This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft File: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft (raw, json) Hash identifier: 5RsdhMY8V7iXXcgHW5gV3x+rBCIYGvIspCN2kMiMtFQ= Subject key identifier: 2C:36:6F:9D:C1:6E:E0:85:3A:0D:3C:5D:E9:BF:A8:FE:59:F8:55:39 Authority key identifier: 58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E Certificate issuer: /CN=58afedfef67918490634be4e2b75c11b70c2ea2e Certificate serial: 019B597766E31D6F2942890E8114C7AF5E87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft Manifest number: 0BC2 Signing time: Fri 26 Dec 2025 07:02:35 +0000 Manifest this update: Fri 26 Dec 2025 07:02:35 +0000 Manifest next update: Sat 27 Dec 2025 07:02:35 +0000 Files and hashes: 1: WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl (hash: nMm5TrHWinon4kdBQTxQmY7+ZIXrKH+PXkrsJ4Q86Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:66:e3:1d:6f:29:42:89:0e:81:14:c7:af:5e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58afedfef67918490634be4e2b75c11b70c2ea2e Validity Not Before: Dec 26 07:02:35 2025 GMT Not After : Dec 27 07:02:35 2025 GMT Subject: CN=2c366f9dc16ee0853a0d3c5de9bfa8fe59f85539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:1c:b3:6b:0c:3f:a7:33:07:45:c6:28:6b: 35:ad:33:fd:77:3a:03:6c:4a:9e:2f:f8:ba:e9:fd: 32:65:82:40:91:52:f1:f6:31:f4:c2:f1:86:f8:62: 85:e7:d6:40:bc:c6:c9:56:91:fc:23:a1:6b:f4:14: 47:f6:97:52:32:23:c2:60:4a:70:86:69:94:5e:d8: 4e:26:18:3a:02:bf:0b:c4:ac:0d:0f:f9:4c:0d:a7: 5a:83:28:f5:92:1a:cb:fb:89:a2:56:78:ff:75:6c: 7e:77:d0:59:39:15:14:7f:15:00:8f:b6:f9:9a:49: 44:1a:f0:cd:1a:e1:76:64:db:76:11:22:97:bd:09: 45:7e:9c:77:40:d8:ca:86:55:34:97:ab:5c:74:69: 02:07:34:1a:05:f5:09:54:04:26:81:74:11:4a:17: 37:7e:dd:fb:49:f0:d6:1d:e2:9d:93:1a:9c:1e:61: 52:1d:87:d8:7c:0d:e2:90:ec:1d:01:da:00:a2:66: d4:d4:6d:2c:f6:75:68:69:40:98:35:0c:09:1d:bc: 10:95:ab:7e:86:f6:94:4c:3d:78:bc:29:0c:79:42: 9d:79:eb:7f:3c:8e:1d:ce:e1:1b:b3:f3:cd:de:f9: d6:76:86:c2:c2:e4:42:78:10:ac:52:37:c6:8a:83: f5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:36:6F:9D:C1:6E:E0:85:3A:0D:3C:5D:E9:BF:A8:FE:59:F8:55:39 X509v3 Authority Key Identifier: keyid:58:AF:ED:FE:F6:79:18:49:06:34:BE:4E:2B:75:C1:1B:70:C2:EA:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/e0134c-447f-4c29-ae1b-b2cd36c5a15e/1/WK_t_vZ5GEkGNL5OK3XBG3DC6i4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:73:9d:da:6d:63:79:3b:f9:28:51:2c:71:b2:a9:36:bd:8e: c6:29:85:f0:a6:63:e1:c2:44:ec:54:72:81:14:0b:8f:ec:96: 63:5e:3c:20:00:b2:36:04:f6:38:9c:d3:ee:21:f4:66:49:ab: 9c:0d:6b:b1:55:32:5e:48:df:2e:cf:60:37:10:3d:ae:1b:67: 85:14:7c:1e:bb:3e:0a:bf:4a:17:f6:63:46:3f:4c:ac:84:e8: 21:5e:de:95:2f:23:a2:0e:d9:c5:85:81:67:10:3a:26:29:2d: d8:7e:b4:3d:4c:f9:a7:0a:04:f6:8f:c0:4e:87:73:e3:ab:4b: 54:bf:cc:03:f6:9e:b8:d7:47:13:7c:a9:0d:3f:b0:00:67:30: b7:ff:8f:04:20:94:9b:ff:2e:d0:35:a1:db:3f:ce:dc:18:23: bf:e1:06:13:66:8c:7d:38:06:f4:7f:29:e8:06:50:61:dc:96: 93:ad:a4:e4:fe:c0:7a:de:9b:03:f7:b7:a9:c9:0d:27:89:75: 35:a2:ee:5a:1e:a8:be:27:71:7c:00:c9:a5:07:f1:3b:ab:77: 7b:e5:eb:52:55:4d:67:66:0b:45:82:b5:6a:38:ed:29:4f:bd: a5:cc:ba:ed:f0:9b:86:88:35:d6:84:1e:f4:38:34:d5:53:3f: c6:f1:85:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd2bjHW8pQokOgRTHr16HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWZlZGZlZjY3OTE4NDkwNjM0YmU0ZTJiNzVjMTFiNzBj MmVhMmUwHhcNMjUxMjI2MDcwMjM1WhcNMjUxMjI3MDcwMjM1WjAzMTEwLwYDVQQD EygyYzM2NmY5ZGMxNmVlMDg1M2EwZDNjNWRlOWJmYThmZTU5Zjg1NTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBMcs2sMP6czB0XGKGs1rTP9dzoD bEqeL/i66f0yZYJAkVLx9jH0wvGG+GKF59ZAvMbJVpH8I6Fr9BRH9pdSMiPCYEpw hmmUXthOJhg6Ar8LxKwND/lMDadagyj1khrL+4miVnj/dWx+d9BZORUUfxUAj7b5 mklEGvDNGuF2ZNt2ESKXvQlFfpx3QNjKhlU0l6tcdGkCBzQaBfUJVAQmgXQRShc3 ft37SfDWHeKdkxqcHmFSHYfYfA3ikOwdAdoAombU1G0s9nVoaUCYNQwJHbwQlat+ hvaUTD14vCkMeUKdeet/PI4dzuEbs/PN3vnWdobCwuRCeBCsUjfGioP1IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw2b53BbuCFOg08Xem/qP5Z+FU5MB8GA1UdIwQY MBaAFFiv7f72eRhJBjS+Tit1wRtwwuouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9lMDEzNGMtNDQ3Zi00YzI5LWFlMWIt YjJjZDM2YzVhMTVlLzEvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9lMDEzNGMtNDQ3Zi00YzI5LWFlMWItYjJjZDM2YzVhMTVl LzEvV0tfdF92WjVHRWtHTkw1T0szWEJHM0RDNmk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXOd2m1j eTv5KFEscbKpNr2OximF8KZj4cJE7FRygRQLj+yWY148IACyNgT2OJzT7iH0Zkmr nA1rsVUyXkjfLs9gNxA9rhtnhRR8Hrs+Cr9KF/ZjRj9MrIToIV7elS8jog7ZxYWB ZxA6Jikt2H60PUz5pwoE9o/ATodz46tLVL/MA/aeuNdHE3ypDT+wAGcwt/+PBCCU m/8u0DWh2z/O3Bgjv+EGE2aMfTgG9H8p6AZQYdyWk62k5P7Aet6bA/e3qckNJ4l1 NaLuWh6ovidxfADJpQfxO6t3e+XrUlVNZ2YLRYK1ajjtKU+9pcy67fCbhog11oQe 9Dg01VM/xvGF6g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:25 2025 by rpki-client