This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft File: X-WOcyoPcfTwEwLWIWcXO9mxfME.mft (raw, json) Hash identifier: tQHMlr0TvuBI27W+AhXlXPtU/PbHfOKi9SmV51I1UJI= Subject key identifier: 1A:B4:98:CA:72:26:59:D2:17:08:CD:DD:94:EF:64:16:75:14:40:5C Authority key identifier: 5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 Certificate issuer: /CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1 Certificate serial: 019B19160B6723065F5C05E5BBE40805AAD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft Manifest number: 1246 Signing time: Sat 13 Dec 2025 19:00:33 +0000 Manifest this update: Sat 13 Dec 2025 19:00:33 +0000 Manifest next update: Sun 14 Dec 2025 19:00:33 +0000 Files and hashes: 1: X-WOcyoPcfTwEwLWIWcXO9mxfME.crl (hash: YghCbxku9Q2BQNtH4upkYY5C4fVQ37uj9/yAF6QZ4Xw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:0b:67:23:06:5f:5c:05:e5:bb:e4:08:05:aa:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe58e732a0f71f4f01302d62167173bd9b17cc1 Validity Not Before: Dec 13 19:00:33 2025 GMT Not After : Dec 14 19:00:33 2025 GMT Subject: CN=1ab498ca722659d21708cddd94ef64167514405c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7b:c5:23:d6:a8:4d:77:4d:c2:d8:c1:46:fb: 93:c4:62:e4:e9:7d:64:88:21:c8:51:d6:36:a9:93: 6f:f7:c7:38:32:5f:1e:0a:23:b7:f3:50:34:95:81: ed:e4:3a:af:54:6e:a1:95:bb:96:b4:29:80:be:e2: 24:81:39:ae:1f:f3:bb:d6:b7:da:f4:97:f3:5d:47: be:05:b9:07:5d:4e:85:49:72:24:e2:c6:a9:af:89: 83:29:f0:ee:b2:ec:7a:65:57:86:7c:1a:f7:97:1c: f2:64:26:6e:76:5c:01:06:e5:b3:25:44:41:58:74: 1b:14:4c:cd:c1:45:5b:29:65:ef:bc:ce:50:2f:10: 41:fd:1d:8a:da:9d:49:32:b1:93:f0:1e:61:b2:70: f1:85:9b:0d:0a:a6:69:05:6c:ba:9e:02:76:d8:e0: 74:76:c5:29:1d:3b:9b:53:00:e6:fb:ca:33:12:b6: 05:be:f8:b9:79:07:47:ee:60:29:40:ef:34:10:3b: ac:9e:d6:b3:9d:e3:df:bb:b4:df:8d:24:b6:98:bb: fe:b3:9f:73:e1:1e:f9:50:89:2e:ec:d2:ec:a1:f1: 2d:5d:90:14:55:56:6d:89:5c:02:23:85:93:60:08: 6d:bb:a9:c0:d0:3a:ce:64:27:83:73:2e:cf:bb:e4: 24:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B4:98:CA:72:26:59:D2:17:08:CD:DD:94:EF:64:16:75:14:40:5C X509v3 Authority Key Identifier: keyid:5F:E5:8E:73:2A:0F:71:F4:F0:13:02:D6:21:67:17:3B:D9:B1:7C:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-WOcyoPcfTwEwLWIWcXO9mxfME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0d840c-952d-4702-aba3-b6e58f9c82e1/1/X-WOcyoPcfTwEwLWIWcXO9mxfME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:5f:b0:c9:c4:37:0a:9e:0c:f5:12:f5:8e:ea:37:b0:1f:dc: 