This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft File: 0WKatyzbkDPuVW45m_UiY9WqWkY.mft (raw, json) Hash identifier: eY8rW3NoZ5KZyem5XH5C1B9H21Y3L4UyIySY+ad+ZDk= Subject key identifier: 86:63:2F:B3:6F:D3:41:2E:AF:33:11:21:DA:55:35:6D:E4:47:FA:A9 Authority key identifier: D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46 Certificate issuer: /CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46 Certificate serial: 019B48B98ABD411EC9E662FE5E2826D87884 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft Manifest number: 14C5 Signing time: Tue 23 Dec 2025 01:01:17 +0000 Manifest this update: Tue 23 Dec 2025 01:01:17 +0000 Manifest next update: Wed 24 Dec 2025 01:01:17 +0000 Files and hashes: 1: 0WKatyzbkDPuVW45m_UiY9WqWkY.crl (hash: FMfXMVljO3trug4+ojfzbh5XjJn7WtHV7voU5J7eUA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:b9:8a:bd:41:1e:c9:e6:62:fe:5e:28:26:d8:78:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1629ab72cdb9033ee556e399bf52263d5aa5a46 Validity Not Before: Dec 23 01:01:17 2025 GMT Not After : Dec 24 01:01:17 2025 GMT Subject: CN=86632fb36fd3412eaf331121da55356de447faa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:31:75:20:84:86:fb:52:2d:16:ae:3a:4a: a5:1b:cd:1a:53:e4:c3:a0:71:e6:dd:c7:ee:49:65: 62:c2:f8:b9:57:ca:f9:15:21:50:be:7d:91:e9:92: 7a:01:e8:5f:dc:e0:fd:f2:e6:1f:03:e7:6f:a4:44: c3:be:7f:66:49:0b:63:5e:e3:43:9f:52:e0:a4:7c: 16:35:23:d8:cc:e5:2f:33:d2:36:98:b0:c0:60:1c: 6d:0a:f6:d5:e6:2a:56:fd:8a:93:83:f4:8f:61:48: 22:5e:e8:32:ea:63:18:60:5d:05:1d:7f:44:d3:b8: b0:58:d0:52:9f:10:ab:66:b3:25:d8:74:91:b0:bb: 4d:73:b7:34:2a:6d:34:d2:ba:bf:ec:fa:2f:ed:9a: 7d:06:d2:e7:12:d4:93:dc:05:f4:86:1b:88:2d:6a: 98:73:5d:b9:d1:28:a9:74:7a:17:82:2f:df:1c:a7: 97:3e:da:2a:e6:17:06:ed:78:c5:4a:c9:81:24:b0: 05:6b:8c:70:4e:c6:aa:3a:6c:e9:89:d5:91:62:5d: e7:d9:0d:7b:4f:78:0b:25:3e:98:e4:cf:70:7b:3c: c4:b3:39:83:d2:72:bb:12:b7:b8:67:d2:b7:e7:97: 10:53:86:b6:5c:98:d6:a9:ec:28:d7:cb:8a:46:39: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:63:2F:B3:6F:D3:41:2E:AF:33:11:21:DA:55:35:6D:E4:47:FA:A9 X509v3 Authority Key Identifier: keyid:D1:62:9A:B7:2C:DB:90:33:EE:55:6E:39:9B:F5:22:63:D5:AA:5A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WKatyzbkDPuVW45m_UiY9WqWkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/288123-ca1d-4936-aff8-d1a84b414ef8/1/0WKatyzbkDPuVW45m_UiY9WqWkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:ed:ed:08:df:c1:87:d4:95:e3:41:70:81:f3:8f:b4:ac:09: 