This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft File: wS8tv90wnyYDJMqn4-2neT-FQac.mft (raw, json) Hash identifier: 4Di9bSTSjyc6RGp2OYMcpg9y4WvcylZn6TRcB76frzE= Subject key identifier: B9:19:D8:37:59:6E:A0:52:86:0B:AA:ED:F2:02:7E:B0:DC:6C:02:4B Authority key identifier: C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7 Certificate issuer: /CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7 Certificate serial: 019B5975DB793D975E7964BB32613FCA4EB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft Manifest number: 0DFD Signing time: Fri 26 Dec 2025 07:00:54 +0000 Manifest this update: Fri 26 Dec 2025 07:00:54 +0000 Manifest next update: Sat 27 Dec 2025 07:00:54 +0000 Files and hashes: 1: wS8tv90wnyYDJMqn4-2neT-FQac.crl (hash: ozMmCcdSzWy+inLc4lkWZPRWzfPe0IFfjWz2E5klaN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:75:db:79:3d:97:5e:79:64:bb:32:61:3f:ca:4e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c12f2dbfdd309f260324caa7e3eda7793f8541a7 Validity Not Before: Dec 26 07:00:54 2025 GMT Not After : Dec 27 07:00:54 2025 GMT Subject: CN=b919d837596ea052860baaedf2027eb0dc6c024b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6b:dc:a8:96:f8:e7:b2:66:ce:e5:95:ae:8f: 03:8b:8a:86:e1:17:e7:0d:17:a2:16:a3:9c:0b:27: e9:c2:58:8e:eb:be:ea:ee:cd:35:c7:09:1d:e1:ce: 29:d4:35:30:62:83:a8:48:a6:25:5c:59:5d:32:fd: 7c:23:0f:c7:d3:6b:61:bb:9a:4a:01:f1:7c:e9:3b: 46:00:41:fc:5f:4a:e9:38:d5:61:c1:01:36:a4:47: cb:af:9d:89:8a:df:58:af:8a:e3:d3:55:21:e6:d6: 07:67:b0:7e:fe:f3:5d:b5:c5:a7:b5:2e:66:18:4f: d9:26:1a:19:84:d8:f1:cf:f5:17:75:4d:fa:42:2e: e0:e1:f0:26:44:12:61:d1:78:45:dc:d1:a9:17:16: 6d:bc:dd:73:35:30:b2:7b:10:72:03:18:36:0d:d7: 2c:8b:fa:cc:cf:0d:d9:23:3c:a8:e1:38:61:57:ba: 91:4e:23:9d:c1:ad:31:26:2e:d0:b7:1b:29:84:a7: c9:6f:04:ba:aa:1a:d7:3e:bf:33:05:69:2c:76:5f: 23:cf:cd:de:34:58:b7:60:12:7c:82:83:5a:ab:fe: 0d:17:af:d5:13:7a:0d:72:cc:70:a8:8e:e8:05:8e: 4f:f2:0a:31:5c:4b:99:c7:1b:23:d5:c8:3c:17:8f: e9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:19:D8:37:59:6E:A0:52:86:0B:AA:ED:F2:02:7E:B0:DC:6C:02:4B X509v3 Authority Key Identifier: keyid:C1:2F:2D:BF:DD:30:9F:26:03:24:CA:A7:E3:ED:A7:79:3F:85:41:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wS8tv90wnyYDJMqn4-2neT-FQac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fdb0f-e67c-4769-9a0d-0fbeaecd93a4/1/wS8tv90wnyYDJMqn4-2neT-FQac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:60:0c:82:93:69:23:53:16:ab:ae:cf:be:1b:95:c4:a5:68: b2:2c:d4:f3:a5:75:fe:4b:7f:8a:b7:68:6e:29:e7:8c:a1:84: b5:41:f2:b0:88:e2:21:72:4b:5e:a1:5d:26:22:ce:a3:ad:b1: 68:25:0b:56:cd:7a:d4:cc:7a:d8:51:74:8f:69:75:f0:20:93: cf:7c:cf:aa:93:70:18:42:76:35:39:2e:35:9c:a8:33:36:5f: 3b:80:84:72:4c:f2:48:af:68:43:29:62:1d:f6:4e:76:a3:ca: 41:09:6d:19:5c:1c:6f:ce:58:8b:b1:91:e2:f4:04:8a:87:de: 80:37:ee:83:42:4e:c9:72:64:79:73:03:03:bf:95:0a:d7:aa: 4d:f8:99:08:e0:f6:1c:9a:c2:4e:a9:60:28:fd:ea:ed:83:42: 51:90:5f:fa:1f:06:e8:10:77:f0:53:dc:59:9e:73:cc:03:9f: f5:f5:d3:08:9f:f5:87:ad:b7:41:36:35:62:02:d8:95:ef:77: d4:c7:7a:34:62:26:33:bc:99:a7:39:87:b0:ae:31:a1:39:7b: 65:a5:4b:7e:a3:1e:c5:9c:7a:9b:42:06:a4:64:90:88:23:5e: f3:b7:bb:8c:14:c7:31:f6:dc:61:a5:e9:c5:df:00:61:6b:d6: d9:94:41:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZddt5PZdeeWS7MmE/yk6wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMmYyZGJmZGQzMDlmMjYwMzI0Y2FhN2UzZWRhNzc5M2Y4 NTQxYTcwHhcNMjUxMjI2MDcwMDU0WhcNMjUxMjI3MDcwMDU0WjAzMTEwLwYDVQQD EyhiOTE5ZDgzNzU5NmVhMDUyODYwYmFhZWRmMjAyN2ViMGRjNmMwMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmvcqJb457JmzuWVro8Di4qG4Rfn DReiFqOcCyfpwliO677q7s01xwkd4c4p1DUwYoOoSKYlXFldMv18Iw/H02thu5pK AfF86TtGAEH8X0rpONVhwQE2pEfLr52Jit9Yr4rj01Uh5tYHZ7B+/vNdtcWntS5m GE/ZJhoZhNjxz/UXdU36Qi7g4fAmRBJh0XhF3NGpFxZtvN1zNTCyexByAxg2Ddcs i/rMzw3ZIzyo4ThhV7qRTiOdwa0xJi7QtxsphKfJbwS6qhrXPr8zBWksdl8jz83e NFi3YBJ8goNaq/4NF6/VE3oNcsxwqI7oBY5P8goxXEuZxxsj1cg8F4/pzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkZ2DdZbqBShguq7fICfrDcbAJLMB8GA1UdIwQY MBaAFMEvLb/dMJ8mAyTKp+Ptp3k/hUGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQt MGZiZWFlY2Q5M2E0LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85ZmRiMGYtZTY3Yy00NzY5LTlhMGQtMGZiZWFlY2Q5M2E0 LzEvd1M4dHY5MHdueVlESk1xbjQtMm5lVC1GUWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGAMgpNp I1MWq67PvhuVxKVosizU86V1/kt/irdobinnjKGEtUHysIjiIXJLXqFdJiLOo62x aCULVs161Mx62FF0j2l18CCTz3zPqpNwGEJ2NTkuNZyoMzZfO4CEckzySK9oQyli HfZOdqPKQQltGVwcb85Yi7GR4vQEiofegDfug0JOyXJkeXMDA7+VCteqTfiZCOD2 HJrCTqlgKP3q7YNCUZBf+h8G6BB38FPcWZ5zzAOf9fXTCJ/1h623QTY1YgLYle93 1Md6NGImM7yZpzmHsK4xoTl7ZaVLfqMexZx6m0IGpGSQiCNe87e7jBTHMfbcYaXp xd8AYWvW2ZRBDg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:33 2025 by rpki-client