15:2e:8d:53:91:74:b4:cd:67:c5:70:f8:7a:5c:aa:54:a7:24: 22:a1:c1:f4:b8:e8:62:ad:fd:04:61:01:a0:c7:01:f1:41:ed: b8:49:8e:a7:0b:5e:ab:a9:d9:1c:22:e1:2f:37:59:24:5c:60: 81:8e:1a:f6:78:b8:00:8d:43:b9:fd:02:04:28:20:b7:0f:5b: 9e:29:90:c3:34:e4:12:3f:a7:46:d5:24:58:3e:c4:4c:0f:df: 32:c9:1b:f4:f6:ff:13:0f:78:9d:5d:e8:12:b3:a6:52:97:1d: ca:d8:a7:75:2d:a3:7a:60:b2:24:80:fa:ee:5d:3a:04:a6:9c: 47:b7:ca:39:9b:3f:05:e8:bd:0c:b7:5f:10:d9:5a:71:5f:c5: 7d:32:fc:5d:17:c8:71:b4:50:13:40:7e:b0:da:53:03:44:fb: 51:d4:e3:e4:ea:18:79:99:42:74:b6:c8:50:22:b9:07:ad:81: 80:99:d5:1c:83:89:d7:2f:9a:68:d7:7d:b3:4b:3e:dd:6f:15: 6c:ca:25:04:74:7b:a8:d4:70:a1:e1:36:9d:18:1e:9a:ab:36: d4:0e:28:cb:76:b1:87:f3:f0:b9:4a:8f:77:f3:26:be:0c:08: 97:60:17:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFgtnIwZfXAXlu+QIBarWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTU4ZTczMmEwZjcxZjRmMDEzMDJkNjIxNjcxNzNiZDli MTdjYzEwHhcNMjUxMjEzMTkwMDMzWhcNMjUxMjE0MTkwMDMzWjAzMTEwLwYDVQQD EygxYWI0OThjYTcyMjY1OWQyMTcwOGNkZGQ5NGVmNjQxNjc1MTQ0MDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XvFI9aoTXdNwtjBRvuTxGLk6X1k iCHIUdY2qZNv98c4Ml8eCiO381A0lYHt5DqvVG6hlbuWtCmAvuIkgTmuH/O71rfa 9JfzXUe+BbkHXU6FSXIk4sapr4mDKfDusux6ZVeGfBr3lxzyZCZudlwBBuWzJURB WHQbFEzNwUVbKWXvvM5QLxBB/R2K2p1JMrGT8B5hsnDxhZsNCqZpBWy6ngJ22OB0 dsUpHTubUwDm+8ozErYFvvi5eQdH7mApQO80EDusntaznePfu7TfjSS2mLv+s59z 4R75UIku7NLsofEtXZAUVVZtiVwCI4WTYAhtu6nA0DrOZCeDcy7Pu+QkuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBq0mMpyJlnSFwjN3ZTvZBZ1FEBcMB8GA1UdIwQY MBaAFF/ljnMqD3H08BMC1iFnFzvZsXzBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMt YjZlNThmOWM4MmUxLzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wZDg0MGMtOTUyZC00NzAyLWFiYTMtYjZlNThmOWM4MmUx LzEvWC1XT2N5b1BjZlR3RXdMV0lXY1hPOW14Zk1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdV+wycQ3 Cp4M9RL1juo3sB/cFS6NU5F0tM1nxXD4elyqVKckIqHB9LjoYq39BGEBoMcB8UHt uEmOpwteq6nZHCLhLzdZJFxggY4a9ni4AI1Duf0CBCggtw9bnimQwzTkEj+nRtUk WD7ETA/fMskb9Pb/Ew94nV3oErOmUpcdytindS2jemCyJID67l06BKacR7fKOZs/ Bei9DLdfENlacV/FfTL8XRfIcbRQE0B+sNpTA0T7UdTj5OoYeZlCdLbIUCK5B62B gJnVHIOJ1y+aaNd9s0s+3W8VbMolBHR7qNRwoeE2nRgemqs21A4oy3axh/PwuUqP d/MmvgwIl2AX5g== -----END CERTIFICATE-----Generated at Sun Dec 14 00:06:02 2025 by rpki-client