This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft File: W71p2ZhITBOfrBJlpkV0XzMzzx0.mft (raw, json) Hash identifier: BKXfQPzs4kaQ8usEPLfAJcVzK3WsCFrIV77p223nZhQ= Subject key identifier: F0:F2:1D:0E:34:39:94:9E:3C:29:D1:C4:E9:3B:3C:61:79:AB:D0:A8 Authority key identifier: 5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D Certificate issuer: /CN=5bbd69d998484c139fac1265a645745f3333cf1d Certificate serial: 019B2175ACD2C4E8B93A1F53D5B9E43DFDC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft Manifest number: 1778 Signing time: Mon 15 Dec 2025 10:01:58 +0000 Manifest this update: Mon 15 Dec 2025 10:01:58 +0000 Manifest next update: Tue 16 Dec 2025 10:01:58 +0000 Files and hashes: 1: W71p2ZhITBOfrBJlpkV0XzMzzx0.crl (hash: GonSq+7tB7etGrIWwlyngI0zhmQBliLhlusMyUR0bTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:ac:d2:c4:e8:b9:3a:1f:53:d5:b9:e4:3d:fd:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bbd69d998484c139fac1265a645745f3333cf1d Validity Not Before: Dec 15 10:01:58 2025 GMT Not After : Dec 16 10:01:58 2025 GMT Subject: CN=f0f21d0e3439949e3c29d1c4e93b3c6179abd0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e3:4d:46:db:85:84:da:70:20:b8:ba:7a:4a: 67:91:fd:0e:d9:30:36:99:61:03:3b:1b:63:d7:73: 73:a0:bc:fc:6f:44:ea:5b:6e:c0:9a:67:3f:f0:ba: 3f:58:b1:d0:9b:d5:d1:25:2c:fb:91:d6:51:cb:29: 27:c9:16:e5:c2:65:aa:4c:30:9b:86:a1:66:ec:11: f0:68:57:7c:39:d0:d5:b8:11:5a:46:3f:e7:46:00: 6a:17:21:cb:14:65:1f:ea:7f:39:f1:ca:05:7a:98: 38:24:f3:d4:05:34:2a:17:09:a5:82:99:ca:65:41: 0f:20:b5:44:f3:fe:e0:82:a4:49:24:7f:75:be:a9: 73:52:dd:f6:2e:93:ce:65:48:71:b1:f9:34:a6:84: b0:34:c7:be:7a:6a:cd:33:2e:d6:44:22:4a:19:1e: 78:97:93:b2:f7:46:b6:93:d3:46:e3:35:58:49:5c: 5d:f0:7b:b9:5e:04:6d:dc:40:8c:68:5c:28:36:30: d0:8d:0c:da:db:33:df:4c:82:33:c5:54:3b:e0:0e: 6a:a7:c4:30:58:95:45:e2:2b:84:e6:af:b0:d3:f5: a8:fc:ae:9d:96:33:03:71:ee:32:24:7b:b0:9e:45: 28:f8:90:c6:e0:21:7a:39:d8:5e:cb:21:46:5f:6d: 86:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F2:1D:0E:34:39:94:9E:3C:29:D1:C4:E9:3B:3C:61:79:AB:D0:A8 X509v3 Authority Key Identifier: keyid:5B:BD:69:D9:98:48:4C:13:9F:AC:12:65:A6:45:74:5F:33:33:CF:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W71p2ZhITBOfrBJlpkV0XzMzzx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/13f984-a000-4efb-9430-cfa97384bc9a/1/W71p2ZhITBOfrBJlpkV0XzMzzx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:48:c8:fd:11:47:13:69:b1:b2:ad:38:fd:f6:94:e1:88:55: c0:f5:f3:16:cd:8b:b8:92:94:37:00:45:1c:d4:eb:66:7b:41: d4:66:f5:25:6a:06:c9:88:f9:45:28:e6:36:d4:ac:ab:ea:99: 65:41:b2:dd:aa:7f:fb:b3:9d:69:2a:11:a3:c5:13:ee:c2:64: ba:5f:c0:ab:d7:f3:83:ba:10:ea:a7:4c:cc:b8:92:f7:37:a8: ab:60:90:76:68:8d:d8:20:80:11:1d:cf:b2:d2:b6:44:52:3f: d7:8f:ff:f9:8b:d5:9f:2b:83:68:28:67:19:01:ca:a3:45:67: 89:bb:75:49:86:bb:80:e6:3a:97:ba:bc:97:9a:ef:f8:b0:22: b9:20:40:a3:d4:c6:ca:4c:f0:32:eb:f2:fa:80:bc:98:76:72: 24:eb:38:01:57:11:5f:d1:ce:ee:fc:37:30:43:60:4c:16:ed: 07:7c:83:8e:ba:55:a1:b1:4a:f6:8d:82:a4:61:8a:5b:89:ce: 46:19:59:f4:7a:30:c7:9b:98:1e:0c:f0:f0:4f:51:26:4c:bb: d4:c3:7c:9e:89:e2:ef:4e:e7:c2:fe:96:15:40:af:35:ac:6a: fb:37:54:cc:4b:61:a9:77:0e:07:e2:f7:04:66:87:c6:ea:c4: d1:5c:de:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdazSxOi5Oh9T1bnkPf3CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViYmQ2OWQ5OTg0ODRjMTM5ZmFjMTI2NWE2NDU3NDVmMzMz M2NmMWQwHhcNMjUxMjE1MTAwMTU4WhcNMjUxMjE2MTAwMTU4WjAzMTEwLwYDVQQD EyhmMGYyMWQwZTM0Mzk5NDllM2MyOWQxYzRlOTNiM2M2MTc5YWJkMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uNNRtuFhNpwILi6ekpnkf0O2TA2 mWEDOxtj13NzoLz8b0TqW27Ammc/8Lo/WLHQm9XRJSz7kdZRyyknyRblwmWqTDCb hqFm7BHwaFd8OdDVuBFaRj/nRgBqFyHLFGUf6n858coFepg4JPPUBTQqFwmlgpnK ZUEPILVE8/7ggqRJJH91vqlzUt32LpPOZUhxsfk0poSwNMe+emrNMy7WRCJKGR54 l5Oy90a2k9NG4zVYSVxd8Hu5XgRt3ECMaFwoNjDQjQza2zPfTIIzxVQ74A5qp8Qw WJVF4iuE5q+w0/Wo/K6dljMDce4yJHuwnkUo+JDG4CF6OdheyyFGX22G6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPDyHQ40OZSePCnRxOk7PGF5q9CoMB8GA1UdIwQY MBaAFFu9admYSEwTn6wSZaZFdF8zM88dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAt Y2ZhOTczODRiYzlhLzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8xM2Y5ODQtYTAwMC00ZWZiLTk0MzAtY2ZhOTczODRiYzlh LzEvVzcxcDJaaElUQk9mckJKbHBrVjBYek16engwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvkjI/RFH E2mxsq04/faU4YhVwPXzFs2LuJKUNwBFHNTrZntB1Gb1JWoGyYj5RSjmNtSsq+qZ ZUGy3ap/+7OdaSoRo8UT7sJkul/Aq9fzg7oQ6qdMzLiS9zeoq2CQdmiN2CCAER3P stK2RFI/14//+YvVnyuDaChnGQHKo0Vnibt1SYa7gOY6l7q8l5rv+LAiuSBAo9TG ykzwMuvy+oC8mHZyJOs4AVcRX9HO7vw3MENgTBbtB3yDjrpVobFK9o2CpGGKW4nO RhlZ9Howx5uYHgzw8E9RJky71MN8noni707nwv6WFUCvNaxq+zdUzEthqXcOB+L3 BGaHxurE0VzeOw== -----END CERTIFICATE-----Generated at Mon Dec 15 15:04:05 2025 by rpki-client