzQ0YzQtNWMyNC00OGMyLWFiMDYtNjA3MzY4NTljMGM0 LzEvV0NCRHdCMTYzcTNaYjFhOXUtOG5TT0FJQWpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0eqO7SK hqFFDuJh9nH2KU0so0WcpB0MRWMOhNTWBp7VUBSNRNZS0rIA+Spams0CHhHJ5mb0 yBLZGHyJacZF1o2Vw5YvDY4fc0dzLMtr0paV9HygjT3YLb17ivKmrqjsG8OACitl foP7rM2S7hjFKl18+zAV9aCt+NXD3SyEoOWAvRLNA2V85P5gSMEE4prFh0/RGQTE 8zt2JPc+0m78DJUBSt8llMf0Gp6Zcu/fl54xcXYHS73hM/E8IdWlrap9HVoUCKb3 Xmrw9VXLTlvCdZXm6+VXtRlssk+/heM5BdQG6jqpgE7tk6aZttM674m0Bupz+CX6 wBpHpzTWnmL5pA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:09:52 2025 by rpki-client