This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft File: wKopmx5fodUSbfrXXf1Km65EOhc.mft (raw, json) Hash identifier: K9Q2u6v+kP+e7uMLzdc1tGIQvYAl1abKGvUUfNds9tE= Subject key identifier: C2:85:64:55:95:BD:08:BD:0B:57:20:D8:52:35:3E:E9:92:71:BC:DC Authority key identifier: C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17 Certificate issuer: /CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17 Certificate serial: 019B46278F9D442FE5E4760975007CA94863 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft Manifest number: 06C7 Signing time: Mon 22 Dec 2025 13:02:36 +0000 Manifest this update: Mon 22 Dec 2025 13:02:36 +0000 Manifest next update: Tue 23 Dec 2025 13:02:36 +0000 Files and hashes: 1: wKopmx5fodUSbfrXXf1Km65EOhc.crl (hash: mJ+XYC4Y2xlaHL4B0ns9D8FEJX3E3Lf1Q1sEDj9DWac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:8f:9d:44:2f:e5:e4:76:09:75:00:7c:a9:48:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0aa299b1e5fa1d5126dfad75dfd4a9bae443a17 Validity Not Before: Dec 22 13:02:36 2025 GMT Not After : Dec 23 13:02:36 2025 GMT Subject: CN=c285645595bd08bd0b5720d852353ee99271bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2b:52:fd:3b:ff:1a:63:92:49:0c:5e:16:ce: 7f:82:e7:d0:9e:6e:c0:ff:91:1d:d2:9c:56:3c:7c: aa:36:cf:0e:6d:ac:cf:29:49:13:f5:4a:e3:51:51: 4f:b7:e1:c5:24:b1:fe:62:e8:58:17:7b:b6:77:54: be:06:c5:76:2f:32:e6:d7:d3:f0:69:5e:8f:4c:01: 8c:f4:6a:9c:4b:e0:90:e6:c2:83:71:d4:e6:a9:a9: 68:cd:1a:0f:00:41:4f:46:60:80:03:a0:7a:27:ee: 33:22:35:47:75:6f:2c:fc:70:2d:b6:b7:2f:c3:03: 14:b0:eb:7a:4d:23:aa:b9:82:5b:b1:d9:88:e1:94: 31:c4:0f:13:50:c3:55:96:84:9a:ff:86:1b:43:b4: 88:77:2d:d7:57:90:db:cd:6a:43:24:9d:ea:4a:82: c3:0f:55:37:03:c6:13:7c:eb:4f:ad:6d:bd:7f:fe: a8:fc:ad:86:79:cf:13:4b:2a:7b:6d:50:c7:a6:b6: 3e:07:49:05:d6:54:ec:cc:b7:be:5d:2c:38:dd:11: d6:43:d0:b2:80:e8:c9:c4:51:b0:25:18:10:f2:4c: da:0f:17:61:51:d5:a1:1d:80:0d:70:7d:77:d0:28: 4d:50:69:63:71:32:3b:5f:93:c5:1e:59:53:1e:7d: 38:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:85:64:55:95:BD:08:BD:0B:57:20:D8:52:35:3E:E9:92:71:BC:DC X509v3 Authority Key Identifier: keyid:C0:AA:29:9B:1E:5F:A1:D5:12:6D:FA:D7:5D:FD:4A:9B:AE:44:3A:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKopmx5fodUSbfrXXf1Km65EOhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2fc804-2477-4d6b-8137-704a995e3db6/1/wKopmx5fodUSbfrXXf1Km65EOhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:7a:46:e5:c9:b9:b5:20:26:90:e3:ba:85:0b:38:5c:74:3b: 