This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft File: wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json) Hash identifier: ZTSOS7AdFxnOU0mH7sdhcA9Bw48OBTlQh1kekqXjPzU= Subject key identifier: 70:2B:DB:B9:36:E9:36:68:A4:AB:6B:62:09:C6:EE:C1:5B:E0:39:F3 Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88 Certificate issuer: /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288 Certificate serial: 019B21E296C3ADDB9896C3CB7CB3FE92DCCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft Manifest number: 1777 Signing time: Mon 15 Dec 2025 12:00:56 +0000 Manifest this update: Mon 15 Dec 2025 12:00:56 +0000 Manifest next update: Tue 16 Dec 2025 12:00:56 +0000 Files and hashes: 1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: Fsczd+HbDT6dJTa/5zyKnXpepUIk/Mv3sUVKtfYKuBE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:96:c3:ad:db:98:96:c3:cb:7c:b3:fe:92:dc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288 Validity Not Before: Dec 15 12:00:56 2025 GMT Not After : Dec 16 12:00:56 2025 GMT Subject: CN=702bdbb936e93668a4ab6b6209c6eec15be039f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:6d:33:d8:37:3c:26:6d:9d:d8:c9:f9:29: a7:3c:52:f4:fe:e7:e3:5c:01:fe:ab:e5:13:62:68: c3:9a:c1:a3:cd:40:fc:a8:a9:cf:1a:ae:80:b8:14: 69:30:b9:9e:f4:25:30:a7:f2:b4:ef:a5:49:c5:41: 86:1a:23:76:7e:98:e5:53:bb:1a:ce:a3:5f:b0:78: 7a:59:fe:22:4b:52:9e:da:a1:93:37:ee:87:17:2a: 03:a0:06:7f:2a:60:c4:da:7b:13:98:cb:07:ad:f4: fb:13:6e:c7:fb:9e:91:ef:06:b5:52:68:e6:7c:38: d8:af:25:5d:b2:9a:a9:d0:b4:1a:2d:8d:82:f8:fe: 27:4f:79:b4:56:3d:61:d7:4a:d9:bd:52:94:9d:3a: 1f:c8:74:a7:b3:64:08:11:5c:fe:6b:49:e7:4c:b1: 54:e0:8a:91:0f:a5:20:59:d1:f2:5e:b3:4c:5c:fc: 4a:7a:49:f8:70:35:9f:bf:32:15:e2:87:f5:ad:32: 39:f8:27:be:b2:13:7d:e2:79:9e:67:7a:d4:74:76: ac:82:c7:67:84:7e:c2:80:94:42:d5:c1:f4:88:83: ef:95:d1:6b:6b:bc:60:98:cb:1b:45:61:50:88:40: 85:0e:70:30:f4:cf:02:06:f0:97:2b:0b:5b:4a:3b: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2B:DB:B9:36:E9:36:68:A4:AB:6B:62:09:C6:EE:C1:5B:E0:39:F3 X509v3 Authority Key Identifier: keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:63:06:fa:45:a6:3c:89:5a:71:55:a6:e6:c0:df:65:04:14: 07:f2:7e:5b:db:63:4e:76:81:1a:57:39:bf:f3:df:e9:0b:ea: f0:c4:3f:cf:68:71:ff:25:1b:f3:a8:e5:3d:2d:91:46:38:99: 56:3a:c2:06:9c:fb:c2:5e:54:13:89:f6:25:88:c2:d6:0d:8c: 6f:2e:40:fb:10:81:41:24:f0:79:02:46:c6:e3:82:ed:1c:22: 16:b8:1b:8b:85:85:d3:94:cc:d9:75:3c:bd:4d:08:db:a1:f3: 67:78:61:b8:71:fe:40:f8:e1:db:63:4d:47:8c:be:ba:b5:83: 6e:43:92:4e:70:da:57:32:28:7f:18:0d:26:b1:48:2f:4e:0e: 00:f4:c7:7a:d0:86:7d:d0:de:84:80:f1:82:f6:2d:07:21:5b: 6c:2b:a0:ad:9d:7d:88:9b:c9:57:1d:50:8d:c5:5e:82:a9:fe: f5:83:d5:77:7f:e4:7c:3e:27:62:02:10:a6:46:06:80:9d:46: ce:52:b8:c3:45:d9:ba:15:a0:c5:67:14:67:3b:82:56:ad:25: 99:1d:47:1b:26:44:43:09:49:70:3e:c3:3c:02:e0:bf:11:b7: f6:c0:c8:72:00:70:d9:37:d8:0b:6c:c1:52:f5:d9:44:d9:39: 7e:9c:68:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsh4pbDrduYlsPLfLP+ktzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDc0ZmRhNTcyOWY3MDVlNWZkOTJmMjI1ZWNhZjViOTNj YjgyODgwHhcNMjUxMjE1MTIwMDU2WhcNMjUxMjE2MTIwMDU2WjAzMTEwLwYDVQQD Eyg3MDJiZGJiOTM2ZTkzNjY4YTRhYjZiNjIwOWM2ZWVjMTViZTAzOWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrhtM9g3PCZtndjJ+SmnPFL0/ufj XAH+q+UTYmjDmsGjzUD8qKnPGq6AuBRpMLme9CUwp/K076VJxUGGGiN2fpjlU7sa zqNfsHh6Wf4iS1Ke2qGTN+6HFyoDoAZ/KmDE2nsTmMsHrfT7E27H+56R7wa1Umjm fDjYryVdspqp0LQaLY2C+P4nT3m0Vj1h10rZvVKUnTofyHSns2QIEVz+a0nnTLFU 4IqRD6UgWdHyXrNMXPxKekn4cDWfvzIV4of1rTI5+Ce+shN94nmeZ3rUdHasgsdn hH7CgJRC1cH0iIPvldFra7xgmMsbRWFQiECFDnAw9M8CBvCXKwtbSjvRIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAr27k26TZopKtrYgnG7sFb4DnzMB8GA1UdIwQY MBaAFMEHT9pXKfcF5f2S8iXsr1uTy4KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1Zjgt NWU5NmMyMzJlM2Q1LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTBkNjAtODc1Mi00YjZkLTg1ZjgtNWU5NmMyMzJlM2Q1 LzEvd1FkUDJsY3A5d1hsX1pMeUpleXZXNVBMZ29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALmMG+kWm PIlacVWm5sDfZQQUB/J+W9tjTnaBGlc5v/Pf6Qvq8MQ/z2hx/yUb86jlPS2RRjiZ VjrCBpz7wl5UE4n2JYjC1g2Mby5A+xCBQSTweQJGxuOC7RwiFrgbi4WF05TM2XU8 vU0I26HzZ3hhuHH+QPjh22NNR4y+urWDbkOSTnDaVzIofxgNJrFIL04OAPTHetCG fdDehIDxgvYtByFbbCugrZ19iJvJVx1QjcVegqn+9YPVd3/kfD4nYgIQpkYGgJ1G zlK4w0XZuhWgxWcUZzuCVq0lmR1HGyZEQwlJcD7DPALgvxG39sDIcgBw2TfYC2zB UvXZRNk5fpxoMw== -----END CERTIFICATE-----Generated at Mon Dec 15 15:03:55 2025 by rpki-client