This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft File: w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json) Hash identifier: PPznxQXQXbRKz4W3tbioRjWZVIVmg0jjne+IVUdhKmA= Subject key identifier: 1A:1B:97:5B:AA:A8:F1:02:F8:B7:C7:F3:5D:71:19:B9:A4:86:40:A0 Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1 Certificate issuer: /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1 Certificate serial: 019AF19B11D5FF5567AA1C0E051C4D2027AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft Manifest number: 0D3B Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: cxpfkZF0G5sgwEcV47SOMyOxZkV21ZLVOvcKpsWU6vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:11:d5:ff:55:67:aa:1c:0e:05:1c:4d:20:27:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=1a1b975baaa8f102f8b7c7f35d7119b9a48640a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c5:45:e1:2e:af:4a:fb:6b:5e:f5:28:93:17: bb:c6:a9:31:e8:1e:af:55:17:90:a1:4c:fc:1c:79: ad:3e:d0:63:27:8e:c5:31:20:3d:48:4f:3d:0d:da: 6c:cb:7d:e9:33:e9:b8:af:fd:00:e1:b5:0a:fc:ae: 5f:a8:25:6a:5a:57:94:6c:b9:d3:a2:db:41:20:60: 2e:3a:a2:27:08:62:7a:c2:42:c7:78:a3:05:3e:4d: 0f:de:69:4a:17:49:55:89:e0:0e:e3:cb:aa:95:17: f0:ab:c0:2e:26:63:82:aa:14:b3:f9:3f:09:8b:c8: 0b:08:f9:1e:25:27:fb:3f:53:3f:da:f7:bc:10:f2: 2a:fe:68:90:27:56:9b:da:c2:c9:f9:2f:8b:1c:9e: ac:ab:ee:d2:06:70:33:b4:e5:86:e5:c5:e4:89:2d: c5:54:78:1c:08:ab:16:51:8f:f5:93:a0:17:d8:96: 12:ab:70:98:9e:95:bb:7a:01:4f:4a:ce:6a:26:8f: 67:2b:44:4d:1f:99:d5:7d:41:5e:59:69:a9:b6:82: 89:59:ad:d4:fd:08:e2:8e:f5:c0:d8:3b:fb:d3:f2: eb:97:66:ab:85:65:19:22:35:37:7b:f9:33:bc:20: 0f:87:ab:5a:06:81:82:87:96:bd:fb:83:32:03:bb: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:1B:97:5B:AA:A8:F1:02:F8:B7:C7:F3:5D:71:19:B9:A4:86:40:A0 X509v3 Authority Key Identifier: keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b8:c3:42:d8:bc:15:73:24:ce:68:aa:e5:71:da:ca:3c:86: 2d:ef:4e:7c:b7:9b:cd:90:4d:7b:48:99:d1:11:84:c8:75:67: 85:6d:1e:04:ec:85:65:c7:ca:80:89:a8:f4:b7:76:40:bd:80: af:8c:93:80:2a:0f:00:d8:71:f4:57:89:93:33:0b:f5:9b:56: c2:54:d4:0e:d6:94:23:71:4c:2f:52:81:ae:3d:ff:43:84:79: 6a:94:16:09:42:a8:f2:63:be:94:fb:0d:d7:52:02:e8:d3:19: 7b:91:53:07:78:3d:99:49:ed:17:ac:51:69:38:57:84:d5:7b: 58:83:d0:92:da:94:d5:64:4e:c0:ff:89:27:99:cd:f4:37:18: d6:5b:00:fc:2c:af:23:90:10:98:e8:59:24:1d:34:17:f8:a9: 4e:e6:ec:80:3a:6c:3d:ee:99:6b:6f:af:1c:78:51:52:9d:88: cc:9b:2a:81:a3:65:5c:77:07:25:dc:a3:60:f1:80:61:27:81: 23:90:19:92:6b:37:f1:ed:d8:92:44:87:50:9e:f1:68:ad:6d: 88:6a:9c:15:82:b4:72:58:53:a2:15:85:aa:19:ab:d4:9c:25: da:39:c5:d7:84:a7:b5:03:3b:00:65:f7:ec:43:1c:be:0a:2f: c1:f9:47:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxHV/1VnqhwOBRxNICesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZjViNDRlMjRhNzE4Y2ZiMjM4ZDE0YmJjNzU1ZWYxNTJm Mjk1YzEwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EygxYTFiOTc1YmFhYThmMTAyZjhiN2M3ZjM1ZDcxMTliOWE0ODY0MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cVF4S6vSvtrXvUokxe7xqkx6B6v VReQoUz8HHmtPtBjJ47FMSA9SE89Ddpsy33pM+m4r/0A4bUK/K5fqCVqWleUbLnT ottBIGAuOqInCGJ6wkLHeKMFPk0P3mlKF0lVieAO48uqlRfwq8AuJmOCqhSz+T8J i8gLCPkeJSf7P1M/2ve8EPIq/miQJ1ab2sLJ+S+LHJ6sq+7SBnAztOWG5cXkiS3F VHgcCKsWUY/1k6AX2JYSq3CYnpW7egFPSs5qJo9nK0RNH5nVfUFeWWmptoKJWa3U /QjijvXA2Dv70/Lrl2arhWUZIjU3e/kzvCAPh6taBoGCh5a9+4MyA7u0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBobl1uqqPEC+LfH811xGbmkhkCgMB8GA1UdIwQY MBaAFMP1tE4kpxjPsjjRS7x1XvFS8pXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82Yjc0ODUtYTI2NS00ZTI5LWIyN2Qt MWJjMGM3YmFmNWUzLzEvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC82Yjc0ODUtYTI2NS00ZTI5LWIyN2QtMWJjMGM3YmFmNWUz LzEvd19XMFRpU25HTS15T05GTHZIVmU4Vkx5bGNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjrjDQti8 FXMkzmiq5XHayjyGLe9OfLebzZBNe0iZ0RGEyHVnhW0eBOyFZcfKgImo9Ld2QL2A r4yTgCoPANhx9FeJkzML9ZtWwlTUDtaUI3FML1KBrj3/Q4R5apQWCUKo8mO+lPsN 11IC6NMZe5FTB3g9mUntF6xRaThXhNV7WIPQktqU1WROwP+JJ5nN9DcY1lsA/Cyv I5AQmOhZJB00F/ipTubsgDpsPe6Za2+vHHhRUp2IzJsqgaNlXHcHJdyjYPGAYSeB I5AZkms38e3YkkSHUJ7xaK1tiGqcFYK0clhTohWFqhmr1Jwl2jnF14SntQM7AGX3 7EMcvgovwflHNg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:29 2025 by rpki-client