0b:0b:cc:1f:97:28:dc:22:1e:8c:66:1f:67:b1:db:ed:99:d8: 4f:09:8d:16:4f:29:04:e9:73:d6:f6:8d:fe:e8:38:ce:89:61: 8e:88:6c:bd:34:f5:7b:f3:d3:56:78:41:e2:b1:21:8c:63:9b: 57:9c:4f:87:cf:d2:b2:15:24:82:f4:70:25:f7:fc:0c:9f:ee: 63:9f:f4:76:08:3f:a2:1e:06:94:c5:c7:ba:3d:25:2e:59:10: ee:6b:a7:c2:a2:ca:ac:ef:01:fa:7e:e1:b9:40:e3:f4:56:b5: 6c:70:99:d1:7a:79:49:09:9a:03:ff:cf:4f:22:36:ad:ee:c7: 75:ca:e0:97:ca:0d:e9:21:4d:d5:40:51:88:d1:60:89:88:ad: 9a:57:37:7f:b6:dc:74:f3:e9:59:2b:ee:4d:6b:83:6b:4d:cf: f3:f4:5e:78:67:06:68:f6:3f:61:34:98:b0:5a:ac:5d:eb:78: 8a:5a:50:d7:04:b0:55:c2:2a:47:bf:5e:b5:98:67:0d:e5:e6: 3d:eb:27:21:fe:4c:18:c7:11:4c:19:a6:db:fb:ce:3e:af:6d: 6d:27:a1:4b:92:4f:1e:e2:59:21:8c:62:50:f3:91:79:e9:7b: 1f:26:b7:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ4+dRC/l5HYJdQB8qUhjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYWEyOTliMWU1ZmExZDUxMjZkZmFkNzVkZmQ0YTliYWU0 NDNhMTcwHhcNMjUxMjIyMTMwMjM2WhcNMjUxMjIzMTMwMjM2WjAzMTEwLwYDVQQD EyhjMjg1NjQ1NTk1YmQwOGJkMGI1NzIwZDg1MjM1M2VlOTkyNzFiY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCtS/Tv/GmOSSQxeFs5/gufQnm7A /5Ed0pxWPHyqNs8ObazPKUkT9UrjUVFPt+HFJLH+YuhYF3u2d1S+BsV2LzLm19Pw aV6PTAGM9GqcS+CQ5sKDcdTmqalozRoPAEFPRmCAA6B6J+4zIjVHdW8s/HAttrcv wwMUsOt6TSOquYJbsdmI4ZQxxA8TUMNVloSa/4YbQ7SIdy3XV5DbzWpDJJ3qSoLD D1U3A8YTfOtPrW29f/6o/K2Gec8TSyp7bVDHprY+B0kF1lTszLe+XSw43RHWQ9Cy gOjJxFGwJRgQ8kzaDxdhUdWhHYANcH130ChNUGljcTI7X5PFHllTHn04wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKFZFWVvQi9C1cg2FI1PumScbzcMB8GA1UdIwQY MBaAFMCqKZseX6HVEm361139SpuuRDoXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzct NzA0YTk5NWUzZGI2LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC8yZmM4MDQtMjQ3Ny00ZDZiLTgxMzctNzA0YTk5NWUzZGI2 LzEvd0tvcG14NWZvZFVTYmZyWFhmMUttNjVFT2hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFXpG5cm5 tSAmkOO6hQs4XHQ7CwvMH5co3CIejGYfZ7Hb7ZnYTwmNFk8pBOlz1vaN/ug4zolh johsvTT1e/PTVnhB4rEhjGObV5xPh8/SshUkgvRwJff8DJ/uY5/0dgg/oh4GlMXH uj0lLlkQ7munwqLKrO8B+n7huUDj9Fa1bHCZ0Xp5SQmaA//PTyI2re7Hdcrgl8oN 6SFN1UBRiNFgiYitmlc3f7bcdPPpWSvuTWuDa03P8/ReeGcGaPY/YTSYsFqsXet4 ilpQ1wSwVcIqR79etZhnDeXmPesnIf5MGMcRTBmm2/vOPq9tbSehS5JPHuJZIYxi UPOReel7Hya3aw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:25 2025 by rpki-client