This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft File: wb6oOT9qHTeZGYndh1_FMeQIQDE.mft (raw, json) Hash identifier: mmpjA8xuhgkKoGJTBhpgiFFpfshDbv+Hw9NlBdcEj+w= Subject key identifier: 6F:61:93:AF:17:8C:3A:4C:32:D5:21:52:6B:17:DB:9A:AD:3D:0F:9D Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31 Certificate issuer: /CN=c1bea8393f6a1d37991989dd875fc531e4084031 Certificate serial: 019B386A25C0F80208CA11429B50816165DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft Manifest number: 13CA Signing time: Fri 19 Dec 2025 21:00:39 +0000 Manifest this update: Fri 19 Dec 2025 21:00:39 +0000 Manifest next update: Sat 20 Dec 2025 21:00:39 +0000 Files and hashes: 1: wb6oOT9qHTeZGYndh1_FMeQIQDE.crl (hash: d+lQ+6BOpscqqX+OWIv8vve1GxjRB7pwwog88lhVblE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:6a:25:c0:f8:02:08:ca:11:42:9b:50:81:61:65:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031 Validity Not Before: Dec 19 21:00:39 2025 GMT Not After : Dec 20 21:00:39 2025 GMT Subject: CN=6f6193af178c3a4c32d521526b17db9aad3d0f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1d:d6:de:23:e8:e4:f4:fc:48:88:cb:54:dc: 02:86:1b:07:1d:4b:c8:27:85:05:e9:01:bc:7e:d2: e6:12:26:4c:b6:1b:57:f6:b9:dd:f8:af:cf:39:02: 7a:69:98:9c:49:b0:7a:23:e0:02:66:b0:ff:29:6a: 83:ec:1f:f3:0a:f8:c0:f0:f7:7a:9f:4d:02:13:69: fc:bd:26:94:1c:ca:0a:d0:c0:67:55:93:48:f2:c8: 01:8a:da:53:c2:26:40:3a:4e:e6:5e:db:6e:d0:4a: 99:92:e9:19:c8:92:0c:f5:f9:92:8d:ef:44:ff:75: 59:05:ea:05:82:d1:cc:b9:80:87:5e:7d:90:0d:e1: ff:86:9d:8a:32:3d:6d:1b:48:75:2a:9d:a7:bf:2c: c7:34:e2:5a:85:0f:1e:8b:ea:47:11:15:ba:40:3a: af:a5:ee:8b:58:04:8d:2c:7c:7e:25:f0:e2:74:f6: 1a:c3:c0:fb:b1:20:aa:0b:49:93:66:00:09:27:d5: b3:7a:73:6f:b9:d1:b1:66:3c:be:85:b3:84:8c:05: 90:94:73:cd:33:5d:ff:6e:3d:fe:d8:f4:15:39:23: 61:cf:a9:5c:a7:75:76:9a:ef:5c:3e:b4:bc:e5:e5: 9d:01:8b:67:36:95:d4:cf:3b:6d:da:46:f5:cf:d8: 73:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:61:93:AF:17:8C:3A:4C:32:D5:21:52:6B:17:DB:9A:AD:3D:0F:9D X509v3 Authority Key Identifier: keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d0:40:5d:47:43:a1:8b:59:b4:a4:03:16:77:67:9c:d2:94: 7a:0d:d6:3d:e4:16:f3:77:bb:90:fc:dc:b2:cc:6e:69:da:b0: e1:48:20:da:4f:f4:e4:17:81:7d:0c:10:bd:7c:01:9d:ba:5e: 0d:56:0b:ef:c2:7b:82:fd:bf:fa:04:00:fa:67:25:c2:35:3f: 04:64:c6:69:04:4a:8c:79:97:f2:70:64:8b:a1:66:b6:25:64: af:f5:e5:b8:ec:f6:1c:02:5e:08:74:b5:1b:e3:40:c6:6a:14: 5e:d6:ed:16:e1:f3:5a:d8:81:24:b2:7e:5a:92:a1:df:25:29: 21:bf:d0:2a:28:05:33:bf:45:bc:59:40:0e:90:84:02:91:ee: 2a:61:ee:ce:0e:c2:ec:fb:6a:12:07:1f:b5:67:81:2f:1d:57: 2a:7e:2e:16:d1:9a:8b:1d:cb:a3:58:ee:65:a9:d5:1c:84:c5: 02:94:6b:db:46:5a:e8:5f:60:ae:dd:0a:dd:a8:e8:65:05:1b: 00:6b:ad:1a:2c:5c:16:ef:88:12:95:76:5b:50:7b:b9:d6:5d: 4b:c5:3d:eb:7b:53:59:bc:20:36:34:19:41:c4:9c:d6:37:a9: 90:84:7c:5d:01:5d:f4:b4:58:49:6d:9c:46:77:4b:7a:92:aa: d3:20:a0:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4aiXA+AIIyhFCm1CBYWXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmVhODM5M2Y2YTFkMzc5OTE5ODlkZDg3NWZjNTMxZTQw ODQwMzEwHhcNMjUxMjE5MjEwMDM5WhcNMjUxMjIwMjEwMDM5WjAzMTEwLwYDVQQD Eyg2ZjYxOTNhZjE3OGMzYTRjMzJkNTIxNTI2YjE3ZGI5YWFkM2QwZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h3W3iPo5PT8SIjLVNwChhsHHUvI J4UF6QG8ftLmEiZMthtX9rnd+K/POQJ6aZicSbB6I+ACZrD/KWqD7B/zCvjA8Pd6 n00CE2n8vSaUHMoK0MBnVZNI8sgBitpTwiZAOk7mXttu0EqZkukZyJIM9fmSje9E /3VZBeoFgtHMuYCHXn2QDeH/hp2KMj1tG0h1Kp2nvyzHNOJahQ8ei+pHERW6QDqv pe6LWASNLHx+JfDidPYaw8D7sSCqC0mTZgAJJ9WzenNvudGxZjy+hbOEjAWQlHPN M13/bj3+2PQVOSNhz6lcp3V2mu9cPrS85eWdAYtnNpXUzztt2kb1z9hzlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG9hk68XjDpMMtUhUmsX25qtPQ+dMB8GA1UdIwQY MBaAFMG+qDk/ah03mRmJ3YdfxTHkCEAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMWVlZWQtMzg4ZC00MGMwLWIxN2Qt ZjU1M2RkZDllZDFhLzEvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zMWVlZWQtMzg4ZC00MGMwLWIxN2QtZjU1M2RkZDllZDFh LzEvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe9BAXUdD oYtZtKQDFndnnNKUeg3WPeQW83e7kPzcssxuadqw4Ugg2k/05BeBfQwQvXwBnbpe DVYL78J7gv2/+gQA+mclwjU/BGTGaQRKjHmX8nBki6FmtiVkr/XluOz2HAJeCHS1 G+NAxmoUXtbtFuHzWtiBJLJ+WpKh3yUpIb/QKigFM79FvFlADpCEApHuKmHuzg7C 7PtqEgcftWeBLx1XKn4uFtGaix3Lo1juZanVHITFApRr20Za6F9grt0K3ajoZQUb AGutGixcFu+IEpV2W1B7udZdS8U963tTWbwgNjQZQcSc1jepkIR8XQFd9LRYSW2c RndLepKq0yCg9g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:36:06 2025 by rpki-client