69:4a:69:42:a7:b5:68:4e:3a:5a:fb:84:e1:9b:8a:7a:3c:12: 84:5f:5e:e0:1e:84:82:80:de:00:92:75:dc:7b:f1:f1:23:2a: 3d:9b:07:14:9c:0b:26:9b:6f:f7:6a:5a:b1:7d:8b:63:17:9a: 62:ec:e2:85:33:17:17:4f:c0:d3:bf:41:9a:7b:db:24:01:dc: 2e:35:4e:e2:5a:e9:c6:89:61:33:ed:e0:2a:65:4c:d6:f6:98: ab:66:45:ad:34:95:4e:26:58:a3:c2:02:35:c8:3e:d9:e2:50: e6:ed:5f:06:9e:8b:86:e3:59:d3:3f:3d:4b:1a:91:b6:6d:c7: 95:e2:4a:a0:7e:7e:83:71:2f:e7:12:f9:7b:3d:66:e4:c7:de: e4:cd:25:b7:da:73:de:b2:df:e1:75:50:74:e2:77:89:54:ac: af:6f:fc:dc:51:ad:ab:49:10:4f:c4:09:a4:36:ea:34:e3:80: f1:12:35:08:88:c2:30:e2:cb:8d:87:0d:a9:5b:80:58:61:1c: c1:2b:ae:5f:fd:94:98:0d:15:46:7a:5a:5c:cf:5a:ad:87:d2: bf:a7:31:96:94:02:1d:22:f2:bc:f0:dd:a1:40:58:d8:ab:16: d6:ea:3d:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIuYq9QR7J5mL+Xigm2HiEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxNjI5YWI3MmNkYjkwMzNlZTU1NmUzOTliZjUyMjYzZDVh YTVhNDYwHhcNMjUxMjIzMDEwMTE3WhcNMjUxMjI0MDEwMTE3WjAzMTEwLwYDVQQD Eyg4NjYzMmZiMzZmZDM0MTJlYWYzMzExMjFkYTU1MzU2ZGU0NDdmYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tQxdSCEhvtSLRauOkqlG80aU+TD oHHm3cfuSWViwvi5V8r5FSFQvn2R6ZJ6Aehf3OD98uYfA+dvpETDvn9mSQtjXuND n1LgpHwWNSPYzOUvM9I2mLDAYBxtCvbV5ipW/YqTg/SPYUgiXugy6mMYYF0FHX9E 07iwWNBSnxCrZrMl2HSRsLtNc7c0Km000rq/7Pov7Zp9BtLnEtST3AX0hhuILWqY c1250SipdHoXgi/fHKeXPtoq5hcG7XjFSsmBJLAFa4xwTsaqOmzpidWRYl3n2Q17 T3gLJT6Y5M9wezzEszmD0nK7Ere4Z9K355cQU4a2XJjWqewo18uKRjnqnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZjL7Nv00EurzMRIdpVNW3kR/qpMB8GA1UdIwQY MBaAFNFimrcs25Az7lVuOZv1ImPVqlpGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgt ZDFhODRiNDE0ZWY4LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yODgxMjMtY2ExZC00OTM2LWFmZjgtZDFhODRiNDE0ZWY4 LzEvMFdLYXR5emJrRFB1Vlc0NW1fVWlZOVdxV2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaO3tCN/B h9SV40FwgfOPtKwJaUppQqe1aE46WvuE4ZuKejwShF9e4B6EgoDeAJJ13Hvx8SMq PZsHFJwLJptv92pasX2LYxeaYuzihTMXF0/A079BmnvbJAHcLjVO4lrpxolhM+3g KmVM1vaYq2ZFrTSVTiZYo8ICNcg+2eJQ5u1fBp6LhuNZ0z89SxqRtm3HleJKoH5+ g3Ev5xL5ez1m5Mfe5M0lt9pz3rLf4XVQdOJ3iVSsr2/83FGtq0kQT8QJpDbqNOOA 8RI1CIjCMOLLjYcNqVuAWGEcwSuuX/2UmA0VRnpaXM9arYfSv6cxlpQCHSLyvPDd oUBY2KsW1uo9kA== -----END CERTIFICATE-----Generated at Tue Dec 23 05:52:14 2025 by rpki-client